Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/dc/24d79d-1766-4045-9d24-6a0baeb2336e/1/b3c-s9MHlNItdc2HK5GjuoSIQtc.mft
File: b3c-s9MHlNItdc2HK5GjuoSIQtc.mft (raw, json)
Hash identifier: jg6RXyzFoloVpAjz2aGEnlkN3iZzN5j11JyptPUQTuI=
Subject key identifier: 8C:69:7A:3A:9F:76:AE:2D:43:85:05:34:0B:BB:7C:8D:8B:21:CC:EF
Authority key identifier: 6F:77:3E:B3:D3:07:94:D2:2D:75:CD:87:2B:91:A3:BA:84:88:42:D7
Certificate issuer: /CN=6f773eb3d30794d22d75cd872b91a3ba848842d7
Certificate serial: 0196760C9EF390E0D7B483FA2E8069D3FD1D
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/b3c-s9MHlNItdc2HK5GjuoSIQtc.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/dc/24d79d-1766-4045-9d24-6a0baeb2336e/1/b3c-s9MHlNItdc2HK5GjuoSIQtc.mft
Manifest number: 1246
Signing time: Sun 27 Apr 2025 07:01:00 +0000
Manifest this update: Sun 27 Apr 2025 07:01:00 +0000
Manifest next update: Mon 28 Apr 2025 07:01:00 +0000
Files and hashes: 1: b3c-s9MHlNItdc2HK5GjuoSIQtc.crl (hash: aq59vMNdr5MrOLSbNITLXlxKvmnp0WO4R8AgQYIqlVY=)
2: wCDrJf6K3N6SQxouZVxxkGAndwU.roa (hash: RDCOaghInO75GT81gEgSeMeIYDUyZ4Fou/t1PYJdixY=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/dc/24d79d-1766-4045-9d24-6a0baeb2336e/1/b3c-s9MHlNItdc2HK5GjuoSIQtc.crl
rsync://rpki.ripe.net/repository/DEFAULT/dc/24d79d-1766-4045-9d24-6a0baeb2336e/1/b3c-s9MHlNItdc2HK5GjuoSIQtc.mft
rsync://rpki.ripe.net/repository/DEFAULT/b3c-s9MHlNItdc2HK5GjuoSIQtc.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 28 Apr 2025 07:01:00 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:76:0c:9e:f3:90:e0:d7:b4:83:fa:2e:80:69:d3:fd:1d
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=6f773eb3d30794d22d75cd872b91a3ba848842d7
Validity
Not Before: Apr 27 07:01:00 2025 GMT
Not After : Apr 28 07:01:00 2025 GMT
Subject: CN=8c697a3a9f76ae2d438505340bbb7c8d8b21ccef
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e4:10:4f:2b:0f:b7:1a:ed:11:18:e5:19:69:ff:
e2:0c:18:54:cc:18:c5:f5:66:e8:8c:d5:07:26:cc:
47:32:a7:94:c0:43:88:82:eb:26:92:20:6e:5d:af:
11:7e:82:b3:33:60:2c:09:1f:05:aa:5b:eb:d1:f1:
88:28:04:7e:21:08:6c:03:f9:77:51:8b:b5:1b:15:
77:eb:bb:e4:e7:b8:40:b0:f7:84:dd:c4:18:f8:8d:
0e:46:b1:87:6f:31:a3:07:32:53:eb:a5:07:5f:1f:
1c:76:be:39:4d:d0:17:d9:5e:c6:e4:91:44:22:f2:
aa:2a:fe:a7:6a:f2:64:02:fe:88:02:89:36:26:0a:
b3:4c:d8:df:f8:9f:f1:1d:d8:31:fb:a1:d7:a0:72:
75:13:3f:ab:eb:84:c3:cc:dc:2b:cc:45:6c:b2:63:
4e:e0:dd:a2:d9:3d:bf:4f:7b:9a:9e:7c:b3:d9:ea:
e3:c6:a8:22:ce:7b:e1:de:cb:62:fb:a5:7b:74:df:
a6:8c:71:0b:be:47:29:cb:c3:a1:82:2b:b0:70:ac:
44:b4:4b:40:77:c8:fe:6e:34:8a:57:e9:0c:b3:10:
42:49:db:84:23:01:34:1b:a7:5d:95:38:c5:94:53:
3c:f6:5c:24:74:95:00:6e:e9:0f:2f:c3:a0:af:05:
ae:75
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
8C:69:7A:3A:9F:76:AE:2D:43:85:05:34:0B:BB:7C:8D:8B:21:CC:EF
X509v3 Authority Key Identifier:
keyid:6F:77:3E:B3:D3:07:94:D2:2D:75:CD:87:2B:91:A3:BA:84:88:42:D7
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/b3c-s9MHlNItdc2HK5GjuoSIQtc.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/dc/24d79d-1766-4045-9d24-6a0baeb2336e/1/b3c-s9MHlNItdc2HK5GjuoSIQtc.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/dc/24d79d-1766-4045-9d24-6a0baeb2336e/1/b3c-s9MHlNItdc2HK5GjuoSIQtc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
41:27:11:a2:4c:fb:94:ff:17:5a:7c:ac:4e:d0:30:bf:dc:4c:
50:07:40:39:73:df:f7:99:19:96:34:7a:2c:ac:19:dc:71:fa:
ff:1b:d1:4c:e7:74:71:45:75:f9:ef:b2:8c:8d:bd:f5:ca:b8:
c5:ca:3d:4f:a4:4f:00:17:57:bc:bf:92:44:ef:bc:0f:77:fb:
d7:0c:ce:ae:5f:ab:48:e4:01:fe:4b:99:0f:3d:77:e0:48:73:
97:fd:9b:e3:85:8e:d8:33:f6:b3:55:31:76:49:09:72:b7:42:
3c:0a:7e:a8:4c:4b:58:7a:7e:82:d9:88:8c:9c:a3:3f:3d:7e:
25:21:42:9f:66:4c:d8:11:0e:ca:46:1c:0f:a6:3d:1c:43:3b:
e8:a9:06:4e:00:46:c9:c5:b8:87:83:ca:85:8a:50:dd:f1:13:
50:86:94:d5:47:85:80:1f:d1:73:51:e6:f6:1e:02:93:87:40:
c3:f5:9e:bb:74:29:a1:f7:59:9d:63:e1:35:91:81:81:e8:63:
76:ec:32:af:cb:44:d9:0d:5d:e3:e4:a3:02:ba:ad:bb:c8:f1:
9a:d0:8a:e4:d2:05:86:41:84:74:2c:7a:a6:d6:dd:3f:2a:47:
74:22:0e:dc:c0:e9:4b:8a:b8:88:1e:10:17:d7:d6:db:42:2c:
88:37:9d:46
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Apr 27 17:58:24 2025 by rpki-client