Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/fc/b8fc55-b4cd-4d1f-9990-47ac389d3261/1/_3EQVKiURqdvSTziwSepSOukqP8.mft
File: _3EQVKiURqdvSTziwSepSOukqP8.mft (raw, json)
Hash identifier: BDwgp85NDT954r6Hw0qW6GwSfd4GgwRJNRxKynp5OPk=
Subject key identifier: 1B:55:23:E2:50:FB:34:C2:02:B7:9C:6A:B8:8D:F1:A2:D9:88:55:29
Authority key identifier: FF:71:10:54:A8:94:46:A7:6F:49:3C:E2:C1:27:A9:48:EB:A4:A8:FF
Certificate issuer: /CN=ff711054a89446a76f493ce2c127a948eba4a8ff
Certificate serial: 019681A28D13A9508542FDF2BEA52267DDD5
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/_3EQVKiURqdvSTziwSepSOukqP8.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/fc/b8fc55-b4cd-4d1f-9990-47ac389d3261/1/_3EQVKiURqdvSTziwSepSOukqP8.mft
Manifest number: 02C1
Signing time: Tue 29 Apr 2025 13:00:35 +0000
Manifest this update: Tue 29 Apr 2025 13:00:35 +0000
Manifest next update: Wed 30 Apr 2025 13:00:35 +0000
Files and hashes: 1: Fc-IaUdYzYO5dqZAUEbmajEzC6Q.roa (hash: X8wYVxwVSi64eSBFgWeo409dfz2ei02HOXjRq1htjB0=)
2: _3EQVKiURqdvSTziwSepSOukqP8.crl (hash: 4k1uml0kPjaGP0M7rcMYk3DSSm5p0ANOyUkRznOpgSU=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/fc/b8fc55-b4cd-4d1f-9990-47ac389d3261/1/_3EQVKiURqdvSTziwSepSOukqP8.crl
rsync://rpki.ripe.net/repository/DEFAULT/fc/b8fc55-b4cd-4d1f-9990-47ac389d3261/1/_3EQVKiURqdvSTziwSepSOukqP8.mft
rsync://rpki.ripe.net/repository/DEFAULT/_3EQVKiURqdvSTziwSepSOukqP8.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 30 Apr 2025 13:00:35 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:81:a2:8d:13:a9:50:85:42:fd:f2:be:a5:22:67:dd:d5
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=ff711054a89446a76f493ce2c127a948eba4a8ff
Validity
Not Before: Apr 29 13:00:35 2025 GMT
Not After : Apr 30 13:00:35 2025 GMT
Subject: CN=1b5523e250fb34c202b79c6ab88df1a2d9885529
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9b:b2:04:4f:47:37:55:ed:a0:5c:cb:78:1c:48:
0c:d6:d7:e4:7f:f0:27:48:35:77:57:03:3c:21:0a:
75:0a:7f:51:1d:b7:c9:47:1b:15:62:0e:ab:4b:ba:
e9:1c:4c:42:a7:28:55:c6:78:c9:4b:11:07:1e:05:
92:7c:3e:bc:78:de:53:23:85:f6:4e:8c:6b:5e:d7:
1a:f4:a8:0f:cb:70:f8:fa:1c:2c:9f:31:e6:d1:23:
24:cb:bf:d8:f7:a6:f8:3b:53:93:94:6e:23:93:b1:
b2:79:c8:9a:dd:08:6c:e3:72:ea:ee:8f:1e:0d:eb:
3d:36:ec:e0:b9:5e:df:29:8c:65:f1:ab:ff:ec:f8:
ab:4f:70:d9:ba:f8:37:ce:16:1f:d9:7e:bd:42:72:
b8:7a:29:07:73:b9:1c:b6:57:1a:32:68:66:bd:8b:
7e:e5:76:ec:77:73:19:21:c3:7c:0f:64:cc:3a:79:
02:83:94:b4:3a:e3:0d:44:fd:71:4c:c2:e5:c9:af:
f9:fd:c1:50:cf:50:f1:f1:0f:fe:aa:e7:97:ec:a2:
0b:da:d3:6b:30:7a:2c:15:a5:d0:2e:0a:a1:6d:e4:
b0:d4:24:2c:70:77:cc:9a:30:f9:6a:d4:dc:10:0e:
9d:7c:2f:c9:d6:65:e2:fe:04:8f:11:03:4e:4c:db:
92:71
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
1B:55:23:E2:50:FB:34:C2:02:B7:9C:6A:B8:8D:F1:A2:D9:88:55:29
X509v3 Authority Key Identifier:
keyid:FF:71:10:54:A8:94:46:A7:6F:49:3C:E2:C1:27:A9:48:EB:A4:A8:FF
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/_3EQVKiURqdvSTziwSepSOukqP8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/fc/b8fc55-b4cd-4d1f-9990-47ac389d3261/1/_3EQVKiURqdvSTziwSepSOukqP8.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/fc/b8fc55-b4cd-4d1f-9990-47ac389d3261/1/_3EQVKiURqdvSTziwSepSOukqP8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
65:4c:d3:d0:57:c8:98:0d:aa:c6:d1:3f:38:81:2c:46:c9:7d:
00:a8:f5:5b:db:aa:4c:67:a2:ca:96:c6:fe:c5:f1:fc:12:21:
67:47:7c:ee:78:45:23:ef:91:93:be:96:cf:17:c7:c6:3f:fc:
9f:dd:0e:00:88:56:46:5a:6f:e8:fa:a7:2e:1f:ae:22:af:2b:
97:e8:fd:a9:a1:72:a7:3a:17:d8:c3:f8:68:e9:ba:44:7e:e8:
67:d1:4c:d0:3a:24:fc:97:87:18:12:9d:2b:56:3e:e4:82:ac:
70:56:b9:a1:c3:7d:6e:99:9a:92:f1:86:fe:8c:a1:0d:80:e9:
c7:b2:20:d2:88:ba:ec:53:09:41:12:ad:3a:ed:54:72:d6:27:
b4:a9:61:38:20:fb:0a:1f:11:0e:96:40:38:2a:3a:e8:c4:8f:
c5:8a:01:2d:74:33:72:75:ee:10:6e:2c:04:40:bf:44:26:5d:
60:b7:38:52:6f:73:b4:3b:a1:e7:c5:3a:85:43:06:1e:d5:c2:
33:5e:47:8c:bf:7b:1a:81:c1:8e:2d:41:14:bd:5b:de:7a:84:
68:e1:f6:5b:a7:60:7f:d8:39:8b:a8:a0:3a:7c:7f:96:72:f9:
8b:20:82:a1:f2:78:60:ca:39:89:0f:2a:ca:25:59:a7:54:3f:
7c:ff:b5:d7
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Apr 29 17:20:25 2025 by rpki-client