Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/3f/1e8183-aad1-4fd7-b10f-ffa4950a1ccb/1/p2Sib3Y1UUCqaW4KTx8MMStyd8A.mft
File: p2Sib3Y1UUCqaW4KTx8MMStyd8A.mft (raw, json)
Hash identifier: V/9RSqeWu1ahbKRNWsF6enmsXyWgRh1gYPdmnMesg44=
Subject key identifier: 3B:7A:CC:A4:8C:F9:3E:BF:70:D2:59:92:1B:F4:CD:2D:52:3F:35:20
Authority key identifier: A7:64:A2:6F:76:35:51:40:AA:69:6E:0A:4F:1F:0C:31:2B:72:77:C0
Certificate issuer: /CN=a764a26f76355140aa696e0a4f1f0c312b7277c0
Certificate serial: 01964CA26A6CBB78E7672235F74D1F50C312
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/p2Sib3Y1UUCqaW4KTx8MMStyd8A.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/3f/1e8183-aad1-4fd7-b10f-ffa4950a1ccb/1/p2Sib3Y1UUCqaW4KTx8MMStyd8A.mft
Manifest number: 1234
Signing time: Sat 19 Apr 2025 06:00:34 +0000
Manifest this update: Sat 19 Apr 2025 06:00:34 +0000
Manifest next update: Sun 20 Apr 2025 06:00:34 +0000
Files and hashes: 1: BzSGdKXS_5WRE8i4u-1soKeFtzM.roa (hash: vrT1E18BTpX1mS9gu66zvt/nerXMjovuRA/4FT5P190=)
2: p2Sib3Y1UUCqaW4KTx8MMStyd8A.crl (hash: +5kBMIkvTS89pD/A5fjRF2D0PI7F0HYWgK5vz5idZ5o=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/3f/1e8183-aad1-4fd7-b10f-ffa4950a1ccb/1/p2Sib3Y1UUCqaW4KTx8MMStyd8A.crl
rsync://rpki.ripe.net/repository/DEFAULT/3f/1e8183-aad1-4fd7-b10f-ffa4950a1ccb/1/p2Sib3Y1UUCqaW4KTx8MMStyd8A.mft
rsync://rpki.ripe.net/repository/DEFAULT/p2Sib3Y1UUCqaW4KTx8MMStyd8A.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 20 Apr 2025 06:00:34 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:4c:a2:6a:6c:bb:78:e7:67:22:35:f7:4d:1f:50:c3:12
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=a764a26f76355140aa696e0a4f1f0c312b7277c0
Validity
Not Before: Apr 19 06:00:34 2025 GMT
Not After : Apr 20 06:00:34 2025 GMT
Subject: CN=3b7acca48cf93ebf70d259921bf4cd2d523f3520
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:97:e1:ee:e1:7c:ca:97:50:e2:03:5e:2b:25:39:
45:0b:01:df:ae:ec:bf:a1:2f:ea:63:64:51:22:fc:
ef:af:90:f1:28:fe:52:21:79:b1:aa:8c:b5:4c:43:
68:fe:ad:2a:26:95:ce:b7:92:b3:3e:bd:3f:e8:68:
35:92:f8:e8:9c:0b:d9:a1:8a:c0:31:51:76:4a:57:
aa:ac:52:45:0f:e1:5f:77:9a:2b:e9:0a:be:69:67:
23:28:8c:70:cd:fc:d8:b4:5e:f2:e7:55:28:d2:09:
28:1c:42:0e:a8:03:91:b8:43:57:a1:b1:67:0a:fe:
41:c8:0e:f7:a5:3e:aa:b7:a9:80:d3:9a:77:82:5b:
35:05:3c:53:41:84:ec:b0:58:37:c7:5f:7b:bf:4b:
ef:5f:72:18:8e:0d:db:b4:f9:2f:1d:e8:61:3a:6c:
f0:40:66:a1:6d:9d:ba:05:f6:7f:67:3d:97:23:d5:
52:e1:ad:98:31:ec:63:62:fb:66:c6:09:e6:09:62:
5c:2f:55:d3:16:c2:ca:4d:38:25:2b:ae:75:d3:fe:
b5:6c:96:bc:f6:9c:8d:47:89:aa:94:7a:2c:cf:e9:
b8:f4:58:64:c3:1b:29:e7:27:e9:61:11:60:99:f6:
79:51:e2:4d:9c:b3:b0:fb:02:5c:50:d2:b1:85:4a:
17:bf
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
3B:7A:CC:A4:8C:F9:3E:BF:70:D2:59:92:1B:F4:CD:2D:52:3F:35:20
X509v3 Authority Key Identifier:
keyid:A7:64:A2:6F:76:35:51:40:AA:69:6E:0A:4F:1F:0C:31:2B:72:77:C0
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/p2Sib3Y1UUCqaW4KTx8MMStyd8A.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/3f/1e8183-aad1-4fd7-b10f-ffa4950a1ccb/1/p2Sib3Y1UUCqaW4KTx8MMStyd8A.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/3f/1e8183-aad1-4fd7-b10f-ffa4950a1ccb/1/p2Sib3Y1UUCqaW4KTx8MMStyd8A.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
1c:20:dc:13:f2:5a:04:ce:57:06:85:90:11:86:eb:a1:55:5e:
fa:e9:a8:2d:a8:8f:15:e0:36:ca:80:c5:32:63:a3:50:18:c9:
c3:88:74:d6:79:b9:e2:ef:0b:99:78:5e:87:09:9c:39:ec:ee:
47:9c:8a:f3:27:36:7a:f8:82:08:da:ed:ee:9d:e7:0c:00:29:
81:6d:0a:3f:5b:97:80:ee:67:06:c6:2b:1f:b8:84:ef:f0:c1:
52:a9:fe:66:b1:89:c5:ea:43:b1:96:1f:9d:27:44:c0:db:e7:
52:32:79:a4:b1:ee:98:5a:f8:60:88:0e:d4:ff:f9:aa:8b:76:
19:05:5e:00:f4:9a:a2:95:47:68:84:a9:e9:0d:5f:fc:9d:ab:
27:ac:a0:57:c7:66:b1:78:ad:cb:1e:71:70:95:dc:13:3c:68:
5b:bd:3d:a0:34:db:b8:f8:de:e3:93:80:71:64:29:8a:db:07:
3b:5d:b6:ca:ab:85:c9:d4:5b:cd:f1:fe:b5:b3:5c:19:65:d6:
ae:8b:44:6a:dc:bf:6a:b9:5d:50:4b:69:dd:64:4c:b5:80:72:
aa:d9:55:f7:67:ce:52:c8:b6:4b:a9:43:10:65:43:27:d2:a9:
df:e7:72:3f:6b:c8:ec:7b:6b:c2:b6:1a:b1:1f:9e:2f:50:3d:
01:34:27:49
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 19 15:48:44 2025 by rpki-client