Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/59/dcb08c-5515-445c-ad99-fb4740fda250/1/Bk3NDucBTvsuO1VPu3BjhO8R0FE.mft
File: Bk3NDucBTvsuO1VPu3BjhO8R0FE.mft (raw, json)
Hash identifier: n77nuyDODIXUPWOHY0xckWSbvcT9yK90hJATZUZ6Za4=
Subject key identifier: 49:76:6B:6E:47:2A:EA:A8:9A:04:3D:E4:50:10:34:86:77:8E:EF:20
Authority key identifier: 06:4D:CD:0E:E7:01:4E:FB:2E:3B:55:4F:BB:70:63:84:EF:11:D0:51
Certificate issuer: /CN=064dcd0ee7014efb2e3b554fbb706384ef11d051
Certificate serial: 019656136BEBBC28B9B94F4272AC2D2D1676
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Bk3NDucBTvsuO1VPu3BjhO8R0FE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/59/dcb08c-5515-445c-ad99-fb4740fda250/1/Bk3NDucBTvsuO1VPu3BjhO8R0FE.mft
Manifest number: 14FF
Signing time: Mon 21 Apr 2025 02:00:35 +0000
Manifest this update: Mon 21 Apr 2025 02:00:35 +0000
Manifest next update: Tue 22 Apr 2025 02:00:35 +0000
Files and hashes: 1: Bk3NDucBTvsuO1VPu3BjhO8R0FE.crl (hash: xU7ZybTniHPtrAhaSX2fL4Xh4Hh7pVH82WYqRCah0pI=)
2: GCU6ctyJbqAMhWQYVpX0QaP8Qy4.roa (hash: dW5jCxXLX0Q6KCT48fWLPtjZskUAawNAnNuHkyFw1ow=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/59/dcb08c-5515-445c-ad99-fb4740fda250/1/Bk3NDucBTvsuO1VPu3BjhO8R0FE.crl
rsync://rpki.ripe.net/repository/DEFAULT/59/dcb08c-5515-445c-ad99-fb4740fda250/1/Bk3NDucBTvsuO1VPu3BjhO8R0FE.mft
rsync://rpki.ripe.net/repository/DEFAULT/Bk3NDucBTvsuO1VPu3BjhO8R0FE.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 22 Apr 2025 01:00:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:56:13:6b:eb:bc:28:b9:b9:4f:42:72:ac:2d:2d:16:76
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=064dcd0ee7014efb2e3b554fbb706384ef11d051
Validity
Not Before: Apr 21 02:00:35 2025 GMT
Not After : Apr 22 02:00:35 2025 GMT
Subject: CN=49766b6e472aeaa89a043de450103486778eef20
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b3:fd:04:d3:54:9b:03:92:71:2e:d5:f2:9c:c1:
57:95:1a:c1:b7:d5:e3:f4:c9:df:c9:bd:8e:2a:be:
11:d8:41:46:be:f1:1b:72:76:ee:28:b5:f3:9b:ec:
0c:72:e1:0d:92:ce:d0:61:7b:d7:7e:17:9b:41:3e:
18:a1:32:02:c9:df:ba:cb:e2:34:7a:0f:d2:1b:92:
4c:05:94:3d:65:a5:7c:e6:23:90:4e:f4:a2:f1:d0:
4e:48:ef:3f:5e:85:f8:4a:f6:da:8b:bd:82:4e:2e:
37:e3:3e:5c:d4:ec:65:93:5c:21:a0:30:0a:6e:83:
94:bb:6a:b8:bd:33:f4:d7:aa:b9:61:2c:1f:b1:f9:
7f:07:d7:1d:04:a6:67:eb:50:ba:6e:67:80:10:9d:
68:10:a8:28:44:7b:90:e7:f1:c4:58:ff:f7:61:a0:
dc:4e:27:1f:63:01:81:8d:0a:8f:57:81:93:6c:ce:
97:2c:b1:e8:2d:48:ff:50:90:22:b6:45:8d:08:34:
b6:2d:e3:3d:83:2a:93:ff:4b:f7:08:4f:5f:47:f5:
78:00:90:b5:ac:be:0e:1d:eb:aa:8e:ac:7b:da:d9:
1a:fe:ef:46:86:05:73:c6:4d:f0:1c:95:b5:77:31:
ee:36:c7:57:72:86:eb:c6:b6:49:ae:24:1a:b0:02:
19:99
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
49:76:6B:6E:47:2A:EA:A8:9A:04:3D:E4:50:10:34:86:77:8E:EF:20
X509v3 Authority Key Identifier:
keyid:06:4D:CD:0E:E7:01:4E:FB:2E:3B:55:4F:BB:70:63:84:EF:11:D0:51
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Bk3NDucBTvsuO1VPu3BjhO8R0FE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/59/dcb08c-5515-445c-ad99-fb4740fda250/1/Bk3NDucBTvsuO1VPu3BjhO8R0FE.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/59/dcb08c-5515-445c-ad99-fb4740fda250/1/Bk3NDucBTvsuO1VPu3BjhO8R0FE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
8a:aa:56:63:fb:f1:97:3a:14:5d:73:55:1a:a1:45:d9:c4:e5:
a3:c1:15:fa:b6:2a:c9:27:1a:cf:34:3c:50:b9:d1:c1:a9:43:
db:8a:9e:48:6d:41:bd:4c:49:0d:54:17:1a:f0:f8:f7:c2:5c:
70:f6:f4:c2:44:c7:51:4b:1b:85:36:cb:5b:0c:b2:99:b2:34:
30:8c:7c:c9:4c:c8:40:45:59:58:db:d2:4c:b6:d6:9d:c8:dc:
e0:b4:ad:9b:ae:5a:37:a9:31:03:3b:ca:e7:c1:96:07:b7:b8:
58:66:87:3b:f8:23:69:fa:34:25:41:17:35:f9:b9:d3:06:5a:
de:b8:f6:89:12:83:99:06:a5:8a:4b:bb:a6:93:65:6c:1c:69:
fa:9d:d6:bb:af:58:5d:f8:c6:f0:df:40:82:36:51:0f:3a:43:
6f:54:76:10:01:81:a6:cf:34:4b:e4:45:26:6f:5d:3c:9f:4e:
40:09:ac:a2:7f:3e:95:c7:8f:a7:ff:ff:ce:0f:bc:90:70:0e:
2a:c7:12:73:42:00:9c:90:bc:3e:4a:7f:90:54:41:22:54:4e:
7f:76:bc:56:1a:e7:76:cc:7c:1a:0a:4f:39:51:6d:32:d8:7d:
7f:dd:67:77:2f:ff:9a:11:b2:89:8f:c2:0d:2e:7b:91:29:61:
c8:05:9d:f4
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 21 07:01:27 2025 by rpki-client