Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/69/b66d75-a0bb-4960-beea-0117841d255b/1/B4s3OfeNloRKTvaGJtyHrC7vpQ8.mft
File: B4s3OfeNloRKTvaGJtyHrC7vpQ8.mft (raw, json)
Hash identifier: +UeqDMJh7Coq+0R5XKkEWGZ/MYXSGjCtSpjmvtqDnDA=
Subject key identifier: 32:DC:F1:E3:4A:3D:FA:FF:C2:6F:17:4E:E5:B5:15:C5:F3:2D:92:C6
Authority key identifier: 07:8B:37:39:F7:8D:96:84:4A:4E:F6:86:26:DC:87:AC:2E:EF:A5:0F
Certificate issuer: /CN=078b3739f78d96844a4ef68626dc87ac2eefa50f
Certificate serial: 01965B7073C6B81FAB19D6B7AAA8B012FA51
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/B4s3OfeNloRKTvaGJtyHrC7vpQ8.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/69/b66d75-a0bb-4960-beea-0117841d255b/1/B4s3OfeNloRKTvaGJtyHrC7vpQ8.mft
Manifest number: 05D8
Signing time: Tue 22 Apr 2025 03:00:18 +0000
Manifest this update: Tue 22 Apr 2025 03:00:18 +0000
Manifest next update: Wed 23 Apr 2025 03:00:18 +0000
Files and hashes: 1: B4s3OfeNloRKTvaGJtyHrC7vpQ8.crl (hash: wARlMV5VKOZMqW3xdApJIgshFfZ2DXmBQWjIqRl82Bc=)
2: c3kj5e0FQs-aGeI_pqvpG_P5-CI.roa (hash: L6r7oVdYR79NuIrRw2uuwM285lWZ3pFFGBMiBbZqMWw=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/69/b66d75-a0bb-4960-beea-0117841d255b/1/B4s3OfeNloRKTvaGJtyHrC7vpQ8.crl
rsync://rpki.ripe.net/repository/DEFAULT/69/b66d75-a0bb-4960-beea-0117841d255b/1/B4s3OfeNloRKTvaGJtyHrC7vpQ8.mft
rsync://rpki.ripe.net/repository/DEFAULT/B4s3OfeNloRKTvaGJtyHrC7vpQ8.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 22 Apr 2025 20:20:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:5b:70:73:c6:b8:1f:ab:19:d6:b7:aa:a8:b0:12:fa:51
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=078b3739f78d96844a4ef68626dc87ac2eefa50f
Validity
Not Before: Apr 22 03:00:18 2025 GMT
Not After : Apr 23 03:00:18 2025 GMT
Subject: CN=32dcf1e34a3dfaffc26f174ee5b515c5f32d92c6
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:dd:a3:4f:55:de:49:6c:00:32:b6:15:e7:32:96:
b3:18:ac:8d:b5:8b:f3:2b:ab:25:84:87:87:4b:e3:
b2:f0:10:d9:b2:cd:99:11:de:ac:0f:5c:90:db:6c:
d6:f3:00:5e:33:42:6f:06:bb:2f:cb:d4:f4:9d:bd:
ef:60:a0:51:57:da:15:9f:cf:3b:b1:e8:0a:f4:ed:
ca:f5:e0:c5:70:4f:5b:6d:57:dd:0e:86:0c:7b:59:
f9:64:f4:14:eb:42:0a:b1:ff:3c:e9:05:f0:a3:c8:
20:61:5b:b5:16:b7:d6:c8:8b:76:b3:b4:93:cf:5b:
33:05:44:04:dc:a8:34:13:07:27:d7:d3:74:3c:42:
dd:47:cc:fc:58:1b:b6:b6:d0:08:af:55:37:9d:04:
ac:32:2c:ca:ac:2d:2b:b9:67:e4:1d:d6:fb:e6:89:
34:76:0d:3f:3e:bc:0e:39:69:ab:4f:5e:36:59:41:
09:2e:95:00:43:70:f7:00:b7:eb:a5:d5:2d:a5:f4:
1a:a7:f0:60:19:9a:0a:68:dc:9e:0e:ed:d9:f9:3a:
91:a6:28:02:cb:27:69:dd:49:48:5f:e7:81:28:6a:
15:0c:53:ab:df:de:15:56:cf:52:8d:3c:b0:a1:07:
b2:92:79:61:2a:03:fb:3b:03:2f:d0:45:c1:ed:fe:
5d:6d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
32:DC:F1:E3:4A:3D:FA:FF:C2:6F:17:4E:E5:B5:15:C5:F3:2D:92:C6
X509v3 Authority Key Identifier:
keyid:07:8B:37:39:F7:8D:96:84:4A:4E:F6:86:26:DC:87:AC:2E:EF:A5:0F
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/B4s3OfeNloRKTvaGJtyHrC7vpQ8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/69/b66d75-a0bb-4960-beea-0117841d255b/1/B4s3OfeNloRKTvaGJtyHrC7vpQ8.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/69/b66d75-a0bb-4960-beea-0117841d255b/1/B4s3OfeNloRKTvaGJtyHrC7vpQ8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
42:82:1b:43:93:ec:50:8f:3c:92:c0:8f:57:67:a6:4e:b2:8e:
df:7a:6a:cf:59:c0:45:68:6c:ce:85:52:97:8c:90:cf:92:56:
b7:58:fd:e3:4a:c6:81:98:65:82:2e:2a:f1:32:ff:a4:7a:71:
0b:14:78:d6:0b:4c:56:46:4c:1b:88:93:0e:f7:d5:ae:a4:24:
2d:07:5f:2b:64:91:f7:8a:4d:8e:fb:52:6f:a0:ac:ef:32:18:
61:01:c4:56:1b:71:e9:1e:05:09:59:bf:1b:44:b4:22:9c:72:
8f:70:be:5f:b8:33:04:6c:f2:80:6a:b0:10:28:32:9f:24:d2:
d7:04:0b:18:88:00:cc:de:ec:94:b3:2e:a7:76:ed:76:8e:8b:
a0:19:21:cf:e6:3e:64:97:fc:60:2a:53:ba:8a:c2:bd:d0:53:
9d:a8:ad:d9:f1:86:57:ac:34:e7:da:7c:f2:86:74:ab:53:1d:
a2:03:3a:1f:f5:7a:ac:b0:69:90:e2:ad:de:12:03:42:96:c6:
8d:5c:3d:59:78:2a:9b:25:ed:56:02:0f:ca:a9:03:49:e7:62:
5e:3e:ae:9d:ca:a9:dc:1a:e9:1b:2d:10:24:40:d7:16:34:6e:
6a:ea:be:02:e5:81:f5:30:c3:08:93:cd:2b:50:4d:b0:f7:32:
40:15:36:6f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Apr 22 05:46:28 2025 by rpki-client