Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/6d/ffc349-f326-4096-bcb3-c2c2acb908bc/1/BA3T08UtTG-lG3qDNXjO-zqyZkk.mft
File: BA3T08UtTG-lG3qDNXjO-zqyZkk.mft (raw, json)
Hash identifier: FsLmcX9MmNqC7q2hb0sukQaowFAvIT+Ermd5HTcTIkY=
Subject key identifier: EA:DE:CB:DB:9B:9A:EC:B7:37:CB:D0:06:E2:B2:C2:3C:41:F3:DA:A6
Authority key identifier: 04:0D:D3:D3:C5:2D:4C:6F:A5:1B:7A:83:35:78:CE:FB:3A:B2:66:49
Certificate issuer: /CN=040dd3d3c52d4c6fa51b7a833578cefb3ab26649
Certificate serial: 01964E5A3FF217A46679F0E057F44827F908
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/BA3T08UtTG-lG3qDNXjO-zqyZkk.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/6d/ffc349-f326-4096-bcb3-c2c2acb908bc/1/BA3T08UtTG-lG3qDNXjO-zqyZkk.mft
Manifest number: 14FD
Signing time: Sat 19 Apr 2025 14:00:59 +0000
Manifest this update: Sat 19 Apr 2025 14:00:59 +0000
Manifest next update: Sun 20 Apr 2025 14:00:59 +0000
Files and hashes: 1: BA3T08UtTG-lG3qDNXjO-zqyZkk.crl (hash: 71d1064JJLW/buaEtlBgyGczbyEDPtGJYVw3W377RuI=)
2: CZQw40ubgHVu1Jof03ClaqRzNO0.roa (hash: ryau3A+d+gfpE7i1EIyrHi9oMGq0/6OLOcTA/JPeZzo=)
3: jLbMl-iRXo5CtEApXDgnLFSdrEQ.roa (hash: nHgsQuuO7Y9rP7+Bsj4rZpGDnYmOC1HMRfXo6zw5zbc=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/6d/ffc349-f326-4096-bcb3-c2c2acb908bc/1/BA3T08UtTG-lG3qDNXjO-zqyZkk.crl
rsync://rpki.ripe.net/repository/DEFAULT/6d/ffc349-f326-4096-bcb3-c2c2acb908bc/1/BA3T08UtTG-lG3qDNXjO-zqyZkk.mft
rsync://rpki.ripe.net/repository/DEFAULT/BA3T08UtTG-lG3qDNXjO-zqyZkk.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 20 Apr 2025 13:00:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:4e:5a:3f:f2:17:a4:66:79:f0:e0:57:f4:48:27:f9:08
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=040dd3d3c52d4c6fa51b7a833578cefb3ab26649
Validity
Not Before: Apr 19 14:00:59 2025 GMT
Not After : Apr 20 14:00:59 2025 GMT
Subject: CN=eadecbdb9b9aecb737cbd006e2b2c23c41f3daa6
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:f7:89:40:e5:99:c8:df:7f:2f:20:1d:45:29:06:
2f:95:7a:3d:c3:bb:ad:c3:b3:c8:fe:e8:53:0d:9d:
99:7b:2f:b2:ef:2e:78:47:14:b8:16:54:d9:7b:28:
3c:3a:d4:ba:2e:33:09:8b:8a:67:24:76:70:b4:eb:
9f:14:5c:1e:8b:22:72:78:48:6e:9f:15:b9:51:a2:
dd:53:59:85:ca:f4:5a:a4:4b:20:38:e6:3e:31:81:
70:89:4e:d8:3c:b4:fe:c1:65:57:0f:47:b1:5b:d1:
d8:ea:dd:65:17:6e:23:60:e9:19:71:37:3b:62:00:
02:95:da:94:8c:ff:f3:a8:91:20:1d:d2:7a:71:85:
2b:ff:ab:14:c0:1a:9a:38:1e:2b:cf:5f:a4:42:b3:
b3:c5:e5:89:8f:58:5e:79:be:ce:68:90:db:e5:d8:
0e:ae:88:ca:c4:dc:a7:fc:da:06:cb:eb:5e:ad:f7:
70:2b:81:b9:94:a7:b9:4e:93:19:5b:8a:32:74:ef:
51:48:3c:ce:69:1a:58:f1:ed:cc:46:46:67:7e:95:
71:81:b4:b8:8f:72:e1:f7:84:68:46:5a:9b:d6:29:
9d:2e:b6:02:63:8e:96:9a:ae:b1:9f:b0:0e:1c:b2:
01:eb:4e:7b:73:b3:ea:fc:dd:e1:13:78:48:eb:29:
9c:bd
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
EA:DE:CB:DB:9B:9A:EC:B7:37:CB:D0:06:E2:B2:C2:3C:41:F3:DA:A6
X509v3 Authority Key Identifier:
keyid:04:0D:D3:D3:C5:2D:4C:6F:A5:1B:7A:83:35:78:CE:FB:3A:B2:66:49
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/BA3T08UtTG-lG3qDNXjO-zqyZkk.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/6d/ffc349-f326-4096-bcb3-c2c2acb908bc/1/BA3T08UtTG-lG3qDNXjO-zqyZkk.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/6d/ffc349-f326-4096-bcb3-c2c2acb908bc/1/BA3T08UtTG-lG3qDNXjO-zqyZkk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
26:0c:bc:0f:f4:81:c8:95:89:6a:f5:49:9d:fa:61:ee:eb:61:
eb:b5:8e:02:d6:5c:e8:a4:88:a1:f4:87:07:0b:f6:b6:51:af:
ff:0b:6f:6f:b7:4d:fa:b4:f5:7a:5a:46:23:76:1c:7a:1f:60:
9a:91:7a:07:02:f9:8c:de:4f:96:fa:43:e3:c5:76:b3:45:1d:
c3:89:a9:48:df:ce:41:52:d6:5a:63:1a:e0:b5:10:e1:07:ed:
77:72:f3:0f:cc:57:67:af:c6:0e:ad:eb:1c:fd:c6:bb:70:9c:
08:55:d2:30:c5:9f:cf:17:e5:6f:41:54:5b:44:45:97:05:bc:
bd:86:85:0b:29:fe:66:8d:0e:75:d1:d6:df:0e:3a:d1:5f:7a:
48:ab:9f:03:08:1b:44:f8:3f:f6:53:d9:73:cb:77:79:58:81:
aa:6c:77:3c:93:2e:ab:f1:aa:63:aa:b1:f9:29:b1:1e:8f:7d:
3f:bb:20:13:4d:af:c5:3a:76:55:a2:a6:2d:13:a8:a8:28:65:
b3:18:0a:0c:2d:19:a3:52:72:70:40:c1:47:6a:ba:51:5e:c8:
00:c9:9d:f5:af:02:f8:eb:cc:41:a6:2f:45:bd:88:7c:78:7f:
1f:17:3c:cc:10:d7:58:87:9d:c7:e8:e3:c2:2d:bb:f1:ba:b6:
e3:ec:2f:a2
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 19 17:39:06 2025 by rpki-client