Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e6/a86317-95c4-4dc7-a30b-f7d11339dbad/1/v38LbdEqN0vCk1y-nfYeCTtVvvY.mft
File: v38LbdEqN0vCk1y-nfYeCTtVvvY.mft (raw, json)
Hash identifier: rjfyiITfXdL8UyLoqMLyUiXHxNOcSPZMy3va8Tznnzc=
Subject key identifier: F3:C5:C6:45:85:93:7F:50:49:D1:37:08:81:8F:ED:83:F2:D4:66:1E
Authority key identifier: BF:7F:0B:6D:D1:2A:37:4B:C2:93:5C:BE:9D:F6:1E:09:3B:55:BE:F6
Certificate issuer: /CN=bf7f0b6dd12a374bc2935cbe9df61e093b55bef6
Certificate serial: 01965D280F95AE6CF2FF63046A3C48B09B9D
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/v38LbdEqN0vCk1y-nfYeCTtVvvY.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/e6/a86317-95c4-4dc7-a30b-f7d11339dbad/1/v38LbdEqN0vCk1y-nfYeCTtVvvY.mft
Manifest number: 097E
Signing time: Tue 22 Apr 2025 11:00:28 +0000
Manifest this update: Tue 22 Apr 2025 11:00:28 +0000
Manifest next update: Wed 23 Apr 2025 11:00:28 +0000
Files and hashes: 1: BFvGU9aoz7rWEn9pDQTts3L78L8.roa (hash: +uFs0aOYRrvBvDpuqjNUWAjstxrFKIih9wDuEmZp20g=)
2: v38LbdEqN0vCk1y-nfYeCTtVvvY.crl (hash: 0N9hzbFOSrCkAEvOcpOmxAYJJ6w9EqQOnd8mNgmhTQ0=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/e6/a86317-95c4-4dc7-a30b-f7d11339dbad/1/v38LbdEqN0vCk1y-nfYeCTtVvvY.crl
rsync://rpki.ripe.net/repository/DEFAULT/e6/a86317-95c4-4dc7-a30b-f7d11339dbad/1/v38LbdEqN0vCk1y-nfYeCTtVvvY.mft
rsync://rpki.ripe.net/repository/DEFAULT/v38LbdEqN0vCk1y-nfYeCTtVvvY.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 23 Apr 2025 11:00:28 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:5d:28:0f:95:ae:6c:f2:ff:63:04:6a:3c:48:b0:9b:9d
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=bf7f0b6dd12a374bc2935cbe9df61e093b55bef6
Validity
Not Before: Apr 22 11:00:28 2025 GMT
Not After : Apr 23 11:00:28 2025 GMT
Subject: CN=f3c5c64585937f5049d13708818fed83f2d4661e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:aa:40:b0:ed:3e:45:b0:d7:5e:62:2a:63:a4:d4:
d6:c7:79:ec:dc:bb:ec:a4:ac:71:40:8d:df:27:77:
ee:42:83:a3:f8:7e:12:d3:73:b4:76:8c:33:85:b2:
c3:33:10:a5:11:6c:d8:11:06:44:12:83:52:32:03:
93:8e:00:85:2d:b2:ef:83:f3:88:f8:8f:cd:c3:73:
3c:0b:90:bc:03:77:5b:36:a4:f2:8e:81:41:6c:6a:
9f:87:80:3d:cf:56:31:6e:49:46:80:c5:82:53:b2:
ae:04:ca:34:53:b4:9f:57:d3:63:db:75:fe:50:5d:
df:48:1b:37:15:5e:86:28:c6:26:aa:cf:1f:d0:9f:
56:4e:6a:ae:98:f9:d5:79:b3:74:2a:da:46:6f:91:
97:ec:eb:ca:81:d6:45:2d:b6:e2:65:eb:f0:95:df:
0d:76:14:ad:ce:6b:81:6b:53:e3:b6:84:bd:69:58:
e6:e5:76:81:1b:fa:1c:85:dd:14:6e:ac:6b:9d:37:
80:cb:25:93:57:0c:18:85:b0:1d:99:14:8d:4e:41:
fb:5f:90:22:d8:99:19:86:9f:86:92:7c:eb:bc:67:
7a:a6:4d:56:96:25:e3:f5:1b:8c:8b:d8:4f:bf:46:
43:7f:92:32:85:44:bd:c6:a3:c7:19:eb:00:0a:ce:
3a:1d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F3:C5:C6:45:85:93:7F:50:49:D1:37:08:81:8F:ED:83:F2:D4:66:1E
X509v3 Authority Key Identifier:
keyid:BF:7F:0B:6D:D1:2A:37:4B:C2:93:5C:BE:9D:F6:1E:09:3B:55:BE:F6
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/v38LbdEqN0vCk1y-nfYeCTtVvvY.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e6/a86317-95c4-4dc7-a30b-f7d11339dbad/1/v38LbdEqN0vCk1y-nfYeCTtVvvY.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/e6/a86317-95c4-4dc7-a30b-f7d11339dbad/1/v38LbdEqN0vCk1y-nfYeCTtVvvY.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
1f:77:b8:24:4e:08:f5:bd:96:b0:81:b1:4a:a5:73:6d:2f:53:
5a:c4:4e:20:3e:35:ff:96:de:17:eb:85:53:9c:bd:24:83:c2:
2f:fa:92:98:ea:06:9a:18:1e:bc:4c:63:b1:28:e6:41:b3:2c:
24:56:40:8c:57:da:34:73:d3:2a:82:1e:f8:b3:a6:3b:a2:4f:
b9:7a:bc:6d:5c:ab:07:df:23:08:c4:64:6b:64:1d:54:cc:16:
f9:29:55:27:d9:4f:b3:93:8c:09:57:55:93:7f:c9:e0:99:3a:
36:db:7a:fe:69:c6:84:f8:7c:39:52:7e:59:28:46:8a:7e:50:
12:ac:5d:12:58:97:ca:3c:96:12:a2:84:c3:25:76:36:f7:8a:
b5:94:36:06:13:0f:35:dc:da:75:57:51:bc:3a:8b:48:04:90:
0e:36:cc:74:12:f6:ac:c5:08:6d:88:1b:58:49:47:80:d8:8c:
89:43:f0:8d:e0:fc:2e:3f:80:a4:8f:2b:51:7f:a0:58:24:1d:
e3:34:88:7d:15:0d:e5:45:3a:10:87:83:6f:3e:ce:96:5d:97:
8e:1f:74:2a:99:9f:15:2c:c1:b4:5b:b4:b5:8b:b3:d7:46:09:
b8:2c:37:f7:05:ad:49:06:e8:72:b1:17:26:0e:79:19:2e:73:
d0:b2:17:20
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Apr 22 18:01:29 2025 by rpki-client