Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/01/4abe1d-3036-42b8-be36-e799ef54f0c4/1/a3tKBUpyGg_aYBKQfMW1boEgpz4.mft
File: a3tKBUpyGg_aYBKQfMW1boEgpz4.mft (raw, json)
Hash identifier: MOZ66h/r8dmYpS1eAXzqJkB3uVvXVVyjCR8O17qX33Q=
Subject key identifier: 9C:86:0E:0F:1F:EC:AB:49:ED:21:79:27:D5:BC:E9:17:37:2B:08:9D
Authority key identifier: 6B:7B:4A:05:4A:72:1A:0F:DA:60:12:90:7C:C5:B5:6E:81:20:A7:3E
Certificate issuer: /CN=6b7b4a054a721a0fda6012907cc5b56e8120a73e
Certificate serial: 01965A26FEA7C181A4339CC36F1241D5E6AB
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/a3tKBUpyGg_aYBKQfMW1boEgpz4.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/01/4abe1d-3036-42b8-be36-e799ef54f0c4/1/a3tKBUpyGg_aYBKQfMW1boEgpz4.mft
Manifest number: 14FD
Signing time: Mon 21 Apr 2025 21:00:27 +0000
Manifest this update: Mon 21 Apr 2025 21:00:27 +0000
Manifest next update: Tue 22 Apr 2025 21:00:27 +0000
Files and hashes: 1: 1TUcoIEXF4J_9vqfLzDcXvX8LV0.roa (hash: eIRoaJMdc/l4AU70hG0PC/LPtYaLw4xgou2xPhRFPhE=)
2: a3tKBUpyGg_aYBKQfMW1boEgpz4.crl (hash: p45DEhzyhfAUbcHQXAlmscuBChcPWrgyW6dsRC+T3xE=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/01/4abe1d-3036-42b8-be36-e799ef54f0c4/1/a3tKBUpyGg_aYBKQfMW1boEgpz4.crl
rsync://rpki.ripe.net/repository/DEFAULT/01/4abe1d-3036-42b8-be36-e799ef54f0c4/1/a3tKBUpyGg_aYBKQfMW1boEgpz4.mft
rsync://rpki.ripe.net/repository/DEFAULT/a3tKBUpyGg_aYBKQfMW1boEgpz4.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 22 Apr 2025 19:00:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:5a:26:fe:a7:c1:81:a4:33:9c:c3:6f:12:41:d5:e6:ab
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=6b7b4a054a721a0fda6012907cc5b56e8120a73e
Validity
Not Before: Apr 21 21:00:27 2025 GMT
Not After : Apr 22 21:00:27 2025 GMT
Subject: CN=9c860e0f1fecab49ed217927d5bce917372b089d
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a8:71:e2:6d:1e:d3:71:66:31:b6:64:02:8d:04:
d3:b2:65:8d:6d:3f:74:f1:27:e8:9d:e6:5a:ff:9c:
a2:6e:00:1b:a5:c6:a4:59:25:c1:eb:85:c2:36:04:
bf:df:f8:0d:77:df:4d:c1:d7:90:04:2e:39:a0:56:
a0:c3:e7:1c:99:24:ae:31:c7:8c:33:ff:aa:61:2b:
4c:23:ee:7e:6c:37:a7:ea:73:68:23:d7:96:64:22:
85:0b:d3:30:01:eb:b3:bf:57:59:43:fe:3b:70:d5:
3d:c4:ef:e9:f3:13:2f:0a:01:f5:a3:b6:6c:82:54:
67:7e:d6:35:e0:34:a4:db:ac:24:fa:b1:a0:05:54:
95:04:0e:30:ff:37:0b:a2:0f:ef:27:10:8f:cc:ea:
c2:fb:11:6a:16:73:b5:4f:3c:29:49:21:f3:f8:25:
79:7d:18:00:92:58:87:b4:80:93:c6:06:32:55:7d:
1c:70:e8:d4:1a:92:67:5c:0c:0a:ce:c4:72:e8:62:
ed:42:9d:da:0a:ff:42:e1:63:2c:74:02:7b:d8:eb:
75:02:72:86:b0:a2:29:f5:4e:5d:8c:2c:1f:4e:44:
ad:60:d4:3e:f3:9b:f5:14:00:6b:8c:62:fd:e5:39:
64:b3:b2:63:a3:e8:e8:ad:ee:87:06:47:79:10:a1:
53:fb
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
9C:86:0E:0F:1F:EC:AB:49:ED:21:79:27:D5:BC:E9:17:37:2B:08:9D
X509v3 Authority Key Identifier:
keyid:6B:7B:4A:05:4A:72:1A:0F:DA:60:12:90:7C:C5:B5:6E:81:20:A7:3E
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/a3tKBUpyGg_aYBKQfMW1boEgpz4.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/01/4abe1d-3036-42b8-be36-e799ef54f0c4/1/a3tKBUpyGg_aYBKQfMW1boEgpz4.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/01/4abe1d-3036-42b8-be36-e799ef54f0c4/1/a3tKBUpyGg_aYBKQfMW1boEgpz4.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
2c:e5:96:68:65:f9:da:f4:ae:4a:14:e8:77:b3:16:d8:7e:86:
76:70:32:e1:24:2b:a3:e7:b9:4d:e7:ce:64:32:0a:94:97:a1:
30:05:28:78:99:38:ae:e4:cb:ce:c9:93:59:0b:d4:9b:5f:21:
5e:60:21:c1:16:65:3f:7f:36:f2:85:85:e0:48:7d:a6:b6:e9:
61:ea:04:a5:71:18:9e:67:d4:88:9d:aa:55:cd:8f:7a:3f:e5:
e3:bd:c6:81:36:ec:a2:48:13:2a:94:4c:04:d1:6d:67:6a:4a:
94:50:9b:bd:bd:96:14:df:bb:52:07:92:ea:5e:65:fb:c1:2e:
18:01:31:5c:b7:59:6b:a7:f1:3b:e8:d8:55:b0:19:89:2a:df:
ff:ae:9c:96:bf:53:e8:35:9a:02:86:1c:96:bc:26:2c:5d:89:
46:07:c5:b0:35:78:2b:53:ac:51:35:71:8d:8f:e8:f5:ca:6c:
48:48:7a:6a:9d:be:9c:0c:7a:b3:da:16:80:34:4f:43:2b:04:
17:b8:84:41:77:dc:a1:20:ec:78:20:07:4d:4b:b7:6e:c5:09:
35:df:cd:11:34:97:93:49:70:75:6c:01:33:b2:96:c3:c7:a1:
60:c5:a1:47:ef:be:4d:d4:5e:f3:67:ad:df:44:82:a6:98:da:
e0:d7:05:3e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Apr 22 05:12:55 2025 by rpki-client