Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/0d/e73436-2251-49b4-b357-984c957a353e/1/b027wGlmny5-iCL2OY9rNsRJNFw.mft
File: b027wGlmny5-iCL2OY9rNsRJNFw.mft (raw, json)
Hash identifier: 3+as4KQ+1RTcX5g832Nb/2AbHpNTuzs4PUxCQ7FwtHo=
Subject key identifier: 3F:E4:5C:C4:A5:07:56:DC:22:F3:0C:7F:12:3A:8F:17:0D:0A:CC:1D
Authority key identifier: 6F:4D:BB:C0:69:66:9F:2E:7E:88:22:F6:39:8F:6B:36:C4:49:34:5C
Certificate issuer: /CN=6f4dbbc069669f2e7e8822f6398f6b36c449345c
Certificate serial: 01958BBBCCBEEAA824D3256323C804D0C43F
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/b027wGlmny5-iCL2OY9rNsRJNFw.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/0d/e73436-2251-49b4-b357-984c957a353e/1/b027wGlmny5-iCL2OY9rNsRJNFw.mft
Manifest number: 12A2
Signing time: Wed 12 Mar 2025 19:01:35 +0000
Manifest this update: Wed 12 Mar 2025 19:01:35 +0000
Manifest next update: Thu 13 Mar 2025 19:01:35 +0000
Files and hashes: 1: b027wGlmny5-iCL2OY9rNsRJNFw.crl (hash: tgepK2U2ht0HAqV2+R6sa9i6T9sveUGEbZESXt/zVjA=)
2: iG5MloBb0rNBUXMwGnMdFUHFQBI.roa (hash: /505m7zfXiVDkYV7zSm4uW5ug6R08YZLzHTRAa/aV2g=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/0d/e73436-2251-49b4-b357-984c957a353e/1/b027wGlmny5-iCL2OY9rNsRJNFw.crl
rsync://rpki.ripe.net/repository/DEFAULT/0d/e73436-2251-49b4-b357-984c957a353e/1/b027wGlmny5-iCL2OY9rNsRJNFw.mft
rsync://rpki.ripe.net/repository/DEFAULT/b027wGlmny5-iCL2OY9rNsRJNFw.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 13 Mar 2025 19:01:35 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:95:8b:bb:cc:be:ea:a8:24:d3:25:63:23:c8:04:d0:c4:3f
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=6f4dbbc069669f2e7e8822f6398f6b36c449345c
Validity
Not Before: Mar 12 19:01:35 2025 GMT
Not After : Mar 13 19:01:35 2025 GMT
Subject: CN=3fe45cc4a50756dc22f30c7f123a8f170d0acc1d
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d7:95:6a:b1:c5:f3:d6:21:d7:09:e7:b3:6b:2f:
aa:56:ff:4d:d3:a4:55:a3:6a:e0:d9:e8:ce:9e:3d:
08:c5:f6:f7:bb:8d:a4:dc:d3:16:bb:99:c2:63:5d:
e5:0d:b8:56:24:ad:0b:7f:7f:73:49:1d:92:b2:41:
eb:a1:b0:c1:6c:0b:22:88:59:24:9f:61:4a:6b:fe:
44:ae:0b:e4:a7:42:6a:31:eb:a3:50:46:21:b0:e8:
08:13:c3:06:a7:a9:ad:28:bc:a1:aa:84:5a:84:80:
ef:56:89:c0:81:23:1d:c8:21:14:13:1b:56:a0:22:
4f:2e:c0:08:48:20:61:58:64:62:23:30:99:61:2a:
8c:9b:da:35:0d:23:fc:bf:52:43:aa:e2:51:09:4a:
ba:73:0a:4b:27:9f:a5:58:d2:b6:d3:32:77:61:ca:
bd:25:5f:62:ef:20:63:02:a3:60:14:0a:2c:7a:38:
ce:8f:87:8a:94:e1:4f:cc:78:84:2b:04:4b:54:d9:
84:dc:fc:16:26:a2:07:2d:f0:06:5a:be:15:0f:f8:
03:02:20:ab:0b:54:9c:97:e4:f5:e8:86:fa:d5:0e:
a8:0a:24:4c:c4:de:96:8d:3d:a2:c3:e5:bc:8b:a7:
69:e0:ab:db:28:88:ba:50:3a:c0:eb:ca:70:a3:9b:
41:27
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
3F:E4:5C:C4:A5:07:56:DC:22:F3:0C:7F:12:3A:8F:17:0D:0A:CC:1D
X509v3 Authority Key Identifier:
keyid:6F:4D:BB:C0:69:66:9F:2E:7E:88:22:F6:39:8F:6B:36:C4:49:34:5C
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/b027wGlmny5-iCL2OY9rNsRJNFw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/0d/e73436-2251-49b4-b357-984c957a353e/1/b027wGlmny5-iCL2OY9rNsRJNFw.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/0d/e73436-2251-49b4-b357-984c957a353e/1/b027wGlmny5-iCL2OY9rNsRJNFw.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
48:a2:ba:3d:b7:14:37:05:b5:08:e9:17:64:ef:ed:35:c3:3c:
2e:b1:88:d3:9d:d6:a8:71:fd:61:f6:dd:78:c3:e1:37:d0:73:
50:38:9d:65:92:b5:1d:ef:1e:a0:28:b0:1c:3b:a7:53:63:de:
4d:60:55:b3:00:01:48:61:a6:60:7c:2e:bd:33:02:f1:d2:59:
d8:fa:a8:87:63:43:f2:06:77:b2:8b:a3:16:ca:da:f6:be:f7:
e2:44:6c:32:46:be:6c:29:7f:82:86:ad:6b:03:e9:f6:2c:e1:
57:99:c4:88:d9:97:07:68:19:30:bb:9b:3b:f1:aa:86:27:04:
f9:fa:b7:2a:dd:f1:af:e1:a0:cd:ab:98:b4:9c:13:3a:a9:04:
0e:43:ba:0a:b1:7d:ba:13:2b:62:d5:7b:23:dd:46:04:92:16:
d3:01:c8:1b:de:4b:7d:66:b7:e1:81:bc:99:47:e0:7d:d2:f7:
20:cc:72:26:a1:70:d6:6c:2a:b3:c7:1d:c7:5d:b1:21:88:64:
a2:92:0c:d4:86:53:23:64:04:29:8b:59:85:9c:d0:6d:3b:0e:
d8:ff:91:a2:17:1a:84:1f:94:ce:4a:14:70:ea:68:66:30:44:
93:da:f3:83:11:61:a8:52:79:cd:27:39:c2:28:f9:d1:e3:54:
92:9e:55:de
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 13 02:24:51 2025 by rpki-client