Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/0f/09af2b-64f7-4c1d-abd4-d07464b9b378/1/_BP3-iN_idARIzuscyjCIZun1iw.mft
File: _BP3-iN_idARIzuscyjCIZun1iw.mft (raw, json)
Hash identifier: d9pBiI/+xzdZhxqj3I14/J4xR92FLSK3VoeeccowXlE=
Subject key identifier: 21:BF:7E:B4:A7:08:07:38:2E:CF:0F:CB:23:0A:5D:32:B9:CD:75:69
Authority key identifier: FC:13:F7:FA:23:7F:89:D0:11:23:3B:AC:73:28:C2:21:9B:A7:D6:2C
Certificate issuer: /CN=fc13f7fa237f89d011233bac7328c2219ba7d62c
Certificate serial: 01958B84BEBD1D8671F069F22747AC2299A4
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/_BP3-iN_idARIzuscyjCIZun1iw.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/0f/09af2b-64f7-4c1d-abd4-d07464b9b378/1/_BP3-iN_idARIzuscyjCIZun1iw.mft
Manifest number: 149E
Signing time: Wed 12 Mar 2025 18:01:27 +0000
Manifest this update: Wed 12 Mar 2025 18:01:27 +0000
Manifest next update: Thu 13 Mar 2025 18:01:27 +0000
Files and hashes: 1: 4DlDfpniYRoqx5RnbBQ2QyX4S0s.roa (hash: 6W2AtaQBI78k64Wvc+o0EJDF11ZLR+JxMn3tTY6KLb4=)
2: GP2Q_Wo-_yK4eP2QDnc65CMZm9M.roa (hash: 0BR2eQuYyvuB8xq6ftmI/kAgu9noQmyJZpAp5YGagjg=)
3: _BP3-iN_idARIzuscyjCIZun1iw.crl (hash: 7/RQ5H/xJ+1Lv85ZuDJGjV4+H7YwdB7OwX1Kp990H6o=)
4: jrhngJH5WqcrHBQKWDaE0mXlivg.roa (hash: b0vzPK3TykyX3k8EOTeZC+7bd64uJKZrG9G6u+Jqaek=)
5: mBNBPvpQ0ZyKyklOFfh-zOZGjfY.roa (hash: /KSNQLTNa7loW014tE7eo3A+ZK7sfCtmbcB6pN7dyog=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/0f/09af2b-64f7-4c1d-abd4-d07464b9b378/1/_BP3-iN_idARIzuscyjCIZun1iw.crl
rsync://rpki.ripe.net/repository/DEFAULT/0f/09af2b-64f7-4c1d-abd4-d07464b9b378/1/_BP3-iN_idARIzuscyjCIZun1iw.mft
rsync://rpki.ripe.net/repository/DEFAULT/_BP3-iN_idARIzuscyjCIZun1iw.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 13 Mar 2025 18:01:27 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:95:8b:84:be:bd:1d:86:71:f0:69:f2:27:47:ac:22:99:a4
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=fc13f7fa237f89d011233bac7328c2219ba7d62c
Validity
Not Before: Mar 12 18:01:27 2025 GMT
Not After : Mar 13 18:01:27 2025 GMT
Subject: CN=21bf7eb4a70807382ecf0fcb230a5d32b9cd7569
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c7:5e:8d:dd:94:dd:bc:02:d8:30:d4:25:b1:6f:
e8:7e:22:38:2e:8e:37:b6:d8:1a:b8:30:12:97:58:
8d:3a:01:ad:5d:19:91:90:d5:dd:30:13:12:87:e5:
3a:98:55:c5:3c:6d:7d:d8:10:ed:9e:36:a8:e0:0e:
07:65:cb:e5:77:00:2c:14:37:29:a4:68:ca:d0:7c:
b5:b4:35:c0:88:f8:de:cc:18:55:a6:36:9f:0e:eb:
e3:fa:8c:0e:f9:18:00:ac:27:cb:f1:2b:d4:62:40:
63:27:c5:d3:dc:c8:7f:86:b7:4f:e5:c9:23:1e:78:
d7:7a:16:9a:5b:0a:1d:09:e3:42:3f:60:88:91:ec:
c8:33:90:7b:a4:a1:5e:03:62:53:d3:c1:85:8a:e2:
57:8b:4e:78:d4:ed:80:3d:ba:93:4d:f7:f1:8f:9d:
21:6d:58:c2:92:22:8f:4f:10:33:72:71:29:44:79:
cd:9e:c9:7f:19:2a:1f:0f:36:7d:ef:30:7b:a5:94:
99:e5:4b:ef:c7:6f:ad:94:2b:2e:5e:c8:58:1e:be:
37:f1:99:83:50:6c:31:4e:be:27:33:2a:87:15:54:
d2:e0:ae:65:ff:55:07:ff:7a:d7:b3:fd:26:63:7d:
b0:5d:df:75:be:35:0f:8e:74:05:d6:56:cf:3b:3f:
49:55
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
21:BF:7E:B4:A7:08:07:38:2E:CF:0F:CB:23:0A:5D:32:B9:CD:75:69
X509v3 Authority Key Identifier:
keyid:FC:13:F7:FA:23:7F:89:D0:11:23:3B:AC:73:28:C2:21:9B:A7:D6:2C
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/_BP3-iN_idARIzuscyjCIZun1iw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/0f/09af2b-64f7-4c1d-abd4-d07464b9b378/1/_BP3-iN_idARIzuscyjCIZun1iw.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/0f/09af2b-64f7-4c1d-abd4-d07464b9b378/1/_BP3-iN_idARIzuscyjCIZun1iw.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
40:5d:d4:6b:80:ab:32:dc:65:be:60:ab:1f:c9:f3:e2:e9:d1:
2f:b8:6c:ff:c2:86:1d:5e:e6:3e:8f:8d:2c:26:76:8f:f7:60:
75:47:1b:1d:19:f4:f4:92:28:4b:36:06:7c:58:c7:9b:46:97:
0e:f1:65:10:3d:39:bf:07:30:10:6e:44:49:d7:14:e7:01:af:
75:9f:58:30:74:6f:db:39:07:4a:11:23:b9:3b:f7:b9:1d:26:
77:57:9c:5e:a8:dd:d8:dc:72:27:93:bd:63:c1:e5:66:ac:c4:
74:77:b7:04:75:55:a3:b1:fa:42:f7:e5:6a:aa:2c:9b:e4:fa:
48:6f:b0:dc:bb:95:8a:40:7e:21:47:23:7c:b3:e2:75:61:80:
42:96:33:22:43:32:0a:f1:a5:a1:4c:7e:ce:00:15:24:76:8e:
16:be:39:49:b3:f5:92:a6:1f:05:20:e7:84:27:78:0d:ca:51:
8a:af:94:68:82:87:6c:82:f9:1c:7e:3d:79:7a:4e:08:80:b2:
ff:f8:71:14:4f:60:f1:ca:4f:e1:3d:6a:1a:a9:48:53:de:f7:
b5:61:4a:03:5b:7a:aa:39:42:b4:ce:db:75:19:1e:31:53:97:
e1:29:41:80:95:01:9f:03:0a:1a:8d:fa:7e:49:11:a3:15:a0:
bb:3e:e1:2d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 13 02:29:02 2025 by rpki-client