Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/6d/ffc349-f326-4096-bcb3-c2c2acb908bc/1/BA3T08UtTG-lG3qDNXjO-zqyZkk.mft
File: BA3T08UtTG-lG3qDNXjO-zqyZkk.mft (raw, json)
Hash identifier: L+/FkXzv8gsQKEQqtnVKUoSYysHL27DfDuMdUGY9gX8=
Subject key identifier: 35:C9:0B:3F:7D:DB:2E:F0:B7:7E:84:FE:3A:09:55:1B:05:C1:CB:73
Authority key identifier: 04:0D:D3:D3:C5:2D:4C:6F:A5:1B:7A:83:35:78:CE:FB:3A:B2:66:49
Certificate issuer: /CN=040dd3d3c52d4c6fa51b7a833578cefb3ab26649
Certificate serial: 01958CCE11621998C5DEF844D6DEFC6DF8C4
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/BA3T08UtTG-lG3qDNXjO-zqyZkk.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/6d/ffc349-f326-4096-bcb3-c2c2acb908bc/1/BA3T08UtTG-lG3qDNXjO-zqyZkk.mft
Manifest number: 1498
Signing time: Thu 13 Mar 2025 00:01:09 +0000
Manifest this update: Thu 13 Mar 2025 00:01:09 +0000
Manifest next update: Fri 14 Mar 2025 00:01:09 +0000
Files and hashes: 1: BA3T08UtTG-lG3qDNXjO-zqyZkk.crl (hash: ShsbTcx5hIq7VLSQFouCL7Y4k7rN4yP26DHdIkFQ/Ig=)
2: jLbMl-iRXo5CtEApXDgnLFSdrEQ.roa (hash: nHgsQuuO7Y9rP7+Bsj4rZpGDnYmOC1HMRfXo6zw5zbc=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/6d/ffc349-f326-4096-bcb3-c2c2acb908bc/1/BA3T08UtTG-lG3qDNXjO-zqyZkk.crl
rsync://rpki.ripe.net/repository/DEFAULT/6d/ffc349-f326-4096-bcb3-c2c2acb908bc/1/BA3T08UtTG-lG3qDNXjO-zqyZkk.mft
rsync://rpki.ripe.net/repository/DEFAULT/BA3T08UtTG-lG3qDNXjO-zqyZkk.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 13 Mar 2025 19:14:49 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:95:8c:ce:11:62:19:98:c5:de:f8:44:d6:de:fc:6d:f8:c4
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=040dd3d3c52d4c6fa51b7a833578cefb3ab26649
Validity
Not Before: Mar 13 00:01:09 2025 GMT
Not After : Mar 14 00:01:09 2025 GMT
Subject: CN=35c90b3f7ddb2ef0b77e84fe3a09551b05c1cb73
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d2:3c:b0:64:66:44:6f:96:96:1f:89:bc:ca:88:
67:02:00:7c:f5:84:a5:e9:7a:3c:be:ec:72:5b:21:
42:11:00:c8:f6:e3:14:5b:e5:d4:56:39:34:3d:22:
7c:8c:3b:bc:71:70:bf:5c:4f:26:29:d7:7e:97:73:
fd:35:a7:fd:ea:bb:07:39:2a:8b:32:25:b8:f6:f1:
77:35:0c:55:fb:4f:cc:dc:c0:ee:01:cc:a0:b1:f3:
4e:fd:6d:e2:d9:62:5d:ee:c8:0d:d8:6d:73:50:a2:
06:07:72:fa:e1:5e:ef:b4:01:2d:24:67:ba:37:b4:
47:e4:cb:19:a3:43:0f:7a:ec:89:dd:51:68:94:e4:
e0:ab:17:85:01:7a:57:5b:96:c7:4f:dc:6a:af:ef:
b7:da:e1:3c:83:72:ce:04:55:0f:42:d2:35:73:20:
7a:d6:a5:fc:a8:79:cb:24:12:41:e8:8f:f8:ab:36:
a7:4c:7f:83:87:97:db:db:39:3b:34:be:34:6f:83:
ca:d0:44:c4:5f:8b:9f:b2:ab:62:a5:10:e0:2e:56:
c9:3c:01:02:c9:61:14:a0:f0:1a:f6:15:6c:67:7b:
55:8c:fb:cc:40:ef:59:58:12:8b:2b:18:8c:8e:6b:
05:52:da:ef:d2:a0:ab:9f:07:53:9c:b8:69:c5:89:
6a:55
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
35:C9:0B:3F:7D:DB:2E:F0:B7:7E:84:FE:3A:09:55:1B:05:C1:CB:73
X509v3 Authority Key Identifier:
keyid:04:0D:D3:D3:C5:2D:4C:6F:A5:1B:7A:83:35:78:CE:FB:3A:B2:66:49
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/BA3T08UtTG-lG3qDNXjO-zqyZkk.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/6d/ffc349-f326-4096-bcb3-c2c2acb908bc/1/BA3T08UtTG-lG3qDNXjO-zqyZkk.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/6d/ffc349-f326-4096-bcb3-c2c2acb908bc/1/BA3T08UtTG-lG3qDNXjO-zqyZkk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
3c:3f:92:c7:94:68:a0:23:98:31:16:ea:ef:b4:c2:ba:a4:b5:
7d:30:92:8e:b0:15:85:1c:e6:95:b8:f4:27:01:88:28:6a:30:
90:f7:f2:73:82:8c:04:be:66:8d:11:9f:3c:8c:b1:d9:0b:bb:
d0:3c:ad:b5:35:2b:e2:19:b2:42:48:e2:83:aa:87:12:b0:2f:
76:2d:7f:48:55:5b:1d:4d:45:e1:b0:be:23:34:31:37:f1:bf:
e5:ec:6b:77:d5:b2:5f:2d:c6:b4:00:46:11:37:d4:aa:e7:24:
53:9d:86:df:92:71:f8:08:5f:df:ea:84:1b:bb:2f:fe:1c:1a:
cd:b9:86:95:46:97:6d:07:31:b4:cb:d4:d9:73:20:95:d5:a8:
1b:91:85:f4:a1:89:b4:92:fe:00:7b:9d:a4:b0:ea:41:ee:88:
65:28:99:99:08:89:97:80:6d:e5:c5:2a:3e:a7:c7:20:2e:6a:
5f:8c:59:c2:d8:8f:79:5e:a4:2b:fb:78:7d:c2:ae:9f:58:62:
3a:00:6a:26:4e:28:c5:2f:f7:85:4b:ab:d0:ae:35:1b:55:ed:
49:cc:db:cf:0e:ea:42:97:4a:f7:79:6d:f1:73:21:1e:27:21:
50:fa:e7:c1:3e:1b:1a:7b:6b:ca:c1:ba:23:4d:78:74:7b:e7:
ef:29:01:43
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 13 02:55:26 2025 by rpki-client