Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/77/3ad453-4dff-443a-bf61-881c10c4f704/1/a3bJMU-szahJARCzTnmUbdjrrTo.mft
File: a3bJMU-szahJARCzTnmUbdjrrTo.mft (raw, json)
Hash identifier: 8gKPEmi8WlE9maAkVFtVF0ks+dDo3WBbiFvy3A6qm5E=
Subject key identifier: F0:F4:62:03:63:A6:29:52:27:83:71:F3:8B:0F:91:DB:BA:ED:7E:9C
Authority key identifier: 6B:76:C9:31:4F:AC:CD:A8:49:01:10:B3:4E:79:94:6D:D8:EB:AD:3A
Certificate issuer: /CN=6b76c9314faccda8490110b34e79946dd8ebad3a
Certificate serial: 01963087B91ACFF5F3B76B59302FAACA8525
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/a3bJMU-szahJARCzTnmUbdjrrTo.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/77/3ad453-4dff-443a-bf61-881c10c4f704/1/a3bJMU-szahJARCzTnmUbdjrrTo.mft
Manifest number: 0BCC
Signing time: Sun 13 Apr 2025 19:02:03 +0000
Manifest this update: Sun 13 Apr 2025 19:02:03 +0000
Manifest next update: Mon 14 Apr 2025 19:02:03 +0000
Files and hashes: 1: GQ4okKYObDE-j1xycURkWS4ZSu4.roa (hash: WJRKBv0neQmanj6UIle0b8oMi28WgQBdTYQH6BO3sRs=)
2: a3bJMU-szahJARCzTnmUbdjrrTo.crl (hash: VfAqwqWkdz3gMfDJGrcDm5AEHmde5vND7/KdfzQ8OZo=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/77/3ad453-4dff-443a-bf61-881c10c4f704/1/a3bJMU-szahJARCzTnmUbdjrrTo.crl
rsync://rpki.ripe.net/repository/DEFAULT/77/3ad453-4dff-443a-bf61-881c10c4f704/1/a3bJMU-szahJARCzTnmUbdjrrTo.mft
rsync://rpki.ripe.net/repository/DEFAULT/a3bJMU-szahJARCzTnmUbdjrrTo.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 14 Apr 2025 17:00:59 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:30:87:b9:1a:cf:f5:f3:b7:6b:59:30:2f:aa:ca:85:25
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=6b76c9314faccda8490110b34e79946dd8ebad3a
Validity
Not Before: Apr 13 19:02:03 2025 GMT
Not After : Apr 14 19:02:03 2025 GMT
Subject: CN=f0f4620363a62952278371f38b0f91dbbaed7e9c
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c5:35:ce:39:dd:cb:e1:ae:bd:98:b1:d5:95:c3:
81:d6:4a:dd:e0:4e:80:c0:f4:f8:7e:14:8d:6e:6c:
80:0b:14:1c:19:37:92:cf:9c:1a:da:50:b5:6b:35:
1a:bd:2c:fc:4b:19:78:65:29:e1:c6:c2:32:98:4c:
14:1d:70:ed:30:da:55:8e:04:04:41:b5:b8:0d:1e:
2f:06:2b:95:62:94:72:63:e5:38:2c:1b:f4:40:fe:
5b:7f:a0:96:fc:cf:87:ad:72:e6:54:37:aa:0f:3c:
fd:52:d2:83:8e:f9:65:ff:58:b6:50:ba:f1:1c:c9:
e9:4a:c7:bb:58:d1:ce:82:1e:bc:a7:10:b3:ad:c1:
b4:bd:42:4e:f3:b2:83:1d:84:8e:77:ad:c0:8f:09:
e9:38:3a:93:fc:af:01:aa:77:3f:ea:74:c1:cc:25:
05:9b:14:df:45:66:cf:d7:13:4e:bd:9f:61:7e:a7:
54:83:54:75:47:96:74:02:ab:3b:ec:0d:f0:a7:08:
89:2c:a6:b1:ae:fd:68:ad:43:34:a3:ee:f7:d8:69:
b7:40:ee:08:9b:c5:46:cb:18:df:a8:15:7f:70:de:
a8:ea:c0:13:53:df:e1:76:87:20:3e:5b:94:e2:21:
3b:aa:0f:fe:3b:83:d0:15:fb:5c:cb:c2:1a:4d:ac:
4b:2d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F0:F4:62:03:63:A6:29:52:27:83:71:F3:8B:0F:91:DB:BA:ED:7E:9C
X509v3 Authority Key Identifier:
keyid:6B:76:C9:31:4F:AC:CD:A8:49:01:10:B3:4E:79:94:6D:D8:EB:AD:3A
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/a3bJMU-szahJARCzTnmUbdjrrTo.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/77/3ad453-4dff-443a-bf61-881c10c4f704/1/a3bJMU-szahJARCzTnmUbdjrrTo.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/77/3ad453-4dff-443a-bf61-881c10c4f704/1/a3bJMU-szahJARCzTnmUbdjrrTo.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
60:88:fb:42:c1:a3:92:da:50:e4:69:ac:52:e5:94:3a:34:78:
78:88:61:b2:f9:2a:b9:27:e5:95:cf:0b:39:c9:cd:b8:14:06:
1e:26:7c:1b:70:45:34:51:a6:2e:7f:de:2d:17:b2:bb:e1:cc:
28:1d:95:d9:ff:6c:60:96:82:89:9b:a1:26:09:51:88:ed:a5:
4a:6f:6d:61:a0:bd:e0:06:2e:cf:83:b2:3d:88:90:99:80:66:
db:cb:08:a6:26:04:dd:d1:6f:da:78:ec:d5:eb:e8:c0:76:81:
ea:58:a6:15:c4:f5:b6:5e:f1:ed:df:2f:8b:27:1a:ae:b8:02:
8b:42:4f:00:5d:0d:26:a3:a5:02:51:7f:e5:cc:71:8b:5d:c3:
5b:60:41:b7:cf:a8:26:40:3d:cb:98:40:bd:64:55:51:c8:61:
98:3d:9b:36:8c:75:c2:5f:4f:44:2a:e0:e5:e0:02:59:fa:58:
d5:df:9a:27:89:ad:07:36:5f:2a:7e:72:a5:0b:f1:68:70:3a:
db:18:f8:95:9f:1a:33:96:2c:dd:8d:f0:a9:3e:e3:15:24:84:
bf:30:98:ea:e2:8a:1f:16:ac:fd:f5:9d:96:ec:05:ea:fe:83:
eb:b6:2d:b3:06:e5:9d:31:e9:be:e4:e9:61:ba:05:fe:26:bc:
49:f1:a1:80
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 14 02:28:25 2025 by rpki-client