Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/7e/680324-ee1f-40f2-88df-196931962d3c/1/f3c03-oSBldBLqhn3bx7hNEyv3g.mft
File: f3c03-oSBldBLqhn3bx7hNEyv3g.mft (raw, json)
Hash identifier: EZWSWHjM5xrTxDK6QQRTl17+0Jejf1V4Bmk6uMDfdao=
Subject key identifier: 73:84:20:F6:64:9B:68:1E:24:A4:5A:19:16:84:F7:4F:15:77:F5:47
Authority key identifier: 7F:77:34:DF:EA:12:06:57:41:2E:A8:67:DD:BC:7B:84:D1:32:BF:78
Certificate issuer: /CN=7f7734dfea120657412ea867ddbc7b84d132bf78
Certificate serial: 0196591456828B7892C523415A315F6692D8
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/f3c03-oSBldBLqhn3bx7hNEyv3g.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/7e/680324-ee1f-40f2-88df-196931962d3c/1/f3c03-oSBldBLqhn3bx7hNEyv3g.mft
Manifest number: 0DAD
Signing time: Mon 21 Apr 2025 16:00:27 +0000
Manifest this update: Mon 21 Apr 2025 16:00:27 +0000
Manifest next update: Tue 22 Apr 2025 16:00:27 +0000
Files and hashes: 1: 8Nz7pWuGzKddMGUQDfHKd23vSsc.roa (hash: 0Zij1MsWucwtgl3mjLbhutBq2eFIXVXGt5jqt0MvUbY=)
2: f3c03-oSBldBLqhn3bx7hNEyv3g.crl (hash: jQXzJOXNBLH3pmqZMHvPcakgCf1AzH6LNSHlUYG/kbU=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/7e/680324-ee1f-40f2-88df-196931962d3c/1/f3c03-oSBldBLqhn3bx7hNEyv3g.crl
rsync://rpki.ripe.net/repository/DEFAULT/7e/680324-ee1f-40f2-88df-196931962d3c/1/f3c03-oSBldBLqhn3bx7hNEyv3g.mft
rsync://rpki.ripe.net/repository/DEFAULT/f3c03-oSBldBLqhn3bx7hNEyv3g.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 22 Apr 2025 13:46:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:59:14:56:82:8b:78:92:c5:23:41:5a:31:5f:66:92:d8
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=7f7734dfea120657412ea867ddbc7b84d132bf78
Validity
Not Before: Apr 21 16:00:27 2025 GMT
Not After : Apr 22 16:00:27 2025 GMT
Subject: CN=738420f6649b681e24a45a191684f74f1577f547
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:aa:06:43:0f:22:a0:4f:02:be:bd:82:d2:45:47:
b9:12:1b:58:b0:30:64:5c:cc:2c:8f:e6:fd:2c:08:
08:7d:59:37:fe:64:d6:df:39:12:83:ce:38:5b:cb:
98:6a:fd:c2:a2:90:2f:fd:55:f4:a3:84:29:03:52:
9c:3f:f0:f7:b1:ca:88:97:6d:ea:bf:cc:25:3e:eb:
2c:a2:c1:13:ef:41:fc:64:2c:0e:6b:6e:1d:5d:6e:
23:62:b8:32:a5:b4:3e:86:5a:b0:aa:a5:70:0e:2f:
02:f3:11:91:aa:16:33:0e:31:4c:46:82:d9:30:c9:
c8:09:f7:f9:97:82:b3:26:e7:02:6b:b8:09:24:81:
32:9c:9b:88:cb:32:b9:d9:99:11:fd:5b:d4:4a:ce:
cd:d0:c7:1c:42:fb:e9:b7:22:46:14:20:31:40:20:
a8:ea:14:19:ff:5c:76:4d:0a:44:0c:48:f2:f8:6c:
3e:04:8d:fa:38:df:96:06:34:15:fb:9f:c4:24:97:
66:3a:b0:72:31:18:98:27:57:d3:f9:dc:46:30:d8:
ea:bb:ff:16:36:30:79:b4:47:b6:5a:70:22:7c:ed:
0e:13:93:3b:c0:9d:60:1c:d6:e1:aa:1e:99:ee:ef:
90:44:1d:7c:2a:35:a0:88:b9:3a:ae:f0:58:ad:3c:
12:27
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
73:84:20:F6:64:9B:68:1E:24:A4:5A:19:16:84:F7:4F:15:77:F5:47
X509v3 Authority Key Identifier:
keyid:7F:77:34:DF:EA:12:06:57:41:2E:A8:67:DD:BC:7B:84:D1:32:BF:78
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/f3c03-oSBldBLqhn3bx7hNEyv3g.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/7e/680324-ee1f-40f2-88df-196931962d3c/1/f3c03-oSBldBLqhn3bx7hNEyv3g.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/7e/680324-ee1f-40f2-88df-196931962d3c/1/f3c03-oSBldBLqhn3bx7hNEyv3g.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
3b:e7:56:ee:b3:af:5f:03:30:5d:67:ef:13:2a:d0:05:74:d8:
3b:29:cf:50:36:59:93:9c:0e:9e:e7:86:6d:92:ef:8d:27:90:
a3:c4:8d:b1:12:6c:ac:11:1a:c6:10:b9:e3:77:1f:ad:58:c3:
72:be:11:75:fb:53:92:c4:9c:d2:8a:fe:91:9f:b5:75:38:8b:
82:68:2a:9c:b2:53:cc:f0:0c:fa:73:4d:18:0b:42:21:d2:49:
61:a3:7f:3a:02:66:20:0d:23:cc:bb:7c:ee:f9:de:91:f9:87:
92:b4:00:eb:b4:cd:ce:2b:b4:3e:56:ae:a1:5a:48:01:ce:83:
df:47:47:6f:b6:a6:a2:96:a9:63:82:a3:78:1e:2f:79:ed:81:
33:dc:94:54:34:62:e8:91:6d:f8:66:bf:89:37:85:03:e8:d2:
20:d3:64:cf:5d:6c:61:ab:93:44:38:f9:bd:7d:a1:7f:00:a0:
07:9f:a5:dd:1a:64:1c:d1:13:7b:cf:2b:59:5d:0d:89:39:82:
ab:11:9b:00:09:ba:0c:e3:fc:31:16:3b:37:1a:61:10:78:d6:
32:08:31:5a:9c:f4:25:0d:49:ab:b5:68:39:a1:ec:23:6e:44:
bc:f5:24:fe:14:c7:ba:45:33:07:54:3a:45:8b:49:ce:71:a6:
31:d5:96:42
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 21 20:26:55 2025 by rpki-client