Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/9e/c93a66-c7c7-4c33-a725-18d1a406aaed/1/r3NBCHBalXluhXcSXdMAx1Hf2ag.mft
File: r3NBCHBalXluhXcSXdMAx1Hf2ag.mft (raw, json)
Hash identifier: wv2e0T27h6PtmW239syXTnl5znTWumF10OOD+8932Tk=
Subject key identifier: DB:0B:D2:CC:0B:EA:B3:E5:A2:A8:7A:3C:02:E7:7A:3A:1F:38:5B:3F
Authority key identifier: AF:73:41:08:70:5A:95:79:6E:85:77:12:5D:D3:00:C7:51:DF:D9:A8
Certificate issuer: /CN=af734108705a95796e8577125dd300c751dfd9a8
Certificate serial: 01964EFEBE47D6594886B51D980C37F722EA
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/r3NBCHBalXluhXcSXdMAx1Hf2ag.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/9e/c93a66-c7c7-4c33-a725-18d1a406aaed/1/r3NBCHBalXluhXcSXdMAx1Hf2ag.mft
Manifest number: 11EA
Signing time: Sat 19 Apr 2025 17:00:39 +0000
Manifest this update: Sat 19 Apr 2025 17:00:39 +0000
Manifest next update: Sun 20 Apr 2025 17:00:39 +0000
Files and hashes: 1: 5sSVXjXvJmErWd1wKwIQK6a_mpc.roa (hash: Gd8tIJeuQDrvoiYueaVU9NtycnUD3d9hfBsHWs7XkBs=)
2: 9CxZ9k_t9hMo55L6uAnbiDEpetU.roa (hash: tBRk1oTOlBeUNCjuxG7yQre7lmz4lVGM1tEKGpkI/Jw=)
3: AAe3vljOuGvSTlsJqoO9Wu7Oq1w.roa (hash: IQO0MooKWp9Cz+PJ2FkCg771QrVH8K5fHfuexh0B0Rk=)
4: JblHAdnkz7IDRO8QmH2JMOjzkyQ.roa (hash: cGLKYT8Hxzs+cEgf3xDHHQtQS0b8iQ7h7LNM/8+n3pU=)
5: YdvdhoRpy_JXRjRWmkCEQY06GUI.roa (hash: TbsRq0lwWgkwqZTblVQ4eG6aMqkkSiOMP5tHnWR2zXI=)
6: ZFFTSBF1NQ53TJQyiivhv4BruEg.roa (hash: esbw11uLHSDej7o2u5hst3yF9WrjTIkF3AwgO1jVCEY=)
7: cAvPgJnDexIKpiHvGayqSS9-kC8.roa (hash: 4W7cnhuEBxCD2cWqtC/raaWqxEh9cF8vkDRXNWnz3ZE=)
8: r3NBCHBalXluhXcSXdMAx1Hf2ag.crl (hash: m5Sv5raLQorMyFPmIkL1D3/N9+6h32yweiXS2qfVtZU=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/9e/c93a66-c7c7-4c33-a725-18d1a406aaed/1/r3NBCHBalXluhXcSXdMAx1Hf2ag.crl
rsync://rpki.ripe.net/repository/DEFAULT/9e/c93a66-c7c7-4c33-a725-18d1a406aaed/1/r3NBCHBalXluhXcSXdMAx1Hf2ag.mft
rsync://rpki.ripe.net/repository/DEFAULT/r3NBCHBalXluhXcSXdMAx1Hf2ag.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 20 Apr 2025 13:00:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:4e:fe:be:47:d6:59:48:86:b5:1d:98:0c:37:f7:22:ea
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=af734108705a95796e8577125dd300c751dfd9a8
Validity
Not Before: Apr 19 17:00:39 2025 GMT
Not After : Apr 20 17:00:39 2025 GMT
Subject: CN=db0bd2cc0beab3e5a2a87a3c02e77a3a1f385b3f
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ae:4b:16:a3:22:2b:68:ff:2d:23:50:06:1b:60:
46:1f:52:ba:76:73:8b:40:0f:c2:62:01:d7:75:47:
4d:7d:68:e5:f8:59:f8:68:33:72:ef:8a:7e:88:18:
74:9c:62:90:95:e1:4d:75:7c:7e:30:02:56:bd:7e:
98:16:e8:d4:0c:39:f6:ee:01:80:7c:06:22:7f:9f:
28:0a:fd:59:28:73:a9:d1:e2:7b:db:4f:69:56:b9:
2e:ec:bb:6c:d1:be:ed:de:31:af:55:5f:cb:ff:f0:
54:74:40:22:e1:66:21:3c:46:7b:09:81:ff:9a:3e:
f8:0f:4f:cb:1d:e9:cc:2d:b5:59:75:87:f4:38:df:
75:a6:2c:2c:a2:87:59:fb:bf:79:fa:c2:9e:fb:41:
81:5b:9d:af:a2:8f:af:3d:cd:8f:7c:2c:9e:ff:1e:
70:e9:5a:32:d7:34:44:16:e8:7a:e3:90:f9:c7:ca:
15:f0:6c:96:ff:b9:75:2d:69:3b:60:84:4c:8f:3e:
68:5c:83:ee:b2:c5:c3:c1:a3:6d:4a:6f:d0:66:f8:
e3:ec:db:e0:8b:30:d4:57:d8:17:0d:c4:65:47:d6:
d7:ee:4e:e6:0e:8a:74:02:25:d0:2f:3d:61:17:2f:
2c:ce:b2:e1:1f:1f:79:79:59:56:56:10:6a:38:2a:
c7:0d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
DB:0B:D2:CC:0B:EA:B3:E5:A2:A8:7A:3C:02:E7:7A:3A:1F:38:5B:3F
X509v3 Authority Key Identifier:
keyid:AF:73:41:08:70:5A:95:79:6E:85:77:12:5D:D3:00:C7:51:DF:D9:A8
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/r3NBCHBalXluhXcSXdMAx1Hf2ag.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/9e/c93a66-c7c7-4c33-a725-18d1a406aaed/1/r3NBCHBalXluhXcSXdMAx1Hf2ag.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/9e/c93a66-c7c7-4c33-a725-18d1a406aaed/1/r3NBCHBalXluhXcSXdMAx1Hf2ag.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
6f:1c:76:c6:a1:96:e4:96:98:31:43:9e:a8:f8:ff:fe:80:4a:
fa:52:10:a3:de:de:0d:b4:ec:80:63:3a:dd:b3:ee:13:5b:74:
b7:25:1f:16:9a:38:b7:12:12:53:96:8f:94:bd:83:61:30:bc:
10:51:c4:f9:82:b3:65:e5:88:1a:34:82:5e:d8:04:73:5f:88:
dc:1a:23:12:99:5f:8b:6d:f5:4d:23:d3:de:11:22:0d:f9:c9:
90:f3:24:c7:65:8e:aa:f3:4d:fa:78:8b:e5:eb:04:b2:d3:b4:
f9:48:c0:e3:05:c7:38:7b:4e:18:bb:0a:8d:2c:c9:9d:2b:da:
85:13:c6:9d:44:fd:81:73:04:36:40:98:84:c2:91:34:cd:6a:
c1:e5:33:53:66:31:79:5c:4f:94:13:ec:ad:b3:e2:cf:ec:95:
58:7e:68:5a:0b:ac:63:7c:f8:d0:e2:a6:09:36:56:a3:aa:22:
1c:b7:6e:53:8e:93:77:59:ab:c2:2f:64:d0:5e:b2:b8:ca:fa:
6c:80:14:51:bc:8b:cd:c9:7c:82:21:9f:89:de:90:45:91:ee:
aa:4e:fb:52:f9:66:5a:64:93:4c:56:10:19:5d:2a:ab:4d:10:
07:34:8b:70:16:34:5a:d5:8d:21:fb:56:39:76:82:f0:f4:5c:
c2:a2:30:f0
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Apr 20 00:13:58 2025 by rpki-client