Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c3/7f8f58-d83c-440e-990b-b438b5b88cf2/1/x3FxpeRVBshskBa75bFLPbi8bMM.mft
File: x3FxpeRVBshskBa75bFLPbi8bMM.mft (raw, json)
Hash identifier: 2CvoWZ3aPni8mC6bIinCn8R90I2ZG91z1Yy5inGmuJE=
Subject key identifier: BB:A3:7B:36:6A:2A:A4:AA:7D:FC:EB:21:40:2F:95:EA:7A:70:D0:47
Authority key identifier: C7:71:71:A5:E4:55:06:C8:6C:90:16:BB:E5:B1:4B:3D:B8:BC:6C:C3
Certificate issuer: /CN=c77171a5e45506c86c9016bbe5b14b3db8bc6cc3
Certificate serial: 019645C4DC0346A61AC42AFF37FAE86ACA9F
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/x3FxpeRVBshskBa75bFLPbi8bMM.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c3/7f8f58-d83c-440e-990b-b438b5b88cf2/1/x3FxpeRVBshskBa75bFLPbi8bMM.mft
Manifest number: 14F5
Signing time: Thu 17 Apr 2025 22:00:51 +0000
Manifest this update: Thu 17 Apr 2025 22:00:51 +0000
Manifest next update: Fri 18 Apr 2025 22:00:51 +0000
Files and hashes: 1: iMH-2vRf9YeMGRgtztJPUn14aQA.roa (hash: 76FrL/HDDuxO7pj6zl8q4Zgif4vNwjOmJyQV7tycvQk=)
2: x3FxpeRVBshskBa75bFLPbi8bMM.crl (hash: HbcT4bl2tihscpDTAp7TU6aI3vEfGnhQjpOEveItnE0=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/c3/7f8f58-d83c-440e-990b-b438b5b88cf2/1/x3FxpeRVBshskBa75bFLPbi8bMM.crl
rsync://rpki.ripe.net/repository/DEFAULT/c3/7f8f58-d83c-440e-990b-b438b5b88cf2/1/x3FxpeRVBshskBa75bFLPbi8bMM.mft
rsync://rpki.ripe.net/repository/DEFAULT/x3FxpeRVBshskBa75bFLPbi8bMM.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 18 Apr 2025 16:00:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:45:c4:dc:03:46:a6:1a:c4:2a:ff:37:fa:e8:6a:ca:9f
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=c77171a5e45506c86c9016bbe5b14b3db8bc6cc3
Validity
Not Before: Apr 17 22:00:51 2025 GMT
Not After : Apr 18 22:00:51 2025 GMT
Subject: CN=bba37b366a2aa4aa7dfceb21402f95ea7a70d047
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e5:d7:25:0b:8e:b3:f7:eb:09:f1:b7:22:92:90:
0e:f9:f4:f8:62:5b:28:cc:da:ea:fa:af:ca:61:36:
d5:3d:36:db:90:56:3a:5d:be:d0:b7:c4:ad:f3:1a:
ca:29:f9:aa:69:98:11:11:a9:0f:71:23:40:6b:3f:
e0:f0:6d:d2:cd:76:60:bf:9e:e1:e1:4e:1a:83:78:
6e:7e:c3:e4:ad:3c:69:7f:e3:5d:88:97:6a:22:83:
da:06:9a:d3:63:e6:2b:6c:85:35:ba:9e:13:b4:60:
a8:a9:8e:3d:aa:5f:d8:4a:d7:30:4d:59:fa:95:a8:
9b:d1:ca:25:62:7e:89:8c:c9:9e:1b:2c:bb:ff:5e:
55:0a:dd:d4:9c:62:80:be:1e:20:71:bc:3f:d0:4f:
fa:93:ae:50:69:9d:a8:7c:20:df:4a:0a:5a:59:13:
4b:4e:09:be:3d:bc:4a:1d:5f:1b:87:68:b7:19:33:
76:aa:54:e8:89:ee:54:ad:3d:ce:b1:f7:18:bb:19:
54:84:88:2e:cf:d5:bd:00:a9:ed:f0:b4:25:24:d0:
9c:ad:e8:df:35:da:0a:ea:c6:65:91:c5:91:fc:17:
5d:7e:52:cd:dd:f0:ef:0a:59:37:9e:74:84:0c:93:
72:5d:f4:2e:bb:19:93:c9:db:c4:f7:e5:6e:e0:05:
55:a7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
BB:A3:7B:36:6A:2A:A4:AA:7D:FC:EB:21:40:2F:95:EA:7A:70:D0:47
X509v3 Authority Key Identifier:
keyid:C7:71:71:A5:E4:55:06:C8:6C:90:16:BB:E5:B1:4B:3D:B8:BC:6C:C3
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/x3FxpeRVBshskBa75bFLPbi8bMM.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c3/7f8f58-d83c-440e-990b-b438b5b88cf2/1/x3FxpeRVBshskBa75bFLPbi8bMM.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/c3/7f8f58-d83c-440e-990b-b438b5b88cf2/1/x3FxpeRVBshskBa75bFLPbi8bMM.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
bb:0a:b8:98:b7:5d:30:b1:1b:e6:fa:c1:79:a2:d0:c4:de:c9:
39:0d:ef:79:46:a3:b9:40:17:c1:e2:44:82:20:5b:c1:71:ac:
ed:b3:10:7f:f0:22:23:fe:24:6f:2c:10:2d:d0:71:50:71:ef:
ec:8a:39:66:73:cb:0e:31:47:9c:65:d6:04:56:65:c2:55:1c:
56:01:3c:69:8a:1d:e0:79:a0:5f:22:aa:57:09:27:5d:7b:a2:
6b:d6:ad:34:5b:40:89:61:2d:c1:3d:af:f9:4c:56:ad:97:1f:
6c:c3:73:98:d4:83:f6:4e:7c:e0:e1:ba:59:3a:28:c7:23:c7:
9e:d9:7a:3c:95:58:48:59:61:56:65:13:9c:48:0b:21:99:81:
9c:99:f5:19:8d:ec:a8:c1:78:10:4e:d1:16:4b:f2:08:4e:79:
34:d1:b7:24:f3:7c:ab:87:18:01:72:47:a5:30:69:72:5f:4b:
ad:cf:30:de:96:9c:18:0a:d0:5e:97:39:e9:a2:36:4f:85:fd:
22:82:f6:0b:a5:90:6c:7f:72:41:d9:07:57:99:15:3c:32:64:
74:a2:96:79:da:b2:4c:86:6c:af:e0:8c:b5:de:0f:51:b8:b5:
a2:9d:34:99:a7:d2:6c:08:20:6e:0a:ea:8e:4c:f4:a0:88:4b:
c4:63:41:25
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 18 01:52:08 2025 by rpki-client