Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c6/8b1deb-aea7-48d3-b1fd-ffb3a96538ad/1/x3p2OSVWEYoM7rVBMGacjmlvFVs.mft
File: x3p2OSVWEYoM7rVBMGacjmlvFVs.mft (raw, json)
Hash identifier: wyUjd/SY/1NoKdjixM770pMZkTbZH1HVwStm1ItTsac=
Subject key identifier: 29:BA:E3:55:46:C0:32:65:92:2A:76:14:32:44:46:8D:A5:F9:7F:71
Authority key identifier: C7:7A:76:39:25:56:11:8A:0C:EE:B5:41:30:66:9C:8E:69:6F:15:5B
Certificate issuer: /CN=c77a76392556118a0ceeb54130669c8e696f155b
Certificate serial: 01964DB4CAE4EBD6C1365E74C2CE3EFD9807
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/x3p2OSVWEYoM7rVBMGacjmlvFVs.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c6/8b1deb-aea7-48d3-b1fd-ffb3a96538ad/1/x3p2OSVWEYoM7rVBMGacjmlvFVs.mft
Manifest number: 14FB
Signing time: Sat 19 Apr 2025 11:00:16 +0000
Manifest this update: Sat 19 Apr 2025 11:00:16 +0000
Manifest next update: Sun 20 Apr 2025 11:00:16 +0000
Files and hashes: 1: Bt61Duabnrfk_tvUxqrlxq35pFs.roa (hash: 3mTb4E/hZOVdEv0TkUnMgMT0a7EJ9fK0ZGjFdNjhe4g=)
2: x3p2OSVWEYoM7rVBMGacjmlvFVs.crl (hash: R5Y5EMNWhVJ7kZcflsGoYDsGTIE8wP06KaatTHE2WY0=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/c6/8b1deb-aea7-48d3-b1fd-ffb3a96538ad/1/x3p2OSVWEYoM7rVBMGacjmlvFVs.crl
rsync://rpki.ripe.net/repository/DEFAULT/c6/8b1deb-aea7-48d3-b1fd-ffb3a96538ad/1/x3p2OSVWEYoM7rVBMGacjmlvFVs.mft
rsync://rpki.ripe.net/repository/DEFAULT/x3p2OSVWEYoM7rVBMGacjmlvFVs.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 20 Apr 2025 04:00:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:4d:b4:ca:e4:eb:d6:c1:36:5e:74:c2:ce:3e:fd:98:07
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=c77a76392556118a0ceeb54130669c8e696f155b
Validity
Not Before: Apr 19 11:00:16 2025 GMT
Not After : Apr 20 11:00:16 2025 GMT
Subject: CN=29bae35546c03265922a76143244468da5f97f71
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ce:2d:b3:4d:cc:19:95:e6:3c:16:f0:e5:cc:f4:
ce:58:00:66:b6:68:38:30:ee:9f:4c:d3:cb:dc:e2:
03:ab:8c:c7:7a:a4:cf:bc:22:95:8e:0c:d6:63:f3:
5f:04:f0:3c:62:96:ee:76:02:c9:52:37:7e:59:9c:
57:63:0a:62:db:0a:cc:57:36:c9:0c:4e:5b:d8:69:
98:92:a0:c7:64:b9:75:d0:c9:a1:2d:85:23:87:7c:
a2:b8:17:4b:89:0d:74:b0:37:81:b5:53:cd:ad:41:
40:0d:c0:f5:0a:e2:41:0b:70:91:7f:b1:52:39:9d:
30:03:58:20:a5:0d:35:4e:a5:13:6a:eb:48:98:4e:
43:56:31:3c:fa:13:72:32:a8:32:84:04:90:d7:74:
e2:65:a7:ee:22:b6:c1:f0:b5:51:a6:f5:91:70:a9:
ad:98:b2:d9:11:ec:43:81:84:52:06:40:6b:07:bb:
29:5c:74:04:a1:3f:66:dc:2d:99:ed:70:e2:75:fb:
49:5a:ef:bc:95:0d:49:7a:cd:66:d1:8b:39:e1:54:
a6:56:4e:60:70:a7:63:75:fa:1c:8c:86:38:d8:53:
51:83:43:b4:66:01:7b:1a:76:c8:46:b6:b5:76:6c:
4a:79:32:ad:86:78:5c:ab:1c:52:90:cd:a4:10:13:
f0:05
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
29:BA:E3:55:46:C0:32:65:92:2A:76:14:32:44:46:8D:A5:F9:7F:71
X509v3 Authority Key Identifier:
keyid:C7:7A:76:39:25:56:11:8A:0C:EE:B5:41:30:66:9C:8E:69:6F:15:5B
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/x3p2OSVWEYoM7rVBMGacjmlvFVs.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c6/8b1deb-aea7-48d3-b1fd-ffb3a96538ad/1/x3p2OSVWEYoM7rVBMGacjmlvFVs.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/c6/8b1deb-aea7-48d3-b1fd-ffb3a96538ad/1/x3p2OSVWEYoM7rVBMGacjmlvFVs.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
37:9b:ce:33:ad:40:76:ec:65:62:f5:c6:24:76:46:3b:6d:d1:
ae:a9:8b:1b:c2:de:88:19:92:3f:98:7e:e6:97:16:46:95:99:
4c:f3:f9:8d:fb:82:43:a5:94:58:77:39:11:f5:bc:08:af:fe:
63:0f:cf:83:7e:36:62:a4:86:be:0c:8c:16:56:e2:1f:e4:26:
b0:7b:72:d3:ab:11:08:12:eb:80:0e:78:e8:8e:ba:4b:e7:d1:
2f:36:66:4c:81:bd:c5:dd:c4:46:4c:76:f5:d4:17:94:51:2b:
d5:33:09:ec:81:fb:e6:58:40:cb:a4:76:b7:6c:09:bd:6b:c4:
09:e7:3e:e3:27:a5:e2:9f:0f:3a:8e:67:f0:92:43:01:46:39:
b0:ce:a2:9b:8d:da:5a:c4:3b:15:a2:04:bf:d1:77:e9:54:2b:
5f:41:8e:f6:bc:f1:14:c3:ac:be:cf:62:32:c6:9e:92:18:05:
31:ba:91:a7:cc:c2:b4:fd:61:5b:81:42:d3:c4:b4:be:a3:18:
6f:a5:48:74:67:e5:42:50:23:db:21:10:69:99:31:7f:8e:20:
ad:1f:4c:f8:3f:17:3e:6a:9a:5b:d5:fb:d1:4b:ce:c9:a6:e3:
13:f0:3a:01:bc:f8:c7:a6:4e:a1:d1:df:65:c2:66:83:7b:10:
87:3f:03:cb
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 19 14:03:51 2025 by rpki-client