Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d7/e4b3f6-040b-406e-b438-6ab8a879a17b/1/h3OqvdPia0S3mDfBRwq44XQV6o4.mft
File: h3OqvdPia0S3mDfBRwq44XQV6o4.mft (raw, json)
Hash identifier: IL7sGN6awnmxtxVmf6HCookgDHjLZmGx3BpSTj7+jQs=
Subject key identifier: BB:E0:D9:0B:5F:F6:7D:57:D2:7A:CD:9A:12:1F:22:F4:10:31:77:35
Authority key identifier: 87:73:AA:BD:D3:E2:6B:44:B7:98:37:C1:47:0A:B8:E1:74:15:EA:8E
Certificate issuer: /CN=8773aabdd3e26b44b79837c1470ab8e17415ea8e
Certificate serial: 0195797E521F633D007B85FDFC30CF74D230
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/h3OqvdPia0S3mDfBRwq44XQV6o4.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/d7/e4b3f6-040b-406e-b438-6ab8a879a17b/1/h3OqvdPia0S3mDfBRwq44XQV6o4.mft
Manifest number: 78
Signing time: Sun 09 Mar 2025 06:01:16 +0000
Manifest this update: Sun 09 Mar 2025 06:01:16 +0000
Manifest next update: Mon 10 Mar 2025 06:01:16 +0000
Files and hashes: 1: h3OqvdPia0S3mDfBRwq44XQV6o4.crl (hash: i7G7KkpHPWfewXYTy/MGyfODexBkyiGYIowFx3mwmFM=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/d7/e4b3f6-040b-406e-b438-6ab8a879a17b/1/h3OqvdPia0S3mDfBRwq44XQV6o4.crl
rsync://rpki.ripe.net/repository/DEFAULT/d7/e4b3f6-040b-406e-b438-6ab8a879a17b/1/h3OqvdPia0S3mDfBRwq44XQV6o4.mft
rsync://rpki.ripe.net/repository/DEFAULT/h3OqvdPia0S3mDfBRwq44XQV6o4.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 10 Mar 2025 06:00:19 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:95:79:7e:52:1f:63:3d:00:7b:85:fd:fc:30:cf:74:d2:30
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=8773aabdd3e26b44b79837c1470ab8e17415ea8e
Validity
Not Before: Mar 9 06:01:16 2025 GMT
Not After : Mar 10 06:01:16 2025 GMT
Subject: CN=bbe0d90b5ff67d57d27acd9a121f22f410317735
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b3:33:6b:de:db:04:1f:f7:ce:cb:6b:51:99:59:
99:fd:45:7c:29:41:a9:ae:ad:76:30:01:10:eb:69:
4c:e9:12:27:06:93:19:75:33:13:e4:d9:c0:34:b3:
31:d4:bb:63:6e:6a:dc:f7:51:ea:12:ba:15:16:40:
de:65:16:a1:41:19:ed:13:25:1b:26:81:4f:f2:7a:
1c:11:7c:b5:64:d2:1c:ea:db:be:f2:77:7e:84:97:
80:06:92:33:d6:0b:9c:78:f1:ac:ee:a8:c7:83:62:
ad:4d:69:3e:07:5e:97:98:74:ad:4f:44:b9:34:98:
01:e7:91:7b:61:f6:50:ba:8f:36:42:3d:bf:c4:eb:
63:9e:83:40:11:ed:89:b1:f8:42:f0:38:ba:8c:e1:
5f:08:a7:3c:46:8e:a9:43:ba:62:b2:2f:4a:84:57:
5c:87:28:6e:bd:80:64:69:ac:88:85:03:43:50:ed:
04:9f:0a:91:b3:b8:74:6a:b3:46:0e:9e:52:f5:d4:
57:22:de:ad:73:15:78:5f:4e:32:e7:2f:2e:ce:9c:
dd:cc:f5:4b:14:49:46:8d:54:83:b6:d4:df:a6:ec:
fe:43:bb:4d:63:32:f3:7b:5d:53:2c:8f:45:1f:87:
6f:61:58:51:5a:f5:b5:97:8f:ed:fe:94:d1:5e:5d:
18:23
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
BB:E0:D9:0B:5F:F6:7D:57:D2:7A:CD:9A:12:1F:22:F4:10:31:77:35
X509v3 Authority Key Identifier:
keyid:87:73:AA:BD:D3:E2:6B:44:B7:98:37:C1:47:0A:B8:E1:74:15:EA:8E
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/h3OqvdPia0S3mDfBRwq44XQV6o4.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d7/e4b3f6-040b-406e-b438-6ab8a879a17b/1/h3OqvdPia0S3mDfBRwq44XQV6o4.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/d7/e4b3f6-040b-406e-b438-6ab8a879a17b/1/h3OqvdPia0S3mDfBRwq44XQV6o4.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
55:91:aa:37:c0:32:cb:04:8f:68:70:c4:e0:cf:bc:7f:56:01:
07:4b:2d:fc:82:75:b6:45:25:9f:54:84:37:38:4d:27:d8:ef:
90:0a:08:5a:a7:9c:2f:9a:1f:0e:97:95:18:87:80:dd:a8:bf:
b7:dd:b9:a2:e2:29:0c:34:9c:2d:37:24:46:60:68:74:dc:b3:
be:10:b1:43:b3:02:97:0c:b1:56:e7:50:9b:53:91:c6:9c:de:
35:e6:bc:da:f9:cd:bf:04:fc:a1:3a:fb:b3:d0:24:ae:e5:98:
f8:5b:34:dd:f6:55:78:1d:06:2b:ad:97:27:5f:19:ec:bd:7c:
5c:0a:96:ed:bc:e3:97:b2:dd:7e:2a:06:26:13:a5:fc:a4:9f:
99:f7:8b:c3:f1:ec:00:8f:2e:a1:6e:77:cb:c9:04:34:a9:1c:
82:b5:9c:cf:56:a4:0c:c5:41:e8:e6:83:37:38:67:e7:2c:fb:
28:52:d3:fc:03:a2:ac:21:4d:33:5c:fa:a4:af:af:00:eb:37:
01:86:93:89:dd:41:2e:a3:ad:46:81:19:8e:84:a3:51:b5:1a:
e9:ef:54:63:ed:58:6e:3c:69:90:fe:22:4f:65:7a:ea:90:d8:
4d:69:ef:08:65:bb:6d:97:94:93:69:a6:fc:c2:ae:9c:bb:e4:
76:97:8c:fd
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Mar 9 10:09:29 2025 by rpki-client