Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/df/99184f-1c80-47cd-a685-2dd650ea4ac3/1/3Bo6oM-N-pFn0k2S7YoW6054BEw.mft
File: 3Bo6oM-N-pFn0k2S7YoW6054BEw.mft (raw, json)
Hash identifier: VNLjzIWlDAjejpwl83TORcpuU5okp+25+PP24jx2k08=
Subject key identifier: 4B:FA:A1:51:6A:A6:B7:67:58:6E:3D:0D:88:06:B1:BB:36:2B:5C:78
Authority key identifier: DC:1A:3A:A0:CF:8D:FA:91:67:D2:4D:92:ED:8A:16:EB:4E:78:04:4C
Certificate issuer: /CN=dc1a3aa0cf8dfa9167d24d92ed8a16eb4e78044c
Certificate serial: 0196564A4DFC582590F76DF4368989828FA3
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/3Bo6oM-N-pFn0k2S7YoW6054BEw.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/df/99184f-1c80-47cd-a685-2dd650ea4ac3/1/3Bo6oM-N-pFn0k2S7YoW6054BEw.mft
Manifest number: 06D4
Signing time: Mon 21 Apr 2025 03:00:32 +0000
Manifest this update: Mon 21 Apr 2025 03:00:32 +0000
Manifest next update: Tue 22 Apr 2025 03:00:32 +0000
Files and hashes: 1: 3Bo6oM-N-pFn0k2S7YoW6054BEw.crl (hash: 3cdzaUYwh+eLd0INj1x3/f0j+mF4MM0Z0cChu6pRp+w=)
2: tmyLpJpJchhVaXtc4hY4-3-tLv0.roa (hash: ptDhwK/duydywl6VxB7EOOZhOpM1y3n5bCF72ET2KLE=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/df/99184f-1c80-47cd-a685-2dd650ea4ac3/1/3Bo6oM-N-pFn0k2S7YoW6054BEw.crl
rsync://rpki.ripe.net/repository/DEFAULT/df/99184f-1c80-47cd-a685-2dd650ea4ac3/1/3Bo6oM-N-pFn0k2S7YoW6054BEw.mft
rsync://rpki.ripe.net/repository/DEFAULT/3Bo6oM-N-pFn0k2S7YoW6054BEw.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 22 Apr 2025 01:00:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:56:4a:4d:fc:58:25:90:f7:6d:f4:36:89:89:82:8f:a3
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=dc1a3aa0cf8dfa9167d24d92ed8a16eb4e78044c
Validity
Not Before: Apr 21 03:00:32 2025 GMT
Not After : Apr 22 03:00:32 2025 GMT
Subject: CN=4bfaa1516aa6b767586e3d0d8806b1bb362b5c78
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b2:ff:f7:cd:2d:73:d1:cb:29:9b:64:c0:d9:22:
d9:a8:06:65:43:ea:62:46:b0:a5:cb:2e:33:7e:11:
11:a2:89:c3:15:5f:09:2b:2a:35:93:66:01:97:5b:
b2:fa:fe:ee:31:0a:35:cf:60:9b:b6:09:34:36:dc:
8f:82:6a:ad:99:56:40:ba:dd:11:de:72:c3:be:d5:
5e:dc:d0:be:51:07:62:49:fd:22:37:12:53:bd:17:
be:1f:37:7a:d4:8a:5d:54:84:3f:62:88:d1:80:b4:
29:7c:b6:31:d8:ae:c4:2b:6b:63:97:f9:ba:8d:ea:
d5:22:94:75:ea:dd:47:a7:0a:42:27:04:e9:2f:3a:
85:f5:65:3f:06:e5:d4:d0:ef:a2:49:e2:07:3b:91:
1b:06:1c:45:7e:6e:98:1e:1f:85:f3:95:4c:f6:cd:
ea:bc:19:1b:8e:d8:b0:1c:9a:31:ab:dd:08:01:65:
90:ef:a0:cf:c9:92:69:84:3c:6a:9b:b8:7d:bd:54:
03:42:16:9a:f3:18:0d:95:7b:f6:41:cf:94:dc:62:
76:cb:56:eb:53:79:0b:46:fe:f4:4a:49:6f:c3:4a:
62:fb:a4:e9:be:fc:84:b3:1a:fd:ee:7b:07:68:0f:
d0:26:2f:df:41:cd:e8:45:29:06:ef:27:05:b0:ee:
a5:8f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
4B:FA:A1:51:6A:A6:B7:67:58:6E:3D:0D:88:06:B1:BB:36:2B:5C:78
X509v3 Authority Key Identifier:
keyid:DC:1A:3A:A0:CF:8D:FA:91:67:D2:4D:92:ED:8A:16:EB:4E:78:04:4C
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/3Bo6oM-N-pFn0k2S7YoW6054BEw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/df/99184f-1c80-47cd-a685-2dd650ea4ac3/1/3Bo6oM-N-pFn0k2S7YoW6054BEw.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/df/99184f-1c80-47cd-a685-2dd650ea4ac3/1/3Bo6oM-N-pFn0k2S7YoW6054BEw.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
6c:20:2c:c8:73:17:95:f3:20:a9:d0:bd:d8:e8:9c:fd:f1:86:
ef:53:56:09:88:5a:ce:16:75:68:94:44:18:59:71:2c:5b:0d:
05:87:9c:41:57:21:36:a7:ef:65:36:2c:fd:f6:da:a6:69:cd:
27:0c:01:d1:32:d8:b3:11:f6:b9:fc:20:a5:a5:ff:7d:92:19:
77:05:b6:03:d7:54:f5:55:65:d1:e7:d4:6d:8e:1e:59:9c:13:
d6:0a:59:00:38:97:1b:32:cc:ef:2c:30:89:79:a7:71:60:97:
1d:ec:61:53:15:c7:76:33:40:13:99:37:51:69:fb:1e:ff:9b:
81:ff:8d:99:c4:0c:8f:7b:e3:dc:e2:a2:66:74:1e:57:5f:dd:
cf:0c:26:90:aa:fa:26:29:b8:f0:c4:a1:23:fc:df:94:8b:0a:
5b:d0:e1:ba:74:28:91:fa:1a:a0:0f:73:8e:f5:b0:c0:ab:ef:
ae:9b:60:81:ad:c5:08:3b:2e:fc:38:6d:59:12:4c:e1:65:77:
ec:54:14:cf:a3:b9:8a:eb:c8:be:c9:54:1e:aa:b2:e7:cf:98:
d6:ed:cd:58:13:a7:cf:b7:48:ed:c0:5d:45:ef:6a:1b:18:88:
b2:78:f5:5d:8c:e5:62:0d:6d:a4:70:d5:0a:3b:51:ce:e2:13:
b6:0b:39:94
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 21 05:36:35 2025 by rpki-client