Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f8/3493f6-9636-4fa3-be56-db8030879f51/1/v3rjZp-Ef6J6abFLuH-Me_15nuA.mft
File: v3rjZp-Ef6J6abFLuH-Me_15nuA.mft (raw, json)
Hash identifier: gLdjouyFM6JiHAHm10U7xkSTcieN+ozVaA5kzJvVA6s=
Subject key identifier: 85:6D:06:C2:C7:07:40:17:9E:5A:A5:0F:E0:56:D1:16:22:39:F0:5E
Authority key identifier: BF:7A:E3:66:9F:84:7F:A2:7A:69:B1:4B:B8:7F:8C:7B:FD:79:9E:E0
Certificate issuer: /CN=bf7ae3669f847fa27a69b14bb87f8c7bfd799ee0
Certificate serial: 01958C9747B09F8285AAA1BD2D2AF6FE20D0
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/v3rjZp-Ef6J6abFLuH-Me_15nuA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/f8/3493f6-9636-4fa3-be56-db8030879f51/1/v3rjZp-Ef6J6abFLuH-Me_15nuA.mft
Manifest number: 0C0B
Signing time: Wed 12 Mar 2025 23:01:19 +0000
Manifest this update: Wed 12 Mar 2025 23:01:19 +0000
Manifest next update: Thu 13 Mar 2025 23:01:19 +0000
Files and hashes: 1: Z6k4PVUyfZNvtBW6nB5nR2R0amg.roa (hash: gFgurKpY3RWD/+pqzWGTie0De0tX7ossY01q+RXg6WE=)
2: v3rjZp-Ef6J6abFLuH-Me_15nuA.crl (hash: VFrKKQWSLZuF6gOWsEueig1x3m6PC4EG10M3hBCnoVU=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/f8/3493f6-9636-4fa3-be56-db8030879f51/1/v3rjZp-Ef6J6abFLuH-Me_15nuA.crl
rsync://rpki.ripe.net/repository/DEFAULT/f8/3493f6-9636-4fa3-be56-db8030879f51/1/v3rjZp-Ef6J6abFLuH-Me_15nuA.mft
rsync://rpki.ripe.net/repository/DEFAULT/v3rjZp-Ef6J6abFLuH-Me_15nuA.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 13 Mar 2025 19:14:49 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:95:8c:97:47:b0:9f:82:85:aa:a1:bd:2d:2a:f6:fe:20:d0
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=bf7ae3669f847fa27a69b14bb87f8c7bfd799ee0
Validity
Not Before: Mar 12 23:01:19 2025 GMT
Not After : Mar 13 23:01:19 2025 GMT
Subject: CN=856d06c2c70740179e5aa50fe056d1162239f05e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e6:8c:d5:cf:0a:13:b4:55:f0:84:1f:56:f8:36:
13:4a:b9:71:c8:74:84:3b:40:05:da:48:91:16:6d:
0a:7e:2c:d4:92:58:8f:aa:9a:e4:d5:6d:16:c7:d0:
33:6f:61:27:55:23:af:87:59:ed:45:87:50:34:e0:
10:85:3d:57:be:f7:c0:d1:87:3b:a1:47:75:58:18:
81:9c:06:2e:d5:cc:be:73:5f:88:f2:97:ae:e3:c4:
a8:e1:1c:82:a2:16:17:41:89:73:f7:6f:06:25:3a:
44:95:78:e1:9b:20:9d:76:59:93:10:88:ee:c3:da:
ba:94:0a:82:51:15:f2:aa:de:eb:07:bd:28:62:e0:
af:d3:0c:e5:6b:ac:6a:96:83:4e:3e:bf:62:8d:31:
a3:c4:93:38:17:d8:b8:d2:e1:9e:2d:08:b9:2d:56:
8c:03:ac:c0:32:01:b0:cf:50:c0:58:ae:0f:92:3a:
ea:1f:9d:df:5a:81:76:81:4d:20:69:04:83:0b:fb:
5f:fa:e7:9c:e8:d2:75:77:a7:81:7d:77:6e:0f:55:
2e:59:50:eb:3b:b0:7d:90:90:8e:6f:99:3d:2b:f0:
47:52:81:fd:14:b2:4f:02:7d:6a:26:13:30:0f:90:
ae:76:b3:ac:a6:d5:16:4c:2e:85:4c:f2:22:3b:cf:
f4:dd
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
85:6D:06:C2:C7:07:40:17:9E:5A:A5:0F:E0:56:D1:16:22:39:F0:5E
X509v3 Authority Key Identifier:
keyid:BF:7A:E3:66:9F:84:7F:A2:7A:69:B1:4B:B8:7F:8C:7B:FD:79:9E:E0
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/v3rjZp-Ef6J6abFLuH-Me_15nuA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f8/3493f6-9636-4fa3-be56-db8030879f51/1/v3rjZp-Ef6J6abFLuH-Me_15nuA.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/f8/3493f6-9636-4fa3-be56-db8030879f51/1/v3rjZp-Ef6J6abFLuH-Me_15nuA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
39:f2:57:2d:3d:80:a3:f0:e8:83:ad:b0:a6:1c:4f:52:5a:a1:
57:f9:b7:d4:b0:a7:fe:fe:74:7c:bc:59:37:3c:1e:ab:d3:06:
8a:f8:33:37:39:1a:72:b8:e9:69:5c:c3:86:7a:42:14:06:12:
59:e4:2f:ea:5f:dd:0e:c3:de:20:b3:c9:1b:79:86:21:69:27:
0a:a6:6d:67:d8:b9:ce:42:2e:af:b9:b1:be:f4:19:60:17:6d:
f0:94:53:85:f9:e2:f8:f4:57:d2:39:fc:1d:74:99:40:2f:78:
36:81:74:60:2d:ba:45:0f:ee:bb:81:3c:13:23:bb:39:4e:4a:
25:a9:fd:44:88:1d:0c:b9:62:1c:28:ce:01:93:9e:4b:bd:a2:
46:5e:dd:d5:d0:d3:65:9d:8b:66:8d:4d:13:16:e9:fd:2f:7c:
fa:2d:d5:c3:c0:6f:4e:97:a3:63:99:94:8c:84:f1:6d:9f:3f:
11:72:bd:59:9a:51:08:f0:a0:69:cc:a9:f9:16:4c:02:15:47:
0c:aa:a4:88:08:7b:c4:3a:c4:3c:d3:a2:72:27:5c:15:a1:9c:
66:9e:35:07:77:3f:39:57:1d:ff:9e:97:19:ec:45:d9:36:7a:
fc:14:91:a7:7d:07:8b:22:7d:c1:f9:16:c2:35:13:66:c7:fb:
9f:10:1c:43
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 13 02:31:23 2025 by rpki-client