Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/05/b38fd7-9e68-426b-a100-1c0fd89dbcb4/1/t3MMgyIRjIHKhLqxt-CJCpyF6fc.mft
File: t3MMgyIRjIHKhLqxt-CJCpyF6fc.mft (raw, json)
Hash identifier: 1oaRz6RFxj5z7r93Evc4/9cgBhWdPnLwTkPo8MHW1IA=
Subject key identifier: 3D:DC:01:BF:56:8B:B6:EE:12:A6:59:49:3C:43:80:C3:6A:CA:23:ED
Authority key identifier: B7:73:0C:83:22:11:8C:81:CA:84:BA:B1:B7:E0:89:0A:9C:85:E9:F7
Certificate issuer: /CN=b7730c8322118c81ca84bab1b7e0890a9c85e9f7
Certificate serial: 01969F75C495B9B67CDA67E8CD8552607CE6
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/t3MMgyIRjIHKhLqxt-CJCpyF6fc.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/05/b38fd7-9e68-426b-a100-1c0fd89dbcb4/1/t3MMgyIRjIHKhLqxt-CJCpyF6fc.mft
Manifest number: 0427
Signing time: Mon 05 May 2025 08:00:17 +0000
Manifest this update: Mon 05 May 2025 08:00:17 +0000
Manifest next update: Tue 06 May 2025 08:00:17 +0000
Files and hashes: 1: CrtWfCL7i9NVihI1TfWhriARtZk.roa (hash: GvkPNrJjcp+5LqZSEnG2rMaRPFf5goGwB+oAHuiRPHA=)
2: t3MMgyIRjIHKhLqxt-CJCpyF6fc.crl (hash: aSPdKtjOmlZiSNT9Wj2sV+nGEuazHAFe1hW+AtPZ7kc=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/05/b38fd7-9e68-426b-a100-1c0fd89dbcb4/1/t3MMgyIRjIHKhLqxt-CJCpyF6fc.crl
rsync://rpki.ripe.net/repository/DEFAULT/05/b38fd7-9e68-426b-a100-1c0fd89dbcb4/1/t3MMgyIRjIHKhLqxt-CJCpyF6fc.mft
rsync://rpki.ripe.net/repository/DEFAULT/t3MMgyIRjIHKhLqxt-CJCpyF6fc.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 06 May 2025 08:00:17 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:9f:75:c4:95:b9:b6:7c:da:67:e8:cd:85:52:60:7c:e6
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=b7730c8322118c81ca84bab1b7e0890a9c85e9f7
Validity
Not Before: May 5 08:00:17 2025 GMT
Not After : May 6 08:00:17 2025 GMT
Subject: CN=3ddc01bf568bb6ee12a659493c4380c36aca23ed
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b3:9e:5b:71:30:70:4a:aa:ab:b2:70:96:c7:77:
51:b1:ff:21:05:5e:39:81:d2:64:65:51:1a:46:41:
53:a8:85:7a:15:72:c7:a4:31:17:9f:78:a7:c9:61:
48:7c:41:8c:66:2e:f1:38:1d:82:5b:39:48:2c:22:
6c:8e:cb:47:99:5c:3b:b1:11:bf:46:06:2e:06:79:
97:84:b9:2c:f2:aa:42:d1:a5:fa:e6:6b:62:66:e7:
a5:b9:75:20:c2:09:1b:c5:33:13:95:c4:05:20:ae:
85:83:a5:36:a5:4c:0e:80:bd:c5:9d:db:6f:d7:37:
ae:89:c3:18:9e:f2:f3:c4:f5:2e:d3:93:03:d5:ee:
7d:cb:74:6a:8a:cd:e4:f2:19:3a:50:3e:6f:85:33:
58:90:0d:88:ac:4e:fb:3e:ca:54:64:a8:de:cd:96:
a6:b3:b5:d1:52:6b:28:cf:4d:34:55:b3:b3:f7:a6:
e5:cc:e7:cb:19:76:ce:0e:d9:7c:dd:55:bc:c6:21:
76:c9:b2:db:94:a4:11:41:7e:1d:95:35:99:76:4e:
79:69:85:8c:a5:52:84:38:06:77:ec:0c:21:9c:af:
ac:3b:64:eb:0f:dc:9d:32:15:e3:ff:06:06:a5:e6:
e8:26:60:96:91:37:24:d3:5c:13:29:bb:ac:11:2c:
b5:71
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
3D:DC:01:BF:56:8B:B6:EE:12:A6:59:49:3C:43:80:C3:6A:CA:23:ED
X509v3 Authority Key Identifier:
keyid:B7:73:0C:83:22:11:8C:81:CA:84:BA:B1:B7:E0:89:0A:9C:85:E9:F7
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/t3MMgyIRjIHKhLqxt-CJCpyF6fc.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/05/b38fd7-9e68-426b-a100-1c0fd89dbcb4/1/t3MMgyIRjIHKhLqxt-CJCpyF6fc.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/05/b38fd7-9e68-426b-a100-1c0fd89dbcb4/1/t3MMgyIRjIHKhLqxt-CJCpyF6fc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
17:b5:ae:61:a0:b6:e2:91:24:e1:9e:ed:c4:a6:8b:aa:7f:0b:
7f:1b:ea:39:56:48:f7:29:69:ea:48:ca:b2:30:ca:e7:cf:e1:
2d:b7:0a:a2:e4:72:d8:3d:ef:c3:67:0c:43:e5:d6:74:e2:d3:
65:fc:d8:bc:03:06:99:87:ee:83:0a:56:63:ae:d7:07:a5:6e:
38:ba:60:fd:11:65:23:d0:b9:99:10:69:4c:1a:31:95:ca:e6:
79:78:da:92:be:54:4d:28:35:04:d9:8e:ca:62:e5:01:6e:24:
12:fd:df:a7:8d:a2:b5:b1:a0:08:4c:92:0b:66:48:0c:be:91:
18:97:67:54:a1:f1:53:38:d1:05:d6:03:97:b0:6f:00:5d:00:
04:7f:25:7c:a9:b9:c1:f4:c2:00:aa:db:e2:10:34:50:24:cf:
07:27:44:2a:6e:aa:1c:f9:2d:87:bc:05:3d:c1:32:be:57:2d:
7b:10:ce:57:26:f8:48:6b:3d:a0:1b:37:32:8f:28:62:7a:33:
f5:5c:81:ce:0b:9a:41:a1:4f:3b:83:1a:68:d5:3d:9d:eb:c6:
18:8a:d2:56:46:1b:88:1f:71:32:81:a3:50:e1:19:34:6f:e5:
02:5e:e5:3d:20:ec:92:53:ac:5d:ba:56:72:d9:fd:37:6f:83:
48:40:02:f1
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon May 5 17:21:46 2025 by rpki-client