Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/0c/6c3948-ca2a-40d1-8e17-ef518b4b463f/1/b3_OpPf8172B3VmBU91u5bEuR98.mft
File: b3_OpPf8172B3VmBU91u5bEuR98.mft (raw, json)
Hash identifier: dILeZnRf/fZWj7mg0ZrLSA2MmpcETYH+i7ZIQGmrW28=
Subject key identifier: A1:2A:67:DD:12:E4:EE:2E:49:D9:AF:EC:5C:F8:3B:BB:F0:A4:34:65
Authority key identifier: 6F:7F:CE:A4:F7:FC:D7:BD:81:DD:59:81:53:DD:6E:E5:B1:2E:47:DF
Certificate issuer: /CN=6f7fcea4f7fcd7bd81dd598153dd6ee5b12e47df
Certificate serial: 0196AF57088122A51150942F11BE99B73339
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/b3_OpPf8172B3VmBU91u5bEuR98.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/0c/6c3948-ca2a-40d1-8e17-ef518b4b463f/1/b3_OpPf8172B3VmBU91u5bEuR98.mft
Manifest number: 14BF
Signing time: Thu 08 May 2025 10:00:38 +0000
Manifest this update: Thu 08 May 2025 10:00:38 +0000
Manifest next update: Fri 09 May 2025 10:00:38 +0000
Files and hashes: 1: NVJ94OZbevHGEGJPauO8yOgu7g0.roa (hash: zV1VLUJ6QJt3I76otxCqQp6X0KRlaXT/XwLt7w+Duqc=)
2: b3_OpPf8172B3VmBU91u5bEuR98.crl (hash: oSisBB/1/Fe1rZxVXwl9vqNcP2OwkERLiK1AB0G6lhs=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/0c/6c3948-ca2a-40d1-8e17-ef518b4b463f/1/b3_OpPf8172B3VmBU91u5bEuR98.crl
rsync://rpki.ripe.net/repository/DEFAULT/0c/6c3948-ca2a-40d1-8e17-ef518b4b463f/1/b3_OpPf8172B3VmBU91u5bEuR98.mft
rsync://rpki.ripe.net/repository/DEFAULT/b3_OpPf8172B3VmBU91u5bEuR98.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 09 May 2025 10:00:38 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:af:57:08:81:22:a5:11:50:94:2f:11:be:99:b7:33:39
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=6f7fcea4f7fcd7bd81dd598153dd6ee5b12e47df
Validity
Not Before: May 8 10:00:38 2025 GMT
Not After : May 9 10:00:38 2025 GMT
Subject: CN=a12a67dd12e4ee2e49d9afec5cf83bbbf0a43465
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a4:f6:b4:39:c2:19:24:ba:df:12:59:05:c8:32:
ad:80:ad:b3:42:8c:82:03:23:7d:15:ed:8b:08:d9:
e0:ab:2d:81:59:c4:73:b3:71:2b:b0:87:76:2b:7d:
83:f9:1d:fc:9d:25:8e:b6:96:b8:aa:57:52:2a:13:
be:85:da:39:57:4a:70:22:fa:ed:47:b9:33:74:ce:
59:d7:23:12:c5:15:cc:29:c8:94:62:29:3c:77:2d:
61:15:92:78:83:df:60:41:5d:0d:00:97:b5:81:a7:
98:08:07:fb:69:0b:ac:94:e8:77:f2:37:37:0f:8f:
23:57:d7:ec:4c:f8:76:8d:9e:b1:dc:45:3f:b4:3c:
52:99:3d:a6:f4:e3:db:92:13:0f:9d:33:2d:6e:2e:
60:30:e5:0e:8e:55:9a:7b:5a:7f:e7:88:40:c8:52:
d1:2e:21:1b:3d:ab:a4:26:59:2f:9d:9a:34:ed:fc:
08:ae:d5:d4:ad:a1:43:d7:c9:04:45:e2:8a:0f:ec:
e5:50:a9:12:26:32:28:6d:4a:8b:9b:99:11:78:1f:
e0:b7:61:76:ce:0f:fb:62:93:d8:cd:2e:50:0b:ef:
99:93:80:d9:84:a2:27:01:c2:94:5d:00:95:48:6e:
29:31:1e:d8:c5:a1:0d:62:b6:6f:b2:3f:bd:d3:76:
76:05
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A1:2A:67:DD:12:E4:EE:2E:49:D9:AF:EC:5C:F8:3B:BB:F0:A4:34:65
X509v3 Authority Key Identifier:
keyid:6F:7F:CE:A4:F7:FC:D7:BD:81:DD:59:81:53:DD:6E:E5:B1:2E:47:DF
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/b3_OpPf8172B3VmBU91u5bEuR98.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/0c/6c3948-ca2a-40d1-8e17-ef518b4b463f/1/b3_OpPf8172B3VmBU91u5bEuR98.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/0c/6c3948-ca2a-40d1-8e17-ef518b4b463f/1/b3_OpPf8172B3VmBU91u5bEuR98.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
0d:62:ca:82:12:90:2c:4a:67:cb:c8:0d:c5:05:44:2c:94:c6:
c7:90:67:4a:9a:d0:4f:bc:fc:0a:d1:86:59:46:43:3d:94:21:
bc:93:86:56:9b:9c:c8:ce:de:23:b8:79:da:70:c0:52:59:8f:
47:47:8f:cd:ba:9d:99:e7:11:3b:06:c6:3e:e2:1d:36:65:43:
22:f0:c9:ac:24:11:0f:24:d6:00:d4:66:96:bc:49:1a:d6:89:
7e:10:c3:21:5f:27:77:61:c2:3f:0b:f3:d6:e7:8b:21:39:a4:
cb:0b:9b:d4:15:01:28:37:7f:b4:49:e1:0e:76:66:9a:e4:81:
c0:40:a7:4d:f8:38:64:c0:c6:c1:de:89:b7:fc:28:72:31:f4:
f2:c3:6e:e6:ca:96:b7:a6:a5:dc:aa:81:ff:f3:10:dc:fd:1d:
2d:76:32:a7:39:40:f0:6c:1f:9f:e2:3b:87:45:c5:c7:d8:be:
46:e2:91:fe:a6:ce:28:2d:f9:50:a1:41:15:38:64:ac:ff:d9:
de:c9:42:c3:f7:ca:a5:71:52:f5:ac:08:a8:3a:4c:fb:3c:80:
dc:9f:00:13:ea:9c:38:33:b7:86:4b:3c:86:70:a3:0f:6a:43:
31:eb:37:33:cb:ab:23:0c:1c:72:6e:43:36:32:25:5e:da:fa:
91:73:18:3e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu May 8 19:37:16 2025 by rpki-client