Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/0f/09af2b-64f7-4c1d-abd4-d07464b9b378/1/_BP3-iN_idARIzuscyjCIZun1iw.mft
File: _BP3-iN_idARIzuscyjCIZun1iw.mft (raw, json)
Hash identifier: Ih1icgKsFg7KxMDX9CEXsVUfe8r9DHeQAyn795Ljdyg=
Subject key identifier: 88:71:C5:81:A0:6C:86:7E:B8:BB:9B:55:30:0A:12:8D:56:AC:19:13
Authority key identifier: FC:13:F7:FA:23:7F:89:D0:11:23:3B:AC:73:28:C2:21:9B:A7:D6:2C
Certificate issuer: /CN=fc13f7fa237f89d011233bac7328c2219ba7d62c
Certificate serial: 0196BCA4A6ECDA801CF0AFAD29BB559B8B73
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/_BP3-iN_idARIzuscyjCIZun1iw.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/0f/09af2b-64f7-4c1d-abd4-d07464b9b378/1/_BP3-iN_idARIzuscyjCIZun1iw.mft
Manifest number: 153C
Signing time: Sun 11 May 2025 00:00:29 +0000
Manifest this update: Sun 11 May 2025 00:00:29 +0000
Manifest next update: Mon 12 May 2025 00:00:29 +0000
Files and hashes: 1: 4DlDfpniYRoqx5RnbBQ2QyX4S0s.roa (hash: 6W2AtaQBI78k64Wvc+o0EJDF11ZLR+JxMn3tTY6KLb4=)
2: GP2Q_Wo-_yK4eP2QDnc65CMZm9M.roa (hash: 0BR2eQuYyvuB8xq6ftmI/kAgu9noQmyJZpAp5YGagjg=)
3: _BP3-iN_idARIzuscyjCIZun1iw.crl (hash: DPPGMUMzCUfd4hgqPeDETENN0Tymo2BbJ5watQu3ku0=)
4: jrhngJH5WqcrHBQKWDaE0mXlivg.roa (hash: b0vzPK3TykyX3k8EOTeZC+7bd64uJKZrG9G6u+Jqaek=)
5: mBNBPvpQ0ZyKyklOFfh-zOZGjfY.roa (hash: /KSNQLTNa7loW014tE7eo3A+ZK7sfCtmbcB6pN7dyog=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/0f/09af2b-64f7-4c1d-abd4-d07464b9b378/1/_BP3-iN_idARIzuscyjCIZun1iw.crl
rsync://rpki.ripe.net/repository/DEFAULT/0f/09af2b-64f7-4c1d-abd4-d07464b9b378/1/_BP3-iN_idARIzuscyjCIZun1iw.mft
rsync://rpki.ripe.net/repository/DEFAULT/_BP3-iN_idARIzuscyjCIZun1iw.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 11 May 2025 22:00:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:bc:a4:a6:ec:da:80:1c:f0:af:ad:29:bb:55:9b:8b:73
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=fc13f7fa237f89d011233bac7328c2219ba7d62c
Validity
Not Before: May 11 00:00:29 2025 GMT
Not After : May 12 00:00:29 2025 GMT
Subject: CN=8871c581a06c867eb8bb9b55300a128d56ac1913
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c4:f5:3a:b6:df:3a:8c:18:de:9f:9b:7c:b7:b5:
b8:a1:30:f1:f0:d5:8e:86:9f:b7:79:ce:05:58:92:
a0:79:77:03:cc:08:8e:3e:99:31:41:c8:9b:e5:c9:
c1:d9:62:90:f9:6f:99:a0:38:95:86:49:2a:2c:44:
cb:ea:55:40:c4:0e:66:bc:95:aa:50:28:74:45:24:
a0:c2:65:be:fe:ae:aa:09:a8:cc:eb:f6:9f:f1:db:
b9:55:23:67:94:1c:1e:fa:9e:bb:c8:6d:6a:c7:09:
b4:5d:1c:c3:f6:ff:a0:ec:51:b7:03:cc:a4:f3:11:
0d:93:7c:52:1e:61:ec:22:2e:84:19:be:bf:e8:9a:
fc:6e:ac:b1:dc:80:7a:1b:07:a0:80:62:8b:87:fd:
5e:f6:71:77:5e:8a:64:6b:36:f7:50:ac:36:8d:a6:
a2:84:04:83:68:65:5c:cb:47:6a:9f:0a:00:7e:a6:
ad:9b:44:2f:e7:a2:45:67:9b:78:ab:c3:10:ee:46:
57:f2:3e:74:73:ee:50:41:68:eb:44:b0:13:47:88:
fc:73:13:6b:62:f8:70:fa:bd:49:78:55:11:f3:5a:
aa:91:fd:be:1c:c2:03:28:dd:a4:a7:cd:a9:61:fd:
b2:5b:7f:f8:20:a6:5e:b7:df:91:84:47:6f:93:aa:
bd:6f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
88:71:C5:81:A0:6C:86:7E:B8:BB:9B:55:30:0A:12:8D:56:AC:19:13
X509v3 Authority Key Identifier:
keyid:FC:13:F7:FA:23:7F:89:D0:11:23:3B:AC:73:28:C2:21:9B:A7:D6:2C
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/_BP3-iN_idARIzuscyjCIZun1iw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/0f/09af2b-64f7-4c1d-abd4-d07464b9b378/1/_BP3-iN_idARIzuscyjCIZun1iw.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/0f/09af2b-64f7-4c1d-abd4-d07464b9b378/1/_BP3-iN_idARIzuscyjCIZun1iw.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
77:9d:2c:43:74:05:4e:80:3c:b1:4f:9b:e7:98:f9:bb:f3:6e:
b0:ac:ec:f0:c8:6d:27:8e:68:46:c6:d6:fa:83:f3:2b:23:9a:
b0:da:1d:6e:f3:57:b5:7f:31:89:f1:92:0d:18:c4:17:f3:f9:
74:cb:8d:4e:62:b1:37:dc:cb:fd:78:78:96:cc:6e:44:12:19:
1d:7c:e5:34:5f:a9:74:5c:21:61:7d:37:7a:b6:87:6f:62:83:
1d:d2:98:d1:fa:dc:b6:ed:42:9f:a6:90:9a:9f:54:09:56:d5:
88:90:53:ec:1e:cc:dd:05:fa:79:18:35:6b:ae:8f:da:e4:10:
bd:0a:89:6d:11:89:a8:6b:e1:a0:cc:06:20:28:e2:2b:3e:db:
0e:0b:34:a2:ca:4a:80:da:f9:7a:65:7e:39:fc:c3:ab:53:c0:
cb:28:10:e9:e7:9f:91:89:a5:91:59:a6:b6:bd:18:80:3b:6d:
a4:73:2d:89:cc:79:7b:06:12:62:8f:c8:68:4c:e7:70:6f:6b:
4b:9a:b1:4b:38:04:07:7e:0e:9a:17:ca:38:10:58:ff:a9:5a:
34:7a:c7:e6:4d:89:75:1b:a6:2e:c1:e5:03:94:b6:a5:24:a0:
fb:c8:3d:01:24:72:94:61:c1:2d:90:24:27:c3:b8:c5:b1:4e:
84:f2:5d:83
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun May 11 04:07:23 2025 by rpki-client