Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/61/b97070-c5f4-4410-94b5-d64d75394037/1/x3cBNdDw0wqGjfVR2HUtS0utwsE.mft
File: x3cBNdDw0wqGjfVR2HUtS0utwsE.mft (raw, json)
Hash identifier: 5htQbqXxDgJqoNGjQdqGuSvtI1ZZYFLYwhqTgW6tyNE=
Subject key identifier: C9:76:8E:E8:35:5C:2F:0E:6B:59:47:B2:F1:0B:0B:6C:B0:42:13:5D
Authority key identifier: C7:77:01:35:D0:F0:D3:0A:86:8D:F5:51:D8:75:2D:4B:4B:AD:C2:C1
Certificate issuer: /CN=c7770135d0f0d30a868df551d8752d4b4badc2c1
Certificate serial: 0196B8232B6F5FB6187049A659970780A2C3
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/x3cBNdDw0wqGjfVR2HUtS0utwsE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/61/b97070-c5f4-4410-94b5-d64d75394037/1/x3cBNdDw0wqGjfVR2HUtS0utwsE.mft
Manifest number: 153B
Signing time: Sat 10 May 2025 03:00:34 +0000
Manifest this update: Sat 10 May 2025 03:00:34 +0000
Manifest next update: Sun 11 May 2025 03:00:34 +0000
Files and hashes: 1: Nt8U8Z3kL0IxgChONZlb9wxsuew.roa (hash: q3bR4XOi7x1iBnBhyEpixBllLru5p/ZAb3mokEcvE1o=)
2: Zzn898alwJ-ZQ7BYnOoh1f9BcU0.roa (hash: ZfOULEhZA5KSiQObf0XfCp/rLlK21I+b+ae43OnFfqk=)
3: x3cBNdDw0wqGjfVR2HUtS0utwsE.crl (hash: aDw37fKgDs65O7qbKay4ffocESTur24hRk5k4OdAwbQ=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/61/b97070-c5f4-4410-94b5-d64d75394037/1/x3cBNdDw0wqGjfVR2HUtS0utwsE.crl
rsync://rpki.ripe.net/repository/DEFAULT/61/b97070-c5f4-4410-94b5-d64d75394037/1/x3cBNdDw0wqGjfVR2HUtS0utwsE.mft
rsync://rpki.ripe.net/repository/DEFAULT/x3cBNdDw0wqGjfVR2HUtS0utwsE.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 10 May 2025 19:00:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:b8:23:2b:6f:5f:b6:18:70:49:a6:59:97:07:80:a2:c3
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=c7770135d0f0d30a868df551d8752d4b4badc2c1
Validity
Not Before: May 10 03:00:34 2025 GMT
Not After : May 11 03:00:34 2025 GMT
Subject: CN=c9768ee8355c2f0e6b5947b2f10b0b6cb042135d
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c0:96:d8:d3:37:cd:55:bb:72:0a:63:b4:2e:54:
f6:0f:13:c2:60:4b:66:5d:ef:36:96:2a:3b:79:6f:
bf:5e:8c:03:f1:fd:fd:9f:1f:fa:93:30:ea:23:d9:
fb:bf:1f:a5:4e:1f:5b:b8:9a:77:f6:d6:a4:07:12:
6d:51:b0:2c:82:4e:01:ef:ff:b2:39:4e:d3:b3:a3:
a0:55:9a:d6:3f:c9:fd:c7:8b:21:ee:80:10:79:ad:
8f:6e:f0:1a:27:41:0f:1f:be:51:48:ac:69:3a:0d:
15:f1:f6:3c:ca:77:8a:e6:bd:84:1f:e0:55:71:d9:
49:ae:5a:91:71:ee:0e:b2:86:23:bc:ad:dd:e3:1b:
67:14:fd:dd:16:7e:9d:62:01:5c:90:97:8e:7f:a4:
be:05:30:d4:c3:b1:fc:b1:6d:26:01:ef:87:2f:7c:
a9:31:5e:05:4c:d8:1b:6c:04:b1:d2:f4:cb:38:76:
cc:bf:15:1b:08:b5:d4:a6:8d:b8:8c:f3:66:a9:87:
65:f0:86:f2:29:84:bd:e1:12:1f:be:a1:27:fc:60:
2c:c1:b8:61:e1:78:79:17:57:50:d3:34:8f:db:76:
80:2b:1c:a5:aa:66:51:1a:d0:55:e6:96:e7:e3:e9:
43:83:bf:8c:9c:d0:ed:09:8a:ff:c4:8e:59:db:ec:
aa:51
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C9:76:8E:E8:35:5C:2F:0E:6B:59:47:B2:F1:0B:0B:6C:B0:42:13:5D
X509v3 Authority Key Identifier:
keyid:C7:77:01:35:D0:F0:D3:0A:86:8D:F5:51:D8:75:2D:4B:4B:AD:C2:C1
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/x3cBNdDw0wqGjfVR2HUtS0utwsE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/61/b97070-c5f4-4410-94b5-d64d75394037/1/x3cBNdDw0wqGjfVR2HUtS0utwsE.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/61/b97070-c5f4-4410-94b5-d64d75394037/1/x3cBNdDw0wqGjfVR2HUtS0utwsE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
ae:dd:f3:bb:97:ad:c9:3b:d3:8a:94:4c:12:63:e4:32:f4:cc:
5f:19:98:7d:34:5e:9c:0b:32:83:e9:93:fc:e0:4d:26:50:1e:
a1:b3:c3:4a:cb:4d:48:46:95:61:4a:f2:d5:03:19:e9:58:4a:
17:8f:de:ab:ee:71:78:2f:02:36:30:c1:9b:6d:ce:56:ea:e8:
b3:28:96:75:de:85:23:45:0e:0e:50:12:72:16:23:6d:4a:a1:
7e:cf:2f:00:97:7b:97:ae:76:c9:08:b1:b2:44:14:50:c5:22:
c4:95:e7:9f:eb:14:13:b7:ad:2b:95:53:9d:13:ac:bf:00:d5:
51:dd:8c:2e:2d:33:f9:23:3a:7e:f3:a6:7f:23:f4:fe:ab:e3:
22:97:94:5b:ea:ef:07:24:5f:7d:6d:a8:6b:9c:84:45:0b:3e:
6f:6c:50:98:1e:3b:54:27:aa:61:50:be:01:a0:37:4e:d4:38:
3d:a4:45:2a:6e:af:e0:b5:93:bb:bb:9a:da:a3:d0:96:aa:86:
a2:29:f5:8e:35:f4:fa:76:a5:c3:29:ad:1c:b2:6f:75:7e:32:
49:04:72:46:a7:a7:cc:87:36:d3:39:24:09:63:a5:9e:65:1c:
08:37:cc:92:27:93:26:4c:cc:e9:fc:d6:b7:64:67:1d:8b:53:
18:f1:e2:eb
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat May 10 04:57:06 2025 by rpki-client