Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/6d/ffc349-f326-4096-bcb3-c2c2acb908bc/1/BA3T08UtTG-lG3qDNXjO-zqyZkk.mft
File: BA3T08UtTG-lG3qDNXjO-zqyZkk.mft (raw, json)
Hash identifier: m4vd7mwIPGt19JHlaCVhv8fGiH1osppiUT6PVIDrUsw=
Subject key identifier: 28:C8:FD:C9:B3:27:7E:F5:3C:1D:33:12:5E:CE:85:0E:99:B6:57:95
Authority key identifier: 04:0D:D3:D3:C5:2D:4C:6F:A5:1B:7A:83:35:78:CE:FB:3A:B2:66:49
Certificate issuer: /CN=040dd3d3c52d4c6fa51b7a833578cefb3ab26649
Certificate serial: 0196AF572E2EA3B446674FA6D87E873C817F
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/BA3T08UtTG-lG3qDNXjO-zqyZkk.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/6d/ffc349-f326-4096-bcb3-c2c2acb908bc/1/BA3T08UtTG-lG3qDNXjO-zqyZkk.mft
Manifest number: 1530
Signing time: Thu 08 May 2025 10:00:48 +0000
Manifest this update: Thu 08 May 2025 10:00:48 +0000
Manifest next update: Fri 09 May 2025 10:00:48 +0000
Files and hashes: 1: BA3T08UtTG-lG3qDNXjO-zqyZkk.crl (hash: /gvMq1k2PLXMnX+QyKUz3eWjcrdPW3WWQosKjN4wQPY=)
2: CZQw40ubgHVu1Jof03ClaqRzNO0.roa (hash: ryau3A+d+gfpE7i1EIyrHi9oMGq0/6OLOcTA/JPeZzo=)
3: MR_mra2KXDxOhSmirjUVkdnLe2A.roa (hash: XKtS3itRVqfOpu81ikpDBZ+IyS8k+qng+AJNKrqJmHw=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/6d/ffc349-f326-4096-bcb3-c2c2acb908bc/1/BA3T08UtTG-lG3qDNXjO-zqyZkk.crl
rsync://rpki.ripe.net/repository/DEFAULT/6d/ffc349-f326-4096-bcb3-c2c2acb908bc/1/BA3T08UtTG-lG3qDNXjO-zqyZkk.mft
rsync://rpki.ripe.net/repository/DEFAULT/BA3T08UtTG-lG3qDNXjO-zqyZkk.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 09 May 2025 07:00:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:af:57:2e:2e:a3:b4:46:67:4f:a6:d8:7e:87:3c:81:7f
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=040dd3d3c52d4c6fa51b7a833578cefb3ab26649
Validity
Not Before: May 8 10:00:48 2025 GMT
Not After : May 9 10:00:48 2025 GMT
Subject: CN=28c8fdc9b3277ef53c1d33125ece850e99b65795
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c2:30:39:a0:99:eb:49:46:54:a7:19:2b:8c:a8:
1f:fa:17:4d:58:76:e0:eb:4f:4c:6d:18:10:65:c0:
e8:46:2e:93:8f:d6:c5:6c:bc:34:9c:19:8a:98:e2:
11:39:d4:6d:c8:19:1e:66:b8:58:b0:42:6e:33:12:
70:01:0f:72:92:03:9d:5e:d2:5c:1c:0e:f3:db:eb:
c6:3d:c7:53:e0:c0:23:3a:29:fe:af:b5:8c:e2:49:
ec:bf:6c:e9:e4:29:d4:c2:c2:e2:86:0b:f5:14:60:
70:71:9a:ed:7f:c1:e2:bf:94:a9:38:f6:9b:ee:09:
85:3d:06:9f:e9:01:d8:cb:b9:11:f5:17:f1:6a:8c:
f1:cf:49:e9:1e:ab:78:32:e5:c3:88:92:4c:fb:a0:
98:f9:4f:eb:1e:2d:99:90:5c:cc:b9:c6:0d:31:93:
47:a9:34:75:7e:21:df:7b:1d:ec:9d:e2:04:a3:b8:
a9:1d:23:05:3f:b8:16:23:4b:70:44:22:b2:7e:bd:
fe:cb:85:67:38:f5:ca:2d:01:6e:a3:c6:03:98:6c:
0b:fd:f3:69:54:70:e8:34:55:ac:d0:35:a8:a7:07:
5d:0c:39:a0:16:2c:e9:47:7d:21:a5:83:50:d1:1a:
05:d8:46:2a:21:4a:02:6c:e9:d9:1b:e5:ba:a6:c3:
d0:9f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
28:C8:FD:C9:B3:27:7E:F5:3C:1D:33:12:5E:CE:85:0E:99:B6:57:95
X509v3 Authority Key Identifier:
keyid:04:0D:D3:D3:C5:2D:4C:6F:A5:1B:7A:83:35:78:CE:FB:3A:B2:66:49
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/BA3T08UtTG-lG3qDNXjO-zqyZkk.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/6d/ffc349-f326-4096-bcb3-c2c2acb908bc/1/BA3T08UtTG-lG3qDNXjO-zqyZkk.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/6d/ffc349-f326-4096-bcb3-c2c2acb908bc/1/BA3T08UtTG-lG3qDNXjO-zqyZkk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
a5:18:72:21:11:63:9a:51:c5:f7:51:f6:e8:f4:f8:06:ad:03:
de:ee:10:6b:73:02:8c:1a:2a:0f:1f:90:85:ed:70:29:ef:0e:
ed:83:bc:08:fb:dd:e6:2f:6a:99:7e:60:f6:66:6c:41:4d:93:
fd:f5:d0:74:89:26:97:50:0d:c7:b9:59:c0:0e:bb:95:89:5a:
32:65:73:dc:d3:fe:95:3e:11:b2:23:8d:bb:e9:68:c4:d8:50:
f2:e1:15:ec:8a:46:e9:ae:20:94:ad:f3:31:d6:be:de:13:77:
3e:17:93:db:bc:b7:a2:9d:4a:ea:1f:59:ce:ed:68:f3:95:a1:
61:12:d0:b4:ea:df:61:df:f9:c7:a2:56:0c:7a:3f:a4:3d:a8:
30:88:0f:6b:a4:75:67:30:10:14:08:eb:f4:83:2d:1c:15:0f:
47:2a:fd:f0:50:f2:87:5b:84:8a:de:34:04:c8:2e:19:0d:e8:
0a:95:67:1e:30:a0:a8:8a:62:0b:b2:76:f1:97:16:41:31:cc:
7e:1b:15:49:5d:f1:67:c0:04:22:59:4d:95:15:cf:52:fa:9a:
1a:07:3c:19:8c:19:9b:35:03:ed:e5:54:02:f5:6f:ad:20:1e:
55:22:8f:34:e6:2a:73:00:a6:37:be:3f:1e:a7:41:f4:d5:9b:
ac:e1:5f:b9
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu May 8 15:44:12 2025 by rpki-client