Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/a6/d3e9bd-446b-4116-8453-d467cc6e7d8f/1/B3oPuZ5Srk-h1m-q2T9C5tB4hqY.mft
File: B3oPuZ5Srk-h1m-q2T9C5tB4hqY.mft (raw, json)
Hash identifier: 7rR0Kmztfxs6luKaz76fiJ+YI5UJA36T8EmfNL11l+Y=
Subject key identifier: 99:68:AF:AE:08:15:D6:75:3B:28:D0:FC:85:E8:7B:17:F9:0B:93:E6
Authority key identifier: 07:7A:0F:B9:9E:52:AE:4F:A1:D6:6F:AA:D9:3F:42:E6:D0:78:86:A6
Certificate issuer: /CN=077a0fb99e52ae4fa1d66faad93f42e6d07886a6
Certificate serial: 0196BE5C87C03E091BCB673CDED009F62C9D
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/B3oPuZ5Srk-h1m-q2T9C5tB4hqY.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/a6/d3e9bd-446b-4116-8453-d467cc6e7d8f/1/B3oPuZ5Srk-h1m-q2T9C5tB4hqY.mft
Manifest number: 1330
Signing time: Sun 11 May 2025 08:00:56 +0000
Manifest this update: Sun 11 May 2025 08:00:56 +0000
Manifest next update: Mon 12 May 2025 08:00:56 +0000
Files and hashes: 1: B3oPuZ5Srk-h1m-q2T9C5tB4hqY.crl (hash: EUhjtiPihJWrr9Mp2y2vAfdimIARf1YavF1bdpmxGLI=)
2: RFIhLbL5apmrV9lcic2R569sFqE.roa (hash: eQDwgZT68cMBWjVX4YIww5uW6xuaB6mxhLhX47tqj9U=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/a6/d3e9bd-446b-4116-8453-d467cc6e7d8f/1/B3oPuZ5Srk-h1m-q2T9C5tB4hqY.crl
rsync://rpki.ripe.net/repository/DEFAULT/a6/d3e9bd-446b-4116-8453-d467cc6e7d8f/1/B3oPuZ5Srk-h1m-q2T9C5tB4hqY.mft
rsync://rpki.ripe.net/repository/DEFAULT/B3oPuZ5Srk-h1m-q2T9C5tB4hqY.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 12 May 2025 07:00:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:be:5c:87:c0:3e:09:1b:cb:67:3c:de:d0:09:f6:2c:9d
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=077a0fb99e52ae4fa1d66faad93f42e6d07886a6
Validity
Not Before: May 11 08:00:56 2025 GMT
Not After : May 12 08:00:56 2025 GMT
Subject: CN=9968afae0815d6753b28d0fc85e87b17f90b93e6
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a4:10:50:69:35:36:25:39:f4:44:a4:b1:90:ba:
75:4a:59:b4:25:f9:38:30:f4:f2:e5:65:f7:1e:09:
ff:5f:54:49:07:32:a8:e9:b9:c6:36:9b:5a:94:7d:
5a:a5:4b:b4:3e:16:50:e8:e6:c4:0b:63:16:fe:5f:
11:a7:7e:cd:08:7f:1d:e6:63:60:87:6c:f8:4e:06:
88:2e:a9:05:18:9e:73:36:7a:f0:8a:c5:b2:e8:e2:
0e:6f:9c:74:be:d2:7c:7f:4d:cd:e6:d3:b1:4f:94:
8f:18:36:db:b7:da:c7:c0:52:a9:23:3f:d4:0b:c8:
4c:2c:de:4e:b8:4c:92:62:fa:58:01:7c:3f:ea:e5:
8a:da:9d:4b:94:b1:c4:b1:36:96:76:30:53:de:e0:
70:31:8e:cb:8b:6a:99:0d:44:2e:d3:c1:9a:9a:62:
e6:87:1c:52:6b:48:2e:1c:7a:fe:70:cf:64:8b:2a:
2d:da:c6:11:dc:e2:ff:0a:d7:5f:3f:c4:a4:ab:74:
c9:b0:be:15:91:44:00:7f:66:59:17:77:11:63:d9:
1f:27:02:63:8a:87:15:b3:03:99:8e:c4:01:4d:17:
7a:86:a5:58:52:2f:37:83:7d:73:85:54:0c:4f:3b:
1f:27:64:96:9a:8d:f1:74:1a:d8:1b:8f:ae:1a:b7:
43:d1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
99:68:AF:AE:08:15:D6:75:3B:28:D0:FC:85:E8:7B:17:F9:0B:93:E6
X509v3 Authority Key Identifier:
keyid:07:7A:0F:B9:9E:52:AE:4F:A1:D6:6F:AA:D9:3F:42:E6:D0:78:86:A6
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/B3oPuZ5Srk-h1m-q2T9C5tB4hqY.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a6/d3e9bd-446b-4116-8453-d467cc6e7d8f/1/B3oPuZ5Srk-h1m-q2T9C5tB4hqY.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/a6/d3e9bd-446b-4116-8453-d467cc6e7d8f/1/B3oPuZ5Srk-h1m-q2T9C5tB4hqY.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
2a:cd:2c:af:e1:38:11:9c:6a:09:f1:f8:ee:e1:6b:53:e0:71:
3c:9c:99:9a:7b:52:83:80:78:a2:e8:45:f6:f6:17:3a:e2:37:
a6:20:49:a9:0d:2d:1e:79:89:5f:be:13:81:6b:0a:06:ec:2f:
33:d8:48:ac:1f:41:42:3c:9b:5e:cf:00:b5:ff:88:a2:c7:7d:
04:e0:99:9e:1d:87:5c:dc:a8:74:57:4f:0c:c3:8a:00:77:e3:
3a:7c:dc:94:4c:53:b1:f8:0d:41:27:f7:60:cf:d2:9b:a9:ad:
fa:5e:39:fc:66:79:56:02:59:79:4f:79:89:bc:d4:43:4e:c9:
a5:0c:10:8d:f0:12:28:39:cc:f6:2f:93:72:3f:74:81:9f:fb:
70:c1:fc:25:87:45:e6:19:86:4a:7f:26:96:1f:25:33:e2:3a:
d0:ae:d6:07:00:f6:a0:a2:3e:83:27:72:55:b1:86:a3:1f:94:
d4:fb:67:cf:7d:57:a3:ed:dd:22:26:96:80:36:38:d6:93:d4:
01:2f:4b:2e:ef:cf:36:2d:41:05:e0:12:b2:39:b2:a3:74:99:
fc:d9:36:68:27:55:8f:61:b9:68:f4:fd:c3:4d:9d:cb:f9:59:
06:45:cf:32:b0:0c:07:32:0a:35:14:31:d3:c4:21:49:98:6c:
5c:2e:ca:1b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun May 11 10:25:25 2025 by rpki-client