Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b4/f8c018-b90f-4f89-a3f4-2ec871465599/1/BI3DuSPHc4-aWO6AtJvNDF59z_o.mft
File: BI3DuSPHc4-aWO6AtJvNDF59z_o.mft (raw, json)
Hash identifier: jUGcimhIYOYY+opSYng0rSPoKz+QHf7exEtwnbqFXmg=
Subject key identifier: 99:FF:8F:E5:52:03:D0:98:57:16:36:EA:17:62:2A:65:C1:FA:68:CF
Authority key identifier: 04:8D:C3:B9:23:C7:73:8F:9A:58:EE:80:B4:9B:CD:0C:5E:7D:CF:FA
Certificate issuer: /CN=048dc3b923c7738f9a58ee80b49bcd0c5e7dcffa
Certificate serial: 0196B8FF28AD5192BD201E489E0FDE1DDB7A
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/BI3DuSPHc4-aWO6AtJvNDF59z_o.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/b4/f8c018-b90f-4f89-a3f4-2ec871465599/1/BI3DuSPHc4-aWO6AtJvNDF59z_o.mft
Manifest number: 1533
Signing time: Sat 10 May 2025 07:00:51 +0000
Manifest this update: Sat 10 May 2025 07:00:51 +0000
Manifest next update: Sun 11 May 2025 07:00:51 +0000
Files and hashes: 1: BI3DuSPHc4-aWO6AtJvNDF59z_o.crl (hash: vjNBOGYxV3r4PCCO222+wCYo+iX/uLpHUUT5VN/ZO3w=)
2: PiTVhjB-2LglvZMIT8kTcFEKBGQ.roa (hash: V1xaGbhkRK3S/8QPJON1VnScgqsWPteHvVSSGwPJ+xA=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/b4/f8c018-b90f-4f89-a3f4-2ec871465599/1/BI3DuSPHc4-aWO6AtJvNDF59z_o.crl
rsync://rpki.ripe.net/repository/DEFAULT/b4/f8c018-b90f-4f89-a3f4-2ec871465599/1/BI3DuSPHc4-aWO6AtJvNDF59z_o.mft
rsync://rpki.ripe.net/repository/DEFAULT/BI3DuSPHc4-aWO6AtJvNDF59z_o.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 11 May 2025 07:00:51 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:b8:ff:28:ad:51:92:bd:20:1e:48:9e:0f:de:1d:db:7a
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=048dc3b923c7738f9a58ee80b49bcd0c5e7dcffa
Validity
Not Before: May 10 07:00:51 2025 GMT
Not After : May 11 07:00:51 2025 GMT
Subject: CN=99ff8fe55203d098571636ea17622a65c1fa68cf
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b0:b8:26:7e:76:d4:6c:68:3a:f8:76:6c:4a:a2:
4b:ce:19:6d:8b:66:30:91:28:07:3b:b2:18:74:c3:
96:10:6e:c8:9b:05:28:7a:d9:84:a7:58:92:4c:c7:
6a:7b:ec:15:0a:96:c7:f4:81:70:01:f8:f1:dd:5b:
e9:58:fc:81:bf:cf:8d:53:ab:0c:38:38:03:f2:04:
20:dc:aa:82:6f:73:e9:da:d3:9b:8a:ef:53:b0:a0:
aa:0e:41:a2:5e:3b:dc:4a:03:7f:77:e2:6f:cc:6f:
ea:35:f3:fc:6f:e6:f7:83:f2:02:a2:22:97:0b:ce:
24:7a:46:74:94:b2:47:88:08:3b:ec:f9:cd:e1:bf:
58:d3:3b:41:50:b3:09:12:7f:b3:46:2e:af:fd:9c:
24:c1:60:cf:24:fd:65:e9:6e:a9:2c:bf:96:3b:f2:
9c:92:0f:64:b0:82:bd:3e:0e:b0:c6:cd:7f:dd:74:
ea:64:35:e5:cd:ef:e9:8c:09:80:88:80:69:63:79:
70:82:42:6f:5c:20:92:61:c0:d4:2b:89:4d:53:2e:
d7:0c:b2:1e:3d:07:ee:62:26:f5:89:05:8c:74:29:
eb:61:1d:00:b9:a4:55:7a:f2:4b:17:7f:3c:e7:36:
cc:94:aa:95:c9:a6:4f:fe:52:02:ee:53:22:17:cc:
a8:f7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
99:FF:8F:E5:52:03:D0:98:57:16:36:EA:17:62:2A:65:C1:FA:68:CF
X509v3 Authority Key Identifier:
keyid:04:8D:C3:B9:23:C7:73:8F:9A:58:EE:80:B4:9B:CD:0C:5E:7D:CF:FA
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/BI3DuSPHc4-aWO6AtJvNDF59z_o.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b4/f8c018-b90f-4f89-a3f4-2ec871465599/1/BI3DuSPHc4-aWO6AtJvNDF59z_o.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/b4/f8c018-b90f-4f89-a3f4-2ec871465599/1/BI3DuSPHc4-aWO6AtJvNDF59z_o.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
8e:21:aa:14:a1:0a:2a:33:39:42:2b:7b:54:3e:f7:6b:d5:44:
bd:a4:29:af:3c:f3:3a:b9:05:69:a1:e8:10:d9:8b:4b:8c:22:
2c:dc:47:1f:4e:33:cf:06:82:8e:b7:6e:0b:37:72:90:4e:1b:
05:3b:fe:e4:21:cd:77:fd:44:6f:59:e6:27:29:f0:75:d2:71:
51:ab:b3:87:72:7b:c4:57:79:dd:a4:ec:14:51:13:93:fa:ab:
d4:20:c1:bd:0b:a3:c4:b2:32:1a:75:a6:ed:28:7f:0d:4f:40:
79:94:c9:e6:80:14:0e:e3:0e:f4:19:f1:69:2f:75:4d:81:1a:
e7:25:90:e5:41:46:ad:29:d6:2a:bc:08:71:cc:18:9b:ed:52:
65:a6:61:97:eb:e6:e4:f6:76:c2:11:44:ad:ec:17:68:b8:d2:
f7:ea:5f:5e:e0:d6:a0:c8:68:37:c6:ce:dd:4d:ba:fa:f9:4d:
1f:ed:d1:d1:57:8d:bd:8d:cf:64:96:b9:b7:b7:56:52:13:60:
dd:6b:72:13:58:20:f8:b8:6d:de:ba:19:13:67:d2:ae:59:c4:
88:f6:f5:7e:cf:fd:e6:a7:15:97:33:13:8e:35:84:ca:8f:51:
e8:b6:87:a6:a4:cc:62:55:a5:b7:01:12:d1:5b:72:12:a4:bc:
8a:70:05:c4
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat May 10 17:00:58 2025 by rpki-client