Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/bc/bf8411-6960-4cef-91f9-13b6a6d71a41/1/p3Ml5JXLAVAgO3nyRvTNTA_sJP8.mft
File: p3Ml5JXLAVAgO3nyRvTNTA_sJP8.mft (raw, json)
Hash identifier: iVQoRA7R4DmN04ZqG32KWlt4wpz1pEMYcT+edOZ2shE=
Subject key identifier: 69:BE:23:3D:91:A7:01:BD:1A:08:00:3A:52:70:44:5A:88:83:98:F6
Authority key identifier: A7:73:25:E4:95:CB:01:50:20:3B:79:F2:46:F4:CD:4C:0F:EC:24:FF
Certificate issuer: /CN=a77325e495cb0150203b79f246f4cd4c0fec24ff
Certificate serial: 0196C013B46633E242BA9B423DCCC74DBCCF
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/p3Ml5JXLAVAgO3nyRvTNTA_sJP8.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/bc/bf8411-6960-4cef-91f9-13b6a6d71a41/1/p3Ml5JXLAVAgO3nyRvTNTA_sJP8.mft
Manifest number: 0BED
Signing time: Sun 11 May 2025 16:00:38 +0000
Manifest this update: Sun 11 May 2025 16:00:38 +0000
Manifest next update: Mon 12 May 2025 16:00:38 +0000
Files and hashes: 1: Z94Es0pJzdNNFG_pvtxbCrg0w94.roa (hash: uXR+OJPAQJAMUd3RxLmxlHyff75ZTmhyAoVDvTJyktM=)
2: p3Ml5JXLAVAgO3nyRvTNTA_sJP8.crl (hash: YYe7UtMdfn98ngYKQI8A57prMrSwX8ObKWtqQtbIPKo=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/bc/bf8411-6960-4cef-91f9-13b6a6d71a41/1/p3Ml5JXLAVAgO3nyRvTNTA_sJP8.crl
rsync://rpki.ripe.net/repository/DEFAULT/bc/bf8411-6960-4cef-91f9-13b6a6d71a41/1/p3Ml5JXLAVAgO3nyRvTNTA_sJP8.mft
rsync://rpki.ripe.net/repository/DEFAULT/p3Ml5JXLAVAgO3nyRvTNTA_sJP8.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 12 May 2025 16:00:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:c0:13:b4:66:33:e2:42:ba:9b:42:3d:cc:c7:4d:bc:cf
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=a77325e495cb0150203b79f246f4cd4c0fec24ff
Validity
Not Before: May 11 16:00:38 2025 GMT
Not After : May 12 16:00:38 2025 GMT
Subject: CN=69be233d91a701bd1a08003a5270445a888398f6
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c5:20:54:ea:61:df:ad:b9:15:44:46:59:3b:06:
32:51:77:9d:0c:15:a2:bb:4b:cd:8e:ed:3a:02:af:
30:fc:14:48:2f:b8:85:0d:62:6b:2c:b7:20:c5:ce:
65:a0:ee:c8:e1:e2:ec:a9:7e:8c:08:c8:64:23:06:
db:3f:bd:ba:a9:cb:ef:72:e0:42:bc:07:44:11:96:
38:91:de:cc:12:c5:18:80:70:bd:32:06:44:19:7d:
46:2a:70:0c:57:4d:88:45:f8:be:43:35:8d:b5:14:
f0:b0:5d:98:c3:72:82:a1:d9:e9:61:f0:46:b6:fd:
31:e7:57:66:2b:50:38:c7:b9:48:b5:2c:84:dc:0a:
c4:9e:74:b9:80:bb:3c:f6:2f:5d:25:2c:ee:90:af:
74:ee:f2:88:69:45:68:a1:d9:55:a9:c2:e8:66:cf:
8f:ae:7e:04:e9:63:ad:e6:a0:d7:0e:5b:dd:2e:22:
fa:83:90:00:47:07:14:eb:f9:25:16:39:1d:9f:f3:
8d:54:f2:2e:b4:bf:de:56:2d:78:29:64:33:5c:57:
33:dc:60:48:08:f9:7c:ea:16:ee:56:81:d3:06:cd:
3b:b8:cb:91:b0:af:dd:cf:7a:1d:e7:31:c1:59:90:
46:03:3a:c3:24:f1:32:7e:d2:cf:20:56:2a:1d:56:
88:c7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
69:BE:23:3D:91:A7:01:BD:1A:08:00:3A:52:70:44:5A:88:83:98:F6
X509v3 Authority Key Identifier:
keyid:A7:73:25:E4:95:CB:01:50:20:3B:79:F2:46:F4:CD:4C:0F:EC:24:FF
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/p3Ml5JXLAVAgO3nyRvTNTA_sJP8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/bc/bf8411-6960-4cef-91f9-13b6a6d71a41/1/p3Ml5JXLAVAgO3nyRvTNTA_sJP8.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/bc/bf8411-6960-4cef-91f9-13b6a6d71a41/1/p3Ml5JXLAVAgO3nyRvTNTA_sJP8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
28:fc:73:87:dc:cc:99:37:f9:b7:b3:59:43:33:d0:18:ae:14:
ce:4a:56:41:76:95:32:8d:57:0f:d0:e8:93:aa:94:83:79:61:
23:69:96:89:bf:d6:25:ba:84:36:30:a8:9a:9d:35:47:5f:05:
a6:6d:92:1a:9d:97:5a:49:57:b8:fe:4c:b8:8e:ba:f3:f5:cb:
31:90:00:27:fa:a1:eb:63:3b:09:29:98:a6:56:ec:86:74:92:
e3:b4:5c:1d:8b:60:90:74:d8:3a:ef:9b:02:da:57:4a:55:d1:
22:92:d0:61:f2:87:d4:8c:4f:93:52:a1:b5:90:ba:5a:79:74:
7e:f1:9c:bd:54:63:78:80:10:4f:b0:70:ad:93:28:9c:be:c4:
53:21:ec:f2:70:b1:60:06:b8:56:68:1a:10:2d:06:aa:9e:51:
0c:3c:56:77:6c:6b:c2:57:ce:b9:6e:5d:ff:dd:bb:5a:b1:06:
93:fa:a3:bb:8b:bc:49:de:ba:37:84:2c:59:fd:32:a7:29:cc:
b4:4b:37:df:94:01:7a:17:f9:18:df:46:ac:d6:c9:a2:43:7d:
e2:7b:6c:ca:35:4e:b9:e1:70:1f:11:ae:0c:fc:08:a8:5b:10:
98:d7:82:db:1b:1a:0d:1a:c6:df:3e:1a:fe:0f:de:be:ca:f6:
00:88:4a:0a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun May 11 22:37:39 2025 by rpki-client