Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c3/4bcb1b-ff41-48e0-8db8-6212ac49ca3b/1/3bcUcTc7sGA8NW7t7UuRgpK1vu4.mft
File: 3bcUcTc7sGA8NW7t7UuRgpK1vu4.mft (raw, json)
Hash identifier: XnKV/KJPS802YORXXuqimYUDcA5st68KhirWtfi5W/Y=
Subject key identifier: 96:DA:8A:DA:BF:24:1E:DD:1E:78:0B:FB:86:74:FF:BB:FF:B0:BC:BD
Authority key identifier: DD:B7:14:71:37:3B:B0:60:3C:35:6E:ED:ED:4B:91:82:92:B5:BE:EE
Certificate issuer: /CN=ddb71471373bb0603c356eeded4b918292b5beee
Certificate serial: 0196BD804CE92042DAC49D8F698D33CE10C3
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/3bcUcTc7sGA8NW7t7UuRgpK1vu4.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c3/4bcb1b-ff41-48e0-8db8-6212ac49ca3b/1/3bcUcTc7sGA8NW7t7UuRgpK1vu4.mft
Manifest number: 0BC8
Signing time: Sun 11 May 2025 04:00:24 +0000
Manifest this update: Sun 11 May 2025 04:00:24 +0000
Manifest next update: Mon 12 May 2025 04:00:24 +0000
Files and hashes: 1: 3bcUcTc7sGA8NW7t7UuRgpK1vu4.crl (hash: tJj+roHY01XK7phJZW2lREQLRUGB9kq7rqRlZ/S8tfI=)
2: 8miIDeBQxB0aKJY-TlsIuuJ2hww.roa (hash: mQmM8Cjnfx5WSvhPSj11m+hm6JvBiNUtIRExWbof9J8=)
3: IRGnT1eQmUBmgR6_xtusELr-83s.roa (hash: dJ3+bDwzY4UO43kbNXGDeFrUEwRtOB0R3J1TQjuxqCQ=)
4: aw3P8V17V992wZUulFnFkkVrMmo.roa (hash: O9AIELr13JUWTjKqPnJ8lbjYgl5+VRQqDU69j3HTMwo=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/c3/4bcb1b-ff41-48e0-8db8-6212ac49ca3b/1/3bcUcTc7sGA8NW7t7UuRgpK1vu4.crl
rsync://rpki.ripe.net/repository/DEFAULT/c3/4bcb1b-ff41-48e0-8db8-6212ac49ca3b/1/3bcUcTc7sGA8NW7t7UuRgpK1vu4.mft
rsync://rpki.ripe.net/repository/DEFAULT/3bcUcTc7sGA8NW7t7UuRgpK1vu4.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 12 May 2025 04:00:24 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:bd:80:4c:e9:20:42:da:c4:9d:8f:69:8d:33:ce:10:c3
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=ddb71471373bb0603c356eeded4b918292b5beee
Validity
Not Before: May 11 04:00:24 2025 GMT
Not After : May 12 04:00:24 2025 GMT
Subject: CN=96da8adabf241edd1e780bfb8674ffbbffb0bcbd
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e0:a9:0f:93:02:5e:ac:73:a7:f7:9f:a8:ec:09:
ae:f5:0a:67:ea:21:18:86:d1:79:17:58:2b:5f:7e:
db:3a:af:87:89:2a:9e:bc:20:d7:55:87:eb:0d:cc:
38:b5:1e:ce:7b:13:88:bf:f5:b9:25:45:ed:de:f6:
3a:58:56:06:1f:1f:ef:3d:6b:01:5d:ef:9d:6b:94:
bf:23:5b:0d:5b:87:8c:ec:14:e8:1a:63:1e:c9:3a:
b0:a6:37:ef:17:fd:e6:e5:79:e2:02:13:f3:1f:11:
d2:bd:0e:e7:8b:8a:65:6a:95:f9:a3:32:b4:63:4a:
f5:0e:46:4c:0d:0c:25:94:62:4a:cf:78:58:cb:4e:
45:57:25:1f:29:9d:93:6e:8a:88:d7:6c:97:54:3e:
c4:59:41:c2:8f:69:7c:0b:1b:fd:33:d0:eb:35:b6:
54:90:f2:05:3e:97:cc:57:81:0f:7f:3b:80:fa:17:
0b:56:f0:d1:96:de:62:38:fc:88:b8:24:ce:cb:23:
ec:5b:53:78:db:f8:aa:34:4a:d5:15:1b:70:04:82:
ce:0b:c7:c0:b4:41:42:1a:05:43:3a:26:df:17:ba:
28:cc:e8:03:dc:8d:8b:cd:55:1a:3e:30:64:8b:ee:
e9:4a:cc:40:4f:11:04:ea:aa:0f:0f:b6:6a:56:5f:
37:91
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
96:DA:8A:DA:BF:24:1E:DD:1E:78:0B:FB:86:74:FF:BB:FF:B0:BC:BD
X509v3 Authority Key Identifier:
keyid:DD:B7:14:71:37:3B:B0:60:3C:35:6E:ED:ED:4B:91:82:92:B5:BE:EE
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/3bcUcTc7sGA8NW7t7UuRgpK1vu4.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c3/4bcb1b-ff41-48e0-8db8-6212ac49ca3b/1/3bcUcTc7sGA8NW7t7UuRgpK1vu4.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/c3/4bcb1b-ff41-48e0-8db8-6212ac49ca3b/1/3bcUcTc7sGA8NW7t7UuRgpK1vu4.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
15:d3:6b:36:4b:21:da:33:e7:9d:76:5f:ef:a7:1c:15:59:ee:
2d:f6:81:db:1c:c2:8f:44:bf:c1:67:7c:24:87:bf:75:d9:33:
4a:a6:30:a5:b2:9b:bb:ac:db:e4:68:f4:9f:b9:85:f5:00:85:
b1:b4:fd:4e:ea:bc:5c:23:0f:07:19:e5:51:7a:4b:cf:49:50:
fc:21:7c:c3:d7:cf:aa:ce:cb:e5:f9:ae:3c:c9:9a:b7:6c:90:
79:aa:c8:a0:83:ea:78:dd:42:fc:34:fb:09:eb:b1:37:2c:e0:
cd:91:44:da:a0:dd:1e:3d:2e:80:78:c6:23:a8:10:3b:4a:93:
ed:28:1c:92:38:3c:23:dd:3d:11:14:17:ab:3f:5c:9c:3f:b0:
7c:5f:16:77:28:36:5e:f5:a0:f9:03:e9:e1:f1:76:7a:59:23:
0a:99:9c:df:16:68:3d:03:cb:0f:1b:5b:22:74:27:44:08:ec:
a6:1d:44:76:43:5d:47:97:92:af:4f:b6:82:d4:0e:ac:00:d1:
11:92:66:8c:3b:57:80:d5:b9:a5:6b:0f:71:5a:89:e4:ec:c1:
79:5b:55:3b:f7:6a:df:66:0e:9b:b2:ab:a7:98:2f:8d:15:26:
d9:82:85:44:12:51:cb:44:90:2b:2a:53:c1:a7:27:f0:84:2e:
99:44:45:5b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun May 11 10:40:06 2025 by rpki-client