Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/db/868a9c-fe25-4b59-a329-18401da43563/1/a3sSBFsa8JrPlmLuNbos1-HIW60.mft
File: a3sSBFsa8JrPlmLuNbos1-HIW60.mft (raw, json)
Hash identifier: HeX+39iaDaQvV7FxlWQounjgSIkT43hM5jFJFNWJJ2M=
Subject key identifier: FA:A2:2A:01:1E:16:8F:C5:53:83:F1:31:FE:94:2B:3A:C7:0C:6E:03
Authority key identifier: 6B:7B:12:04:5B:1A:F0:9A:CF:96:62:EE:35:BA:2C:D7:E1:C8:5B:AD
Certificate issuer: /CN=6b7b12045b1af09acf9662ee35ba2cd7e1c85bad
Certificate serial: 0196BB23DAE9FA1EA231F2818D4143E661F3
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/a3sSBFsa8JrPlmLuNbos1-HIW60.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/db/868a9c-fe25-4b59-a329-18401da43563/1/a3sSBFsa8JrPlmLuNbos1-HIW60.mft
Manifest number: 04DE
Signing time: Sat 10 May 2025 17:00:11 +0000
Manifest this update: Sat 10 May 2025 17:00:11 +0000
Manifest next update: Sun 11 May 2025 17:00:11 +0000
Files and hashes: 1: 6rvpyTq3GpToeI0SORQBn8auSqk.roa (hash: It3me0g3R8Ie8D4qrGq2UTC1Pz9Blt9bU50UXq7GwOE=)
2: a3sSBFsa8JrPlmLuNbos1-HIW60.crl (hash: ySiNGG+bF7PZQL4WDBbmSIS1/FKvvKrl5K9icfb42TQ=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/db/868a9c-fe25-4b59-a329-18401da43563/1/a3sSBFsa8JrPlmLuNbos1-HIW60.crl
rsync://rpki.ripe.net/repository/DEFAULT/db/868a9c-fe25-4b59-a329-18401da43563/1/a3sSBFsa8JrPlmLuNbos1-HIW60.mft
rsync://rpki.ripe.net/repository/DEFAULT/a3sSBFsa8JrPlmLuNbos1-HIW60.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 11 May 2025 13:00:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:bb:23:da:e9:fa:1e:a2:31:f2:81:8d:41:43:e6:61:f3
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=6b7b12045b1af09acf9662ee35ba2cd7e1c85bad
Validity
Not Before: May 10 17:00:11 2025 GMT
Not After : May 11 17:00:11 2025 GMT
Subject: CN=faa22a011e168fc55383f131fe942b3ac70c6e03
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b2:51:67:23:7a:f9:9d:e5:74:7d:95:85:b2:48:
22:3a:f9:7e:e0:3f:1f:cf:57:dc:26:4c:18:d3:54:
43:76:69:56:7e:c4:b7:42:a5:3e:0f:a1:c6:42:88:
d4:0f:83:b6:c5:f4:13:95:b0:ac:a7:9a:92:64:e5:
b4:fe:96:ff:3f:dc:9f:6a:f9:70:56:04:f6:46:84:
a6:1e:f6:d6:3c:1d:9e:88:b8:58:7f:7a:56:71:3b:
22:de:4f:4e:85:9a:1a:37:87:b1:fb:2f:7c:0c:6f:
95:67:c3:ee:23:44:60:eb:f3:a5:90:d9:c5:eb:90:
6e:07:5f:f3:d2:1d:a8:3c:18:7e:12:d2:ea:eb:5a:
e7:d1:20:9c:c7:cf:a9:1f:77:83:fa:ab:8d:4b:b4:
7d:ef:3b:01:7c:af:5c:dd:fd:f2:6f:01:7b:2e:a1:
a0:49:8b:aa:c1:97:2c:8f:ea:2e:dd:db:b7:b2:3e:
89:e0:ea:31:24:a3:fd:27:d4:27:02:42:6a:95:c2:
f4:c7:c1:c6:20:67:83:7a:d0:06:2d:60:0c:c2:2b:
46:84:39:37:ea:94:5d:08:e8:f0:33:d3:5e:2d:1e:
6e:f3:fb:4f:0c:84:8e:9b:80:f3:3d:49:77:92:f6:
5c:ca:b4:e6:86:af:70:3f:fb:86:e4:81:a4:dd:e9:
b8:df
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
FA:A2:2A:01:1E:16:8F:C5:53:83:F1:31:FE:94:2B:3A:C7:0C:6E:03
X509v3 Authority Key Identifier:
keyid:6B:7B:12:04:5B:1A:F0:9A:CF:96:62:EE:35:BA:2C:D7:E1:C8:5B:AD
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/a3sSBFsa8JrPlmLuNbos1-HIW60.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/db/868a9c-fe25-4b59-a329-18401da43563/1/a3sSBFsa8JrPlmLuNbos1-HIW60.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/db/868a9c-fe25-4b59-a329-18401da43563/1/a3sSBFsa8JrPlmLuNbos1-HIW60.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
a2:d7:0c:50:2b:2e:a3:ff:3a:85:83:36:dd:57:fb:e2:f3:13:
f1:93:40:cf:fc:35:c3:7e:41:a5:31:0d:ef:5b:f6:03:fd:86:
af:8d:8c:fb:0d:27:81:b4:fe:3a:23:03:37:15:2a:69:47:49:
91:8a:db:ef:86:d7:6c:b3:aa:d2:f5:d2:68:5c:60:e2:23:9a:
03:84:6d:31:24:b1:f5:e0:4b:3b:2a:a5:a4:ff:22:4e:e8:64:
59:4e:d9:51:ed:20:59:80:e4:ff:fd:59:78:ea:6c:d7:e2:16:
de:1f:a4:2f:a3:42:4a:c5:01:f6:2c:62:ee:7a:25:78:4c:9e:
b9:8e:1c:8a:14:b8:fa:22:51:d6:50:01:0b:81:f4:90:83:cc:
6f:ad:68:b8:b1:46:7c:b2:23:2e:ae:ca:f5:84:b1:0d:ee:24:
48:fc:fe:fb:df:b6:1d:b2:09:fa:5b:42:ac:f3:4b:38:5f:5f:
e0:63:17:10:81:f9:f0:97:ba:fc:fb:4d:af:d9:55:f3:94:ba:
6e:1a:f5:5d:e3:d8:3e:13:89:cf:90:f6:49:63:94:7a:1d:90:
97:4c:f5:80:55:a8:04:ad:5b:ef:fe:90:3d:f8:8a:a3:47:e9:
2a:5e:8c:79:1e:37:20:4c:32:f5:30:37:61:f8:b7:4b:61:bb:
53:7e:02:73
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat May 10 20:52:58 2025 by rpki-client