Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/dc/24d79d-1766-4045-9d24-6a0baeb2336e/1/b3c-s9MHlNItdc2HK5GjuoSIQtc.mft
File: b3c-s9MHlNItdc2HK5GjuoSIQtc.mft (raw, json)
Hash identifier: RNNnaiIIPcDtfwh1JCyXzOHeCT314HPGN1SsXUFm+9M=
Subject key identifier: C8:D8:37:4A:A4:C5:33:9B:F0:9B:2E:2B:49:0F:5D:A4:60:94:B1:E1
Authority key identifier: 6F:77:3E:B3:D3:07:94:D2:2D:75:CD:87:2B:91:A3:BA:84:88:42:D7
Certificate issuer: /CN=6f773eb3d30794d22d75cd872b91a3ba848842d7
Certificate serial: 0196BD80179F2C3E4894EB20CAD92D580D31
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/b3c-s9MHlNItdc2HK5GjuoSIQtc.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/dc/24d79d-1766-4045-9d24-6a0baeb2336e/1/b3c-s9MHlNItdc2HK5GjuoSIQtc.mft
Manifest number: 126B
Signing time: Sun 11 May 2025 04:00:10 +0000
Manifest this update: Sun 11 May 2025 04:00:10 +0000
Manifest next update: Mon 12 May 2025 04:00:10 +0000
Files and hashes: 1: b3c-s9MHlNItdc2HK5GjuoSIQtc.crl (hash: iSGA2X/bxdVjxUSaXjl7oVNuS55TPQ6+YGaaR/S/knI=)
2: wCDrJf6K3N6SQxouZVxxkGAndwU.roa (hash: RDCOaghInO75GT81gEgSeMeIYDUyZ4Fou/t1PYJdixY=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/dc/24d79d-1766-4045-9d24-6a0baeb2336e/1/b3c-s9MHlNItdc2HK5GjuoSIQtc.crl
rsync://rpki.ripe.net/repository/DEFAULT/dc/24d79d-1766-4045-9d24-6a0baeb2336e/1/b3c-s9MHlNItdc2HK5GjuoSIQtc.mft
rsync://rpki.ripe.net/repository/DEFAULT/b3c-s9MHlNItdc2HK5GjuoSIQtc.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 12 May 2025 04:00:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:bd:80:17:9f:2c:3e:48:94:eb:20:ca:d9:2d:58:0d:31
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=6f773eb3d30794d22d75cd872b91a3ba848842d7
Validity
Not Before: May 11 04:00:10 2025 GMT
Not After : May 12 04:00:10 2025 GMT
Subject: CN=c8d8374aa4c5339bf09b2e2b490f5da46094b1e1
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:85:1d:50:b1:c4:d0:62:8f:54:49:44:63:74:67:
b2:a1:4e:bb:4e:c8:ec:17:78:b1:88:69:55:d1:23:
9d:5d:b8:b2:2c:c3:9e:a3:fe:c4:35:7a:6f:55:d8:
eb:f1:9f:63:76:e0:0f:62:1c:42:a4:2c:10:25:c0:
fe:c8:a5:3b:93:68:c8:1e:69:01:33:49:38:36:26:
03:3f:5c:c2:e9:bf:86:4d:28:9d:75:f1:54:f0:82:
bb:eb:01:67:5c:63:00:d9:db:c8:0b:29:29:71:73:
77:a2:65:74:48:ac:74:dc:2f:b2:38:81:d6:5f:88:
a9:be:6b:5c:2b:bd:96:ab:e8:f7:cc:1e:a4:f3:1b:
c7:8f:e3:ad:d1:61:97:f5:ec:50:22:ab:86:fd:1e:
20:1a:c7:89:9c:0e:18:7e:25:f0:93:4a:c1:4e:8e:
b9:1b:c9:ad:b1:57:ce:93:7b:9b:24:1c:5a:00:1b:
42:54:fc:82:dd:87:4b:65:90:a8:d8:ce:05:7f:48:
64:1f:55:fe:95:5e:7a:3d:8f:b3:8e:12:84:8e:0c:
b7:53:8b:1c:ad:7b:c5:2c:b1:53:b2:26:f1:91:b7:
63:45:5f:ca:8d:9f:53:2d:d8:50:b4:e9:9a:39:af:
7d:f0:89:f2:d3:8d:48:86:1f:96:6c:e3:22:76:b3:
f8:1d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C8:D8:37:4A:A4:C5:33:9B:F0:9B:2E:2B:49:0F:5D:A4:60:94:B1:E1
X509v3 Authority Key Identifier:
keyid:6F:77:3E:B3:D3:07:94:D2:2D:75:CD:87:2B:91:A3:BA:84:88:42:D7
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/b3c-s9MHlNItdc2HK5GjuoSIQtc.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/dc/24d79d-1766-4045-9d24-6a0baeb2336e/1/b3c-s9MHlNItdc2HK5GjuoSIQtc.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/dc/24d79d-1766-4045-9d24-6a0baeb2336e/1/b3c-s9MHlNItdc2HK5GjuoSIQtc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
7d:42:b9:c8:48:4f:a1:0e:07:a2:4f:f5:8a:0a:d1:c6:37:9e:
37:97:68:19:24:1d:a9:95:a1:b0:da:77:61:34:0b:9a:0d:89:
13:72:5f:ca:7c:28:19:f6:4f:6f:fc:89:45:c9:a7:e8:58:bb:
b8:20:96:38:d8:21:ea:11:3a:bf:ee:2c:e0:bc:98:ac:74:9c:
d4:70:4b:0b:8b:db:4a:d7:2b:3f:50:58:1b:64:88:cd:9c:43:
56:0a:63:0e:32:d7:18:5b:38:65:87:40:95:7a:d1:6d:75:fc:
40:3b:c4:8e:4e:da:a5:00:a4:c7:de:ae:d0:76:cc:47:c5:94:
f5:95:ec:d1:a0:38:58:d8:15:22:d7:f7:8d:61:d0:1b:95:9d:
3a:66:49:40:64:76:71:d6:b6:68:e6:91:fc:0a:92:97:7c:ee:
20:15:0d:cf:b4:99:44:86:ed:08:e5:21:4a:9e:ee:9b:ee:39:
91:b5:73:21:05:30:c8:31:79:5d:dd:48:bc:58:fc:e9:6b:cb:
0d:8d:e1:bf:83:fa:61:90:4c:29:09:16:e6:c5:f2:73:33:50:
0c:7e:86:b5:c9:0d:33:45:d6:3a:2e:ad:01:db:89:cb:d7:0c:
44:9b:f9:9d:b0:02:a2:65:04:f0:0b:62:16:40:33:3b:85:46:
72:4a:67:61
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun May 11 11:40:05 2025 by rpki-client