Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e0/29cb2e-4680-4a36-b0a5-985182001e92/1/Bn3PV3ZU3KF6YQua9PLKdCHcu4E.mft
File: Bn3PV3ZU3KF6YQua9PLKdCHcu4E.mft (raw, json)
Hash identifier: 4ssjNO3BaP75H9ivjFFle6+LZOOgAK1iTDZT950n8P4=
Subject key identifier: 7B:7D:AF:DD:A0:21:3A:57:F2:37:E4:FE:5F:5A:36:46:FE:02:32:F9
Authority key identifier: 06:7D:CF:57:76:54:DC:A1:7A:61:0B:9A:F4:F2:CA:74:21:DC:BB:81
Certificate issuer: /CN=067dcf577654dca17a610b9af4f2ca7421dcbb81
Certificate serial: 0196B935E4BC495AFF0A1C7A575A603F28BA
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Bn3PV3ZU3KF6YQua9PLKdCHcu4E.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/e0/29cb2e-4680-4a36-b0a5-985182001e92/1/Bn3PV3ZU3KF6YQua9PLKdCHcu4E.mft
Manifest number: 10C0
Signing time: Sat 10 May 2025 08:00:39 +0000
Manifest this update: Sat 10 May 2025 08:00:39 +0000
Manifest next update: Sun 11 May 2025 08:00:39 +0000
Files and hashes: 1: 1GqtXlpLHOQrMWA32pTa86lAWYQ.roa (hash: tnU3CSzBIjcvcUTrt2DgQBxjNJjtnLH3C2y91tIJFC8=)
2: Bn3PV3ZU3KF6YQua9PLKdCHcu4E.crl (hash: 8TGeT/7ZrqNAKdYobBdY7lxwxZrLF1byZtxXibPgz2E=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/e0/29cb2e-4680-4a36-b0a5-985182001e92/1/Bn3PV3ZU3KF6YQua9PLKdCHcu4E.crl
rsync://rpki.ripe.net/repository/DEFAULT/e0/29cb2e-4680-4a36-b0a5-985182001e92/1/Bn3PV3ZU3KF6YQua9PLKdCHcu4E.mft
rsync://rpki.ripe.net/repository/DEFAULT/Bn3PV3ZU3KF6YQua9PLKdCHcu4E.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 11 May 2025 04:00:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:b9:35:e4:bc:49:5a:ff:0a:1c:7a:57:5a:60:3f:28:ba
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=067dcf577654dca17a610b9af4f2ca7421dcbb81
Validity
Not Before: May 10 08:00:39 2025 GMT
Not After : May 11 08:00:39 2025 GMT
Subject: CN=7b7dafdda0213a57f237e4fe5f5a3646fe0232f9
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bf:09:8f:be:48:ad:28:ac:98:b4:26:f6:4a:a9:
4a:e7:c0:50:7f:20:3e:a9:a1:37:cc:ec:24:d2:45:
81:64:32:80:30:42:a7:2a:21:a6:c2:4d:f5:ef:db:
0c:c9:ff:cb:5d:61:80:80:a1:ac:03:76:ba:07:0e:
d0:77:a4:88:1b:4d:e9:0c:61:28:3b:32:61:d3:14:
54:c0:37:80:eb:4b:f5:f5:08:c4:ca:6f:c3:65:7c:
1e:89:db:c4:71:3f:76:22:1c:8c:e1:56:82:b9:8d:
1b:9d:28:66:65:99:42:17:a9:e0:14:30:71:68:cc:
42:0b:4b:5d:60:4e:5f:98:71:3f:c7:a8:29:af:af:
fd:60:f4:e2:c4:a0:a1:6e:f4:33:bd:6f:d2:a6:2b:
c1:2b:c9:28:c9:0e:9a:68:85:42:7b:47:62:2e:e8:
4f:d1:87:aa:65:f7:ae:01:a3:17:ae:90:57:cf:48:
61:1f:b8:2e:94:df:3a:d5:21:57:69:34:95:6e:c2:
18:ec:07:f4:ea:d0:d4:c4:4f:fa:ea:f4:70:e3:ac:
ca:03:c8:ad:5c:d4:57:a8:85:ff:e9:ee:80:b8:d8:
98:51:87:53:3f:d8:f6:0e:17:65:48:69:bd:8e:89:
39:15:db:51:33:98:43:2d:89:73:61:3e:93:f3:1e:
00:47
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
7B:7D:AF:DD:A0:21:3A:57:F2:37:E4:FE:5F:5A:36:46:FE:02:32:F9
X509v3 Authority Key Identifier:
keyid:06:7D:CF:57:76:54:DC:A1:7A:61:0B:9A:F4:F2:CA:74:21:DC:BB:81
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Bn3PV3ZU3KF6YQua9PLKdCHcu4E.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e0/29cb2e-4680-4a36-b0a5-985182001e92/1/Bn3PV3ZU3KF6YQua9PLKdCHcu4E.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/e0/29cb2e-4680-4a36-b0a5-985182001e92/1/Bn3PV3ZU3KF6YQua9PLKdCHcu4E.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
68:bc:b9:f8:aa:8e:36:59:4c:76:dd:fe:e4:c8:5a:7a:99:02:
ee:25:54:0e:bd:e1:8f:77:92:63:e8:b7:34:c9:e2:af:3b:85:
1b:4b:48:b8:2e:d7:ed:f8:5a:fa:b9:60:d2:2f:e9:2a:b5:51:
10:2e:66:e8:ff:0b:1e:d3:fb:3a:b3:92:36:cb:aa:43:c6:49:
0e:ef:a5:9e:03:e7:af:00:34:fa:db:05:e5:d7:4f:25:1b:17:
33:ae:35:57:1d:a0:db:3c:54:99:c3:a8:7d:66:52:0a:0a:fd:
4e:77:69:6c:4c:0f:97:25:b3:ba:4f:cf:2d:0c:d5:18:63:a3:
78:2b:1b:a1:b4:4b:24:77:fa:fe:f5:ab:e3:8f:21:c6:6b:d7:
dd:1f:f3:c4:90:5b:f5:04:7e:db:00:45:60:5e:29:b9:22:84:
af:df:3e:e2:ba:6b:fa:a7:e2:95:53:44:aa:af:a4:a5:38:ad:
ee:33:42:ff:ad:ce:46:01:2f:18:60:5e:44:72:02:7c:e9:6b:
a1:fb:a3:e2:e8:a1:5e:f6:18:46:8c:17:6d:c2:65:f4:4d:17:
93:e4:ff:34:56:17:3c:e1:c2:71:8a:1c:ba:6f:f2:bd:19:4c:
fe:52:d0:14:74:f1:32:32:53:78:6f:e6:c7:b0:5d:49:4d:82:
e5:9a:6c:1c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat May 10 10:11:48 2025 by rpki-client