Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ef/e3fd0b-9f4a-4452-92af-be151839f366/1/B3lG8EdCxmJ5rNMiAJvhXj1Yilo.mft
File: B3lG8EdCxmJ5rNMiAJvhXj1Yilo.mft (raw, json)
Hash identifier: YkXQCPw85qNx57Bvcfhpq2eSrUFvi10sh9iYTmXcOxU=
Subject key identifier: 19:BD:E5:06:95:00:F6:B0:84:11:A4:C1:E1:F1:65:79:3B:CE:21:EB
Authority key identifier: 07:79:46:F0:47:42:C6:62:79:AC:D3:22:00:9B:E1:5E:3D:58:8A:5A
Certificate issuer: /CN=077946f04742c66279acd322009be15e3d588a5a
Certificate serial: 0196C61588D4EB023A85CB9196C52A72C60A
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/B3lG8EdCxmJ5rNMiAJvhXj1Yilo.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ef/e3fd0b-9f4a-4452-92af-be151839f366/1/B3lG8EdCxmJ5rNMiAJvhXj1Yilo.mft
Manifest number: 153A
Signing time: Mon 12 May 2025 20:00:22 +0000
Manifest this update: Mon 12 May 2025 20:00:22 +0000
Manifest next update: Tue 13 May 2025 20:00:22 +0000
Files and hashes: 1: B3lG8EdCxmJ5rNMiAJvhXj1Yilo.crl (hash: dUtCrs/rRlt2MO4AuufKmtDNiG3SAx8DYsjPc802FME=)
2: UuUtfUqV-KgwhgFjzhSy5k-b5wQ.roa (hash: N1q9DTLPcvQy64VHKRJdfX47laqGR6sY8ENSz3JjEqw=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/ef/e3fd0b-9f4a-4452-92af-be151839f366/1/B3lG8EdCxmJ5rNMiAJvhXj1Yilo.crl
rsync://rpki.ripe.net/repository/DEFAULT/ef/e3fd0b-9f4a-4452-92af-be151839f366/1/B3lG8EdCxmJ5rNMiAJvhXj1Yilo.mft
rsync://rpki.ripe.net/repository/DEFAULT/B3lG8EdCxmJ5rNMiAJvhXj1Yilo.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 13 May 2025 20:00:22 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:c6:15:88:d4:eb:02:3a:85:cb:91:96:c5:2a:72:c6:0a
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=077946f04742c66279acd322009be15e3d588a5a
Validity
Not Before: May 12 20:00:22 2025 GMT
Not After : May 13 20:00:22 2025 GMT
Subject: CN=19bde5069500f6b08411a4c1e1f165793bce21eb
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c3:54:99:38:95:74:0d:cf:23:a3:15:f2:9c:75:
af:4f:6f:3d:32:69:3c:b9:50:21:ce:57:14:a9:7c:
ee:de:c8:db:c6:c6:75:46:56:5c:bb:46:05:aa:af:
9f:ab:ef:74:2b:1d:28:73:6e:01:e1:e3:51:d2:0b:
9e:7c:9b:73:8f:2c:db:91:7d:04:04:c8:61:90:e5:
81:28:b0:b2:a8:a4:c8:7d:d9:37:3f:6c:73:8f:ac:
02:5b:8c:f0:d7:2a:54:69:82:29:a5:ad:53:5f:5e:
6d:62:a2:0f:45:a1:39:1c:9c:b3:d6:19:b5:cb:24:
0b:bb:fa:6e:ca:11:31:fb:97:e9:09:9d:d7:97:ce:
66:69:78:5e:b9:de:2c:2e:1d:06:57:8a:4d:4a:30:
8d:6f:da:81:d7:9e:de:f4:89:f6:5a:88:ef:09:2d:
22:91:3d:42:cd:09:c9:7d:c4:34:09:31:ae:08:3e:
88:69:c8:af:18:b1:f7:96:0f:c5:5c:e2:78:af:7f:
15:6b:c2:ec:71:68:e2:84:aa:94:a4:34:4b:82:cb:
10:00:e8:5c:d7:5e:78:7c:a4:6e:92:10:d8:37:81:
e1:14:72:10:98:5e:a3:71:fb:8c:5d:15:ff:3d:c4:
70:e7:5c:ea:76:da:b6:a3:a5:79:d5:4a:0d:4e:c9:
51:35
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
19:BD:E5:06:95:00:F6:B0:84:11:A4:C1:E1:F1:65:79:3B:CE:21:EB
X509v3 Authority Key Identifier:
keyid:07:79:46:F0:47:42:C6:62:79:AC:D3:22:00:9B:E1:5E:3D:58:8A:5A
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/B3lG8EdCxmJ5rNMiAJvhXj1Yilo.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ef/e3fd0b-9f4a-4452-92af-be151839f366/1/B3lG8EdCxmJ5rNMiAJvhXj1Yilo.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/ef/e3fd0b-9f4a-4452-92af-be151839f366/1/B3lG8EdCxmJ5rNMiAJvhXj1Yilo.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
9c:71:0c:bc:d7:54:d9:7d:c0:52:3a:12:ce:c4:25:69:f5:4a:
96:5b:9c:d1:63:b9:f4:af:50:bf:08:30:8d:ac:55:cb:a0:33:
88:c8:71:a3:d5:58:35:a2:70:8f:eb:f9:b5:27:23:8e:46:6e:
6c:8f:5f:f7:3f:17:46:95:b8:be:ce:0f:25:41:04:29:2a:fb:
75:84:b1:60:c3:4c:a6:a2:a9:33:ab:93:4b:b5:84:8a:e7:dc:
a4:3e:a3:c7:9a:29:26:36:83:c2:70:1c:83:6e:38:e0:15:92:
68:78:84:6a:e4:4f:40:07:62:0d:d8:ab:e9:f9:2f:64:6a:9c:
fa:c1:2b:db:f4:56:c1:bb:56:ea:a1:88:6e:60:26:c9:00:d6:
cc:6f:14:78:b8:82:0a:66:7a:39:ae:42:55:c7:dd:09:83:bd:
16:e8:96:73:18:73:42:9d:7a:84:92:a0:57:7c:14:7d:63:3e:
58:6f:02:dd:e2:c9:90:95:41:7f:87:eb:7d:e4:eb:42:aa:fd:
58:ee:e7:fd:cd:5d:a2:66:46:0d:b5:25:92:dd:c5:08:2b:bc:
0a:03:0a:8f:19:1a:2d:23:6c:ec:d1:b4:d5:91:ae:86:d3:f6:
ec:38:67:b5:4a:f5:a4:de:b1:05:de:4e:80:6c:32:97:58:49:
a1:d5:2e:25
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue May 13 02:39:34 2025 by rpki-client