Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f5/376f5a-c026-4bae-8847-2b1d439b2227/1/B9PAwRUyjD0owPVyGwCYKyzUIV4.mft
File: B9PAwRUyjD0owPVyGwCYKyzUIV4.mft (raw, json)
Hash identifier: GiInM78JDRJfjTsk9Avjd6QIHEFfCEXt2lAzlk26n50=
Subject key identifier: 3C:2F:F9:F5:AC:85:74:32:E9:EF:D3:F0:ED:D8:F0:CF:C9:48:3B:62
Authority key identifier: 07:D3:C0:C1:15:32:8C:3D:28:C0:F5:72:1B:00:98:2B:2C:D4:21:5E
Certificate issuer: /CN=07d3c0c115328c3d28c0f5721b00982b2cd4215e
Certificate serial: 0196A19AFE5707119207FEED4047ECBE93A3
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/B9PAwRUyjD0owPVyGwCYKyzUIV4.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/f5/376f5a-c026-4bae-8847-2b1d439b2227/1/B9PAwRUyjD0owPVyGwCYKyzUIV4.mft
Manifest number: 13FB
Signing time: Mon 05 May 2025 18:00:11 +0000
Manifest this update: Mon 05 May 2025 18:00:11 +0000
Manifest next update: Tue 06 May 2025 18:00:11 +0000
Files and hashes: 1: B9PAwRUyjD0owPVyGwCYKyzUIV4.crl (hash: kfG4jLhuJsrz9VO4KV/ZwEKLJ/jA6hWUhpaKpjCkUZE=)
2: ymgejZXQAFGY4W5XJssEnhi7B6U.roa (hash: 6jBjJYjwNGCZyUd70W3B/Q80kGLCgiNFZzX5URwj3Fo=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/f5/376f5a-c026-4bae-8847-2b1d439b2227/1/B9PAwRUyjD0owPVyGwCYKyzUIV4.crl
rsync://rpki.ripe.net/repository/DEFAULT/f5/376f5a-c026-4bae-8847-2b1d439b2227/1/B9PAwRUyjD0owPVyGwCYKyzUIV4.mft
rsync://rpki.ripe.net/repository/DEFAULT/B9PAwRUyjD0owPVyGwCYKyzUIV4.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 06 May 2025 18:00:11 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:a1:9a:fe:57:07:11:92:07:fe:ed:40:47:ec:be:93:a3
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=07d3c0c115328c3d28c0f5721b00982b2cd4215e
Validity
Not Before: May 5 18:00:11 2025 GMT
Not After : May 6 18:00:11 2025 GMT
Subject: CN=3c2ff9f5ac857432e9efd3f0edd8f0cfc9483b62
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b2:69:bd:af:fb:7b:be:a0:f3:08:e8:61:31:3c:
2e:b7:c3:3e:29:18:ed:a1:8c:40:7b:f4:05:08:7c:
a4:63:88:9c:be:e0:36:4c:5d:bf:3b:4c:ae:62:81:
41:b6:cf:ca:0c:f5:0f:0d:e7:3d:26:0e:3d:0f:9f:
43:40:0a:95:31:e0:7b:3c:2c:f4:f6:8c:e2:c3:95:
78:f0:fb:ac:11:80:d5:6c:36:90:ac:7f:ce:e8:4d:
4e:c9:4d:84:f3:c6:77:df:16:49:dd:3f:59:eb:5f:
54:42:cb:c2:8c:c8:88:1c:69:15:ad:5a:20:97:53:
ee:87:b8:65:42:13:0e:d5:b7:38:87:97:59:e7:9e:
98:c0:8a:2d:34:09:32:5c:69:90:a6:b7:7f:43:5c:
67:02:c6:c1:75:4e:df:a7:f1:c3:33:68:9e:93:af:
99:23:f6:5c:aa:d8:ed:3a:a3:3e:9d:01:80:6b:3b:
1f:26:79:2d:a3:ed:a9:c6:2a:44:1f:31:db:e9:5d:
c0:88:52:a5:ef:05:11:a4:ba:a3:82:12:db:e5:37:
5b:8a:77:82:7c:38:53:83:9f:36:61:90:69:7f:10:
de:b8:35:d0:f0:ee:25:78:60:df:88:48:61:96:a6:
3c:79:9f:cd:c9:b6:4c:07:aa:25:50:89:a6:f6:ad:
72:c5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
3C:2F:F9:F5:AC:85:74:32:E9:EF:D3:F0:ED:D8:F0:CF:C9:48:3B:62
X509v3 Authority Key Identifier:
keyid:07:D3:C0:C1:15:32:8C:3D:28:C0:F5:72:1B:00:98:2B:2C:D4:21:5E
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/B9PAwRUyjD0owPVyGwCYKyzUIV4.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f5/376f5a-c026-4bae-8847-2b1d439b2227/1/B9PAwRUyjD0owPVyGwCYKyzUIV4.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/f5/376f5a-c026-4bae-8847-2b1d439b2227/1/B9PAwRUyjD0owPVyGwCYKyzUIV4.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
1f:e6:d1:8a:77:e8:f0:18:1d:e9:14:5b:18:3a:11:03:33:b0:
84:27:03:64:ce:61:b8:1c:58:de:85:9f:99:cc:d3:fc:18:8e:
d8:0c:5f:b2:b0:27:9c:f1:bd:71:20:bc:6e:5b:0c:da:b6:2b:
d5:4b:50:01:bb:15:6a:67:16:b0:08:69:28:aa:52:93:28:95:
7d:50:45:31:8a:0d:c6:de:cc:fa:ba:0a:d8:32:10:bb:61:fb:
27:41:6c:dc:bb:10:ef:05:a9:a8:ac:3a:e3:3f:9d:8b:f9:82:
32:ee:37:b1:7c:7a:23:79:77:2c:79:13:f3:15:f7:9a:15:b9:
20:ba:aa:c7:03:d1:91:07:36:f0:2a:17:8d:74:2f:1a:2f:13:
b4:a2:ca:9f:95:f7:c4:8b:34:30:94:67:c9:de:f9:aa:21:53:
13:38:f6:df:f0:e8:f4:05:31:e0:1a:64:54:f8:2b:ee:4c:c8:
e3:df:aa:a1:b5:0a:d1:91:7f:c6:c5:6e:1d:f5:57:b9:1c:6d:
98:5a:33:7a:72:5b:4f:f0:9c:6e:12:ef:8f:93:05:ac:a3:23:
d0:be:f2:6d:e7:63:7a:92:5e:56:69:70:23:6a:1d:19:36:a1:
41:1b:7e:d7:0c:91:cf:26:67:78:db:53:ea:a7:1e:dd:06:bd:
7c:9c:e1:e5
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon May 5 22:22:37 2025 by rpki-client