Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f6/9a4ef5-42fa-435f-a8fe-b1f4fc7522a0/1/3ObhPkE7rzgbYlEx6STpR4Q0NvU.mft
File: 3ObhPkE7rzgbYlEx6STpR4Q0NvU.mft (raw, json)
Hash identifier: ZwqbYeKDFB5HKdBtzJlkQCitlqhrk8YuK3a+7e47zkk=
Subject key identifier: F3:67:72:54:93:72:D7:0A:BC:6F:FC:74:FE:81:62:DC:60:A4:20:05
Authority key identifier: DC:E6:E1:3E:41:3B:AF:38:1B:62:51:31:E9:24:E9:47:84:34:36:F5
Certificate issuer: /CN=dce6e13e413baf381b625131e924e947843436f5
Certificate serial: 0196AF8DA5304A8F00D8E0D7088CFDEFAF2F
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/3ObhPkE7rzgbYlEx6STpR4Q0NvU.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/f6/9a4ef5-42fa-435f-a8fe-b1f4fc7522a0/1/3ObhPkE7rzgbYlEx6STpR4Q0NvU.mft
Manifest number: 09BC
Signing time: Thu 08 May 2025 11:00:17 +0000
Manifest this update: Thu 08 May 2025 11:00:17 +0000
Manifest next update: Fri 09 May 2025 11:00:17 +0000
Files and hashes: 1: 3ObhPkE7rzgbYlEx6STpR4Q0NvU.crl (hash: KCHf35S6uXdxKWUkPlgOUyiDZvc02ekS16A/DMPIuls=)
2: k-zbYqMjr7XFkjggYMsDTqkc4ZQ.roa (hash: s4TVKdERPvITqngL+4WwZ8o+fcmlm7A+ZBRKG7i/ppo=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/f6/9a4ef5-42fa-435f-a8fe-b1f4fc7522a0/1/3ObhPkE7rzgbYlEx6STpR4Q0NvU.crl
rsync://rpki.ripe.net/repository/DEFAULT/f6/9a4ef5-42fa-435f-a8fe-b1f4fc7522a0/1/3ObhPkE7rzgbYlEx6STpR4Q0NvU.mft
rsync://rpki.ripe.net/repository/DEFAULT/3ObhPkE7rzgbYlEx6STpR4Q0NvU.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 09 May 2025 07:00:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:af:8d:a5:30:4a:8f:00:d8:e0:d7:08:8c:fd:ef:af:2f
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=dce6e13e413baf381b625131e924e947843436f5
Validity
Not Before: May 8 11:00:17 2025 GMT
Not After : May 9 11:00:17 2025 GMT
Subject: CN=f36772549372d70abc6ffc74fe8162dc60a42005
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:af:df:0f:3c:37:aa:6a:c9:ca:4e:11:19:aa:53:
2f:18:29:2a:4c:79:a5:0a:4f:e8:5a:c3:57:b2:38:
cd:87:6c:1f:99:70:93:f8:52:c2:6c:4a:3d:6a:c9:
43:8e:61:3d:e3:4b:a9:3a:59:29:af:89:36:6e:ea:
04:0a:8f:88:90:be:9f:b7:97:fa:65:91:68:36:39:
19:8f:38:87:30:a3:c8:d9:04:46:ac:57:d9:5f:07:
83:5e:fe:c1:56:c7:bd:e4:b7:53:eb:76:76:16:40:
39:a4:30:d8:6b:f8:8e:c7:76:5f:c7:85:53:c1:c9:
c5:1e:d0:c1:01:e1:ed:cf:b3:03:17:9f:b7:9c:7e:
67:8e:7c:a8:a5:a3:76:df:fe:1d:50:86:5b:de:8f:
b2:89:51:b4:c3:39:b6:66:fd:35:4c:1d:32:17:50:
d6:ea:ac:5d:ad:ba:7e:7a:69:84:a0:99:6a:89:8c:
48:75:ea:03:e2:59:67:dd:79:4e:2a:9d:bf:72:cd:
19:a9:48:b0:45:bb:ee:f2:95:16:14:20:24:0c:33:
04:9d:05:19:6b:d9:81:ed:dc:24:95:63:7f:98:fc:
a4:72:e6:47:9d:6e:b8:7f:5f:fe:52:35:f7:de:f2:
f9:a4:a7:1c:0b:f4:6b:17:e9:1e:97:c6:b7:35:1d:
bf:1f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F3:67:72:54:93:72:D7:0A:BC:6F:FC:74:FE:81:62:DC:60:A4:20:05
X509v3 Authority Key Identifier:
keyid:DC:E6:E1:3E:41:3B:AF:38:1B:62:51:31:E9:24:E9:47:84:34:36:F5
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/3ObhPkE7rzgbYlEx6STpR4Q0NvU.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f6/9a4ef5-42fa-435f-a8fe-b1f4fc7522a0/1/3ObhPkE7rzgbYlEx6STpR4Q0NvU.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/f6/9a4ef5-42fa-435f-a8fe-b1f4fc7522a0/1/3ObhPkE7rzgbYlEx6STpR4Q0NvU.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
30:67:bf:03:45:92:b2:73:16:83:7d:b2:b5:b5:66:03:ed:59:
f1:c9:0b:20:7d:52:99:c8:a7:ed:79:a8:0b:20:36:2a:76:7c:
e4:16:06:a6:b9:67:03:01:9a:ee:8c:e4:a9:1e:89:47:c8:c3:
98:fc:35:0b:8c:fb:77:ea:36:f8:bb:90:0a:00:b3:16:bd:14:
59:6a:57:ba:93:9a:9f:e5:a6:c9:03:e7:da:96:d6:18:b1:15:
7e:65:93:03:00:7a:14:16:56:29:c1:05:5b:7e:c2:43:00:78:
f6:3c:bd:5b:4a:fd:39:1f:fa:70:ee:54:69:a3:00:6f:31:4b:
13:b8:68:8a:0f:c5:fe:6e:be:02:b0:c7:98:68:b5:f2:30:67:
f7:bb:0e:5d:e5:43:be:d7:39:fa:49:6d:be:1a:51:ca:85:fd:
12:fb:bf:df:fb:f3:7a:af:95:0a:fd:35:83:6b:a7:8c:a8:f2:
dd:d3:2d:56:73:7e:01:27:91:1e:b4:02:c5:15:8d:93:c1:ad:
95:55:58:23:64:a3:d6:6b:cf:6d:a0:90:d6:a2:b7:b9:8e:17:
4c:f5:d7:b0:f1:36:35:e7:d5:a8:88:20:3c:6d:2e:2b:fe:c5:
c3:11:18:b4:3e:dc:33:f0:31:b2:db:af:47:7e:d3:c5:cb:3b:
9d:0d:98:e8
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu May 8 13:34:46 2025 by rpki-client