Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f9/354b3b-5d76-49d5-a56c-007c4e58527e/1/_3CGjwwsIYdl-mtTq5rwZf8znwY.mft
File: _3CGjwwsIYdl-mtTq5rwZf8znwY.mft (raw, json)
Hash identifier: gEy+DqOpFWAGA8MIVUPxZy9F5PT/I0vmrZFh+r99NK0=
Subject key identifier: B2:A4:FB:E0:C9:82:D5:B6:53:82:A7:38:12:D5:29:D1:A7:BE:04:23
Authority key identifier: FF:70:86:8F:0C:2C:21:87:65:FA:6B:53:AB:9A:F0:65:FF:33:9F:06
Certificate issuer: /CN=ff70868f0c2c218765fa6b53ab9af065ff339f06
Certificate serial: 0196B77E88CE052FADD41D10C90E4B7AB2D2
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/_3CGjwwsIYdl-mtTq5rwZf8znwY.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/f9/354b3b-5d76-49d5-a56c-007c4e58527e/1/_3CGjwwsIYdl-mtTq5rwZf8znwY.mft
Manifest number: 0C6B
Signing time: Sat 10 May 2025 00:00:45 +0000
Manifest this update: Sat 10 May 2025 00:00:45 +0000
Manifest next update: Sun 11 May 2025 00:00:45 +0000
Files and hashes: 1: ReFijUPsIVT0JnrY05_yeSrYpfM.roa (hash: 6xv/Nzbw1MhH+laW+tJrBXU6SEJVZqBXBHHnSnM5yB0=)
2: _3CGjwwsIYdl-mtTq5rwZf8znwY.crl (hash: ONy2jKmWazg/vAppd16K/rToscs7ik5vknmY5mkSYwU=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/f9/354b3b-5d76-49d5-a56c-007c4e58527e/1/_3CGjwwsIYdl-mtTq5rwZf8znwY.crl
rsync://rpki.ripe.net/repository/DEFAULT/f9/354b3b-5d76-49d5-a56c-007c4e58527e/1/_3CGjwwsIYdl-mtTq5rwZf8znwY.mft
rsync://rpki.ripe.net/repository/DEFAULT/_3CGjwwsIYdl-mtTq5rwZf8znwY.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 11 May 2025 00:00:45 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:b7:7e:88:ce:05:2f:ad:d4:1d:10:c9:0e:4b:7a:b2:d2
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=ff70868f0c2c218765fa6b53ab9af065ff339f06
Validity
Not Before: May 10 00:00:45 2025 GMT
Not After : May 11 00:00:45 2025 GMT
Subject: CN=b2a4fbe0c982d5b65382a73812d529d1a7be0423
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e2:3e:f7:fe:72:1a:fa:d6:12:22:3d:4b:ce:03:
b9:02:ee:1f:f2:66:7b:58:e2:7c:ec:fe:fb:1a:23:
17:0a:af:4e:89:0f:c6:e5:d5:3b:50:c7:ab:e7:5e:
4c:0a:ed:d2:73:86:59:7f:95:f8:68:f0:de:21:ed:
f3:f6:25:b9:b2:13:fa:ec:ba:9a:49:ab:c3:21:8f:
37:90:ed:f8:cc:49:95:84:f6:b6:2d:52:82:44:35:
2e:88:b3:b2:79:52:51:51:df:90:dc:9b:c3:2b:44:
fd:47:3a:2f:ae:b2:f1:be:bd:59:5b:ff:8a:60:eb:
0b:62:0f:cd:c0:4d:26:fc:b5:f0:80:25:a5:f1:47:
1f:76:08:ed:b0:9f:a6:f1:a5:fa:34:15:b7:7c:38:
d6:3a:77:2d:ba:90:08:20:7a:52:1f:e1:62:84:5c:
23:79:b7:4f:8d:83:81:8a:3c:94:d6:4e:c7:9b:5c:
da:db:b8:6b:03:ed:ca:7d:63:eb:17:08:65:a9:7d:
56:f7:5f:49:dd:78:43:ed:07:8a:b6:cc:4e:cb:55:
1d:2b:cc:50:ca:34:1d:94:80:80:80:0f:0a:97:cd:
37:c6:bc:09:0d:ce:f3:6c:75:79:13:fa:c1:10:3c:
2b:73:30:40:50:a1:ae:10:c0:0c:e7:54:c1:d7:3b:
08:f3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B2:A4:FB:E0:C9:82:D5:B6:53:82:A7:38:12:D5:29:D1:A7:BE:04:23
X509v3 Authority Key Identifier:
keyid:FF:70:86:8F:0C:2C:21:87:65:FA:6B:53:AB:9A:F0:65:FF:33:9F:06
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/_3CGjwwsIYdl-mtTq5rwZf8znwY.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f9/354b3b-5d76-49d5-a56c-007c4e58527e/1/_3CGjwwsIYdl-mtTq5rwZf8znwY.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/f9/354b3b-5d76-49d5-a56c-007c4e58527e/1/_3CGjwwsIYdl-mtTq5rwZf8znwY.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
45:0c:83:81:b2:1a:ea:ea:71:1b:96:2e:df:b8:6e:23:f9:0f:
b6:59:7e:cc:ab:ad:99:b4:ef:67:34:75:60:3a:09:fb:73:ab:
59:1a:98:04:3a:bc:e0:db:ea:1e:15:ec:b6:41:01:4b:aa:80:
40:60:ff:d5:66:d5:5a:8e:a6:3a:b1:85:31:a0:c2:32:05:70:
ac:2b:e7:1e:41:66:7c:39:73:b2:95:9c:d9:f6:2e:ec:dc:f3:
a5:e2:49:5a:1a:da:7e:61:f6:c0:c1:09:6a:8e:a6:d1:23:9c:
a3:57:82:99:0f:b4:7d:80:bd:c2:12:42:07:a0:38:42:d7:31:
8c:09:8d:4f:a5:d8:87:94:0c:32:ca:dc:c6:da:f9:b9:1d:4c:
c4:c5:7d:46:5d:be:d9:91:54:7d:60:4e:c1:d8:99:a9:12:2a:
63:46:76:a1:33:cd:ed:f4:96:43:59:a9:39:dc:39:6b:4b:7d:
57:df:2d:56:6a:e6:f2:4e:26:61:b0:ea:42:2f:68:d0:67:d6:
2b:48:1a:60:c5:52:0f:b5:41:ff:19:e3:6b:b0:93:f1:6c:ce:
da:b9:2a:48:d3:13:35:ef:21:cd:9c:a9:ff:7d:54:58:c6:64:
b0:37:7e:a6:df:48:c5:5c:b9:c8:64:39:8a:84:7f:d4:52:b6:
4d:4d:65:77
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat May 10 08:36:08 2025 by rpki-client