Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/0c/120715-2689-4b1c-a6b8-417320cbae55/1/u3C4koHNt2GgSty8CsQXBUExUOk.mft
File: u3C4koHNt2GgSty8CsQXBUExUOk.mft (raw, json)
Hash identifier: /Xiv6KFUAURPBsUe4/wcdTYG4dGM9lcnVP3QrIWHTOg=
Subject key identifier: 1D:E6:0A:30:76:A5:7A:D3:81:3B:E6:E9:FD:01:A8:6F:49:41:67:8E
Authority key identifier: BB:70:B8:92:81:CD:B7:61:A0:4A:DC:BC:0A:C4:17:05:41:31:50:E9
Certificate issuer: /CN=bb70b89281cdb761a04adcbc0ac41705413150e9
Certificate serial: 0196BA7F7CC09B99156E938A7B3C3624EAA6
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/u3C4koHNt2GgSty8CsQXBUExUOk.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/0c/120715-2689-4b1c-a6b8-417320cbae55/1/u3C4koHNt2GgSty8CsQXBUExUOk.mft
Manifest number: 0864
Signing time: Sat 10 May 2025 14:00:39 +0000
Manifest this update: Sat 10 May 2025 14:00:39 +0000
Manifest next update: Sun 11 May 2025 14:00:39 +0000
Files and hashes: 1: 6JxEiaEvYS9lMNYU9-YVInF7e8w.roa (hash: 70NWS2RXJlvS8eFFeFd9DCGoEyQrpgXb5vcUfy1RN8w=)
2: u3C4koHNt2GgSty8CsQXBUExUOk.crl (hash: EZz/KMV7Zg9z8CsdL9ElABnZ4EJIxyx3c/23/7SW7qI=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/0c/120715-2689-4b1c-a6b8-417320cbae55/1/u3C4koHNt2GgSty8CsQXBUExUOk.crl
rsync://rpki.ripe.net/repository/DEFAULT/0c/120715-2689-4b1c-a6b8-417320cbae55/1/u3C4koHNt2GgSty8CsQXBUExUOk.mft
rsync://rpki.ripe.net/repository/DEFAULT/u3C4koHNt2GgSty8CsQXBUExUOk.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 11 May 2025 13:00:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:ba:7f:7c:c0:9b:99:15:6e:93:8a:7b:3c:36:24:ea:a6
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=bb70b89281cdb761a04adcbc0ac41705413150e9
Validity
Not Before: May 10 14:00:39 2025 GMT
Not After : May 11 14:00:39 2025 GMT
Subject: CN=1de60a3076a57ad3813be6e9fd01a86f4941678e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:93:16:d5:de:28:8c:c7:36:96:ad:5d:2d:1d:b4:
de:7c:df:96:5e:fa:37:88:c3:08:36:57:a7:1b:e0:
4b:a0:ba:9d:53:90:64:3a:06:7f:22:de:a9:05:10:
ce:84:85:05:58:f3:50:eb:67:f0:7d:d0:96:0b:c1:
5f:1a:95:d0:82:4f:db:4a:ad:4d:0a:22:2d:11:d8:
b9:36:f8:28:a9:2a:36:55:68:57:72:c8:b5:e6:36:
bd:11:9c:13:c5:90:c3:ae:35:9d:52:47:5f:f8:c6:
ae:d9:25:b9:39:bd:4e:19:ac:39:2b:0c:f9:1a:7c:
a8:e7:43:66:02:ea:12:c2:f6:04:e5:58:2b:c3:f2:
02:b4:11:13:da:1f:4b:c7:99:9c:14:3c:ed:a5:2f:
14:a8:0d:a4:63:00:ee:9b:a8:b5:e9:ae:80:ea:2e:
8b:e4:44:12:82:9c:f6:6a:0e:75:d3:f5:19:51:b2:
f6:a3:f1:8d:4e:b9:92:76:6b:9c:f2:b1:a5:c6:24:
73:f6:69:a6:8a:45:13:d6:b4:b2:9a:f9:39:0b:9b:
3f:66:93:39:11:a7:ed:44:89:f7:1b:d4:71:ef:22:
30:51:5e:d8:95:db:a4:ff:b1:a8:c8:83:29:fc:05:
fb:29:e8:2a:7c:e5:f3:d3:11:2b:20:1e:60:1c:a9:
b5:9d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
1D:E6:0A:30:76:A5:7A:D3:81:3B:E6:E9:FD:01:A8:6F:49:41:67:8E
X509v3 Authority Key Identifier:
keyid:BB:70:B8:92:81:CD:B7:61:A0:4A:DC:BC:0A:C4:17:05:41:31:50:E9
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/u3C4koHNt2GgSty8CsQXBUExUOk.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/0c/120715-2689-4b1c-a6b8-417320cbae55/1/u3C4koHNt2GgSty8CsQXBUExUOk.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/0c/120715-2689-4b1c-a6b8-417320cbae55/1/u3C4koHNt2GgSty8CsQXBUExUOk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
2a:11:24:60:6b:9b:4c:5a:2e:d3:0c:e2:38:7b:81:7a:e2:46:
51:3e:77:a6:c7:1c:4f:68:8e:04:dc:6d:1f:c3:18:c8:26:78:
37:87:f8:ae:f8:56:7a:2d:bf:72:5e:78:be:eb:8d:98:1d:c7:
31:25:c7:7c:73:8a:2a:08:dd:dc:4a:07:8a:72:8c:db:59:7f:
6d:38:bc:cb:a2:b0:07:41:26:cd:c5:4e:1c:b4:a3:f0:a8:b0:
6f:05:33:19:39:50:38:81:fb:af:32:70:dd:18:c9:6e:90:be:
a5:a4:e8:02:56:ae:fb:3f:35:e2:ce:17:00:d1:5c:f1:ca:48:
8d:db:94:10:e6:3d:d3:38:13:0c:7d:52:34:4c:be:0e:6a:f7:
3c:3a:b7:2a:bf:ac:ec:ad:8b:b5:b8:f3:d9:2b:f1:23:36:53:
66:31:b8:bb:9f:b2:2d:62:ef:2a:e2:e1:cd:80:9d:01:79:b4:
a2:e0:97:b1:dd:a9:6d:2f:27:77:ab:4b:33:93:e8:89:29:d4:
fe:97:ef:70:45:9e:c6:7d:d3:4b:5b:66:42:40:e8:1b:46:f6:
93:19:70:fd:53:e5:a0:6f:ff:bc:23:32:e2:c6:89:50:05:bf:
24:9b:f2:d5:f7:15:c8:7a:01:e4:ce:60:6f:f4:f9:26:be:5e:
e7:25:63:60
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat May 10 23:01:40 2025 by rpki-client