Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/12/13fcd1-d806-4e56-8533-475dbbb0c08c/1/uRRkdndz8SObZGu2a9z09_sSBs4.mft
File: uRRkdndz8SObZGu2a9z09_sSBs4.mft (raw, json)
Hash identifier: MLUwb4mp0R84xoWh3p56WR8enwxRIJvTEFXnLgiw35A=
Subject key identifier: BB:A2:92:B6:EE:E6:60:ED:B4:FE:05:2A:E7:C1:5B:70:B8:45:A3:A1
Authority key identifier: B9:14:64:76:77:73:F1:23:9B:64:6B:B6:6B:DC:F4:F7:FB:12:06:CE
Certificate issuer: /CN=b91464767773f1239b646bb66bdcf4f7fb1206ce
Certificate serial: 0196BF37E63F2AEC070AECABDC5E2DFA6FD2
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/uRRkdndz8SObZGu2a9z09_sSBs4.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/12/13fcd1-d806-4e56-8533-475dbbb0c08c/1/uRRkdndz8SObZGu2a9z09_sSBs4.mft
Manifest number: 1538
Signing time: Sun 11 May 2025 12:00:33 +0000
Manifest this update: Sun 11 May 2025 12:00:33 +0000
Manifest next update: Mon 12 May 2025 12:00:33 +0000
Files and hashes: 1: 1-AcXeTA5R7gYGPtZ3gkf2ipBN2M.roa (hash: syfRSFLN+gZv89g2Ds4rYCyprKu1ku8ZpDXFlN//U/c=)
2: Ixqalt-Rml7moJF_qLgPEv_CKDE.roa (hash: 8vHrURSoPUts04KrgFouPfg+sk8VVh+3jNReNV/XClg=)
3: LMrTy1U78s34V_By7mkdllSngYk.roa (hash: DnzapAdGCUWUI5N77eZXLv+nB72Npiqq7Jm9ZcIMDUQ=)
4: uRRkdndz8SObZGu2a9z09_sSBs4.crl (hash: 0Zls2kL3iAHqvyWhpj8pmUiSed/yYdSZBorMPzMMFgo=)
5: xEUB8ohtFlAsaOyr7vE8oOV2o0c.roa (hash: +nvKnk5IXRqxRWm6Ex+8ay7coqES5SK3vevz1ZhdX74=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/12/13fcd1-d806-4e56-8533-475dbbb0c08c/1/uRRkdndz8SObZGu2a9z09_sSBs4.crl
rsync://rpki.ripe.net/repository/DEFAULT/12/13fcd1-d806-4e56-8533-475dbbb0c08c/1/uRRkdndz8SObZGu2a9z09_sSBs4.mft
rsync://rpki.ripe.net/repository/DEFAULT/uRRkdndz8SObZGu2a9z09_sSBs4.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 12 May 2025 07:00:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:bf:37:e6:3f:2a:ec:07:0a:ec:ab:dc:5e:2d:fa:6f:d2
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=b91464767773f1239b646bb66bdcf4f7fb1206ce
Validity
Not Before: May 11 12:00:33 2025 GMT
Not After : May 12 12:00:33 2025 GMT
Subject: CN=bba292b6eee660edb4fe052ae7c15b70b845a3a1
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a4:ad:86:1d:ad:ce:a5:6d:3a:5e:3d:5c:14:27:
93:d9:54:7e:19:02:aa:0d:12:30:e8:ef:d1:db:e5:
23:1a:7a:bc:fb:b1:75:8a:99:76:b1:7b:20:67:c6:
48:88:3f:44:72:d0:6b:0f:30:82:ea:93:21:83:22:
d7:e3:b1:87:f1:b4:8c:5b:9f:71:34:77:ee:e3:db:
63:b3:ea:59:d4:93:c2:07:f4:4b:be:f1:4f:3c:66:
c4:05:46:3d:23:0e:f6:33:8e:db:51:c9:ae:bc:5a:
82:b3:01:07:d1:b5:d3:18:bb:10:24:94:44:48:8a:
0d:1b:2a:23:b1:af:9a:9c:bf:0a:59:81:8f:f8:db:
fa:b5:ee:22:49:30:15:ee:17:22:b4:00:99:4b:57:
b0:04:b3:e8:e8:d4:fe:fa:ed:a8:f9:97:1e:a6:a6:
30:5e:b7:0b:5f:b7:0b:55:e8:3b:09:2a:2e:3b:12:
1b:b7:3b:e7:f2:39:a3:36:06:b2:5d:f5:34:26:56:
9b:da:5a:ab:53:9c:2f:6e:db:1e:5e:93:37:b5:ab:
6e:b5:e1:b1:26:2a:57:33:ca:99:ef:1a:79:cd:33:
25:fe:13:26:fd:03:fe:a3:6a:02:10:85:79:77:04:
86:fa:3f:dd:9b:bb:1c:c8:bf:39:2c:b8:ac:cc:22:
71:07
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
BB:A2:92:B6:EE:E6:60:ED:B4:FE:05:2A:E7:C1:5B:70:B8:45:A3:A1
X509v3 Authority Key Identifier:
keyid:B9:14:64:76:77:73:F1:23:9B:64:6B:B6:6B:DC:F4:F7:FB:12:06:CE
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/uRRkdndz8SObZGu2a9z09_sSBs4.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/12/13fcd1-d806-4e56-8533-475dbbb0c08c/1/uRRkdndz8SObZGu2a9z09_sSBs4.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/12/13fcd1-d806-4e56-8533-475dbbb0c08c/1/uRRkdndz8SObZGu2a9z09_sSBs4.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
09:e5:4a:81:8a:b5:0f:e0:51:57:8f:91:b6:ca:72:97:10:ee:
75:50:5a:b1:9b:d3:79:a2:8f:59:22:a5:12:c1:3a:45:34:72:
41:5e:39:58:ea:a8:fd:aa:b6:00:83:4f:95:18:24:ed:63:f5:
4a:51:6d:e9:48:69:19:29:74:69:8f:1c:6a:eb:19:20:d9:b1:
51:dc:83:27:92:c3:47:42:24:90:19:85:ea:9c:82:ca:ce:8c:
a5:11:bd:3c:eb:b9:4b:df:00:c1:31:5d:53:57:e7:20:aa:83:
4d:bf:df:e6:0a:3a:c3:d8:68:cb:bb:88:5f:93:9a:6a:a5:09:
02:b6:67:13:5a:f1:2e:46:a3:c0:b6:65:02:89:5c:d5:e7:d4:
18:1d:c1:3e:f1:37:36:84:f4:65:e7:f2:91:fa:d6:3c:8f:9c:
b1:5e:05:6a:e3:c5:ec:5b:88:e1:5a:c9:7e:88:0b:df:eb:1c:
44:a1:77:c1:0a:15:af:c2:19:30:9e:f4:f5:3b:d8:00:3d:9a:
f6:f4:f9:44:1b:54:23:6a:a2:c8:d6:77:2f:72:f0:12:4f:6a:
a3:c1:93:6f:9c:c0:0a:60:3e:78:14:8c:d9:29:9c:79:10:61:
3a:96:5c:fb:e6:25:fa:2f:b1:52:5d:de:e9:e7:d2:c5:4c:08:
85:ff:89:b4
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun May 11 16:06:00 2025 by rpki-client