Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/15/d208a0-e436-4896-bef2-3b9db05d2384/1/u44vWsfL5iEX2keKwMAnrW2EPFY.mft
File: u44vWsfL5iEX2keKwMAnrW2EPFY.mft (raw, json)
Hash identifier: XxTi/VlWnJePKlBzdI9K+waxiycqdRxee2YnfLCImI4=
Subject key identifier: B7:7A:90:FC:C5:89:F0:23:57:F1:FF:66:6B:2F:18:02:14:18:B8:7D
Authority key identifier: BB:8E:2F:5A:C7:CB:E6:21:17:DA:47:8A:C0:C0:27:AD:6D:84:3C:56
Certificate issuer: /CN=bb8e2f5ac7cbe62117da478ac0c027ad6d843c56
Certificate serial: 0196BE25738FA7671952BDA5B7A80F96D7A6
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/u44vWsfL5iEX2keKwMAnrW2EPFY.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/15/d208a0-e436-4896-bef2-3b9db05d2384/1/u44vWsfL5iEX2keKwMAnrW2EPFY.mft
Manifest number: 1535
Signing time: Sun 11 May 2025 07:00:47 +0000
Manifest this update: Sun 11 May 2025 07:00:47 +0000
Manifest next update: Mon 12 May 2025 07:00:47 +0000
Files and hashes: 1: PqHbplNO7TvCzyK8jCTMlpUuDgE.roa (hash: ZCBOLO9Ydb+4h8ApAHfbP8OIDjSPikSQfw2HwF7MQbw=)
2: u44vWsfL5iEX2keKwMAnrW2EPFY.crl (hash: AduE5I4G3jgptWLH2KGMhPlVS6+QmQOOF1EUCwUO/+w=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/15/d208a0-e436-4896-bef2-3b9db05d2384/1/u44vWsfL5iEX2keKwMAnrW2EPFY.crl
rsync://rpki.ripe.net/repository/DEFAULT/15/d208a0-e436-4896-bef2-3b9db05d2384/1/u44vWsfL5iEX2keKwMAnrW2EPFY.mft
rsync://rpki.ripe.net/repository/DEFAULT/u44vWsfL5iEX2keKwMAnrW2EPFY.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 12 May 2025 07:00:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:be:25:73:8f:a7:67:19:52:bd:a5:b7:a8:0f:96:d7:a6
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=bb8e2f5ac7cbe62117da478ac0c027ad6d843c56
Validity
Not Before: May 11 07:00:47 2025 GMT
Not After : May 12 07:00:47 2025 GMT
Subject: CN=b77a90fcc589f02357f1ff666b2f18021418b87d
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b8:0c:5a:77:f5:b5:95:fb:fd:d6:c3:88:8b:72:
98:26:94:c6:66:1b:44:6e:da:01:78:c8:64:b9:2d:
43:be:8e:80:e1:c3:3c:84:bc:11:d9:65:f6:33:14:
81:9a:b0:73:2f:1b:bd:76:46:8b:a6:9a:6d:ca:01:
cc:90:87:c0:6b:b0:a1:37:54:e8:24:17:eb:8c:c1:
ce:60:6f:b3:d2:9f:a6:13:e1:9e:1b:80:56:dc:8f:
ca:f1:a7:05:87:d4:47:2c:1b:e4:c4:3a:a9:81:80:
11:c4:57:86:1c:f1:1b:8e:e9:9c:19:db:97:ea:1a:
f6:31:c3:94:ee:ee:4a:c6:2b:67:e7:ea:38:4c:d1:
7c:f7:e5:7a:a6:f5:8f:fa:8b:04:15:41:af:ea:ba:
dd:fa:b8:d7:3d:a8:56:6c:fb:b7:f8:82:ed:da:04:
2d:14:54:88:f4:f2:b1:f4:9f:94:e4:cf:27:a0:7c:
95:c8:cd:c8:63:f3:ba:7d:d8:a6:4c:d8:b9:0f:24:
b7:8b:68:6b:32:dd:58:2d:b1:94:07:7d:b4:0d:15:
f8:eb:d1:fc:a9:e3:2a:65:69:12:e6:a9:b3:43:e2:
95:18:7d:4f:cc:01:ba:df:f8:bb:e6:b1:ba:43:45:
fd:e5:42:ad:63:cb:86:de:04:d4:cd:5f:fb:78:e1:
27:5f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B7:7A:90:FC:C5:89:F0:23:57:F1:FF:66:6B:2F:18:02:14:18:B8:7D
X509v3 Authority Key Identifier:
keyid:BB:8E:2F:5A:C7:CB:E6:21:17:DA:47:8A:C0:C0:27:AD:6D:84:3C:56
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/u44vWsfL5iEX2keKwMAnrW2EPFY.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/15/d208a0-e436-4896-bef2-3b9db05d2384/1/u44vWsfL5iEX2keKwMAnrW2EPFY.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/15/d208a0-e436-4896-bef2-3b9db05d2384/1/u44vWsfL5iEX2keKwMAnrW2EPFY.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
09:34:b4:10:ec:d4:59:63:97:20:df:48:e7:1b:02:24:e9:7a:
cc:1c:85:0c:f5:68:25:fc:c7:b3:c8:a2:1c:11:95:57:6a:ac:
d0:b7:eb:7f:04:c8:56:e9:52:d3:b8:db:ee:9f:55:1e:24:d3:
4e:9f:2a:a4:f7:ca:94:9c:33:d9:b2:65:cf:fc:15:b6:e6:b8:
8d:51:e2:94:9e:18:e1:a5:f2:3a:4c:f8:ec:aa:74:96:26:ef:
a7:91:c3:12:56:25:da:4e:ab:8a:3c:da:b2:23:20:c1:81:5e:
30:d1:08:c2:4f:11:96:cb:44:a1:3b:9f:43:e3:1b:d3:a4:28:
5f:b7:05:0d:96:49:37:5c:0f:97:4f:7d:a2:b5:6e:8e:0a:74:
f9:41:b8:c8:15:01:99:c6:53:8e:13:cc:a1:93:b1:aa:49:2d:
27:9c:c2:2c:d2:03:dd:6a:ce:66:c9:c6:89:bc:ee:24:80:3b:
7e:19:27:c7:b7:a7:ca:c9:9e:a6:25:d9:d3:b1:ac:e9:24:58:
66:6d:b2:6f:fb:08:7a:3c:cf:85:5a:90:c6:d3:16:e3:a7:92:
40:43:5f:9c:0a:35:71:ee:6f:cf:46:34:4d:ef:cd:d2:a2:34:
1d:b3:55:a7:11:be:b5:e5:49:28:16:ba:6a:b5:70:7a:c5:12:
a3:a5:34:ff
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun May 11 15:27:48 2025 by rpki-client