Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/1a/6703ca-ced4-4207-ab05-4a6f55771bd1/1/urRT2Xui9KBFhD5rSpU7PlEG6vI.mft
File: urRT2Xui9KBFhD5rSpU7PlEG6vI.mft (raw, json)
Hash identifier: xGNoT/5WX/tPBoQ7oSkwbyKmVM0GtpwZKXpy18CFTng=
Subject key identifier: 7D:48:8B:AF:FB:40:63:37:F2:13:C7:F0:9C:D0:D6:51:00:A5:C1:0B
Authority key identifier: BA:B4:53:D9:7B:A2:F4:A0:45:84:3E:6B:4A:95:3B:3E:51:06:EA:F2
Certificate issuer: /CN=bab453d97ba2f4a045843e6b4a953b3e5106eaf2
Certificate serial: 0196AEE925AAF13C47FA0C7301EB19DABD0C
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/urRT2Xui9KBFhD5rSpU7PlEG6vI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/1a/6703ca-ced4-4207-ab05-4a6f55771bd1/1/urRT2Xui9KBFhD5rSpU7PlEG6vI.mft
Manifest number: 1538
Signing time: Thu 08 May 2025 08:00:37 +0000
Manifest this update: Thu 08 May 2025 08:00:37 +0000
Manifest next update: Fri 09 May 2025 08:00:37 +0000
Files and hashes: 1: YAxMGVlnNVMBFh-Gqpd9ShmUpMs.roa (hash: inn0TlW8MH3WwBY3JfZOQs90fUrqGnIJpl+K9OSU93o=)
2: urRT2Xui9KBFhD5rSpU7PlEG6vI.crl (hash: CLpri74YUGNYJ30r60+1XFC+TrSh0ZloZk8tAV7A0uw=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/1a/6703ca-ced4-4207-ab05-4a6f55771bd1/1/urRT2Xui9KBFhD5rSpU7PlEG6vI.crl
rsync://rpki.ripe.net/repository/DEFAULT/1a/6703ca-ced4-4207-ab05-4a6f55771bd1/1/urRT2Xui9KBFhD5rSpU7PlEG6vI.mft
rsync://rpki.ripe.net/repository/DEFAULT/urRT2Xui9KBFhD5rSpU7PlEG6vI.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 09 May 2025 08:00:37 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:ae:e9:25:aa:f1:3c:47:fa:0c:73:01:eb:19:da:bd:0c
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=bab453d97ba2f4a045843e6b4a953b3e5106eaf2
Validity
Not Before: May 8 08:00:37 2025 GMT
Not After : May 9 08:00:37 2025 GMT
Subject: CN=7d488baffb406337f213c7f09cd0d65100a5c10b
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:85:7d:81:34:be:60:72:bb:44:61:49:4e:22:2e:
a3:d1:de:64:52:ba:7d:b4:d3:cd:39:1a:2b:97:c5:
d9:9f:94:8a:54:71:66:8f:d2:e3:7e:d6:61:6b:50:
e7:29:56:ec:dc:b3:75:94:31:63:b2:66:a8:a9:c7:
eb:cf:eb:c5:cd:77:8f:22:d6:60:fc:08:97:2b:5b:
98:e6:3c:4a:ac:4b:c8:b4:a5:36:e9:48:df:86:69:
8e:a8:01:34:16:34:24:88:14:e8:e8:59:66:16:38:
fc:33:2a:a6:80:4e:a6:7a:f1:31:56:c3:d1:d3:5e:
35:e1:f8:77:a2:ec:f2:96:2a:c8:e1:99:9b:31:8e:
c3:f6:8e:33:fb:2d:9e:c6:74:01:31:35:27:0a:3d:
ea:0f:ac:a8:0a:49:1c:92:23:61:fb:34:e9:b6:12:
d0:2c:9c:48:bc:cf:8a:cb:f8:6d:61:6e:88:eb:31:
85:aa:d0:ab:3d:2a:04:a4:bf:7d:de:7f:97:63:95:
a6:d2:a7:8f:be:8b:51:cd:5d:bf:5a:9a:4c:48:60:
67:46:6a:3c:87:d8:7a:85:db:7f:05:49:a5:10:39:
26:7b:98:2b:1c:4f:a6:23:ba:ac:0f:31:a4:e3:f7:
e2:4b:db:a1:91:da:30:a2:f9:e7:c4:02:1f:ee:e9:
0c:c7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
7D:48:8B:AF:FB:40:63:37:F2:13:C7:F0:9C:D0:D6:51:00:A5:C1:0B
X509v3 Authority Key Identifier:
keyid:BA:B4:53:D9:7B:A2:F4:A0:45:84:3E:6B:4A:95:3B:3E:51:06:EA:F2
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/urRT2Xui9KBFhD5rSpU7PlEG6vI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/1a/6703ca-ced4-4207-ab05-4a6f55771bd1/1/urRT2Xui9KBFhD5rSpU7PlEG6vI.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/1a/6703ca-ced4-4207-ab05-4a6f55771bd1/1/urRT2Xui9KBFhD5rSpU7PlEG6vI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
94:52:b1:d0:9a:66:20:04:ff:9b:fa:4f:1b:fb:d0:2c:28:13:
28:27:72:38:10:44:bf:30:58:59:46:bf:1d:4d:3e:0e:90:56:
78:01:e8:16:21:bc:aa:b8:b6:0f:23:17:f3:4d:12:fb:28:f1:
b4:7c:5e:1a:9b:13:3a:4f:4e:b7:73:24:94:3b:8e:47:ae:c9:
4e:a2:75:7f:76:96:43:64:52:1f:16:ff:01:71:fb:26:fc:7d:
d5:9a:fc:83:7a:43:02:70:e2:53:ad:3d:34:0c:5b:5e:52:b2:
9d:2f:50:ce:8a:87:96:dd:cd:ed:0b:4a:71:7e:f6:64:37:cf:
13:57:d2:71:23:1e:91:75:e9:4b:c7:7a:ea:e7:c7:c8:f7:56:
5b:20:2b:b6:25:2a:77:93:94:fe:4b:5b:23:5d:ed:69:4c:77:
5b:11:fb:dc:06:32:7c:81:75:d7:f8:02:93:e9:48:d0:58:30:
cf:91:42:52:fd:bc:d8:8f:fc:47:9d:b2:d2:b3:0a:11:e8:c4:
fd:2a:8f:2a:25:fb:a6:c6:bb:6e:3b:bf:da:b8:df:ce:d8:3f:
5b:f4:37:14:74:44:44:1d:61:a6:83:ba:31:dd:c1:f8:c2:47:
56:f4:d8:b1:0f:83:64:55:1c:84:0a:3c:af:3a:36:75:c2:0f:
4e:ec:e2:d8
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu May 8 18:49:28 2025 by rpki-client