Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/1b/73e1e0-3d46-428c-ab3b-2159efee6a07/1/u1KMEmrtDX9aBpUOssIDNIaFahU.mft
File: u1KMEmrtDX9aBpUOssIDNIaFahU.mft (raw, json)
Hash identifier: gEZlvePfzi74KJtJapy2zegIdnPmFpbDDAkRXxl5Q0o=
Subject key identifier: B4:99:3D:E8:54:87:80:5D:22:80:34:04:D1:F0:DA:BA:85:DF:99:A2
Authority key identifier: BB:52:8C:12:6A:ED:0D:7F:5A:06:95:0E:B2:C2:03:34:86:85:6A:15
Certificate issuer: /CN=bb528c126aed0d7f5a06950eb2c2033486856a15
Certificate serial: 0196B47D8E9CC946C12C7B508633AE6BEE56
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/u1KMEmrtDX9aBpUOssIDNIaFahU.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/1b/73e1e0-3d46-428c-ab3b-2159efee6a07/1/u1KMEmrtDX9aBpUOssIDNIaFahU.mft
Manifest number: 0E45
Signing time: Fri 09 May 2025 10:00:49 +0000
Manifest this update: Fri 09 May 2025 10:00:49 +0000
Manifest next update: Sat 10 May 2025 10:00:49 +0000
Files and hashes: 1: qojwO3L9jg1p6UhN03evhyipuOQ.roa (hash: dfUoGagRhqiwPd1LKf2UOdIpsG5QndFaYf8UR5Y9xlA=)
2: u1KMEmrtDX9aBpUOssIDNIaFahU.crl (hash: 0eOLHTE/fSQRAsgYmFLUdT69hwTivQdUa23hwdFIAiI=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/1b/73e1e0-3d46-428c-ab3b-2159efee6a07/1/u1KMEmrtDX9aBpUOssIDNIaFahU.crl
rsync://rpki.ripe.net/repository/DEFAULT/1b/73e1e0-3d46-428c-ab3b-2159efee6a07/1/u1KMEmrtDX9aBpUOssIDNIaFahU.mft
rsync://rpki.ripe.net/repository/DEFAULT/u1KMEmrtDX9aBpUOssIDNIaFahU.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 10 May 2025 10:00:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:b4:7d:8e:9c:c9:46:c1:2c:7b:50:86:33:ae:6b:ee:56
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=bb528c126aed0d7f5a06950eb2c2033486856a15
Validity
Not Before: May 9 10:00:49 2025 GMT
Not After : May 10 10:00:49 2025 GMT
Subject: CN=b4993de85487805d22803404d1f0daba85df99a2
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:dd:21:56:34:54:77:24:a6:44:41:79:12:26:75:
4c:76:e1:e2:1d:41:4a:3a:8e:05:36:5c:90:1b:72:
0f:51:f7:6d:ca:e0:0e:ef:c7:9a:2c:0b:38:b6:5f:
3c:44:98:d1:5b:34:cc:b2:f4:82:f5:51:78:25:d8:
9d:45:db:c9:6a:ef:bb:91:9c:23:99:c9:62:7c:57:
72:61:67:c6:f9:5b:52:92:09:9f:e0:69:34:3c:f4:
42:4d:34:04:75:09:b3:55:e1:70:30:07:42:bc:a3:
dd:27:df:49:33:01:82:6f:d2:08:b2:8e:c1:a7:7e:
5f:ca:0b:97:97:b2:67:97:20:02:ce:9b:52:31:5b:
9f:37:0c:28:f3:90:35:24:38:83:29:7f:5c:be:0c:
70:b8:fc:58:98:6f:8d:c6:59:38:e5:cc:2b:19:17:
f9:31:f2:37:d6:a9:fa:10:6e:fe:1d:de:33:c2:bc:
83:33:1b:b9:24:a6:74:be:fe:63:ee:7f:5a:35:6e:
98:65:c7:3a:da:8e:75:41:a3:53:15:e4:cd:36:98:
88:10:04:ac:26:80:87:02:7e:84:71:4f:e8:9b:3a:
0c:84:ea:c0:4e:2f:be:3e:f1:56:70:14:5e:1c:c1:
c1:52:c5:8b:a7:10:0a:32:cf:ea:16:50:c1:26:34:
7f:01
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B4:99:3D:E8:54:87:80:5D:22:80:34:04:D1:F0:DA:BA:85:DF:99:A2
X509v3 Authority Key Identifier:
keyid:BB:52:8C:12:6A:ED:0D:7F:5A:06:95:0E:B2:C2:03:34:86:85:6A:15
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/u1KMEmrtDX9aBpUOssIDNIaFahU.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/1b/73e1e0-3d46-428c-ab3b-2159efee6a07/1/u1KMEmrtDX9aBpUOssIDNIaFahU.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/1b/73e1e0-3d46-428c-ab3b-2159efee6a07/1/u1KMEmrtDX9aBpUOssIDNIaFahU.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
11:2c:91:e2:57:2e:e7:5b:8d:a0:ca:72:97:3e:eb:3f:db:7f:
fb:26:c9:e0:5c:41:4c:9a:1c:cc:01:71:71:a0:23:6f:50:ef:
f8:42:35:b2:75:28:f0:1d:a1:e8:20:77:2c:cf:3f:d9:7e:45:
c3:af:f4:6f:2e:ec:bd:99:7d:af:27:95:cf:63:e1:45:7c:6c:
c9:36:28:c3:b4:b9:04:74:62:a2:b1:ae:94:7e:12:f9:f3:88:
b3:1d:ff:8b:92:fb:8d:1c:e0:ac:6b:44:27:6a:67:17:8e:42:
d8:ff:55:37:af:e0:74:7a:a0:8a:ea:d2:1c:01:82:19:55:f9:
2d:40:81:a1:07:b7:de:d4:36:57:15:dd:63:c3:69:f7:97:9f:
77:84:c7:14:0d:6a:2a:29:19:4c:54:42:8b:33:d9:dc:b6:e9:
b2:44:4f:c6:80:d0:bb:e1:15:a4:6f:6c:80:05:15:2e:77:e1:
ea:db:2d:84:42:23:77:b1:1e:db:3c:56:f3:f1:4a:3d:63:06:
15:71:49:b8:05:6f:44:07:e6:e2:47:e3:83:07:da:1f:0d:98:
09:72:e7:4c:fc:ce:9c:f5:e1:6c:5b:51:04:bb:78:c2:fc:1e:
90:32:e4:68:0e:d7:4c:0e:86:c0:10:bd:3d:76:ed:a3:e3:7b:
05:ba:ae:da
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri May 9 11:59:11 2025 by rpki-client