Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/1d/b73add-ea0f-4c22-980e-059bab015cc3/1/u-Am7yaSCQnZMepNrJ2TkEhrQVM.mft
File: u-Am7yaSCQnZMepNrJ2TkEhrQVM.mft (raw, json)
Hash identifier: W3Ysz660LgxY73qAPZ0sxX9yLyhyeeLvyfiGwPsY3tA=
Subject key identifier: 56:71:2F:00:0A:65:6E:A6:14:B9:8B:7A:50:5B:88:35:80:A5:D8:83
Authority key identifier: BB:E0:26:EF:26:92:09:09:D9:31:EA:4D:AC:9D:93:90:48:6B:41:53
Certificate issuer: /CN=bbe026ef26920909d931ea4dac9d9390486b4153
Certificate serial: 0196B032C899D690DDEF0939A78D7A8B09CC
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/u-Am7yaSCQnZMepNrJ2TkEhrQVM.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/1d/b73add-ea0f-4c22-980e-059bab015cc3/1/u-Am7yaSCQnZMepNrJ2TkEhrQVM.mft
Manifest number: 1409
Signing time: Thu 08 May 2025 14:00:40 +0000
Manifest this update: Thu 08 May 2025 14:00:40 +0000
Manifest next update: Fri 09 May 2025 14:00:40 +0000
Files and hashes: 1: dwPtZ0dw8XTxu-Q4XyALaYmwsrA.roa (hash: JYJf04rqGTREcvlrGWDW0Zya9cc0gj5IVi8xJQh0opk=)
2: u-Am7yaSCQnZMepNrJ2TkEhrQVM.crl (hash: Y1J9KrZsEoS4CxJQt3QAMa/peNX0ZzIUOY0Um5AGn14=)
3: uB-4YlNuT93bQpmxAKztWNH51Lk.roa (hash: LpguRr5dSEGY8OOONKW8ORg02cUPgVyvd4FQIDkFbFI=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/1d/b73add-ea0f-4c22-980e-059bab015cc3/1/u-Am7yaSCQnZMepNrJ2TkEhrQVM.crl
rsync://rpki.ripe.net/repository/DEFAULT/1d/b73add-ea0f-4c22-980e-059bab015cc3/1/u-Am7yaSCQnZMepNrJ2TkEhrQVM.mft
rsync://rpki.ripe.net/repository/DEFAULT/u-Am7yaSCQnZMepNrJ2TkEhrQVM.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 09 May 2025 14:00:40 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:b0:32:c8:99:d6:90:dd:ef:09:39:a7:8d:7a:8b:09:cc
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=bbe026ef26920909d931ea4dac9d9390486b4153
Validity
Not Before: May 8 14:00:40 2025 GMT
Not After : May 9 14:00:40 2025 GMT
Subject: CN=56712f000a656ea614b98b7a505b883580a5d883
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:da:1a:d7:95:b7:2d:a7:8c:4a:0e:7d:fd:15:2a:
9a:4a:6e:2f:5e:56:6b:3c:92:87:79:97:8c:c0:31:
ca:5f:f4:a6:90:b6:f3:16:ad:2a:22:c7:c6:7a:8e:
d5:a8:d5:37:34:e8:4a:23:d4:19:eb:ea:e5:20:92:
e8:2b:73:7f:b7:00:55:d3:b6:97:74:d0:49:3e:9d:
0b:a1:14:0e:b3:14:e6:2e:e7:3b:d2:40:52:04:b7:
06:0d:56:34:b6:77:c4:8c:e3:79:e6:b6:88:92:58:
8b:df:cb:18:a7:1d:43:f2:70:c9:1d:f8:78:3f:04:
42:e3:4e:8c:3f:1c:80:a2:41:80:a9:16:06:bf:b7:
f3:8d:f5:95:63:0e:4f:26:c1:05:f1:87:65:12:a4:
70:0a:1e:7f:36:dd:ea:76:17:c3:2a:3d:71:aa:8f:
2e:1e:98:44:bb:78:e5:99:89:f5:1e:a2:44:de:c4:
87:d4:63:6f:9d:62:7e:71:9d:22:f7:e2:bd:86:d5:
5f:b9:bf:9c:e7:dd:f7:6e:d0:39:cf:4c:33:ca:ea:
41:09:00:1a:dd:8c:83:e8:09:3e:d1:89:f4:3b:2a:
b0:33:2e:93:a9:8c:7b:95:8c:1d:9c:e9:52:6d:39:
57:74:f3:84:2a:82:71:e6:90:e3:4a:65:ca:0e:63:
b6:9d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
56:71:2F:00:0A:65:6E:A6:14:B9:8B:7A:50:5B:88:35:80:A5:D8:83
X509v3 Authority Key Identifier:
keyid:BB:E0:26:EF:26:92:09:09:D9:31:EA:4D:AC:9D:93:90:48:6B:41:53
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/u-Am7yaSCQnZMepNrJ2TkEhrQVM.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/1d/b73add-ea0f-4c22-980e-059bab015cc3/1/u-Am7yaSCQnZMepNrJ2TkEhrQVM.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/1d/b73add-ea0f-4c22-980e-059bab015cc3/1/u-Am7yaSCQnZMepNrJ2TkEhrQVM.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
2b:90:22:e7:94:60:c5:24:a5:5a:02:ff:83:76:6a:01:f7:db:
39:84:ac:52:46:f8:8d:f3:49:10:d0:6f:9d:7c:28:3b:fa:d2:
fd:76:a5:bf:f7:c5:2f:03:9d:9a:34:be:42:d0:91:de:72:91:
c6:86:cf:ce:ee:ec:e4:5a:37:54:5d:fd:02:2d:01:ef:29:78:
f3:c5:c2:fe:69:17:c2:c3:53:65:77:c0:40:f8:2e:08:dd:c7:
ad:bd:98:4b:06:32:b2:24:bd:c6:ef:af:32:d8:52:76:92:a3:
06:85:86:aa:5e:d1:fb:16:44:5d:bd:e1:68:be:42:c7:64:22:
72:d9:6d:06:a3:21:2f:78:b0:12:61:eb:27:6d:c0:76:bf:bc:
8d:d7:94:f9:e7:e4:fb:05:ef:39:20:cb:c4:47:bf:db:3d:e6:
de:39:6a:35:8a:9e:11:df:65:3a:5c:63:ae:86:df:b5:42:9f:
2a:3e:71:e0:d9:27:a9:62:f9:93:87:3f:e5:33:f2:2f:ce:3e:
55:d8:ef:19:92:07:be:8b:d0:37:54:a0:e0:9d:c3:4c:ec:57:
fa:dc:77:43:64:50:f2:00:76:4e:61:7b:aa:1e:73:52:22:b9:
30:99:42:64:5e:be:64:90:af:4b:a4:34:ab:69:7c:09:75:da:
6b:57:c8:d9
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu May 8 20:37:02 2025 by rpki-client