Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/20/cf10db-7582-4553-bf1b-17911594ae51/1/urwezBf2YNW9ieFhZ7nVAxv2oMs.mft
File: urwezBf2YNW9ieFhZ7nVAxv2oMs.mft (raw, json)
Hash identifier: U+UTafKaeR6OYrplNKO7+qn8jNC4l1d3ZIiXFFch+6M=
Subject key identifier: 5D:35:DB:0F:9D:6E:9D:72:43:EE:B3:2E:07:1C:D2:58:97:BD:62:5B
Authority key identifier: BA:BC:1E:CC:17:F6:60:D5:BD:89:E1:61:67:B9:D5:03:1B:F6:A0:CB
Certificate issuer: /CN=babc1ecc17f660d5bd89e16167b9d5031bf6a0cb
Certificate serial: 0196BAB636036DB741E349BD37E3F28E9B2F
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/urwezBf2YNW9ieFhZ7nVAxv2oMs.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/20/cf10db-7582-4553-bf1b-17911594ae51/1/urwezBf2YNW9ieFhZ7nVAxv2oMs.mft
Manifest number: 0899
Signing time: Sat 10 May 2025 15:00:25 +0000
Manifest this update: Sat 10 May 2025 15:00:25 +0000
Manifest next update: Sun 11 May 2025 15:00:25 +0000
Files and hashes: 1: 2mA9oJ3ejOWgdJjYgfXkHnMZSOY.roa (hash: rFBnJEg4/3ovWS1Mn/GxMWwNkECurmsywX62nk463FU=)
2: urwezBf2YNW9ieFhZ7nVAxv2oMs.crl (hash: FWMkOcsDy0uRwgIRf2C+vR3B+TAP2zKMBAcp6YMw5bc=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/20/cf10db-7582-4553-bf1b-17911594ae51/1/urwezBf2YNW9ieFhZ7nVAxv2oMs.crl
rsync://rpki.ripe.net/repository/DEFAULT/20/cf10db-7582-4553-bf1b-17911594ae51/1/urwezBf2YNW9ieFhZ7nVAxv2oMs.mft
rsync://rpki.ripe.net/repository/DEFAULT/urwezBf2YNW9ieFhZ7nVAxv2oMs.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 11 May 2025 13:00:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:ba:b6:36:03:6d:b7:41:e3:49:bd:37:e3:f2:8e:9b:2f
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=babc1ecc17f660d5bd89e16167b9d5031bf6a0cb
Validity
Not Before: May 10 15:00:25 2025 GMT
Not After : May 11 15:00:25 2025 GMT
Subject: CN=5d35db0f9d6e9d7243eeb32e071cd25897bd625b
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a9:99:1d:b2:99:63:12:4c:20:d1:97:9c:7f:67:
75:9a:01:4c:70:e4:24:74:c8:03:fa:fd:99:07:66:
92:30:2f:24:83:39:41:4a:ac:08:55:2b:15:48:45:
e0:1f:3d:74:ac:68:ca:22:8b:e6:97:60:e5:8d:7a:
c9:99:83:db:67:8a:fe:2c:33:ad:36:5f:58:b3:01:
3c:4b:96:16:8c:b1:8b:7a:29:ee:37:18:29:fe:50:
97:3a:2c:20:e7:41:f9:3b:6d:60:6c:c3:62:73:1c:
00:a6:c2:6e:69:75:65:e8:2d:6f:a1:e8:36:18:4f:
d5:94:a9:73:d2:59:3f:71:51:24:e3:af:e8:c1:c8:
ab:97:55:eb:68:7d:a5:ca:65:af:7b:c5:10:6c:7f:
ff:15:ce:ed:d0:20:6c:df:6a:a0:c4:cc:0d:cd:ec:
79:e2:78:be:e1:c7:c6:1a:2e:58:91:02:78:fb:1b:
1c:ed:e2:98:75:3c:d0:d0:c7:19:ba:ea:b8:6a:95:
35:c0:9e:78:c3:05:f6:f2:36:50:5e:3f:43:34:7d:
0a:a5:f6:de:c3:d1:70:8e:42:e1:55:52:6a:61:34:
53:cf:82:82:a8:8e:97:8a:7d:16:7c:e2:7d:2c:46:
98:2b:94:86:b7:6e:d0:8b:a9:ae:2f:13:62:34:df:
8b:4b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
5D:35:DB:0F:9D:6E:9D:72:43:EE:B3:2E:07:1C:D2:58:97:BD:62:5B
X509v3 Authority Key Identifier:
keyid:BA:BC:1E:CC:17:F6:60:D5:BD:89:E1:61:67:B9:D5:03:1B:F6:A0:CB
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/urwezBf2YNW9ieFhZ7nVAxv2oMs.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/20/cf10db-7582-4553-bf1b-17911594ae51/1/urwezBf2YNW9ieFhZ7nVAxv2oMs.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/20/cf10db-7582-4553-bf1b-17911594ae51/1/urwezBf2YNW9ieFhZ7nVAxv2oMs.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
06:f4:39:ad:4a:0e:28:b9:48:92:de:ed:17:af:84:32:98:95:
6c:e3:9f:83:93:fd:40:8f:30:56:1b:6f:be:a8:1a:64:be:09:
2f:3e:05:46:77:44:31:72:b2:29:61:8d:0f:7d:5d:a0:ad:45:
3d:33:fa:3b:b3:c7:49:3a:c4:a8:40:65:89:d9:3a:88:e0:00:
34:e6:d7:e9:7f:c0:5e:01:74:34:0a:4b:05:11:c5:52:58:dd:
19:df:26:92:5e:2d:38:28:b1:3d:57:d5:94:97:62:47:b2:a3:
d9:18:3a:a2:ec:63:72:03:be:5b:88:84:86:bf:bd:6c:a7:3f:
93:bd:a7:9b:7e:d1:92:5e:a9:2a:c8:c9:a0:42:b6:72:c2:3b:
25:b9:df:37:46:ff:50:98:13:9a:71:ce:ef:ff:ff:49:15:13:
b5:78:de:c6:6b:f6:b3:47:a0:81:44:f4:fe:b9:7a:94:47:75:
d2:02:1e:e5:a5:b3:f0:af:b0:1b:1a:bb:bd:a0:88:04:af:59:
6b:19:7c:9a:3f:37:41:17:3a:a2:83:b9:fb:61:5f:78:c0:2f:
a1:10:8a:9c:ec:65:a9:3d:00:4a:75:f3:06:c2:c4:f3:bc:8c:
24:c8:07:bc:1c:04:18:f0:60:2d:aa:59:8d:07:a2:d3:fc:30:
c4:ec:89:d4
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZa6tjYDbbdB40m9N+PyjpsvMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGJhYmMxZWNjMTdmNjYwZDViZDg5ZTE2MTY3YjlkNTAzMWJm
NmEwY2IwHhcNMjUwNTEwMTUwMDI1WhcNMjUwNTExMTUwMDI1WjAzMTEwLwYDVQQD
Eyg1ZDM1ZGIwZjlkNmU5ZDcyNDNlZWIzMmUwNzFjZDI1ODk3YmQ2MjViMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAqZkdspljEkwg0Zecf2d1mgFMcOQk
dMgD+v2ZB2aSMC8kgzlBSqwIVSsVSEXgHz10rGjKIovml2DljXrJmYPbZ4r+LDOt
Nl9YswE8S5YWjLGLeinuNxgp/lCXOiwg50H5O21gbMNicxwApsJuaXVl6C1voeg2
GE/VlKlz0lk/cVEk46/owcirl1XraH2lymWve8UQbH//Fc7t0CBs32qgxMwNzex5
4ni+4cfGGi5YkQJ4+xsc7eKYdTzQ0McZuuq4apU1wJ54wwX28jZQXj9DNH0Kpfbe
w9FwjkLhVVJqYTRTz4KCqI6Xin0WfOJ9LEaYK5SGt27Qi6muLxNiNN+LSwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFF012w+dbp1yQ+6zLgcc0liXvWJbMB8GA1UdIwQY
MBaAFLq8HswX9mDVvYnhYWe51QMb9qDLMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvdXJ3ZXpCZjJZTlc5aWVGaFo3blZBeHYyb01zLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8yMC9jZjEwZGItNzU4Mi00NTUzLWJmMWIt
MTc5MTE1OTRhZTUxLzEvdXJ3ZXpCZjJZTlc5aWVGaFo3blZBeHYyb01zLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8yMC9jZjEwZGItNzU4Mi00NTUzLWJmMWItMTc5MTE1OTRhZTUx
LzEvdXJ3ZXpCZjJZTlc5aWVGaFo3blZBeHYyb01zLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEABvQ5rUoO
KLlIkt7tF6+EMpiVbOOfg5P9QI8wVhtvvqgaZL4JLz4FRndEMXKyKWGND31doK1F
PTP6O7PHSTrEqEBlidk6iOAANObX6X/AXgF0NApLBRHFUljdGd8mkl4tOCixPVfV
lJdiR7Kj2Rg6ouxjcgO+W4iEhr+9bKc/k72nm37Rkl6pKsjJoEK2csI7JbnfN0b/
UJgTmnHO7///SRUTtXjexmv2s0eggUT0/rl6lEd10gIe5aWz8K+wGxq7vaCIBK9Z
axl8mj83QRc6ooO5+2FfeMAvoRCKnOxlqT0ASnXzBsLE87yMJMgHvBwEGPBgLapZ
jQei0/wwxOyJ1A==
-----END CERTIFICATE-----
Generated at Sat May 10 17:48:25 2025 by rpki-client