Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/2e/a58bde-c461-483f-911b-d179881d0618/1/u9ky9wZLH96aEiXzMnefwi5nMjk.mft
File: u9ky9wZLH96aEiXzMnefwi5nMjk.mft (raw, json)
Hash identifier: Nui1KZCORpPvMA1Y/SB8T12oDwSr1HRtKMA16E3AxHw=
Subject key identifier: 9E:6E:85:1D:22:75:68:66:B4:8A:38:DF:B9:33:02:C9:53:87:C0:F1
Authority key identifier: BB:D9:32:F7:06:4B:1F:DE:9A:12:25:F3:32:77:9F:C2:2E:67:32:39
Certificate issuer: /CN=bbd932f7064b1fde9a1225f332779fc22e673239
Certificate serial: 0196C3BA14B708701FB4C7C5F8E8DC788358
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/u9ky9wZLH96aEiXzMnefwi5nMjk.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/2e/a58bde-c461-483f-911b-d179881d0618/1/u9ky9wZLH96aEiXzMnefwi5nMjk.mft
Manifest number: 1537
Signing time: Mon 12 May 2025 09:01:14 +0000
Manifest this update: Mon 12 May 2025 09:01:14 +0000
Manifest next update: Tue 13 May 2025 09:01:14 +0000
Files and hashes: 1: IeGYeKSb1mNrsDIK_MI2sgH59I8.roa (hash: oXG5f/ORp1JUaZ43fOOSU/ciwmtq1CAOULwIZj8cXsU=)
2: eXtnT82vLrkQIX6pAwLJMLSD-bg.roa (hash: Rihs3zkVa6kI7f06D37U5dnfsQw2ilSm2htFUgyMqTU=)
3: u9ky9wZLH96aEiXzMnefwi5nMjk.crl (hash: 6AMrcUaEM5S3y2EoyUVR7b78RnMzYJAYBa8SEx3Z0Uw=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/2e/a58bde-c461-483f-911b-d179881d0618/1/u9ky9wZLH96aEiXzMnefwi5nMjk.crl
rsync://rpki.ripe.net/repository/DEFAULT/2e/a58bde-c461-483f-911b-d179881d0618/1/u9ky9wZLH96aEiXzMnefwi5nMjk.mft
rsync://rpki.ripe.net/repository/DEFAULT/u9ky9wZLH96aEiXzMnefwi5nMjk.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 13 May 2025 09:01:14 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:c3:ba:14:b7:08:70:1f:b4:c7:c5:f8:e8:dc:78:83:58
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=bbd932f7064b1fde9a1225f332779fc22e673239
Validity
Not Before: May 12 09:01:14 2025 GMT
Not After : May 13 09:01:14 2025 GMT
Subject: CN=9e6e851d22756866b48a38dfb93302c95387c0f1
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c9:7b:19:c0:5b:fe:3a:54:9e:80:07:76:f0:9b:
28:4e:97:a7:22:20:9b:cc:de:d7:5a:05:a1:0f:d7:
6b:27:7f:38:f7:b3:dc:c2:fd:6c:03:a3:34:24:40:
25:3f:bc:dc:6a:7e:42:dd:ea:64:ed:60:39:4b:12:
c9:e0:33:21:8b:0b:36:67:28:c1:9e:6e:0c:f0:e6:
50:79:e7:3e:fa:86:44:19:bd:57:70:b4:70:18:59:
3e:b6:59:22:89:7d:78:9a:ba:0b:9e:6d:54:af:22:
4b:ae:8d:2e:97:98:82:13:be:06:de:d8:84:18:e1:
2c:b0:0a:fa:e8:e8:1d:75:9a:09:80:b7:c3:8e:a8:
b5:1f:f2:99:f9:43:ee:d1:e4:12:2e:9c:2b:4a:81:
ea:b9:a3:a0:07:2f:7f:69:38:ba:0e:a9:ac:f3:a7:
73:aa:ab:0d:d0:6e:3f:99:e1:aa:55:db:f7:79:b4:
3c:cd:6c:8a:71:1b:a4:1f:83:5a:ea:d8:7b:0e:64:
00:a4:da:c2:7e:ee:42:83:cf:79:2f:f5:8f:17:57:
59:9a:ff:35:ab:a2:be:ba:ad:34:4d:5a:c8:c7:1b:
4d:32:d7:1f:0e:e5:00:0a:f5:9d:c4:7a:93:5f:e0:
4f:81:17:5e:66:97:27:5a:76:7c:21:b4:13:76:dd:
79:4f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
9E:6E:85:1D:22:75:68:66:B4:8A:38:DF:B9:33:02:C9:53:87:C0:F1
X509v3 Authority Key Identifier:
keyid:BB:D9:32:F7:06:4B:1F:DE:9A:12:25:F3:32:77:9F:C2:2E:67:32:39
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/u9ky9wZLH96aEiXzMnefwi5nMjk.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/2e/a58bde-c461-483f-911b-d179881d0618/1/u9ky9wZLH96aEiXzMnefwi5nMjk.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/2e/a58bde-c461-483f-911b-d179881d0618/1/u9ky9wZLH96aEiXzMnefwi5nMjk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
1e:40:17:ff:a7:2c:d0:d5:19:97:53:a4:37:08:b0:47:80:c5:
34:41:7a:fd:85:c5:7a:3d:c5:7c:f6:f5:ab:5c:dd:3e:49:d3:
6e:e7:75:7d:2e:ee:d9:70:c8:b6:ce:dc:be:05:4d:25:9e:13:
70:c3:77:e9:25:6a:83:af:57:9c:f7:5f:68:62:2d:85:c8:0d:
7c:58:1f:d0:44:01:7b:b2:24:dc:82:86:d4:cc:e6:39:b7:59:
fc:75:8d:87:73:75:b2:0a:57:84:66:24:4e:8a:b9:3a:45:37:
d2:32:ef:09:fb:75:5a:df:67:3d:9e:2c:a5:54:94:ae:e1:fd:
a1:48:67:ae:55:a0:7c:9d:9d:a7:45:4e:c2:96:41:e9:b1:d6:
60:6e:9d:6b:50:2c:f7:5b:dc:e6:38:c0:c5:e7:e8:73:bc:09:
ca:e8:1d:78:68:f0:a1:f9:4d:12:e8:de:57:9f:19:26:28:91:
e3:42:d1:a4:d1:37:1d:7b:5f:d0:69:ac:5f:df:25:ed:3a:8a:
04:f5:1a:60:93:05:e5:73:39:ee:6b:90:eb:f9:65:21:68:5f:
61:bf:67:79:89:6c:a8:3f:4e:27:e1:e0:d6:3e:31:93:09:6f:
fc:37:05:2f:41:d2:33:31:f0:70:83:6e:0a:ac:71:2f:bb:82:
c9:84:48:48
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon May 12 19:31:26 2025 by rpki-client