Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/2f/c212a2-37e9-4ad6-bbe6-835a5842b94c/1/u0cxiEug9XP6YYtuetUDoSyWWvM.mft
File: u0cxiEug9XP6YYtuetUDoSyWWvM.mft (raw, json)
Hash identifier: orNl3+bZtLwQMhJ3ShIGBptmvS3YsFL13jUuSElVSZE=
Subject key identifier: CB:83:97:7F:A5:56:DA:90:B8:CF:2C:2C:5F:C5:9D:20:48:58:EF:0B
Authority key identifier: BB:47:31:88:4B:A0:F5:73:FA:61:8B:6E:7A:D5:03:A1:2C:96:5A:F3
Certificate issuer: /CN=bb4731884ba0f573fa618b6e7ad503a12c965af3
Certificate serial: 0196A0F6A674EEC985AFF31E1DE04BD9E11E
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/u0cxiEug9XP6YYtuetUDoSyWWvM.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/2f/c212a2-37e9-4ad6-bbe6-835a5842b94c/1/u0cxiEug9XP6YYtuetUDoSyWWvM.mft
Manifest number: 0CB4
Signing time: Mon 05 May 2025 15:00:41 +0000
Manifest this update: Mon 05 May 2025 15:00:41 +0000
Manifest next update: Tue 06 May 2025 15:00:41 +0000
Files and hashes: 1: J2J2124S8bl0D8F_rprl_YIDy9g.roa (hash: EwSuszD8kbzr8hDPn6y6v2FnpMpKvYRTbCp+B6KwMRQ=)
2: TgyKwJa2KkbDi0Hpkc1sfLVSKbY.roa (hash: PBkxa8WbS+Zs7wyVcsYo6bQBjySTnxQqvA/GU7hJEfs=)
3: u0cxiEug9XP6YYtuetUDoSyWWvM.crl (hash: bspdfPlkjbkiIhPcSXDJxRj6TfQE5GYXKx/yNQ3AIKE=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/2f/c212a2-37e9-4ad6-bbe6-835a5842b94c/1/u0cxiEug9XP6YYtuetUDoSyWWvM.crl
rsync://rpki.ripe.net/repository/DEFAULT/2f/c212a2-37e9-4ad6-bbe6-835a5842b94c/1/u0cxiEug9XP6YYtuetUDoSyWWvM.mft
rsync://rpki.ripe.net/repository/DEFAULT/u0cxiEug9XP6YYtuetUDoSyWWvM.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 06 May 2025 15:00:41 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:a0:f6:a6:74:ee:c9:85:af:f3:1e:1d:e0:4b:d9:e1:1e
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=bb4731884ba0f573fa618b6e7ad503a12c965af3
Validity
Not Before: May 5 15:00:41 2025 GMT
Not After : May 6 15:00:41 2025 GMT
Subject: CN=cb83977fa556da90b8cf2c2c5fc59d204858ef0b
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c0:2a:b9:9c:1a:f8:1e:c5:c3:51:6b:a4:07:93:
60:68:6a:a0:9d:cb:5c:9a:a8:2d:60:e9:52:e3:c8:
2b:45:39:2d:74:05:cb:dc:e0:26:41:ac:ed:14:18:
03:4c:58:c3:8b:42:44:d8:1f:e8:b1:c2:eb:6d:4f:
46:b5:85:5e:3f:f3:05:bb:dc:50:dd:bb:46:79:92:
ef:72:86:c9:20:f3:ac:bd:ab:01:9c:ae:90:aa:0b:
83:cb:17:36:a6:4c:8b:29:64:ac:58:bd:24:5f:23:
d5:e9:18:71:a8:f4:9f:ba:ad:b8:b3:6e:68:13:89:
01:e5:43:9e:ae:69:c3:c8:46:d1:67:06:8d:4f:ae:
3e:6e:59:85:ea:84:0f:30:af:09:dc:6e:ca:11:8a:
69:67:62:84:d0:00:0d:5a:01:63:2e:06:15:1d:69:
4a:8e:ee:57:26:62:56:99:13:fc:e2:78:ab:6c:6d:
f5:5f:f3:45:64:2c:2e:13:56:d5:02:ac:ef:96:c7:
b6:3a:64:6b:68:1c:d6:90:c6:16:54:1b:d2:45:38:
83:10:43:09:ee:ad:1d:ed:78:b6:cb:23:2e:6f:9a:
61:24:64:1a:1c:08:5b:e5:82:ef:52:6d:86:83:6f:
57:7d:a1:a1:01:22:bf:97:5e:85:b4:68:9f:67:89:
47:ab
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
CB:83:97:7F:A5:56:DA:90:B8:CF:2C:2C:5F:C5:9D:20:48:58:EF:0B
X509v3 Authority Key Identifier:
keyid:BB:47:31:88:4B:A0:F5:73:FA:61:8B:6E:7A:D5:03:A1:2C:96:5A:F3
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/u0cxiEug9XP6YYtuetUDoSyWWvM.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/2f/c212a2-37e9-4ad6-bbe6-835a5842b94c/1/u0cxiEug9XP6YYtuetUDoSyWWvM.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/2f/c212a2-37e9-4ad6-bbe6-835a5842b94c/1/u0cxiEug9XP6YYtuetUDoSyWWvM.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
2c:c7:49:77:05:15:6e:b6:82:d2:63:8e:19:4f:9c:3a:ca:78:
90:dc:b1:c2:64:09:ff:81:14:9e:22:2a:d4:2f:5b:05:5a:44:
5c:c6:fb:31:6f:8f:f6:77:9b:bb:aa:50:c1:62:e4:ef:58:b1:
a2:f4:1d:0c:5e:e6:19:b8:e3:0b:41:67:59:a6:a4:c0:14:15:
79:70:16:31:65:46:39:d7:d4:58:eb:c3:ef:16:2b:81:f4:1c:
4e:ef:00:72:2f:5e:37:ed:44:b7:f8:3f:51:0d:bb:10:48:e2:
a5:6e:e9:ff:d2:fa:db:3e:37:70:41:36:89:6c:c9:84:56:6a:
9c:6e:ce:a1:2e:f7:42:ff:27:48:4c:f2:64:41:6e:90:33:29:
45:7d:ff:0d:39:b1:d1:c5:bb:18:86:31:63:d6:63:41:f7:cb:
07:c7:ec:18:aa:f2:3e:9a:87:12:bb:d3:1b:48:1d:de:c9:0b:
aa:31:78:6f:7b:1d:d9:3f:8c:21:d1:ae:6b:a5:72:6b:08:61:
ac:a3:35:6f:c8:c0:01:21:04:cf:fd:04:e7:f5:64:bb:8c:3d:
f3:ca:35:18:9d:d5:21:9c:16:23:ec:45:1e:08:1a:56:3a:57:
82:e9:0f:7d:d3:b9:65:32:73:ac:b1:12:d8:b1:12:28:9d:96:
1b:04:44:2c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon May 5 21:25:22 2025 by rpki-client