Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/44/44124d-8b15-45b2-a5c1-7bc73eee1447/1/ubgTmZO-Zl87XQ9pCe8Fj6j5eSI.mft
File: ubgTmZO-Zl87XQ9pCe8Fj6j5eSI.mft (raw, json)
Hash identifier: KBNlly6gxX2b5Kl7BjOXl7J7pi25a01ePOs0BOYvbPw=
Subject key identifier: 9A:B1:17:76:86:8A:D9:04:05:01:87:CF:EC:DC:51:BF:15:CA:00:BD
Authority key identifier: B9:B8:13:99:93:BE:66:5F:3B:5D:0F:69:09:EF:05:8F:A8:F9:79:22
Certificate issuer: /CN=b9b8139993be665f3b5d0f6909ef058fa8f97922
Certificate serial: 0196B8FEE85D8E180BFCEC25A4B10A630675
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/ubgTmZO-Zl87XQ9pCe8Fj6j5eSI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/44/44124d-8b15-45b2-a5c1-7bc73eee1447/1/ubgTmZO-Zl87XQ9pCe8Fj6j5eSI.mft
Manifest number: 08FE
Signing time: Sat 10 May 2025 07:00:35 +0000
Manifest this update: Sat 10 May 2025 07:00:35 +0000
Manifest next update: Sun 11 May 2025 07:00:35 +0000
Files and hashes: 1: KdXGUsS6YFFnPjVjyeI04m93TdQ.roa (hash: F1EV3pD+ahdpl3VAKymIXnj+Wbddg7Ey2m0ZW8zB4L0=)
2: bkhY0JpEEO9e7LOCTStEAO3KiFg.roa (hash: nFRZrXuS6GoRY3BCOn9rQkEjbqjSmpEWfOS5j9kS+AQ=)
3: ubgTmZO-Zl87XQ9pCe8Fj6j5eSI.crl (hash: epA/HdvRjNjoG8q3Uh2WJTqgWru3DoATDquiM0Rp5Sg=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/44/44124d-8b15-45b2-a5c1-7bc73eee1447/1/ubgTmZO-Zl87XQ9pCe8Fj6j5eSI.crl
rsync://rpki.ripe.net/repository/DEFAULT/44/44124d-8b15-45b2-a5c1-7bc73eee1447/1/ubgTmZO-Zl87XQ9pCe8Fj6j5eSI.mft
rsync://rpki.ripe.net/repository/DEFAULT/ubgTmZO-Zl87XQ9pCe8Fj6j5eSI.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 11 May 2025 04:00:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:b8:fe:e8:5d:8e:18:0b:fc:ec:25:a4:b1:0a:63:06:75
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=b9b8139993be665f3b5d0f6909ef058fa8f97922
Validity
Not Before: May 10 07:00:35 2025 GMT
Not After : May 11 07:00:35 2025 GMT
Subject: CN=9ab11776868ad904050187cfecdc51bf15ca00bd
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cc:4f:2b:28:27:c1:de:94:1a:90:07:8b:71:89:
1e:c7:1d:45:87:9c:7b:45:7c:2d:d4:a7:dc:22:49:
0b:13:f6:ea:51:c7:42:2a:33:62:41:91:83:bd:d3:
6d:7b:78:8d:da:21:f3:21:7f:55:7e:69:41:cd:b8:
fc:05:7e:db:0c:27:94:d1:71:74:fd:3a:59:69:6c:
6f:43:e0:30:be:a3:f7:3e:70:cc:c3:23:9b:e1:2a:
ab:39:70:63:e3:1d:43:f8:75:4f:ce:b7:42:a9:f4:
72:20:70:b3:3f:e2:45:23:30:57:0b:f4:c8:32:0a:
33:6c:f5:43:b8:d6:81:cb:05:79:da:45:a3:56:7a:
d5:d7:b6:1b:d7:16:c4:0e:ef:54:bf:07:69:b7:35:
e1:c6:2c:68:11:f4:4f:0e:cd:57:5b:78:16:73:9d:
04:95:56:21:85:26:f4:ce:64:9d:e4:22:27:58:4b:
b7:e1:d5:53:1b:cf:10:db:bb:58:f2:b5:42:df:35:
de:d0:25:66:9b:9e:b4:ed:a8:4b:92:be:82:f3:85:
0f:4b:c0:22:e8:5f:47:de:06:b1:08:c8:c8:fe:19:
e5:cb:f3:39:ec:d6:68:ef:85:fd:00:47:30:b1:21:
5f:4a:80:8f:b4:ea:65:8b:76:5d:ed:18:69:6a:c3:
8b:99
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
9A:B1:17:76:86:8A:D9:04:05:01:87:CF:EC:DC:51:BF:15:CA:00:BD
X509v3 Authority Key Identifier:
keyid:B9:B8:13:99:93:BE:66:5F:3B:5D:0F:69:09:EF:05:8F:A8:F9:79:22
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ubgTmZO-Zl87XQ9pCe8Fj6j5eSI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/44/44124d-8b15-45b2-a5c1-7bc73eee1447/1/ubgTmZO-Zl87XQ9pCe8Fj6j5eSI.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/44/44124d-8b15-45b2-a5c1-7bc73eee1447/1/ubgTmZO-Zl87XQ9pCe8Fj6j5eSI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
82:a7:5d:ff:9f:52:bb:93:75:33:d5:bb:6d:0a:05:17:71:ab:
c0:3e:a9:55:c8:27:c4:51:a6:4c:9f:3f:49:49:f1:1f:6c:ea:
b8:a1:3e:4e:23:a4:1c:a7:65:ad:40:7d:6d:99:80:35:b4:c3:
3c:55:a6:d0:5c:91:50:fb:34:df:95:8a:d4:89:fd:82:f4:43:
0f:8f:da:c2:81:4f:88:a0:ea:6a:a7:32:36:80:30:d1:f4:cb:
f0:4e:35:db:7f:bd:85:d6:09:50:9b:9b:33:7d:97:4c:a0:38:
79:f3:a9:39:f0:ec:30:65:36:ad:81:7f:42:f2:c5:d1:dd:1d:
44:ed:44:12:94:74:0c:2c:3b:51:18:91:68:e5:4e:87:5d:b4:
84:a9:12:ff:41:35:84:c2:b3:a8:94:db:90:48:3c:6b:64:ea:
90:e9:82:49:50:10:fb:ec:cf:66:ef:fd:27:8b:ac:5b:94:5d:
65:92:21:bb:e9:80:82:70:70:21:f3:cb:55:d1:7a:87:09:df:
95:d9:a4:c6:16:aa:2d:ee:c4:af:9a:d9:ef:3a:43:58:b6:c4:
9c:80:5f:71:35:e5:87:1b:e0:af:f9:2e:26:67:d0:be:42:a3:
e1:91:7f:b1:89:c7:ef:46:73:7f:f7:45:0c:b2:ad:3a:4f:20:
c9:13:dd:ab
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat May 10 10:33:47 2025 by rpki-client