Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/46/b62c33-cc9c-4baf-a0ee-ed142e464335/1/u9zIw3chdOR7rIuTLlvse0ex2Ss.mft
File: u9zIw3chdOR7rIuTLlvse0ex2Ss.mft (raw, json)
Hash identifier: qu5AWpbdbC+WX3Qs5tuopsz+eK7iYOLMkmwzq1/FKl8=
Subject key identifier: 0D:8F:A9:A9:5B:5E:8E:D9:E9:D6:22:BF:E8:E9:87:15:FB:24:CE:99
Authority key identifier: BB:DC:C8:C3:77:21:74:E4:7B:AC:8B:93:2E:5B:EC:7B:47:B1:D9:2B
Certificate issuer: /CN=bbdcc8c3772174e47bac8b932e5bec7b47b1d92b
Certificate serial: 0196A4D3DC969B535BC54E5645F36E202393
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/u9zIw3chdOR7rIuTLlvse0ex2Ss.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/46/b62c33-cc9c-4baf-a0ee-ed142e464335/1/u9zIw3chdOR7rIuTLlvse0ex2Ss.mft
Manifest number: 1528
Signing time: Tue 06 May 2025 09:01:10 +0000
Manifest this update: Tue 06 May 2025 09:01:10 +0000
Manifest next update: Wed 07 May 2025 09:01:10 +0000
Files and hashes: 1: tUE8baZVU1NdKeMuH6kAeF6d40U.roa (hash: oR4YGvS/x8NPWIpEMxxjQSUvcEGgnnG9XZinqPPpzBA=)
2: u9zIw3chdOR7rIuTLlvse0ex2Ss.crl (hash: mw3f8iADJ9tAeA+cUHt9q9ywfT2/WlorODQtSpplMLA=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/46/b62c33-cc9c-4baf-a0ee-ed142e464335/1/u9zIw3chdOR7rIuTLlvse0ex2Ss.crl
rsync://rpki.ripe.net/repository/DEFAULT/46/b62c33-cc9c-4baf-a0ee-ed142e464335/1/u9zIw3chdOR7rIuTLlvse0ex2Ss.mft
rsync://rpki.ripe.net/repository/DEFAULT/u9zIw3chdOR7rIuTLlvse0ex2Ss.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 07 May 2025 04:00:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:a4:d3:dc:96:9b:53:5b:c5:4e:56:45:f3:6e:20:23:93
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=bbdcc8c3772174e47bac8b932e5bec7b47b1d92b
Validity
Not Before: May 6 09:01:10 2025 GMT
Not After : May 7 09:01:10 2025 GMT
Subject: CN=0d8fa9a95b5e8ed9e9d622bfe8e98715fb24ce99
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:be:45:00:57:15:eb:aa:d5:6e:ea:64:61:ad:87:
37:c6:ab:1b:d1:43:d6:20:0f:e0:a4:2c:c8:ec:f5:
55:f7:80:78:21:d5:65:2f:21:3f:f7:18:ab:8c:f5:
66:f0:85:f6:7f:33:8f:b4:72:6d:f9:45:12:c3:dd:
57:a7:09:db:c5:83:65:4f:17:0c:f7:1a:69:a1:dd:
79:86:13:9c:4e:af:08:80:03:10:c0:e3:d9:62:7a:
3c:80:34:9e:82:2b:88:e3:43:56:7c:29:75:03:bf:
21:ab:62:b2:11:30:8a:b3:46:99:ac:1a:0a:ab:8d:
ba:be:ef:cd:bf:12:be:0a:2e:df:87:cc:6f:c8:15:
31:80:c0:db:50:bb:07:d1:24:39:14:68:ee:cf:8c:
5c:7a:e3:3f:16:0d:65:7f:6f:45:e5:47:b6:e2:03:
b6:af:1f:60:30:e5:64:7b:dc:81:7a:7a:55:c3:a4:
9d:5b:94:03:e5:a6:29:40:e5:03:1e:aa:29:2f:8d:
b9:ea:2b:be:e8:bd:aa:5f:f6:6b:84:a2:41:30:43:
46:f7:9c:fe:0a:b2:80:85:14:70:83:4a:66:7e:7f:
11:44:3d:f6:dc:0c:5f:0d:d7:20:ec:89:cb:e8:b9:
f9:36:1d:25:9a:e1:8c:ad:09:b6:86:d8:e2:6f:84:
72:9b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
0D:8F:A9:A9:5B:5E:8E:D9:E9:D6:22:BF:E8:E9:87:15:FB:24:CE:99
X509v3 Authority Key Identifier:
keyid:BB:DC:C8:C3:77:21:74:E4:7B:AC:8B:93:2E:5B:EC:7B:47:B1:D9:2B
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/u9zIw3chdOR7rIuTLlvse0ex2Ss.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/46/b62c33-cc9c-4baf-a0ee-ed142e464335/1/u9zIw3chdOR7rIuTLlvse0ex2Ss.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/46/b62c33-cc9c-4baf-a0ee-ed142e464335/1/u9zIw3chdOR7rIuTLlvse0ex2Ss.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
21:2e:aa:94:2d:2b:32:23:7a:2b:98:ae:80:af:0a:a5:27:66:
20:9b:ed:8b:5b:86:bc:92:f9:f2:46:0d:07:9e:4d:23:4e:28:
2f:ca:9f:f5:70:70:e4:2a:4d:e5:00:45:e3:59:c3:60:08:94:
5d:48:f6:77:dd:d1:ee:5a:63:63:0f:01:48:7b:4e:1b:41:fe:
2a:13:c8:ed:f3:f2:c4:d4:37:3d:55:3b:3a:fb:f1:ea:b1:6b:
0c:ff:75:bf:a1:55:f0:25:30:d8:ad:c9:2d:57:0d:6f:7d:b1:
a3:01:a3:0f:a9:53:25:9d:76:a4:92:0e:f3:5f:34:84:1b:fe:
ee:af:72:22:82:d0:fa:05:94:8c:d9:7d:38:69:0e:c2:40:bb:
e0:25:c7:d6:0e:40:0b:80:a5:81:2b:8b:d5:db:fd:6d:7c:7e:
5e:61:c7:56:69:4b:f8:0b:24:9f:80:b2:6c:8a:bc:dd:c5:2e:
c2:e6:b3:77:0b:00:9d:94:15:42:f8:20:f5:6a:a1:48:24:20:
d4:40:a9:ae:de:08:07:34:85:f2:7f:67:6d:7c:32:8e:0b:57:
f2:cd:f4:3a:5b:10:86:57:4b:c5:f3:94:02:ce:74:22:55:0d:
a2:c0:f2:ba:9d:a1:9c:be:0b:4f:97:70:30:65:05:09:8d:03:
5f:bf:29:a4
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue May 6 12:16:34 2025 by rpki-client