Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/48/c071a8-54aa-4abd-8127-edf7bb653f13/1/u-Eo3LaBD_3FArowR81BkTLaInQ.mft
File: u-Eo3LaBD_3FArowR81BkTLaInQ.mft (raw, json)
Hash identifier: VD1DBiLxso12MtZkaJYIugSOi1ZB4CNs3v/Xfn3EK1o=
Subject key identifier: A0:BB:C3:29:A9:94:6C:C9:94:3B:EE:2B:62:0E:8C:7F:E0:E0:ED:70
Authority key identifier: BB:E1:28:DC:B6:81:0F:FD:C5:02:BA:30:47:CD:41:91:32:DA:22:74
Certificate issuer: /CN=bbe128dcb6810ffdc502ba3047cd419132da2274
Certificate serial: 0196BAED9B21B1B7873350E7A5AB8420C922
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/u-Eo3LaBD_3FArowR81BkTLaInQ.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/48/c071a8-54aa-4abd-8127-edf7bb653f13/1/u-Eo3LaBD_3FArowR81BkTLaInQ.mft
Manifest number: 1485
Signing time: Sat 10 May 2025 16:00:55 +0000
Manifest this update: Sat 10 May 2025 16:00:55 +0000
Manifest next update: Sun 11 May 2025 16:00:55 +0000
Files and hashes: 1: KyDiW-yP4PoEMeO0WHmm0uQpXzo.roa (hash: 7vZ+OrglKDbrLCd5IBuAg6rXUphyAUCG7HZaGMHHYfs=)
2: u-Eo3LaBD_3FArowR81BkTLaInQ.crl (hash: gsRO9lTvEPOlbbGb+A9ESzPO0YZrvDRcShHdkiSekyk=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/48/c071a8-54aa-4abd-8127-edf7bb653f13/1/u-Eo3LaBD_3FArowR81BkTLaInQ.crl
rsync://rpki.ripe.net/repository/DEFAULT/48/c071a8-54aa-4abd-8127-edf7bb653f13/1/u-Eo3LaBD_3FArowR81BkTLaInQ.mft
rsync://rpki.ripe.net/repository/DEFAULT/u-Eo3LaBD_3FArowR81BkTLaInQ.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 11 May 2025 13:00:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:ba:ed:9b:21:b1:b7:87:33:50:e7:a5:ab:84:20:c9:22
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=bbe128dcb6810ffdc502ba3047cd419132da2274
Validity
Not Before: May 10 16:00:55 2025 GMT
Not After : May 11 16:00:55 2025 GMT
Subject: CN=a0bbc329a9946cc9943bee2b620e8c7fe0e0ed70
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ca:4a:83:b6:e7:49:d0:89:61:9e:a1:dd:5a:71:
33:6d:7e:c7:db:bc:cb:6d:b4:1c:c2:a6:e8:82:69:
cf:66:a2:9f:42:e6:af:4c:1a:63:13:11:10:26:f8:
85:f7:54:31:59:fd:0e:9b:6d:31:53:4d:fd:ee:9a:
4b:18:05:ca:82:60:30:34:13:c8:ce:b7:57:e6:0b:
c8:12:1c:86:b9:c4:95:7c:84:95:02:f8:ce:7d:8f:
d1:8f:70:9c:80:b8:4d:c4:9d:fa:98:c9:38:d7:85:
ca:6c:fd:7f:60:cd:2f:8d:fb:57:2c:d3:4e:13:4e:
f4:f3:f3:4c:5a:28:4b:22:bb:a1:21:cf:17:0c:c9:
4a:66:fd:21:c9:99:52:13:79:7a:69:c1:8b:38:0d:
05:b8:fc:0e:da:0d:3b:fc:21:f0:0b:75:32:ee:16:
0e:4a:8a:1d:18:5d:85:56:27:a8:17:63:4f:61:43:
df:ac:a6:1f:e0:eb:89:a2:c7:ad:68:cb:e0:85:5f:
71:ee:d5:86:8e:5c:4e:bb:b4:56:c8:f4:36:33:25:
d7:71:de:08:61:f9:34:10:7d:37:37:1b:72:6a:6b:
1f:0e:22:8c:27:16:86:0b:18:3a:0a:45:50:96:7d:
24:38:9a:2c:72:e6:c4:1a:df:19:94:80:a1:46:69:
76:03
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A0:BB:C3:29:A9:94:6C:C9:94:3B:EE:2B:62:0E:8C:7F:E0:E0:ED:70
X509v3 Authority Key Identifier:
keyid:BB:E1:28:DC:B6:81:0F:FD:C5:02:BA:30:47:CD:41:91:32:DA:22:74
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/u-Eo3LaBD_3FArowR81BkTLaInQ.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/48/c071a8-54aa-4abd-8127-edf7bb653f13/1/u-Eo3LaBD_3FArowR81BkTLaInQ.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/48/c071a8-54aa-4abd-8127-edf7bb653f13/1/u-Eo3LaBD_3FArowR81BkTLaInQ.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
05:2a:07:b2:d5:57:6f:f3:51:16:69:23:6a:55:a5:48:03:f1:
51:5b:31:23:94:9c:3a:13:9f:2d:d1:e6:91:e5:98:bf:a8:91:
a6:82:2e:30:43:fa:e0:20:cf:19:41:34:e4:3b:52:56:af:b2:
94:e0:cd:6c:7a:f9:27:0e:dd:95:32:e4:b5:1c:46:a4:4d:bc:
81:df:61:ca:da:fc:5f:d9:5c:e5:29:c9:df:cf:15:4d:6a:35:
95:4e:ba:1b:b2:fd:da:be:5e:3f:23:8c:82:02:bb:82:3d:ed:
4a:ba:af:93:ef:c1:d2:8b:2e:0f:f2:08:7b:83:c2:03:07:87:
20:d5:ac:b4:fb:0a:01:da:7e:97:10:53:28:6d:3c:32:de:76:
4d:85:00:1e:13:f0:75:59:a2:29:9b:3d:98:00:07:d9:08:2a:
3c:4b:0a:e8:e5:f3:ca:21:1e:b0:62:78:07:a9:32:ee:7d:58:
c3:5c:78:8d:14:2f:68:95:0b:c2:18:18:39:20:57:2c:77:5f:
e2:d3:83:cf:ce:f6:9b:7c:16:b2:31:f4:b0:5a:7b:23:03:8d:
ed:ff:e5:5b:c7:db:6b:82:11:ed:ec:0d:9e:51:54:76:b4:0e:
83:d5:0f:52:f2:d0:b6:bc:08:a9:20:a4:89:c0:de:8c:62:af:
90:3b:83:a2
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat May 10 19:50:21 2025 by rpki-client