Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/4a/43bb94-94c6-4dad-a372-5fcfa421975c/1/u7hl_W36q6dxJJt-uujr1SgKDJc.mft
File: u7hl_W36q6dxJJt-uujr1SgKDJc.mft (raw, json)
Hash identifier: ENJxQHMHcjloSg8SDGZPfoY+iFETPMQTfSpWpIrXqpI=
Subject key identifier: 84:99:36:75:8B:90:2A:E3:FE:4F:ED:64:82:04:71:85:E3:9B:D9:A0
Authority key identifier: BB:B8:65:FD:6D:FA:AB:A7:71:24:9B:7E:BA:E8:EB:D5:28:0A:0C:97
Certificate issuer: /CN=bbb865fd6dfaaba771249b7ebae8ebd5280a0c97
Certificate serial: 0196BC6E09AE7AE2CC3BCFAC977E785C29D6
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/u7hl_W36q6dxJJt-uujr1SgKDJc.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/4a/43bb94-94c6-4dad-a372-5fcfa421975c/1/u7hl_W36q6dxJJt-uujr1SgKDJc.mft
Manifest number: 107E
Signing time: Sat 10 May 2025 23:00:50 +0000
Manifest this update: Sat 10 May 2025 23:00:50 +0000
Manifest next update: Sun 11 May 2025 23:00:50 +0000
Files and hashes: 1: kr3FPTrUbvprQB5gOzb6Xm9In9I.roa (hash: hZOcB5l1wSRFBsah9a6wwCM7j6k84PdiP/Urp0eSJlg=)
2: u7hl_W36q6dxJJt-uujr1SgKDJc.crl (hash: FzkNCFlzHifRU+uOFjW09v6j29qCbRQTpv+lUQgb7Fs=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/4a/43bb94-94c6-4dad-a372-5fcfa421975c/1/u7hl_W36q6dxJJt-uujr1SgKDJc.crl
rsync://rpki.ripe.net/repository/DEFAULT/4a/43bb94-94c6-4dad-a372-5fcfa421975c/1/u7hl_W36q6dxJJt-uujr1SgKDJc.mft
rsync://rpki.ripe.net/repository/DEFAULT/u7hl_W36q6dxJJt-uujr1SgKDJc.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 11 May 2025 22:00:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:bc:6e:09:ae:7a:e2:cc:3b:cf:ac:97:7e:78:5c:29:d6
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=bbb865fd6dfaaba771249b7ebae8ebd5280a0c97
Validity
Not Before: May 10 23:00:50 2025 GMT
Not After : May 11 23:00:50 2025 GMT
Subject: CN=849936758b902ae3fe4fed6482047185e39bd9a0
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b9:72:bd:e0:93:b9:85:7e:18:cf:fe:0e:69:95:
47:83:e1:ba:9e:9b:58:32:a7:6f:b4:fc:10:01:e6:
12:ec:37:a7:99:82:58:aa:91:38:0e:ff:e3:6f:13:
72:d6:56:aa:57:b3:e5:17:53:fe:4e:52:e8:74:ab:
7a:c1:aa:92:f4:fd:a3:a4:59:c7:24:2d:97:78:fb:
29:5a:3b:1b:da:2a:bb:04:81:2e:de:f6:63:0d:51:
a5:02:28:21:81:c7:16:7a:a5:93:de:34:b2:31:cc:
22:26:1e:61:19:ed:fb:61:75:b7:cd:04:9a:dd:f0:
83:d5:2f:e8:1e:0e:08:a6:9f:93:8d:98:17:3d:ac:
0b:2a:f4:3b:08:d1:50:88:32:e5:00:e2:79:0b:16:
99:50:07:71:9f:1c:4c:79:53:8d:5e:19:65:6a:f8:
82:c0:16:de:55:f6:01:4e:09:d2:42:f3:f8:34:2d:
de:f5:fc:48:bd:85:04:f4:e0:b6:71:a4:98:18:5b:
73:b9:29:89:7e:cc:80:87:2b:e4:63:5d:af:85:09:
54:76:9d:0d:b8:81:14:d4:0f:b8:47:11:ee:09:28:
06:cf:84:64:44:3b:82:53:78:c0:ab:44:ce:d5:03:
9b:9d:95:19:62:6f:8a:f2:5c:2f:50:84:24:ef:ae:
0a:2b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
84:99:36:75:8B:90:2A:E3:FE:4F:ED:64:82:04:71:85:E3:9B:D9:A0
X509v3 Authority Key Identifier:
keyid:BB:B8:65:FD:6D:FA:AB:A7:71:24:9B:7E:BA:E8:EB:D5:28:0A:0C:97
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/u7hl_W36q6dxJJt-uujr1SgKDJc.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/4a/43bb94-94c6-4dad-a372-5fcfa421975c/1/u7hl_W36q6dxJJt-uujr1SgKDJc.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/4a/43bb94-94c6-4dad-a372-5fcfa421975c/1/u7hl_W36q6dxJJt-uujr1SgKDJc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
6e:48:b5:57:82:2b:c3:c8:b1:15:bb:47:cc:8f:da:04:b1:20:
0b:86:70:0b:99:3a:a3:93:1b:4f:53:5a:86:b1:09:79:68:30:
2d:48:45:eb:f0:81:af:cf:e5:13:90:ec:85:71:ea:d9:f5:36:
2e:7d:83:e2:b6:fb:f2:c6:11:f4:f3:06:83:e9:2d:a4:25:bb:
19:63:dc:7c:27:1b:58:2a:d7:69:7f:54:a2:4b:97:bc:a8:7c:
88:e4:af:52:74:59:b5:4e:80:f3:5f:99:09:3c:20:fa:84:ca:
9e:dc:ae:99:09:f9:9b:62:19:14:f2:22:d9:51:0b:fe:09:d7:
3d:6c:ea:7e:77:35:6b:9b:e8:45:7f:d8:41:2c:9c:3f:35:91:
d1:55:c1:35:78:26:44:5f:fe:55:83:a0:0f:13:cb:27:e9:b6:
d4:67:75:22:a1:ab:1c:18:55:3b:1b:40:f3:41:36:14:07:d1:
f3:0e:e0:0b:e4:d5:32:94:1f:b0:6e:e8:c8:bf:42:b3:b2:a3:
cc:93:55:73:2f:a9:d8:ff:5e:6f:7c:47:a1:c7:8a:83:57:fb:
17:4c:24:b3:d9:2b:8e:92:a1:3d:73:23:99:ab:98:6b:75:00:
e3:c7:05:ed:7b:df:98:28:7b:e7:ec:91:63:ca:44:72:45:b7:
38:1a:e7:23
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun May 11 02:14:00 2025 by rpki-client