Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/57/0b4b70-6d61-43c6-8986-41933955b73f/1/u_mPikT9YO72t0nSFOVsgRiXZgw.mft
File: u_mPikT9YO72t0nSFOVsgRiXZgw.mft (raw, json)
Hash identifier: HkVZPTy9bfkyQPoDVPgOUyioRw6Y8JBuYZYa6ubgu5U=
Subject key identifier: 32:3E:C2:36:A7:75:0D:C3:F5:3A:47:9C:EB:61:68:CB:B4:47:47:B5
Authority key identifier: BB:F9:8F:8A:44:FD:60:EE:F6:B7:49:D2:14:E5:6C:81:18:97:66:0C
Certificate issuer: /CN=bbf98f8a44fd60eef6b749d214e56c811897660c
Certificate serial: 0196BE256BC8496BA0B5D602F353F4CA323F
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/u_mPikT9YO72t0nSFOVsgRiXZgw.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/57/0b4b70-6d61-43c6-8986-41933955b73f/1/u_mPikT9YO72t0nSFOVsgRiXZgw.mft
Manifest number: 20
Signing time: Sun 11 May 2025 07:00:45 +0000
Manifest this update: Sun 11 May 2025 07:00:45 +0000
Manifest next update: Mon 12 May 2025 07:00:45 +0000
Files and hashes: 1: u_mPikT9YO72t0nSFOVsgRiXZgw.crl (hash: r/1sAwiCWrJrksIs8YrMwV1pmUMK2+9dTvyVI7WR+BA=)
2: xkzazz831mQOXNGmSz3uWho6Ohk.roa (hash: kcYkLf+1B2AuNTj7vUuf68FA8ProRpgWzdWOYFENYJM=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/57/0b4b70-6d61-43c6-8986-41933955b73f/1/u_mPikT9YO72t0nSFOVsgRiXZgw.crl
rsync://rpki.ripe.net/repository/DEFAULT/57/0b4b70-6d61-43c6-8986-41933955b73f/1/u_mPikT9YO72t0nSFOVsgRiXZgw.mft
rsync://rpki.ripe.net/repository/DEFAULT/u_mPikT9YO72t0nSFOVsgRiXZgw.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 12 May 2025 07:00:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:be:25:6b:c8:49:6b:a0:b5:d6:02:f3:53:f4:ca:32:3f
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=bbf98f8a44fd60eef6b749d214e56c811897660c
Validity
Not Before: May 11 07:00:45 2025 GMT
Not After : May 12 07:00:45 2025 GMT
Subject: CN=323ec236a7750dc3f53a479ceb6168cbb44747b5
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c4:75:60:b4:73:1b:ee:8d:f3:a8:ad:1f:89:12:
5c:35:f7:06:b7:4b:31:11:7f:8c:4b:11:5a:11:3a:
75:dc:c6:ed:a3:ed:e1:36:78:6e:44:4b:c3:08:cf:
20:38:94:2d:38:b3:16:5b:0a:33:c6:9b:71:66:84:
d9:83:c6:a3:42:1f:02:25:3f:c6:6b:9d:6b:b9:b4:
e2:39:4d:14:9f:62:eb:82:1c:69:e6:29:f2:f7:65:
b2:20:ac:9b:5f:d3:54:1d:3a:ba:f9:0e:ec:a2:26:
1e:57:50:5d:e6:60:ad:6f:11:c9:1e:7b:ad:b3:8e:
0b:e7:8b:3e:e0:e1:a3:5c:eb:2f:47:c5:f9:4f:67:
29:a9:51:0d:e8:3c:7a:1b:bd:5a:09:98:75:81:46:
aa:40:4e:3d:55:dd:f1:5d:65:1a:e9:7a:1b:79:93:
20:25:a5:45:5e:83:63:16:ce:da:20:27:4d:af:0a:
77:a6:f9:ca:b4:70:a5:36:55:ae:47:52:ca:bb:41:
22:99:df:3a:89:ee:80:3b:23:96:14:79:84:07:72:
66:9c:c7:b4:a8:54:3e:8b:ab:9c:0f:ca:8b:c6:dc:
02:8d:d8:55:1d:23:b9:2a:9f:71:c0:84:8e:d7:c8:
53:4f:27:39:3e:20:c4:9c:be:ca:39:65:6f:72:ee:
0d:cb
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
32:3E:C2:36:A7:75:0D:C3:F5:3A:47:9C:EB:61:68:CB:B4:47:47:B5
X509v3 Authority Key Identifier:
keyid:BB:F9:8F:8A:44:FD:60:EE:F6:B7:49:D2:14:E5:6C:81:18:97:66:0C
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/u_mPikT9YO72t0nSFOVsgRiXZgw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/57/0b4b70-6d61-43c6-8986-41933955b73f/1/u_mPikT9YO72t0nSFOVsgRiXZgw.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/57/0b4b70-6d61-43c6-8986-41933955b73f/1/u_mPikT9YO72t0nSFOVsgRiXZgw.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
55:25:05:21:20:4e:e8:c1:99:7c:3c:44:a9:9e:0b:6f:16:89:
17:31:d4:f5:0a:35:79:ee:14:f2:59:bd:f2:9e:aa:0c:7e:77:
b7:26:8b:c5:7b:22:1f:e9:2f:74:ef:4a:29:fd:dc:20:14:64:
c5:b1:e0:0a:7f:b7:2a:53:98:a3:dd:66:b9:c4:36:52:2f:34:
ca:d5:b9:1e:13:1a:0c:2d:51:32:ac:7e:f9:54:48:57:a7:3d:
72:8e:81:d9:c2:db:7e:d5:b4:c2:9b:42:19:62:67:45:7e:06:
97:58:a2:6b:a9:fa:39:64:e3:40:94:f0:7f:2a:c9:25:37:35:
6d:12:5e:c6:87:8f:90:8e:2f:73:19:10:a3:a9:7b:10:f8:8c:
1e:c2:87:ae:d4:e2:66:e1:2c:85:f5:1a:10:ed:d5:77:e6:63:
31:58:a5:12:11:b0:54:75:19:01:99:cd:cf:72:56:4a:3a:87:
62:34:12:f7:95:c5:76:eb:82:ad:32:2e:cf:8a:d3:cd:b3:85:
b9:3b:9b:55:57:96:09:29:7c:e5:c2:44:8d:8a:cf:f5:a7:0c:
1e:50:91:77:ce:34:e9:51:3c:cb:a3:5a:19:9a:16:2d:52:71:
3f:97:bd:8d:27:00:44:3a:f9:0a:bc:e0:59:95:f2:d5:06:e2:
3d:18:95:9e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun May 11 16:44:47 2025 by rpki-client