Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/5a/23b148-e0dd-4fa6-af44-613017886e8b/1/uRHH7b8dPMT7B1OBo392JWuHKF0.mft
File: uRHH7b8dPMT7B1OBo392JWuHKF0.mft (raw, json)
Hash identifier: ILlJScW96mHBmelENUlteW0m6KzEhEb8UPq4BLKZPz0=
Subject key identifier: B2:B9:05:1D:CA:12:74:83:71:D9:B4:33:47:E3:8F:4D:7D:7F:E5:FA
Authority key identifier: B9:11:C7:ED:BF:1D:3C:C4:FB:07:53:81:A3:7F:76:25:6B:87:28:5D
Certificate issuer: /CN=b911c7edbf1d3cc4fb075381a37f76256b87285d
Certificate serial: 0196B36A9E72850BF2FFC6941E3B4C0448D9
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/uRHH7b8dPMT7B1OBo392JWuHKF0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/5a/23b148-e0dd-4fa6-af44-613017886e8b/1/uRHH7b8dPMT7B1OBo392JWuHKF0.mft
Manifest number: 152D
Signing time: Fri 09 May 2025 05:00:31 +0000
Manifest this update: Fri 09 May 2025 05:00:31 +0000
Manifest next update: Sat 10 May 2025 05:00:31 +0000
Files and hashes: 1: OqSdyDZh6NqO8-7N9t70Rdg7P_c.roa (hash: x00OtA3aq4wEzTMJMk5pH/UOCzQUUaU7IjKw5glYcJU=)
2: RpnGjFmcT56C89eB4k7yZQkJFTU.roa (hash: 1K/n2yLPZy3QlKzwTHvqK3jkvNSKTZzceS8co3Qu1JU=)
3: uRHH7b8dPMT7B1OBo392JWuHKF0.crl (hash: R0OE0yk9Lq3+pCBelR1YW7MA0Lq1eNeWIaMlwWRcEMI=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/5a/23b148-e0dd-4fa6-af44-613017886e8b/1/uRHH7b8dPMT7B1OBo392JWuHKF0.crl
rsync://rpki.ripe.net/repository/DEFAULT/5a/23b148-e0dd-4fa6-af44-613017886e8b/1/uRHH7b8dPMT7B1OBo392JWuHKF0.mft
rsync://rpki.ripe.net/repository/DEFAULT/uRHH7b8dPMT7B1OBo392JWuHKF0.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 10 May 2025 01:00:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:b3:6a:9e:72:85:0b:f2:ff:c6:94:1e:3b:4c:04:48:d9
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=b911c7edbf1d3cc4fb075381a37f76256b87285d
Validity
Not Before: May 9 05:00:31 2025 GMT
Not After : May 10 05:00:31 2025 GMT
Subject: CN=b2b9051dca12748371d9b43347e38f4d7d7fe5fa
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d0:fa:f1:b5:a6:65:0e:41:cd:ef:a1:a9:c7:41:
fb:b0:8e:ac:ae:2d:0f:ea:93:4a:9b:83:09:44:32:
40:6a:d8:b9:af:3f:16:f1:89:86:91:7f:70:fd:3e:
fe:ba:09:78:7c:9f:2d:1c:81:9d:db:31:43:a1:8f:
29:9c:ca:3a:e7:eb:93:78:2e:6a:8e:25:a4:ec:c7:
26:fb:15:f9:77:03:c1:cd:2a:2d:a9:9d:f4:6e:4e:
dd:1e:93:83:92:2a:9c:5d:f4:94:5c:42:e0:3c:59:
0f:8e:b2:53:cf:c7:36:d8:38:77:01:b1:02:3b:87:
80:26:f4:43:72:38:f1:7c:26:fd:f2:2a:22:e9:cf:
54:f7:0b:c2:37:db:60:98:f6:f9:a5:4d:9e:e1:7b:
d0:8a:95:e7:d5:fd:64:5e:c9:27:98:87:d2:81:86:
27:2c:23:55:ab:df:f8:c1:36:74:da:d7:57:ee:94:
f2:57:98:75:90:e6:dc:b2:4d:e8:70:4e:fc:e9:bc:
67:d3:d2:3c:51:2b:d5:3f:66:78:d4:a5:63:fa:49:
73:19:42:a7:92:f6:a2:75:66:52:3a:8d:ec:c3:a7:
7c:5b:10:51:8d:4e:6b:0d:c7:6a:2e:8d:d5:9b:bc:
a2:95:ab:f2:ee:9e:3b:07:d6:07:32:f9:b1:b7:dc:
9a:8f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B2:B9:05:1D:CA:12:74:83:71:D9:B4:33:47:E3:8F:4D:7D:7F:E5:FA
X509v3 Authority Key Identifier:
keyid:B9:11:C7:ED:BF:1D:3C:C4:FB:07:53:81:A3:7F:76:25:6B:87:28:5D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/uRHH7b8dPMT7B1OBo392JWuHKF0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5a/23b148-e0dd-4fa6-af44-613017886e8b/1/uRHH7b8dPMT7B1OBo392JWuHKF0.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/5a/23b148-e0dd-4fa6-af44-613017886e8b/1/uRHH7b8dPMT7B1OBo392JWuHKF0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
7b:85:2e:c9:70:f0:af:de:42:c2:f3:e7:13:87:e3:d2:97:fc:
f9:10:18:e7:99:74:bd:04:ea:aa:a3:72:d7:7f:18:38:c1:b0:
59:38:81:b5:53:2b:6b:4f:3c:d0:51:0a:a9:08:78:6c:e0:c0:
02:b1:6e:8a:d5:26:43:a8:17:c3:10:20:59:71:50:fd:5a:cf:
fd:b5:e9:2f:a6:b1:48:44:7a:41:23:cb:3d:c3:c5:ba:65:70:
ca:4b:7b:0d:6f:4a:21:bd:76:c4:07:10:73:eb:f0:58:0a:33:
cc:73:79:b1:ba:0e:33:bc:57:b3:78:22:e1:c0:0d:c0:77:11:
f8:c5:0b:f1:f7:9f:a7:33:78:77:93:71:b2:fb:99:7d:78:0a:
a9:31:f6:6d:55:85:23:15:09:19:6e:ba:c3:81:39:3a:57:a6:
a8:92:21:4e:84:bf:54:94:30:2c:09:07:a7:38:cb:c0:cf:b1:
26:d9:43:4b:4c:da:77:69:c1:f3:e0:49:69:50:86:e8:cd:81:
56:04:00:58:b9:b0:2c:a3:7a:a8:e3:1a:91:38:5c:14:98:df:
64:8e:98:1e:f5:3f:9f:71:86:ff:ed:de:5e:25:17:a9:21:8d:
55:84:2a:10:4f:77:5a:00:03:4e:f7:0a:c9:df:0c:15:e5:3a:
6f:b8:3a:d8
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri May 9 10:52:36 2025 by rpki-client