Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/65/280ca9-f7d8-4ffa-ba34-a13f4481bc6c/1/u4K408Gw94w6GfYWTrKCHiMM_k4.mft
File: u4K408Gw94w6GfYWTrKCHiMM_k4.mft (raw, json)
Hash identifier: oNSEaH/WCxWjzQINE5RfmVG/dkB26M45iu0TsVhITiA=
Subject key identifier: FE:96:1A:19:1B:19:AC:D4:2D:EC:9E:05:3A:E5:71:8C:F8:0D:27:35
Authority key identifier: BB:82:B8:D3:C1:B0:F7:8C:3A:19:F6:16:4E:B2:82:1E:23:0C:FE:4E
Certificate issuer: /CN=bb82b8d3c1b0f78c3a19f6164eb2821e230cfe4e
Certificate serial: 0196BCA478EC92F5D66822CC3B313DE56A75
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/u4K408Gw94w6GfYWTrKCHiMM_k4.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/65/280ca9-f7d8-4ffa-ba34-a13f4481bc6c/1/u4K408Gw94w6GfYWTrKCHiMM_k4.mft
Manifest number: 0F2D
Signing time: Sun 11 May 2025 00:00:17 +0000
Manifest this update: Sun 11 May 2025 00:00:17 +0000
Manifest next update: Mon 12 May 2025 00:00:17 +0000
Files and hashes: 1: sZvwZMkTNt-iUTiQmQ2RW61JCrY.roa (hash: ILtUTNlj+OmXDu1giFXN+JTJafdCM0FAh4hCT6vGfZc=)
2: u4K408Gw94w6GfYWTrKCHiMM_k4.crl (hash: 5r+dsEd2AgN+D/6+EOAgv0JiUEoTfqsGl6rq6Hrz7X8=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/65/280ca9-f7d8-4ffa-ba34-a13f4481bc6c/1/u4K408Gw94w6GfYWTrKCHiMM_k4.crl
rsync://rpki.ripe.net/repository/DEFAULT/65/280ca9-f7d8-4ffa-ba34-a13f4481bc6c/1/u4K408Gw94w6GfYWTrKCHiMM_k4.mft
rsync://rpki.ripe.net/repository/DEFAULT/u4K408Gw94w6GfYWTrKCHiMM_k4.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 11 May 2025 23:00:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:bc:a4:78:ec:92:f5:d6:68:22:cc:3b:31:3d:e5:6a:75
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=bb82b8d3c1b0f78c3a19f6164eb2821e230cfe4e
Validity
Not Before: May 11 00:00:17 2025 GMT
Not After : May 12 00:00:17 2025 GMT
Subject: CN=fe961a191b19acd42dec9e053ae5718cf80d2735
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:f1:06:d8:6d:23:36:e3:e7:36:81:fd:bc:5d:b0:
4d:91:62:46:44:88:d8:0d:53:00:4e:3f:db:8b:7e:
33:f4:54:4d:eb:58:b4:d9:35:ad:16:60:f5:0c:86:
55:cc:73:55:12:3f:15:05:b9:a9:54:6b:68:0c:ec:
85:d8:a3:ff:f5:18:17:bf:24:1e:08:34:ed:9e:23:
66:18:fd:01:f0:a9:84:60:b5:1f:5a:82:cb:43:7d:
aa:ab:b7:44:49:11:b2:e3:09:f3:ad:2d:fe:b9:78:
73:a0:fa:e9:9e:72:4b:ae:72:a8:d2:a0:31:17:93:
56:07:6d:1f:cf:33:2f:1d:79:61:f2:4f:3c:9f:19:
00:86:5a:42:e7:11:29:e7:62:22:4b:b9:ad:04:7e:
bd:1e:a1:27:fa:5b:c0:36:a3:d0:c8:d1:c2:05:eb:
8e:52:3d:b7:5f:77:3a:6f:93:85:34:6d:b3:fc:bc:
0f:e1:2a:24:82:4b:44:42:20:b7:c3:a0:43:fd:30:
21:c1:55:98:11:88:6b:d0:04:85:9b:21:b4:b5:b6:
51:ce:13:c8:5d:4e:99:06:85:29:a7:b7:3e:cb:4c:
f2:38:bb:bf:4a:1d:7a:0e:e7:42:b4:e1:8f:46:6c:
b5:21:9e:d5:09:c4:1a:c1:4d:a1:88:af:aa:0f:08:
4e:49
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
FE:96:1A:19:1B:19:AC:D4:2D:EC:9E:05:3A:E5:71:8C:F8:0D:27:35
X509v3 Authority Key Identifier:
keyid:BB:82:B8:D3:C1:B0:F7:8C:3A:19:F6:16:4E:B2:82:1E:23:0C:FE:4E
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/u4K408Gw94w6GfYWTrKCHiMM_k4.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/65/280ca9-f7d8-4ffa-ba34-a13f4481bc6c/1/u4K408Gw94w6GfYWTrKCHiMM_k4.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/65/280ca9-f7d8-4ffa-ba34-a13f4481bc6c/1/u4K408Gw94w6GfYWTrKCHiMM_k4.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
4d:d7:ce:92:35:db:81:06:87:70:2d:0e:21:ab:47:88:bc:5a:
f2:83:00:d8:5e:ff:84:dc:49:40:92:35:54:9e:ae:70:62:66:
f4:48:82:d6:63:11:27:48:d6:de:0e:67:e5:c4:9a:82:2a:72:
c5:47:ef:b2:da:5b:08:85:0c:e5:5f:fd:43:2b:ca:3b:33:22:
9e:fb:0e:02:8d:4c:f4:61:ed:06:33:a1:e0:f9:c8:6c:9a:35:
28:7d:a2:47:eb:fd:5a:02:37:e1:9b:e0:69:3c:a0:38:72:a9:
84:dc:e3:95:b9:c7:86:51:14:ad:6c:49:92:c6:47:ab:a6:27:
9a:10:a3:e5:37:f9:cf:73:5b:85:73:7c:88:07:eb:79:d7:37:
12:17:05:67:98:fd:02:e4:09:fb:cc:d3:84:7f:d6:91:83:bd:
9e:52:59:18:8f:1e:a3:ae:9d:36:64:c4:a4:df:01:0d:ea:e0:
01:45:85:d2:12:a8:9d:dd:c0:69:db:b6:25:d0:81:16:85:cb:
2e:cc:b7:db:f7:ad:c3:55:89:76:db:17:44:a9:1d:25:b7:bd:
e0:39:06:87:63:d4:9a:10:f9:37:f0:90:a7:97:17:77:2e:b4:
6e:a7:00:36:2c:6e:ef:c7:f9:ce:15:31:f9:ff:b9:06:74:d9:
83:4a:13:37
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun May 11 09:15:55 2025 by rpki-client