Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/6b/3d3b56-e4e1-4c07-99e6-2fdfe3507a2f/1/Urq202DpPZj86eeIjlZL1GTonoo.mft
File: Urq202DpPZj86eeIjlZL1GTonoo.mft (raw, json)
Hash identifier: cLTvhxnVrV8Yt1uDbarTEif8+XoDvnb3wyGN+5Ztjwg=
Subject key identifier: 43:5B:99:64:A2:B9:4F:B5:20:7A:56:2E:A2:CA:CF:39:45:E5:F1:BB
Authority key identifier: 52:BA:B6:D3:60:E9:3D:98:FC:E9:E7:88:8E:56:4B:D4:64:E8:9E:8A
Certificate issuer: /CN=52bab6d360e93d98fce9e7888e564bd464e89e8a
Certificate serial: 0196B5226A12D814ACD1FD0E55285DE979CE
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Urq202DpPZj86eeIjlZL1GTonoo.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/6b/3d3b56-e4e1-4c07-99e6-2fdfe3507a2f/1/Urq202DpPZj86eeIjlZL1GTonoo.mft
Manifest number: 0C55
Signing time: Fri 09 May 2025 13:00:53 +0000
Manifest this update: Fri 09 May 2025 13:00:53 +0000
Manifest next update: Sat 10 May 2025 13:00:53 +0000
Files and hashes: 1: B-lR09vEcTp8KKlqK97Mr1BSe9k.roa (hash: Es3L421jlBfBefISWEPBSuTEyJhc2FSpGfD+ySdZNXs=)
2: Urq202DpPZj86eeIjlZL1GTonoo.crl (hash: 775Ci3t41Pko/Uc4Oj/y0p+2BQKyy0Pr3XYWFH6mh+0=)
3: qIkK_6-F6txR9niUUOebhF6pfjI.roa (hash: Yqd5GO2kfOv5jA1UhsukLQGyb/CHFf/DnTRtWG2ci40=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/6b/3d3b56-e4e1-4c07-99e6-2fdfe3507a2f/1/Urq202DpPZj86eeIjlZL1GTonoo.crl
rsync://rpki.ripe.net/repository/DEFAULT/6b/3d3b56-e4e1-4c07-99e6-2fdfe3507a2f/1/Urq202DpPZj86eeIjlZL1GTonoo.mft
rsync://rpki.ripe.net/repository/DEFAULT/Urq202DpPZj86eeIjlZL1GTonoo.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 10 May 2025 10:00:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:b5:22:6a:12:d8:14:ac:d1:fd:0e:55:28:5d:e9:79:ce
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=52bab6d360e93d98fce9e7888e564bd464e89e8a
Validity
Not Before: May 9 13:00:53 2025 GMT
Not After : May 10 13:00:53 2025 GMT
Subject: CN=435b9964a2b94fb5207a562ea2cacf3945e5f1bb
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b9:a1:15:55:d7:99:f4:ad:d9:59:7d:aa:9d:3e:
2c:0d:95:dc:90:42:f9:03:fb:f6:f3:0b:c6:21:d0:
3c:d6:8e:6e:63:77:07:c0:08:a1:fd:68:7b:a6:de:
91:2f:62:e1:51:62:9d:cb:d3:d3:4a:e6:9f:57:f1:
c9:ce:6e:5a:04:e7:dd:04:c5:54:14:98:f0:00:90:
46:84:a7:73:df:ee:6f:e9:39:14:03:1f:12:19:c1:
9b:e5:79:fc:82:14:39:7b:42:f5:8b:88:0c:15:11:
cc:10:c4:8e:5d:bb:67:5b:6b:e6:75:4c:fa:54:5e:
7f:81:4b:fb:5e:cf:98:10:21:29:e4:5f:1a:a1:a8:
f0:7a:33:02:01:28:16:2c:cd:19:66:bf:7b:38:cf:
4b:cd:0a:05:f3:33:63:1e:d6:0f:93:87:5f:cc:38:
27:3b:29:af:4c:b9:ec:f1:ad:59:b8:24:7e:9f:b0:
8a:1d:a8:f1:1d:f1:17:d9:c0:88:64:39:11:d3:3f:
0c:49:08:49:cd:e3:82:cb:4e:f0:e0:64:4c:96:89:
a4:f7:97:67:67:d9:af:3e:90:bc:c3:82:d2:d1:46:
49:63:a2:05:35:80:b8:83:68:23:61:24:d1:a0:03:
24:48:03:d8:dc:67:48:7b:e6:38:ca:b9:1a:25:b8:
47:23
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
43:5B:99:64:A2:B9:4F:B5:20:7A:56:2E:A2:CA:CF:39:45:E5:F1:BB
X509v3 Authority Key Identifier:
keyid:52:BA:B6:D3:60:E9:3D:98:FC:E9:E7:88:8E:56:4B:D4:64:E8:9E:8A
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Urq202DpPZj86eeIjlZL1GTonoo.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/6b/3d3b56-e4e1-4c07-99e6-2fdfe3507a2f/1/Urq202DpPZj86eeIjlZL1GTonoo.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/6b/3d3b56-e4e1-4c07-99e6-2fdfe3507a2f/1/Urq202DpPZj86eeIjlZL1GTonoo.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
92:dc:30:a9:72:25:47:91:ca:77:09:e4:8a:95:56:6b:b9:33:
c2:90:25:0c:99:9a:63:82:b4:e3:5c:b7:11:ac:d1:81:0d:05:
0d:a4:c5:97:3a:89:cd:a5:6e:80:d4:b7:5b:ee:b3:4d:b2:40:
6e:c3:14:12:59:8b:02:78:24:29:fd:58:e7:9b:62:87:2b:ed:
ca:00:a0:79:b8:06:d6:04:39:e6:c4:a5:0a:e1:cf:0c:e8:54:
33:fd:49:3c:e2:64:91:9d:62:51:2f:bd:cc:5e:af:b0:01:4a:
d8:54:67:31:a3:2e:1a:7b:52:7e:99:47:5b:40:ce:ce:bc:c2:
c4:d3:c5:45:48:35:79:8d:c8:82:6e:b2:f3:dc:74:ff:b6:3c:
d4:81:78:b9:c5:bb:29:ec:13:51:a2:84:0f:e4:61:83:ca:79:
29:7c:e1:d6:70:46:00:13:1b:4d:b3:68:0d:c1:e8:3c:11:d5:
d4:95:25:18:fc:4e:38:a2:10:56:5d:2d:c7:4f:de:a7:97:8b:
91:c9:14:84:5d:a1:d2:79:76:56:6a:3f:7d:2b:78:e7:89:ab:
41:9a:28:d6:20:96:a8:47:14:41:44:e6:b2:17:6e:84:bb:12:
b9:3a:e0:bf:cf:d5:da:33:71:cf:5f:40:dc:05:d0:38:04:a3:
a5:94:1b:2a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri May 9 16:44:04 2025 by rpki-client