Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/70/93f8fb-d424-4dab-9a0e-0f5be224f820/1/urc2dvq68SBW7bucedcVT-3gHyw.mft
File: urc2dvq68SBW7bucedcVT-3gHyw.mft (raw, json)
Hash identifier: OQUA1bBtsy6JnE9goIrg8VdBt8d1HQL6/JbrN0jiA30=
Subject key identifier: 69:61:6E:20:A3:02:F5:00:07:68:8F:AA:37:88:10:1E:D6:62:48:29
Authority key identifier: BA:B7:36:76:FA:BA:F1:20:56:ED:BB:9C:79:D7:15:4F:ED:E0:1F:2C
Certificate issuer: /CN=bab73676fabaf12056edbb9c79d7154fede01f2c
Certificate serial: 0196BA7F2FC275173B55E8D5B537CD7B01C3
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/urc2dvq68SBW7bucedcVT-3gHyw.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/70/93f8fb-d424-4dab-9a0e-0f5be224f820/1/urc2dvq68SBW7bucedcVT-3gHyw.mft
Manifest number: 1531
Signing time: Sat 10 May 2025 14:00:19 +0000
Manifest this update: Sat 10 May 2025 14:00:19 +0000
Manifest next update: Sun 11 May 2025 14:00:19 +0000
Files and hashes: 1: urc2dvq68SBW7bucedcVT-3gHyw.crl (hash: nSiwCffg/omGfbzdHbdfEge5j+LDT2j/f7Mq6b7wpn0=)
2: ysmv8pVpOBMqQ9sWsS6x7ZzfCkE.roa (hash: l1esLwaLrNWre2KIEqdSBUJWZATlA9afvfAUu1SgNbA=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/70/93f8fb-d424-4dab-9a0e-0f5be224f820/1/urc2dvq68SBW7bucedcVT-3gHyw.crl
rsync://rpki.ripe.net/repository/DEFAULT/70/93f8fb-d424-4dab-9a0e-0f5be224f820/1/urc2dvq68SBW7bucedcVT-3gHyw.mft
rsync://rpki.ripe.net/repository/DEFAULT/urc2dvq68SBW7bucedcVT-3gHyw.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 11 May 2025 13:00:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:ba:7f:2f:c2:75:17:3b:55:e8:d5:b5:37:cd:7b:01:c3
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=bab73676fabaf12056edbb9c79d7154fede01f2c
Validity
Not Before: May 10 14:00:19 2025 GMT
Not After : May 11 14:00:19 2025 GMT
Subject: CN=69616e20a302f50007688faa3788101ed6624829
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d1:11:18:16:d9:8e:c4:ad:a2:ca:5d:e0:4c:49:
88:c1:b7:ac:87:c2:df:43:36:5c:dd:57:05:e5:1d:
bf:c3:94:9e:bf:eb:3c:f7:71:58:4d:eb:0a:a2:6f:
85:c8:90:60:28:4d:fe:c1:81:55:36:0a:e6:28:a8:
10:ba:41:8a:08:b0:e4:12:24:e0:5a:28:73:c1:c4:
97:d8:1b:ee:85:28:48:17:47:c7:d8:14:65:80:a6:
f1:43:e4:17:3b:b9:49:97:8c:05:93:02:0b:ee:aa:
fb:7f:61:70:14:9b:7a:62:a3:db:7e:e6:ca:a7:2e:
9c:a8:7e:cc:60:7f:8d:d4:2b:ef:95:1f:03:9a:8d:
7f:39:e5:3f:47:69:f3:fa:8f:97:0e:4a:96:a1:97:
b0:e7:8f:8a:42:b1:2f:9f:b6:c8:7c:3a:e9:76:bc:
39:3f:17:3e:5d:79:37:9a:53:b3:ea:86:0c:69:7c:
68:80:e9:ef:2b:6c:79:11:9b:ea:cc:14:0c:26:55:
cc:39:b5:25:70:9a:67:6c:2c:77:fd:38:a6:8d:b6:
7c:d7:5f:97:fa:26:6b:a4:24:82:a3:95:a4:57:64:
90:9d:c9:bd:99:0d:03:b0:aa:b9:ea:39:63:31:f1:
23:4b:25:71:01:f6:5a:f7:5a:66:f9:c7:ba:33:8a:
0f:d5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
69:61:6E:20:A3:02:F5:00:07:68:8F:AA:37:88:10:1E:D6:62:48:29
X509v3 Authority Key Identifier:
keyid:BA:B7:36:76:FA:BA:F1:20:56:ED:BB:9C:79:D7:15:4F:ED:E0:1F:2C
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/urc2dvq68SBW7bucedcVT-3gHyw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/70/93f8fb-d424-4dab-9a0e-0f5be224f820/1/urc2dvq68SBW7bucedcVT-3gHyw.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/70/93f8fb-d424-4dab-9a0e-0f5be224f820/1/urc2dvq68SBW7bucedcVT-3gHyw.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
86:17:99:89:35:91:bf:08:1b:14:ed:0a:22:8c:45:17:0d:aa:
b8:89:d1:1f:41:57:34:df:5c:c6:ec:38:88:e3:69:ac:e4:57:
57:05:40:94:5c:63:06:1f:3b:32:46:b7:b5:91:89:30:34:21:
fa:82:de:d5:12:a5:ad:d7:8f:9b:9e:89:8c:f7:94:f7:56:97:
7a:d0:86:a8:b2:47:e5:94:31:4c:7d:7c:de:5e:cc:1d:20:d1:
d6:0c:af:f3:5c:44:69:54:9d:5a:b8:62:8b:4b:68:a7:e7:f2:
31:6d:82:0a:7f:85:8e:24:37:53:7d:dc:28:0c:7a:da:8f:97:
f2:86:d2:a6:b2:97:2f:1c:04:7e:f6:b6:21:bc:20:9f:44:11:
67:40:92:96:86:d1:00:cd:1e:34:3e:7c:a4:0a:93:20:86:ce:
04:ff:e8:0f:c2:19:01:85:15:22:d2:a4:c8:eb:9a:1c:79:9d:
58:a9:e5:b6:f7:88:1a:10:30:d2:ff:ba:de:0e:16:c2:59:32:
51:eb:7d:4a:00:93:92:a9:91:d0:00:d6:b4:8c:a1:6f:c2:23:
b3:fa:cc:a2:76:4c:5e:2b:a3:8b:89:ec:b7:e0:f7:81:0a:92:
71:d5:7c:6a:f1:4c:3d:ae:eb:43:f7:bb:6a:9c:dc:88:06:41:
16:de:db:6d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat May 10 20:14:09 2025 by rpki-client