Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/7a/f96532-d7ff-4538-bccd-2d38e7779348/1/ui8aEd4ZDIHAt3Us9StWlCXcVMs.mft
File: ui8aEd4ZDIHAt3Us9StWlCXcVMs.mft (raw, json)
Hash identifier: kkoTJ0vdAB7T0m94Tqbr2N58HuEcZFKhRTuTnh/Da+o=
Subject key identifier: 06:BB:EE:2A:CE:1A:2E:84:F6:94:BB:36:7E:AD:3C:D1:17:02:EE:90
Authority key identifier: BA:2F:1A:11:DE:19:0C:81:C0:B7:75:2C:F5:2B:56:94:25:DC:54:CB
Certificate issuer: /CN=ba2f1a11de190c81c0b7752cf52b569425dc54cb
Certificate serial: 0196A7D48793406D779D11093AC087ADA1E2
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/ui8aEd4ZDIHAt3Us9StWlCXcVMs.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/7a/f96532-d7ff-4538-bccd-2d38e7779348/1/ui8aEd4ZDIHAt3Us9StWlCXcVMs.mft
Manifest number: 0BA6
Signing time: Tue 06 May 2025 23:00:45 +0000
Manifest this update: Tue 06 May 2025 23:00:45 +0000
Manifest next update: Wed 07 May 2025 23:00:45 +0000
Files and hashes: 1: JifjCFTHwQfGjK32vaW76jlBuD0.roa (hash: h7HzreIgn1zkAe8+SyKhsfHeNQ03cg69awNyBY5xA1I=)
2: ui8aEd4ZDIHAt3Us9StWlCXcVMs.crl (hash: i/qdFG8iMDCRLvZsW1WaVt2t1uAi9A9UT8RWfwTAT2c=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/7a/f96532-d7ff-4538-bccd-2d38e7779348/1/ui8aEd4ZDIHAt3Us9StWlCXcVMs.crl
rsync://rpki.ripe.net/repository/DEFAULT/7a/f96532-d7ff-4538-bccd-2d38e7779348/1/ui8aEd4ZDIHAt3Us9StWlCXcVMs.mft
rsync://rpki.ripe.net/repository/DEFAULT/ui8aEd4ZDIHAt3Us9StWlCXcVMs.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 07 May 2025 16:14:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:a7:d4:87:93:40:6d:77:9d:11:09:3a:c0:87:ad:a1:e2
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=ba2f1a11de190c81c0b7752cf52b569425dc54cb
Validity
Not Before: May 6 23:00:45 2025 GMT
Not After : May 7 23:00:45 2025 GMT
Subject: CN=06bbee2ace1a2e84f694bb367ead3cd11702ee90
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:af:04:3e:12:48:97:d3:28:41:4f:32:72:e9:b2:
01:b5:d0:7b:4e:85:40:5a:5f:d4:7b:65:b8:6f:ea:
bf:5d:fd:26:19:e9:71:09:ad:e2:82:ef:c2:4f:45:
83:e6:31:7d:f1:cc:2a:9a:7e:c2:fc:6d:7b:95:8a:
a7:ec:51:a1:ff:de:f1:5c:c3:40:78:8f:8c:54:f0:
a9:fb:4a:16:1a:2f:c2:65:28:a0:a6:d7:ab:03:6c:
f5:30:54:ae:0a:75:0a:c8:d5:b2:1b:d5:d3:9e:2a:
5f:8e:12:cf:0b:85:e4:8a:95:53:28:7d:72:fb:f2:
6a:77:67:34:c1:5c:1e:d0:37:44:b1:3c:be:94:fe:
7d:9a:27:16:e8:ca:3f:3e:42:db:e2:d1:6f:30:21:
78:64:34:4f:a7:a4:c8:18:b8:bd:23:0d:9c:2a:be:
2a:69:bd:72:48:58:8f:a9:73:b5:e3:a4:48:24:b3:
85:e5:e6:7b:12:e9:2a:87:d3:83:41:99:c6:cc:a5:
cd:c1:88:be:78:1e:bb:a3:9e:db:c0:d7:2b:13:91:
2a:0b:c7:71:e7:8d:f5:64:5c:69:43:5e:26:92:cd:
9e:e6:a4:bf:6c:96:b8:22:ed:4d:8e:c1:c1:8f:b6:
32:cb:c1:21:39:27:e8:4a:12:1c:32:43:fc:d9:b0:
5c:43
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
06:BB:EE:2A:CE:1A:2E:84:F6:94:BB:36:7E:AD:3C:D1:17:02:EE:90
X509v3 Authority Key Identifier:
keyid:BA:2F:1A:11:DE:19:0C:81:C0:B7:75:2C:F5:2B:56:94:25:DC:54:CB
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ui8aEd4ZDIHAt3Us9StWlCXcVMs.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/7a/f96532-d7ff-4538-bccd-2d38e7779348/1/ui8aEd4ZDIHAt3Us9StWlCXcVMs.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/7a/f96532-d7ff-4538-bccd-2d38e7779348/1/ui8aEd4ZDIHAt3Us9StWlCXcVMs.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
a8:9e:ca:c0:7f:58:65:ed:71:4e:4a:f5:8c:86:70:20:c7:c7:
96:97:e6:ba:5a:f4:be:60:86:31:c4:9f:70:3a:d8:f8:66:29:
f4:ee:0c:58:33:b6:9d:17:cb:b3:bd:ae:b8:57:26:50:7e:1d:
c4:80:cb:b6:c2:ce:7a:8f:1b:a6:d2:39:dd:32:be:e3:9c:bd:
ca:85:a2:72:ba:30:c9:8a:59:b5:84:4a:82:6c:f7:b9:25:03:
3a:e9:cf:99:4b:89:01:21:e7:05:e7:b3:62:29:73:6b:c2:b1:
25:1c:0f:0e:42:81:07:85:7a:59:1f:c5:1c:f4:03:1c:e6:06:
ce:26:78:f5:84:73:83:95:29:c3:7c:ba:1e:1d:fb:74:06:81:
a1:69:bf:5c:fb:6f:9a:ef:9f:12:b4:2a:8a:c4:0b:90:78:cf:
6f:05:57:6a:5e:1c:99:2b:6b:a1:7f:8a:e2:48:9e:09:f7:74:
77:0b:18:e4:0b:d3:f6:45:ea:a8:0d:3e:12:9a:69:f7:c2:0e:
14:35:8e:36:0b:5f:57:65:84:ee:ec:e4:15:2c:07:47:77:52:
1c:33:1d:98:7f:93:eb:1a:09:c7:c0:8c:65:e8:cb:00:0f:c1:
93:e8:f6:ad:be:1d:25:0e:37:ca:b4:59:ce:f5:8e:3b:3d:52:
eb:ed:da:92
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed May 7 02:12:33 2025 by rpki-client