Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/85/de34b5-0320-4cd9-9ee3-c4ce3e8073db/1/0u2k-NnkgpUqESsu9aTyObf2JVE.mft
File: 0u2k-NnkgpUqESsu9aTyObf2JVE.mft (raw, json)
Hash identifier: V47B4D78kTe7VWdRgbh4Fgrw1M5TVadvJKGqM93YbDw=
Subject key identifier: 79:DF:13:49:05:0E:9E:D0:F7:E6:26:C5:BA:A4:E3:AA:12:FE:7E:6E
Authority key identifier: D2:ED:A4:F8:D9:E4:82:95:2A:11:2B:2E:F5:A4:F2:39:B7:F6:25:51
Certificate issuer: /CN=d2eda4f8d9e482952a112b2ef5a4f239b7f62551
Certificate serial: 0196AC5590AB4A5A85ED50D66889D069A501
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/0u2k-NnkgpUqESsu9aTyObf2JVE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/85/de34b5-0320-4cd9-9ee3-c4ce3e8073db/1/0u2k-NnkgpUqESsu9aTyObf2JVE.mft
Manifest number: 09BE
Signing time: Wed 07 May 2025 20:00:10 +0000
Manifest this update: Wed 07 May 2025 20:00:10 +0000
Manifest next update: Thu 08 May 2025 20:00:10 +0000
Files and hashes: 1: 0u2k-NnkgpUqESsu9aTyObf2JVE.crl (hash: lHIvgSiBNDqPx7oZ6PJeEwaaBFjVAVmX4qsBAUGj4eE=)
2: akVfoe2NMwgKKix-I6Nd4k5ngMM.roa (hash: Na2cRAe6jotzXC7LjsbqIgTy4+1+OZSmFcHXYaFK5lY=)
3: uCvfPXkpFAEnX7rWGxoF9RqHD9E.roa (hash: 0pV5mcTfxFzm13bkl5Ni2QZOplGIOcdfnivcOrYLhtA=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/85/de34b5-0320-4cd9-9ee3-c4ce3e8073db/1/0u2k-NnkgpUqESsu9aTyObf2JVE.crl
rsync://rpki.ripe.net/repository/DEFAULT/85/de34b5-0320-4cd9-9ee3-c4ce3e8073db/1/0u2k-NnkgpUqESsu9aTyObf2JVE.mft
rsync://rpki.ripe.net/repository/DEFAULT/0u2k-NnkgpUqESsu9aTyObf2JVE.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 08 May 2025 20:00:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:ac:55:90:ab:4a:5a:85:ed:50:d6:68:89:d0:69:a5:01
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=d2eda4f8d9e482952a112b2ef5a4f239b7f62551
Validity
Not Before: May 7 20:00:10 2025 GMT
Not After : May 8 20:00:10 2025 GMT
Subject: CN=79df1349050e9ed0f7e626c5baa4e3aa12fe7e6e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c3:fc:41:78:25:bf:06:1e:48:66:ed:93:5f:40:
b8:61:f6:fb:25:f1:b0:3c:34:97:fc:ee:6d:28:3d:
38:39:e1:b3:d0:e7:39:64:f5:82:97:0d:66:c2:d6:
00:9f:2a:d9:43:9f:2d:fc:ef:9c:b6:cb:46:ab:90:
2b:cf:7b:7d:ed:0f:20:84:ae:07:58:05:be:dc:e8:
ee:39:23:36:05:d9:f6:51:d5:da:81:82:d9:1e:95:
f5:34:e9:ac:eb:08:aa:4e:38:25:be:7d:6d:f9:b9:
43:df:be:ad:77:82:c4:98:e0:39:ad:a7:51:28:57:
6e:65:67:ec:a0:3c:a4:6c:77:56:f4:39:1b:aa:bc:
98:5a:be:e5:ef:c3:c0:d4:d2:a5:f3:b7:3d:3e:ef:
93:16:a7:d9:e7:43:78:3c:9c:26:fa:86:7a:eb:03:
82:1b:6d:28:43:b1:9f:22:05:2c:4d:2c:b5:d2:d5:
ff:ae:62:99:14:90:0d:06:8c:06:25:0a:dc:81:c5:
a0:72:ba:2f:61:61:11:ce:90:d8:a5:75:dc:07:6c:
bf:6c:ab:2f:98:69:32:8d:89:8f:03:86:ce:72:77:
ca:53:d6:9f:48:7b:f2:20:72:2e:57:35:f4:a7:99:
5d:2d:5a:99:58:41:72:b1:36:d6:12:97:bc:c3:99:
72:e3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
79:DF:13:49:05:0E:9E:D0:F7:E6:26:C5:BA:A4:E3:AA:12:FE:7E:6E
X509v3 Authority Key Identifier:
keyid:D2:ED:A4:F8:D9:E4:82:95:2A:11:2B:2E:F5:A4:F2:39:B7:F6:25:51
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/0u2k-NnkgpUqESsu9aTyObf2JVE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/85/de34b5-0320-4cd9-9ee3-c4ce3e8073db/1/0u2k-NnkgpUqESsu9aTyObf2JVE.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/85/de34b5-0320-4cd9-9ee3-c4ce3e8073db/1/0u2k-NnkgpUqESsu9aTyObf2JVE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
46:13:23:43:49:c2:29:77:7f:e3:aa:20:bb:ce:7b:ed:85:1c:
28:ad:58:1c:b2:39:a0:8d:8c:00:88:49:74:e0:ca:30:d5:11:
ed:94:51:65:6b:3f:c7:13:13:fc:c4:4b:f6:78:61:71:fa:da:
a6:e4:a6:bc:ea:4a:5e:e7:ae:37:d8:ff:9b:9b:10:b2:c4:d3:
53:ae:75:42:bd:09:1d:fb:dd:c1:bc:4f:be:8b:79:45:eb:a7:
bb:16:20:dc:a4:1c:6e:88:d0:cc:ac:d6:30:e2:5a:3c:e5:52:
7c:d2:61:b8:87:6e:c0:af:ab:e4:e2:b6:ff:8e:f9:eb:ba:35:
36:72:5f:1c:67:bc:df:b9:20:28:c2:34:16:d1:8f:f7:1e:9c:
ef:07:5c:3e:e5:6a:34:b2:98:e7:90:cb:d7:8f:f8:5d:80:c5:
e5:f1:bc:b3:71:4a:cc:7e:50:bd:01:91:32:88:78:57:84:da:
41:46:0f:eb:c5:27:2f:18:50:98:ef:00:32:d5:16:70:44:d9:
d6:e7:67:48:ce:3c:ff:ee:1c:40:9a:dc:dc:da:6f:8e:e5:b6:
bb:61:24:05:1c:0a:ef:0a:30:f1:54:2f:dd:aa:f6:e9:7f:32:
ed:5f:3b:db:fd:9b:b7:da:ac:51:94:72:27:c4:d7:f7:b4:87:
3d:ea:ff:a3
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu May 8 03:29:56 2025 by rpki-client