Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/98/7a7ce6-06a6-41d3-b5fa-97174a96e815/1/u0u9M0WB3c3ZNbzvR9mgTLzl_e0.mft
File: u0u9M0WB3c3ZNbzvR9mgTLzl_e0.mft (raw, json)
Hash identifier: vusbJbMqFOWX0I/VsAGYFIanCszqDLj/LtfSho6aEmE=
Subject key identifier: BE:26:6B:AF:3B:B9:3A:67:2E:CE:B2:F8:7F:2D:52:87:95:27:59:82
Authority key identifier: BB:4B:BD:33:45:81:DD:CD:D9:35:BC:EF:47:D9:A0:4C:BC:E5:FD:ED
Certificate issuer: /CN=bb4bbd334581ddcdd935bcef47d9a04cbce5fded
Certificate serial: 0196BB2443F6A5758BC9BE6C25CD5FFA66A2
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/u0u9M0WB3c3ZNbzvR9mgTLzl_e0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/98/7a7ce6-06a6-41d3-b5fa-97174a96e815/1/u0u9M0WB3c3ZNbzvR9mgTLzl_e0.mft
Manifest number: 1533
Signing time: Sat 10 May 2025 17:00:38 +0000
Manifest this update: Sat 10 May 2025 17:00:38 +0000
Manifest next update: Sun 11 May 2025 17:00:38 +0000
Files and hashes: 1: 83yHnqR55YpNJ6sDNSfeUwQPJSU.roa (hash: e+9U+VRAv+pY6TcOM+TtKl2lfx0rhjB5FDO+9Jovf1k=)
2: 9VNSF5UtFgYDcn-DHdVIflEkK2g.roa (hash: Bd8gptXnsyCaZSIm/0DdWBDRk8HDyH1Zijph4Kg4wIw=)
3: u0u9M0WB3c3ZNbzvR9mgTLzl_e0.crl (hash: XLiIvaG/TlszMHxjTnZmuOu3otHJ5s3PKIhygc8ngg4=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/98/7a7ce6-06a6-41d3-b5fa-97174a96e815/1/u0u9M0WB3c3ZNbzvR9mgTLzl_e0.crl
rsync://rpki.ripe.net/repository/DEFAULT/98/7a7ce6-06a6-41d3-b5fa-97174a96e815/1/u0u9M0WB3c3ZNbzvR9mgTLzl_e0.mft
rsync://rpki.ripe.net/repository/DEFAULT/u0u9M0WB3c3ZNbzvR9mgTLzl_e0.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 11 May 2025 13:00:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:bb:24:43:f6:a5:75:8b:c9:be:6c:25:cd:5f:fa:66:a2
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=bb4bbd334581ddcdd935bcef47d9a04cbce5fded
Validity
Not Before: May 10 17:00:38 2025 GMT
Not After : May 11 17:00:38 2025 GMT
Subject: CN=be266baf3bb93a672eceb2f87f2d528795275982
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bd:7f:1e:55:5b:9b:76:00:50:45:d8:9e:33:08:
b3:c0:ce:f3:81:de:fc:fc:c5:e7:19:c2:7e:e5:1f:
e5:93:75:ce:64:82:c1:d2:63:4f:0c:72:f4:b5:bc:
f0:21:13:fc:38:89:f3:cb:d4:ef:3f:ed:54:be:53:
7f:a4:94:e2:ba:08:35:52:ad:37:6e:3f:4c:9d:7f:
3e:84:ed:45:a1:21:d2:0d:a3:7d:e0:cc:1f:f0:3c:
07:d8:34:ba:69:43:6c:e9:01:2e:ad:e2:22:a6:11:
03:72:f5:b2:99:18:06:95:b8:e0:93:4c:98:fc:f9:
77:70:29:0a:a0:2c:fb:2e:d3:a8:cf:5e:40:41:13:
7a:a0:99:82:2c:11:64:8c:e2:f3:af:c7:6d:8f:26:
5d:54:cc:9f:c4:11:70:30:be:0e:2e:7b:f1:5d:d1:
f7:89:1f:bb:5a:a1:75:a7:0f:3a:24:c8:18:08:8c:
0e:46:ab:8c:3d:45:71:1a:b7:3a:a6:65:0d:79:94:
43:a4:1d:dc:5a:26:66:a1:45:b0:89:35:a6:af:da:
73:67:1f:04:cb:61:cd:be:0f:e0:da:dc:51:4f:1e:
9e:ba:21:79:59:74:5c:0e:87:7d:8e:8a:f3:96:2b:
6f:a8:38:a5:dd:e1:38:b2:e7:fd:77:0d:33:43:1a:
99:21
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
BE:26:6B:AF:3B:B9:3A:67:2E:CE:B2:F8:7F:2D:52:87:95:27:59:82
X509v3 Authority Key Identifier:
keyid:BB:4B:BD:33:45:81:DD:CD:D9:35:BC:EF:47:D9:A0:4C:BC:E5:FD:ED
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/u0u9M0WB3c3ZNbzvR9mgTLzl_e0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/98/7a7ce6-06a6-41d3-b5fa-97174a96e815/1/u0u9M0WB3c3ZNbzvR9mgTLzl_e0.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/98/7a7ce6-06a6-41d3-b5fa-97174a96e815/1/u0u9M0WB3c3ZNbzvR9mgTLzl_e0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
1e:99:68:49:5b:fd:4b:3e:99:d4:cd:1c:c6:a3:89:3c:58:c4:
40:80:cf:44:b8:57:13:f5:f3:f2:d8:8c:ca:1d:38:91:0c:7e:
21:cd:14:25:3b:17:46:68:fe:7c:98:f9:83:fd:f5:44:c6:67:
c6:ca:93:a7:bb:72:4c:00:6b:37:7f:49:5f:cd:07:10:ec:80:
bf:a7:bc:e9:01:84:1d:d0:d2:25:08:15:b9:90:95:27:13:8a:
65:c1:be:43:b0:19:96:74:fc:f3:d3:f0:42:44:0f:b8:41:86:
f9:e9:fc:54:9b:ed:cc:7f:f9:b8:7a:fd:d0:a5:67:8c:16:ff:
6d:8b:f7:14:82:90:84:3d:cd:2f:79:88:5c:58:0a:ef:9f:7e:
00:03:f4:b7:25:54:c6:b8:33:ae:15:57:f3:1f:bd:1a:25:4a:
75:3c:a7:97:94:a9:ba:de:bf:15:1b:83:d8:96:00:6a:eb:77:
dd:06:48:d8:e8:d7:7e:2e:85:bb:6d:13:49:59:d0:84:23:cb:
8f:50:71:72:a9:9b:06:a8:75:0f:f6:fe:81:1e:d1:c9:1d:d0:
cd:6a:36:e1:3e:ce:91:83:8a:38:90:e8:0c:ef:23:ed:86:35:
8a:a3:de:d3:45:ec:71:2c:a3:8c:ba:96:58:be:b0:3b:fc:b0:
19:62:fc:c7
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat May 10 22:03:40 2025 by rpki-client