Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/9c/1bf7b0-4518-4141-bd6c-64b0e614d004/1/u3zLGm47yrYxnTF_YsdL8eH0FHM.mft
File: u3zLGm47yrYxnTF_YsdL8eH0FHM.mft (raw, json)
Hash identifier: TBOZaoBFbyxam323JnpwQBOUAq2THRKZrg59hCQTrxs=
Subject key identifier: A9:B8:29:C1:15:80:FA:9A:C5:48:5E:1A:52:DA:8C:AA:C5:DA:72:12
Authority key identifier: BB:7C:CB:1A:6E:3B:CA:B6:31:9D:31:7F:62:C7:4B:F1:E1:F4:14:73
Certificate issuer: /CN=bb7ccb1a6e3bcab6319d317f62c74bf1e1f41473
Certificate serial: 0196AA9EE1457B5105FE53C4BF33EE9BD181
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/u3zLGm47yrYxnTF_YsdL8eH0FHM.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/9c/1bf7b0-4518-4141-bd6c-64b0e614d004/1/u3zLGm47yrYxnTF_YsdL8eH0FHM.mft
Manifest number: 04F8
Signing time: Wed 07 May 2025 12:01:01 +0000
Manifest this update: Wed 07 May 2025 12:01:01 +0000
Manifest next update: Thu 08 May 2025 12:01:01 +0000
Files and hashes: 1: WziYZQTgG6uYWNEdvqwQxarVou4.roa (hash: K1TtQwXEcoMLvYVaawZdU+KIeSsRtPv5nA+Jxlzh0sU=)
2: u3zLGm47yrYxnTF_YsdL8eH0FHM.crl (hash: nsquDNadGSrqdG5NfhOeWppYCPJxuteLQznwSCbL0Rs=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/9c/1bf7b0-4518-4141-bd6c-64b0e614d004/1/u3zLGm47yrYxnTF_YsdL8eH0FHM.crl
rsync://rpki.ripe.net/repository/DEFAULT/9c/1bf7b0-4518-4141-bd6c-64b0e614d004/1/u3zLGm47yrYxnTF_YsdL8eH0FHM.mft
rsync://rpki.ripe.net/repository/DEFAULT/u3zLGm47yrYxnTF_YsdL8eH0FHM.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 08 May 2025 12:01:01 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:aa:9e:e1:45:7b:51:05:fe:53:c4:bf:33:ee:9b:d1:81
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=bb7ccb1a6e3bcab6319d317f62c74bf1e1f41473
Validity
Not Before: May 7 12:01:01 2025 GMT
Not After : May 8 12:01:01 2025 GMT
Subject: CN=a9b829c11580fa9ac5485e1a52da8caac5da7212
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8a:c6:b0:8e:d8:2b:51:98:2e:13:31:f4:0a:a3:
48:99:67:60:03:24:a3:31:49:35:35:54:13:b7:ce:
f1:97:08:d1:fe:a4:89:dc:52:b9:f9:b9:a1:f4:6e:
f9:da:af:99:2d:09:68:ac:1f:bf:c2:ca:75:7f:6f:
79:ef:f4:82:d7:95:32:ad:36:fe:68:2c:ae:bc:cd:
b5:94:20:49:3e:77:06:e7:c9:e1:1f:ce:d5:c7:13:
b8:29:d5:f4:c0:38:f6:da:d2:4a:96:5d:36:70:cc:
ed:13:0e:6f:26:3a:57:69:e5:ed:80:a7:c9:0f:1f:
8c:3e:7c:ef:51:5e:60:7c:b9:10:5a:62:6b:55:d8:
42:4c:0f:4a:98:e2:1f:eb:f8:4f:c0:a3:6c:2b:83:
6b:19:d7:b3:b2:52:94:94:be:13:1a:59:56:63:fa:
62:60:95:98:19:ed:87:3f:c6:4c:9a:e2:14:ce:00:
46:67:de:51:63:fd:55:7d:2d:28:2a:88:0e:6e:53:
17:ca:95:65:99:2f:5d:67:63:b2:66:d5:eb:36:f3:
2b:0d:b7:09:f5:04:66:ea:94:d2:ff:4e:a7:2a:6d:
25:d3:d0:e2:2d:91:a0:62:5f:4c:7f:78:ee:83:46:
02:74:69:9a:74:a8:cf:ce:82:83:64:c2:46:64:b6:
e7:29
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A9:B8:29:C1:15:80:FA:9A:C5:48:5E:1A:52:DA:8C:AA:C5:DA:72:12
X509v3 Authority Key Identifier:
keyid:BB:7C:CB:1A:6E:3B:CA:B6:31:9D:31:7F:62:C7:4B:F1:E1:F4:14:73
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/u3zLGm47yrYxnTF_YsdL8eH0FHM.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/9c/1bf7b0-4518-4141-bd6c-64b0e614d004/1/u3zLGm47yrYxnTF_YsdL8eH0FHM.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/9c/1bf7b0-4518-4141-bd6c-64b0e614d004/1/u3zLGm47yrYxnTF_YsdL8eH0FHM.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
b2:fb:71:80:fa:9b:22:e6:0c:e1:ac:2d:ee:88:ac:b3:90:b5:
d2:e0:3c:5d:7f:c9:55:08:15:c7:41:2c:d3:b1:61:4f:f1:4d:
fc:7d:4e:ee:8a:c3:4b:24:45:d6:70:1d:2f:86:ab:d8:f8:85:
f4:34:62:42:9d:1f:21:5c:0a:30:ad:4b:44:65:74:4a:48:b1:
b7:b8:da:b4:25:b9:71:2a:89:7c:1e:03:07:c1:39:c0:55:96:
11:72:44:7e:79:62:9e:54:a1:df:85:c1:78:22:c6:3f:53:fa:
25:ab:76:e1:09:39:54:fb:e8:97:75:e1:9a:ff:60:db:cf:64:
cf:35:be:b2:63:5c:8d:05:1f:d5:c4:89:43:34:19:dd:54:40:
5b:55:cd:40:30:be:15:1b:78:a3:02:00:7a:e8:09:01:b3:8b:
f1:e0:fd:ca:ea:f6:40:78:fb:7b:f0:10:0d:ef:9d:70:4a:24:
45:9b:bf:98:a1:29:83:35:5f:b8:5c:53:43:fa:08:e0:d7:a8:
2a:68:d9:56:c1:fb:dc:06:09:2d:e0:11:e6:88:41:a9:1c:ee:
4f:35:81:c2:c9:7d:90:ed:b7:47:52:57:e4:94:58:ab:7f:fd:
06:45:d6:29:a4:e8:53:3a:1d:7e:0c:07:31:3e:a2:22:f5:23:
4a:06:71:83
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZaqnuFFe1EF/lPEvzPum9GBMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGJiN2NjYjFhNmUzYmNhYjYzMTlkMzE3ZjYyYzc0YmYxZTFm
NDE0NzMwHhcNMjUwNTA3MTIwMTAxWhcNMjUwNTA4MTIwMTAxWjAzMTEwLwYDVQQD
EyhhOWI4MjljMTE1ODBmYTlhYzU0ODVlMWE1MmRhOGNhYWM1ZGE3MjEyMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAisawjtgrUZguEzH0CqNImWdgAySj
MUk1NVQTt87xlwjR/qSJ3FK5+bmh9G752q+ZLQlorB+/wsp1f2957/SC15UyrTb+
aCyuvM21lCBJPncG58nhH87VxxO4KdX0wDj22tJKll02cMztEw5vJjpXaeXtgKfJ
Dx+MPnzvUV5gfLkQWmJrVdhCTA9KmOIf6/hPwKNsK4NrGdezslKUlL4TGllWY/pi
YJWYGe2HP8ZMmuIUzgBGZ95RY/1VfS0oKogOblMXypVlmS9dZ2OyZtXrNvMrDbcJ
9QRm6pTS/06nKm0l09DiLZGgYl9Mf3jug0YCdGmadKjPzoKDZMJGZLbnKQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFKm4KcEVgPqaxUheGlLajKrF2nISMB8GA1UdIwQY
MBaAFLt8yxpuO8q2MZ0xf2LHS/Hh9BRzMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvdTN6TEdtNDd5cll4blRGX1lzZEw4ZUgwRkhNLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC85Yy8xYmY3YjAtNDUxOC00MTQxLWJkNmMt
NjRiMGU2MTRkMDA0LzEvdTN6TEdtNDd5cll4blRGX1lzZEw4ZUgwRkhNLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC85Yy8xYmY3YjAtNDUxOC00MTQxLWJkNmMtNjRiMGU2MTRkMDA0
LzEvdTN6TEdtNDd5cll4blRGX1lzZEw4ZUgwRkhNLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAsvtxgPqb
IuYM4awt7oiss5C10uA8XX/JVQgVx0Es07FhT/FN/H1O7orDSyRF1nAdL4ar2PiF
9DRiQp0fIVwKMK1LRGV0Skixt7jatCW5cSqJfB4DB8E5wFWWEXJEfnlinlSh34XB
eCLGP1P6Jat24Qk5VPvol3Xhmv9g289kzzW+smNcjQUf1cSJQzQZ3VRAW1XNQDC+
FRt4owIAeugJAbOL8eD9yur2QHj7e/AQDe+dcEokRZu/mKEpgzVfuFxTQ/oI4Neo
KmjZVsH73AYJLeAR5ohBqRzuTzWBwsl9kO23R1JX5JRYq3/9BkXWKaToUzodfgwH
MT6iIvUjSgZxgw==
-----END CERTIFICATE-----
Generated at Wed May 7 16:43:40 2025 by rpki-client