Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/a4/4b2c23-f535-4b6d-a445-e04dac61ce9d/1/to-UDxzFd_Nw8oQohQ3Hv3QY8SE.mft
File: to-UDxzFd_Nw8oQohQ3Hv3QY8SE.mft (raw, json)
Hash identifier: m4KqVCiWmyBEjVTq6cGHYJO9bJPxx0k03z0ncjx6LLA=
Subject key identifier: 0B:CE:C0:6A:BA:AF:75:BB:60:ED:3C:29:F6:10:B9:76:4F:09:AC:5D
Authority key identifier: B6:8F:94:0F:1C:C5:77:F3:70:F2:84:28:85:0D:C7:BF:74:18:F1:21
Certificate issuer: /CN=b68f940f1cc577f370f28428850dc7bf7418f121
Certificate serial: 0196BBFFEEAEDE56F139692ED02791E63E8D
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/to-UDxzFd_Nw8oQohQ3Hv3QY8SE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/a4/4b2c23-f535-4b6d-a445-e04dac61ce9d/1/to-UDxzFd_Nw8oQohQ3Hv3QY8SE.mft
Manifest number: 0CBB
Signing time: Sat 10 May 2025 21:00:34 +0000
Manifest this update: Sat 10 May 2025 21:00:34 +0000
Manifest next update: Sun 11 May 2025 21:00:34 +0000
Files and hashes: 1: 5OzibFSrr2gY0VaIFYLHJq_qzxU.roa (hash: I/bqIkdkYHAIm/Bp0vXDzU7ykzf4ma6u4Mih9TldA8Q=)
2: dSK-93-WLyaDQuBO7u17opJXxWo.roa (hash: RuyjgNqJJjjgMNL3Y8FPmQey/oZcSD6yyDRCtPRrlOs=)
3: j7ph1xFBs0MWNVt9udcCJXXzBEI.roa (hash: b+N43kqTE0jfX2C+M9LwxS/gPLGBPUPCdAw73VTzTVs=)
4: to-UDxzFd_Nw8oQohQ3Hv3QY8SE.crl (hash: gZtnfgu9I5HJ/wLT2tHOqSUzKbxsO7SJXSARNmOwLko=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/a4/4b2c23-f535-4b6d-a445-e04dac61ce9d/1/to-UDxzFd_Nw8oQohQ3Hv3QY8SE.crl
rsync://rpki.ripe.net/repository/DEFAULT/a4/4b2c23-f535-4b6d-a445-e04dac61ce9d/1/to-UDxzFd_Nw8oQohQ3Hv3QY8SE.mft
rsync://rpki.ripe.net/repository/DEFAULT/to-UDxzFd_Nw8oQohQ3Hv3QY8SE.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 11 May 2025 21:00:34 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:bb:ff:ee:ae:de:56:f1:39:69:2e:d0:27:91:e6:3e:8d
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=b68f940f1cc577f370f28428850dc7bf7418f121
Validity
Not Before: May 10 21:00:34 2025 GMT
Not After : May 11 21:00:34 2025 GMT
Subject: CN=0bcec06abaaf75bb60ed3c29f610b9764f09ac5d
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b7:97:8a:a9:4b:dc:a8:80:a2:f8:0f:b5:70:e6:
51:aa:be:f8:12:f8:c2:e3:1e:a0:cb:e4:ce:23:13:
c0:6f:43:94:ea:78:00:a7:a4:e2:de:74:45:ce:15:
f8:3b:20:db:60:6c:44:22:2c:9b:40:e3:d9:f7:a2:
d0:9d:14:d1:7e:03:f9:d1:18:97:7f:de:8f:6d:e2:
7e:50:11:9d:ef:b0:b2:21:e2:0f:81:a5:a1:71:64:
a2:9a:a8:79:54:8e:95:4a:d4:d3:ad:ee:4e:64:9c:
fe:32:62:0d:31:67:a5:71:20:bf:03:d3:04:f0:71:
62:0b:25:95:24:53:04:ce:05:a5:97:46:f1:79:5c:
d3:7f:65:27:26:cf:7f:c4:ae:94:4c:9d:c1:ad:5e:
71:72:26:4d:3c:28:7f:68:0f:d6:ce:fe:45:21:7b:
e5:f9:eb:35:98:4f:d2:ae:c0:af:7f:fa:2e:7e:11:
9b:65:df:28:45:8a:b1:58:e4:34:74:64:2c:e5:f8:
09:f5:c4:b1:66:08:44:44:76:95:2e:b2:92:67:30:
67:26:7c:d6:49:75:b0:83:ff:82:81:5a:da:e9:14:
c9:be:09:bb:85:5e:80:14:1c:a2:f0:8e:ee:44:5b:
4c:df:f8:04:4e:c4:2c:e8:20:c7:f0:cf:51:28:45:
23:8b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
0B:CE:C0:6A:BA:AF:75:BB:60:ED:3C:29:F6:10:B9:76:4F:09:AC:5D
X509v3 Authority Key Identifier:
keyid:B6:8F:94:0F:1C:C5:77:F3:70:F2:84:28:85:0D:C7:BF:74:18:F1:21
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/to-UDxzFd_Nw8oQohQ3Hv3QY8SE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a4/4b2c23-f535-4b6d-a445-e04dac61ce9d/1/to-UDxzFd_Nw8oQohQ3Hv3QY8SE.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/a4/4b2c23-f535-4b6d-a445-e04dac61ce9d/1/to-UDxzFd_Nw8oQohQ3Hv3QY8SE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
4f:1e:a4:89:13:4f:c8:2a:a8:2a:ac:e0:99:16:ea:bd:9f:e5:
dd:81:10:b1:b8:b0:13:fe:1c:bf:8a:e4:76:3f:0d:64:e6:ee:
16:8c:82:22:28:da:e2:1e:a9:f8:6d:31:0d:bf:f3:d4:a7:a1:
10:a5:79:83:fd:3a:6f:13:df:d1:ef:21:60:09:b2:5f:c5:6d:
b0:cc:fa:0e:90:d8:9d:5f:2f:cc:9c:5a:f8:85:a9:56:4f:54:
a6:fd:2b:1b:db:4a:04:5b:5d:55:df:76:2e:6c:de:b6:bc:f8:
6d:64:0c:5b:a4:43:ed:cc:96:5a:50:17:1e:59:00:82:2e:e8:
9c:9c:6f:23:df:0a:cb:c0:c8:76:96:0c:31:0c:31:73:5b:2a:
2a:75:5b:0d:85:fe:59:7c:70:fb:2a:15:9b:a4:f6:ce:f4:26:
fc:a9:99:14:a7:aa:fd:19:39:c4:54:1f:58:d4:d3:4b:8c:6b:
9f:21:8f:25:e6:63:1f:25:f6:69:98:27:ee:49:7f:a6:69:7d:
ea:f2:6c:2f:3e:25:29:f7:41:ea:68:60:b2:fa:c4:f7:43:6b:
7b:1d:2a:cb:11:5f:9d:b6:c7:39:7a:46:dd:98:10:e1:4a:f8:
03:6b:6a:2e:76:9d:d0:aa:02:07:0c:f6:c7:1e:44:72:d0:32:
54:ab:7e:92
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun May 11 04:22:52 2025 by rpki-client