Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/bc/9e0f5e-8141-43c9-8f44-33ebab24bbb3/1/u303nAT4F1s172c9dsaORMcOgz8.mft
File: u303nAT4F1s172c9dsaORMcOgz8.mft (raw, json)
Hash identifier: pbIajupxWBYcu91pP+8vGo75Ct7cFhE7eiII4EPAbKI=
Subject key identifier: C8:85:22:37:F6:C4:7E:1B:B9:65:41:12:EE:66:B3:77:6B:42:35:AF
Authority key identifier: BB:7D:37:9C:04:F8:17:5B:35:EF:67:3D:76:C6:8E:44:C7:0E:83:3F
Certificate issuer: /CN=bb7d379c04f8175b35ef673d76c68e44c70e833f
Certificate serial: 0196B7B63A1EA0D4D31DFE222E5D5ABA7897
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/u303nAT4F1s172c9dsaORMcOgz8.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/bc/9e0f5e-8141-43c9-8f44-33ebab24bbb3/1/u303nAT4F1s172c9dsaORMcOgz8.mft
Manifest number: 1530
Signing time: Sat 10 May 2025 01:01:34 +0000
Manifest this update: Sat 10 May 2025 01:01:34 +0000
Manifest next update: Sun 11 May 2025 01:01:34 +0000
Files and hashes: 1: SQLnF00Areuw5taMbfkFtdu1wjU.roa (hash: 5CPinLFNfDrIVGYwg0jIgmWM06cJ2LCZHAkJ/JRfIwc=)
2: u303nAT4F1s172c9dsaORMcOgz8.crl (hash: xGCRj9uQELlHQh1+mMp+940BpTktaTXDuC7RadK+hfk=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/bc/9e0f5e-8141-43c9-8f44-33ebab24bbb3/1/u303nAT4F1s172c9dsaORMcOgz8.crl
rsync://rpki.ripe.net/repository/DEFAULT/bc/9e0f5e-8141-43c9-8f44-33ebab24bbb3/1/u303nAT4F1s172c9dsaORMcOgz8.mft
rsync://rpki.ripe.net/repository/DEFAULT/u303nAT4F1s172c9dsaORMcOgz8.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 11 May 2025 01:01:34 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:b7:b6:3a:1e:a0:d4:d3:1d:fe:22:2e:5d:5a:ba:78:97
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=bb7d379c04f8175b35ef673d76c68e44c70e833f
Validity
Not Before: May 10 01:01:34 2025 GMT
Not After : May 11 01:01:34 2025 GMT
Subject: CN=c8852237f6c47e1bb9654112ee66b3776b4235af
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e2:3e:fc:1e:29:5a:2a:9e:4f:38:c9:cc:64:34:
ea:a6:b7:dc:fa:73:21:be:94:da:ae:78:da:3a:79:
40:8a:4b:81:fb:c9:dc:0e:24:58:24:19:ec:86:5f:
7b:38:eb:cb:7c:c1:0f:cb:29:6d:fd:99:6d:b7:f1:
eb:7e:df:1e:1b:c0:c3:93:a7:58:2a:d5:a2:c7:a3:
c7:5c:88:d2:52:a4:59:57:8b:74:3c:8e:22:f0:5f:
4d:1f:09:92:37:aa:af:73:df:95:ce:59:0c:4d:1b:
e2:e4:67:47:b2:0d:43:85:41:08:85:af:5c:b2:f4:
37:85:ac:87:9a:a5:87:99:59:e1:e2:c7:30:77:05:
42:f2:58:f9:d3:9f:74:d7:a0:fe:6f:66:be:be:21:
39:e7:23:b1:c4:18:63:2c:96:bb:df:49:1a:33:f9:
26:fe:2d:f4:fd:46:c6:a7:8a:74:86:2e:f8:ee:cc:
c5:f4:78:55:ea:bc:55:3a:4d:f5:41:79:21:67:77:
ac:ac:2d:7e:ac:4a:22:55:84:79:2a:8d:f6:1e:09:
94:16:12:ab:df:e2:61:50:79:66:1f:45:c7:fb:ff:
bf:52:4c:db:68:54:64:49:5b:e1:9d:91:46:1b:07:
25:ed:b6:0a:b5:b3:f4:a7:93:46:6c:bb:be:9f:6d:
9d:71
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C8:85:22:37:F6:C4:7E:1B:B9:65:41:12:EE:66:B3:77:6B:42:35:AF
X509v3 Authority Key Identifier:
keyid:BB:7D:37:9C:04:F8:17:5B:35:EF:67:3D:76:C6:8E:44:C7:0E:83:3F
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/u303nAT4F1s172c9dsaORMcOgz8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/bc/9e0f5e-8141-43c9-8f44-33ebab24bbb3/1/u303nAT4F1s172c9dsaORMcOgz8.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/bc/9e0f5e-8141-43c9-8f44-33ebab24bbb3/1/u303nAT4F1s172c9dsaORMcOgz8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
91:54:72:62:4c:a4:3c:17:e1:59:43:6a:79:f8:ba:01:5e:17:
f9:1e:d2:4f:f3:ec:9c:88:83:1d:56:21:7d:d8:fd:24:0f:c0:
cf:ca:3d:1a:59:40:59:33:5f:f2:8e:ec:0b:5b:4a:e2:8b:07:
52:2d:c7:a9:0e:f0:c3:e1:fd:45:c1:58:7e:cb:43:9a:43:f4:
9b:3d:3a:63:da:b1:2a:70:6f:b8:22:86:77:7a:0c:f4:e9:fb:
91:84:b3:fe:72:cd:65:22:7d:1c:79:ce:e9:61:89:34:7e:ba:
70:08:d4:cc:76:18:73:f6:4f:77:b3:8c:ae:81:ce:ce:06:2f:
48:96:a2:1f:b8:4a:f3:54:b3:1b:e1:a7:05:e1:d4:d8:41:35:
7f:df:e9:98:6e:a6:b5:8f:bf:67:e5:5f:eb:c4:0a:92:50:e8:
9f:d7:59:9f:4d:a2:5d:d1:0f:ac:29:9a:e9:ba:7f:8e:e0:25:
d1:ff:0f:31:02:62:94:45:98:0a:53:32:ef:d8:d1:82:77:f0:
1d:f1:95:80:44:8e:d2:4b:a8:a8:fd:93:59:87:c7:57:dd:1f:
2a:27:0c:b3:9e:93:13:40:9b:b1:69:83:7b:86:2c:51:2e:ce:
29:88:b6:f1:4f:d7:b8:be:2a:05:ab:1d:91:ac:9c:66:e8:46:
55:1c:49:36
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat May 10 10:03:55 2025 by rpki-client