Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c7/6d4759-a05e-46bc-be58-669eed2ec7ea/1/unZwbT4IgT24sndmKK-EZRjibdI.mft
File: unZwbT4IgT24sndmKK-EZRjibdI.mft (raw, json)
Hash identifier: A/8YqOO83axKFvYDjCpgUkc0o6ikiOmUOjJaaE0USwk=
Subject key identifier: 87:A3:AE:7F:03:DF:DE:72:EE:4B:84:76:E3:1E:11:4D:9F:6F:30:E2
Authority key identifier: BA:76:70:6D:3E:08:81:3D:B8:B2:77:66:28:AF:84:65:18:E2:6D:D2
Certificate issuer: /CN=ba76706d3e08813db8b2776628af846518e26dd2
Certificate serial: 0196C1CB72B51115F2019484529F4C3324F5
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/unZwbT4IgT24sndmKK-EZRjibdI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c7/6d4759-a05e-46bc-be58-669eed2ec7ea/1/unZwbT4IgT24sndmKK-EZRjibdI.mft
Manifest number: 1537
Signing time: Mon 12 May 2025 00:00:57 +0000
Manifest this update: Mon 12 May 2025 00:00:57 +0000
Manifest next update: Tue 13 May 2025 00:00:57 +0000
Files and hashes: 1: Do_ZNFPYd7X2-W1xZGRW00-SNss.roa (hash: Ol8hC9+K4SVNjxQKvkLbRCYT37tEnqOL0zEZ/PI9ysk=)
2: unZwbT4IgT24sndmKK-EZRjibdI.crl (hash: qyEr7tJf4S/zt9LX9U+RMfk8Y7UTXMdyl/PzdWTSIy8=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/c7/6d4759-a05e-46bc-be58-669eed2ec7ea/1/unZwbT4IgT24sndmKK-EZRjibdI.crl
rsync://rpki.ripe.net/repository/DEFAULT/c7/6d4759-a05e-46bc-be58-669eed2ec7ea/1/unZwbT4IgT24sndmKK-EZRjibdI.mft
rsync://rpki.ripe.net/repository/DEFAULT/unZwbT4IgT24sndmKK-EZRjibdI.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 13 May 2025 00:00:57 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:c1:cb:72:b5:11:15:f2:01:94:84:52:9f:4c:33:24:f5
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=ba76706d3e08813db8b2776628af846518e26dd2
Validity
Not Before: May 12 00:00:57 2025 GMT
Not After : May 13 00:00:57 2025 GMT
Subject: CN=87a3ae7f03dfde72ee4b8476e31e114d9f6f30e2
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a9:47:2e:de:73:68:c3:c4:b3:28:02:48:ec:37:
78:e2:25:81:1e:de:05:dc:b1:b9:72:0c:b6:58:52:
d8:21:3d:0b:30:11:cc:b9:a4:69:b4:1c:40:bc:c3:
96:aa:c9:1d:59:a5:7a:0b:fd:b7:9f:90:3e:5d:c8:
72:36:f2:34:8e:33:88:bb:b4:ef:5f:ca:2a:9e:0c:
ee:94:35:e8:4d:5b:f8:ea:94:1b:cb:12:5a:cf:cf:
dd:90:6c:d3:1c:0d:0c:7b:82:fd:36:4c:b7:50:ae:
3e:bd:24:e0:7e:8d:82:85:c7:6b:9c:78:bb:d2:82:
3a:42:f8:64:e9:46:56:3e:4d:58:e4:54:b0:c0:e0:
db:4b:60:ca:08:ae:58:bb:03:49:a0:fb:f3:90:5f:
06:55:5d:2e:91:dd:e3:ae:07:af:15:37:0b:ff:1d:
fa:11:5f:b7:fa:00:d6:29:53:b4:3a:d6:d0:bf:60:
af:2e:16:e0:72:2f:87:ae:c8:ad:7e:6a:06:48:c0:
d9:90:e6:2d:13:47:b8:44:64:76:50:dc:c9:b2:22:
3e:5b:41:d1:48:3f:06:54:5a:b4:1f:c7:40:ad:c8:
9f:63:47:86:1a:65:22:c2:db:29:cd:e6:96:2f:a6:
8f:a9:54:a0:cc:50:2b:3e:56:40:19:bf:fd:cc:7a:
58:c3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
87:A3:AE:7F:03:DF:DE:72:EE:4B:84:76:E3:1E:11:4D:9F:6F:30:E2
X509v3 Authority Key Identifier:
keyid:BA:76:70:6D:3E:08:81:3D:B8:B2:77:66:28:AF:84:65:18:E2:6D:D2
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/unZwbT4IgT24sndmKK-EZRjibdI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c7/6d4759-a05e-46bc-be58-669eed2ec7ea/1/unZwbT4IgT24sndmKK-EZRjibdI.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/c7/6d4759-a05e-46bc-be58-669eed2ec7ea/1/unZwbT4IgT24sndmKK-EZRjibdI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
36:dd:a4:db:57:3d:53:7e:4d:60:f8:e1:da:49:0f:0f:15:b3:
97:50:4c:2f:aa:39:4b:be:90:75:09:a0:e9:7c:35:1f:dd:70:
3b:58:a9:16:f5:52:84:59:9f:37:fb:a6:95:20:a0:5d:9a:fa:
7c:e9:50:0f:e9:10:21:ad:58:0c:1b:82:a3:9c:d0:1e:d6:d0:
ae:95:a4:a6:41:22:76:11:b9:bf:7c:e8:eb:c1:88:1b:3a:a5:
e4:41:e9:66:6d:df:84:50:31:e9:8e:d3:8f:06:b2:ce:f9:e7:
b4:da:66:15:42:ce:81:8b:df:ff:06:62:93:dd:70:dc:7e:de:
ab:7b:6e:99:61:14:cb:b7:cd:11:8a:30:7a:d8:79:c4:92:43:
7a:f4:86:31:c0:e5:23:0d:b6:f7:bc:b6:8a:64:31:a1:7a:4f:
8b:7f:66:4d:ce:6e:27:7a:49:bf:f6:7a:64:39:54:65:fb:f7:
08:ff:8a:9b:31:ca:b2:cb:b8:cc:14:01:17:b4:b7:bc:0c:7e:
79:a6:fe:7e:4b:8f:42:d5:f9:b4:06:c0:85:6b:5a:f9:d2:42:
16:12:4b:8d:b6:e4:37:69:4d:d1:1e:74:9e:c7:51:3f:d6:41:
3b:d7:84:cb:5a:80:5d:93:a5:f3:b7:9c:b4:86:d7:c1:a1:be:
d0:e8:40:40
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon May 12 05:16:05 2025 by rpki-client