Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/cb/75b838-4ece-4998-8ad8-17d31dee8e12/1/up78qG3qcNPukBgWeMjrMOaRbR0.mft
File: up78qG3qcNPukBgWeMjrMOaRbR0.mft (raw, json)
Hash identifier: 2CXPZDe9HQ01kUx1z9aRn2IesDkYoyzltZUd8/WyBrk=
Subject key identifier: 1D:01:2A:AB:2B:B6:A6:9E:C2:69:FA:B1:42:6F:CD:A4:F6:D8:90:C8
Authority key identifier: BA:9E:FC:A8:6D:EA:70:D3:EE:90:18:16:78:C8:EB:30:E6:91:6D:1D
Certificate issuer: /CN=ba9efca86dea70d3ee90181678c8eb30e6916d1d
Certificate serial: 0196BE258210FF80CC517AD8CFC815D61090
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/up78qG3qcNPukBgWeMjrMOaRbR0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/cb/75b838-4ece-4998-8ad8-17d31dee8e12/1/up78qG3qcNPukBgWeMjrMOaRbR0.mft
Manifest number: 14AA
Signing time: Sun 11 May 2025 07:00:51 +0000
Manifest this update: Sun 11 May 2025 07:00:51 +0000
Manifest next update: Mon 12 May 2025 07:00:51 +0000
Files and hashes: 1: TcxQ_LIgSlnQjiSbvcx7DOq2_Zc.roa (hash: v9utTlGogD+SmAb7nxAo7ersLZspEGf0TY5tMFbjRB8=)
2: up78qG3qcNPukBgWeMjrMOaRbR0.crl (hash: wXKxhyzNOnM+OcX+raTuXNNdSeKCdrefS2Pu+zOnNds=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/cb/75b838-4ece-4998-8ad8-17d31dee8e12/1/up78qG3qcNPukBgWeMjrMOaRbR0.crl
rsync://rpki.ripe.net/repository/DEFAULT/cb/75b838-4ece-4998-8ad8-17d31dee8e12/1/up78qG3qcNPukBgWeMjrMOaRbR0.mft
rsync://rpki.ripe.net/repository/DEFAULT/up78qG3qcNPukBgWeMjrMOaRbR0.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 12 May 2025 07:00:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:be:25:82:10:ff:80:cc:51:7a:d8:cf:c8:15:d6:10:90
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=ba9efca86dea70d3ee90181678c8eb30e6916d1d
Validity
Not Before: May 11 07:00:51 2025 GMT
Not After : May 12 07:00:51 2025 GMT
Subject: CN=1d012aab2bb6a69ec269fab1426fcda4f6d890c8
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ba:c7:8c:58:cc:22:e5:f4:99:c8:d9:99:65:5b:
03:09:41:01:bf:29:13:c0:dc:86:ca:e2:7a:93:7f:
62:7a:b6:4b:aa:81:f5:e2:84:f3:3f:e1:c6:a3:d3:
c6:62:a9:71:86:f0:6d:1b:9f:4d:5e:31:aa:b9:64:
1b:1f:51:c7:32:41:00:1e:cd:b8:32:82:08:b7:7c:
e0:af:89:97:fd:08:fa:f2:96:71:ec:1e:8d:c9:e5:
c0:88:d8:98:68:1e:7e:d9:47:e1:23:1d:02:4a:3e:
4b:48:1b:ae:c6:43:47:a2:32:4a:c5:27:a1:93:06:
4f:bc:91:31:d4:79:20:e6:a9:82:f0:9e:d3:af:a6:
95:b3:93:5f:26:11:06:a4:d2:2e:06:f3:55:5d:1a:
59:32:ce:07:26:86:b9:b1:77:d2:e9:e3:1c:47:47:
6a:b8:9a:8d:41:1f:9b:23:4d:df:27:76:9b:1f:40:
e5:75:45:50:6b:16:a8:ca:4c:57:ba:53:19:1c:fa:
d0:64:37:49:66:8e:76:dc:4a:96:7c:14:6e:be:2e:
3e:50:e6:b3:60:a7:8f:81:61:db:9b:f8:bf:68:e3:
29:1c:4e:3b:23:83:59:3d:03:6d:d7:4f:a5:45:80:
db:4c:eb:69:bb:e3:ad:6a:2d:5a:ae:a9:83:44:40:
f3:8b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
1D:01:2A:AB:2B:B6:A6:9E:C2:69:FA:B1:42:6F:CD:A4:F6:D8:90:C8
X509v3 Authority Key Identifier:
keyid:BA:9E:FC:A8:6D:EA:70:D3:EE:90:18:16:78:C8:EB:30:E6:91:6D:1D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/up78qG3qcNPukBgWeMjrMOaRbR0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/cb/75b838-4ece-4998-8ad8-17d31dee8e12/1/up78qG3qcNPukBgWeMjrMOaRbR0.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/cb/75b838-4ece-4998-8ad8-17d31dee8e12/1/up78qG3qcNPukBgWeMjrMOaRbR0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
34:64:cd:99:52:53:3d:3b:6c:83:d0:99:f5:e9:6f:e0:3c:c1:
50:c6:53:36:a1:0e:50:cb:74:b5:72:ec:dd:32:96:f0:7d:5a:
85:22:00:08:ca:6b:70:a7:41:cf:03:46:72:ac:4e:77:71:fe:
39:a6:61:f3:1d:64:82:3c:d2:55:86:31:0f:81:81:87:25:f3:
04:7b:af:74:a4:45:d0:1b:a6:e7:2b:05:3c:44:a4:43:e7:01:
17:df:75:2e:32:3e:f0:fb:c4:f3:87:5b:8c:cb:68:8b:b2:a7:
49:d9:88:53:01:85:49:c1:3b:ce:e5:09:cf:2a:77:e6:7a:e5:
b2:b6:21:74:79:5f:16:9f:d7:df:79:72:29:fa:9e:03:dd:8d:
f9:cc:f2:d2:68:e6:d3:95:a3:c0:f9:6e:2e:3e:2c:f9:81:ce:
60:cb:0b:62:ac:c7:e9:66:64:3e:6b:cc:a7:82:10:e7:d9:1f:
89:b0:d5:13:30:9b:82:74:90:ee:0f:3a:37:61:f2:e8:ed:fa:
08:92:67:e6:07:b8:ed:6b:65:05:da:15:51:a6:4f:f4:7e:f3:
08:cb:2c:ab:11:29:d5:0b:39:61:50:80:94:82:76:97:ed:d4:
c4:43:61:bc:c1:34:7c:39:ff:7e:f5:00:f7:19:5e:da:2c:10:
56:a5:15:a3
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun May 11 14:39:49 2025 by rpki-client