Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d6/8e4deb-317d-4977-8aa4-95bc640e3c56/1/u_E0smpfP3zNjK9dLGvnDKwPoks.mft
File: u_E0smpfP3zNjK9dLGvnDKwPoks.mft (raw, json)
Hash identifier: IOtKWX5Wsr5Iq8ncF0YEKNfmovlUeXd8vZOmvz2hEVk=
Subject key identifier: 33:54:62:12:15:AA:C6:C6:27:C5:95:53:C7:C6:FD:CE:19:8C:C1:22
Authority key identifier: BB:F1:34:B2:6A:5F:3F:7C:CD:8C:AF:5D:2C:6B:E7:0C:AC:0F:A2:4B
Certificate issuer: /CN=bbf134b26a5f3f7ccd8caf5d2c6be70cac0fa24b
Certificate serial: 0196BDB78BE7A311A2033A3979AC36EA1858
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/u_E0smpfP3zNjK9dLGvnDKwPoks.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/d6/8e4deb-317d-4977-8aa4-95bc640e3c56/1/u_E0smpfP3zNjK9dLGvnDKwPoks.mft
Manifest number: 0458
Signing time: Sun 11 May 2025 05:00:44 +0000
Manifest this update: Sun 11 May 2025 05:00:44 +0000
Manifest next update: Mon 12 May 2025 05:00:44 +0000
Files and hashes: 1: u_E0smpfP3zNjK9dLGvnDKwPoks.crl (hash: RdHrJqXcGKNHG3FSspIdXzBfx+4CyP8hp7XTSRfZ1Rw=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/d6/8e4deb-317d-4977-8aa4-95bc640e3c56/1/u_E0smpfP3zNjK9dLGvnDKwPoks.crl
rsync://rpki.ripe.net/repository/DEFAULT/d6/8e4deb-317d-4977-8aa4-95bc640e3c56/1/u_E0smpfP3zNjK9dLGvnDKwPoks.mft
rsync://rpki.ripe.net/repository/DEFAULT/u_E0smpfP3zNjK9dLGvnDKwPoks.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 12 May 2025 05:00:44 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:bd:b7:8b:e7:a3:11:a2:03:3a:39:79:ac:36:ea:18:58
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=bbf134b26a5f3f7ccd8caf5d2c6be70cac0fa24b
Validity
Not Before: May 11 05:00:44 2025 GMT
Not After : May 12 05:00:44 2025 GMT
Subject: CN=3354621215aac6c627c59553c7c6fdce198cc122
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bb:4d:d9:53:f0:30:26:77:b1:9e:0c:38:f6:85:
32:e5:bd:05:c1:e6:6b:22:22:f8:77:54:51:4b:1c:
2b:be:36:c2:6b:4e:2d:fb:c3:85:7e:35:11:5e:28:
73:a9:ac:fe:95:37:9f:2c:02:e7:55:91:d8:5c:b4:
5b:85:94:df:e0:ab:70:1d:2b:80:7b:38:de:8d:4a:
aa:bb:ce:57:cf:cd:88:9c:eb:0b:ce:54:8b:74:ee:
a9:9b:f2:73:39:41:e1:80:73:b9:f1:8c:fc:ab:65:
54:73:a2:b2:2b:cb:c1:e6:0c:32:29:55:d7:dc:01:
2d:95:cf:4b:91:0d:97:28:73:df:fc:e8:71:90:35:
fc:71:fc:d2:1e:67:b8:8f:13:90:37:76:20:4b:65:
52:b6:3f:ee:a3:33:2b:ad:d3:09:bd:a8:a9:de:1e:
82:8f:42:a7:7e:86:d8:6c:1a:d4:51:47:48:3d:34:
d2:b0:00:cc:82:25:63:52:35:ca:f9:7b:2b:63:ef:
3c:1e:b4:19:5b:44:67:ab:22:06:14:79:2d:19:8c:
16:a8:48:10:d7:25:28:25:0a:89:88:75:c4:c4:93:
a9:20:4f:8d:42:de:9e:24:e0:c3:93:e3:cd:9e:f3:
2d:d5:50:9a:45:8a:12:7d:39:4a:60:bb:75:7c:9b:
f0:7b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
33:54:62:12:15:AA:C6:C6:27:C5:95:53:C7:C6:FD:CE:19:8C:C1:22
X509v3 Authority Key Identifier:
keyid:BB:F1:34:B2:6A:5F:3F:7C:CD:8C:AF:5D:2C:6B:E7:0C:AC:0F:A2:4B
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/u_E0smpfP3zNjK9dLGvnDKwPoks.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d6/8e4deb-317d-4977-8aa4-95bc640e3c56/1/u_E0smpfP3zNjK9dLGvnDKwPoks.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/d6/8e4deb-317d-4977-8aa4-95bc640e3c56/1/u_E0smpfP3zNjK9dLGvnDKwPoks.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
02:e9:aa:61:70:db:f2:a8:1b:9a:5d:3d:48:2d:12:04:d5:2b:
b6:69:8b:29:28:0b:58:e2:a4:7b:40:d8:17:eb:e8:0d:d9:34:
e8:3a:df:55:51:2e:f6:6d:e1:f3:68:e7:4f:ca:e3:d5:ae:bb:
72:35:da:25:33:2b:b3:e5:8e:13:64:0e:f8:12:ea:3d:4e:83:
3a:07:ef:37:47:f4:46:46:e6:53:f8:fa:c2:c8:39:88:de:03:
f9:4e:df:2c:a4:cd:c7:2b:e9:70:82:eb:82:57:2a:04:17:b5:
ec:22:32:1a:89:1b:75:f7:6d:20:49:96:be:f8:8d:5d:16:9d:
93:26:15:70:ee:9e:de:0a:3a:5a:f2:09:78:dd:8c:d9:0e:47:
9e:da:05:03:12:65:c3:fc:c8:6c:7d:6a:f0:70:16:96:9f:16:
c5:44:85:94:95:af:ef:21:15:09:72:da:ab:70:4e:15:09:10:
06:9f:6f:37:cc:16:2f:01:fa:b1:42:59:fc:c4:77:12:84:99:
42:d4:f9:77:ae:93:78:a3:c8:8a:fe:ba:a0:3d:4c:76:a6:39:
b2:ad:8f:a1:6c:93:3e:87:cc:b3:23:04:ce:72:9f:5f:a2:16:
96:5d:30:a3:0c:8c:3e:d8:c8:29:f4:b2:17:a4:cc:c7:1f:92:
bf:5f:8f:e1
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun May 11 12:07:10 2025 by rpki-client