Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/db/46922f-5cb6-4d98-b4fc-93bd5e408f91/1/u8VfskrVVuBCAmUfbVqLJ9W-35c.mft
File: u8VfskrVVuBCAmUfbVqLJ9W-35c.mft (raw, json)
Hash identifier: kTNEVjP3CVbPCaIkJCUddaDowh6Tuzt1B2jVb/TrKbg=
Subject key identifier: A7:75:21:6F:95:49:95:E0:2C:6D:E9:D2:DB:5E:BE:28:A2:68:39:FB
Authority key identifier: BB:C5:5F:B2:4A:D5:56:E0:42:02:65:1F:6D:5A:8B:27:D5:BE:DF:97
Certificate issuer: /CN=bbc55fb24ad556e04202651f6d5a8b27d5bedf97
Certificate serial: 0196BF00D45C0F5B0DEFFE88AF3E126B86F0
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/u8VfskrVVuBCAmUfbVqLJ9W-35c.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/db/46922f-5cb6-4d98-b4fc-93bd5e408f91/1/u8VfskrVVuBCAmUfbVqLJ9W-35c.mft
Manifest number: 1211
Signing time: Sun 11 May 2025 11:00:24 +0000
Manifest this update: Sun 11 May 2025 11:00:24 +0000
Manifest next update: Mon 12 May 2025 11:00:24 +0000
Files and hashes: 1: JsF7FSwQaPNv5Ht3PNC4VICZzd4.roa (hash: fSvD3kvN3V7LC//WVhYwoHgh3jtQgyM95Ezj/Ar5cRU=)
2: mt-PyfiXYcQcKgR1e8Hsx5c4PoM.roa (hash: LeF0Pn1F55UIMk8YIasYk9VsWh941JF4CLigZGdvfv8=)
3: u8VfskrVVuBCAmUfbVqLJ9W-35c.crl (hash: 30Lp6cgXn3bJbrWpDrlbMp4PV2tsJNn2eUBU/waJ4ek=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/db/46922f-5cb6-4d98-b4fc-93bd5e408f91/1/u8VfskrVVuBCAmUfbVqLJ9W-35c.crl
rsync://rpki.ripe.net/repository/DEFAULT/db/46922f-5cb6-4d98-b4fc-93bd5e408f91/1/u8VfskrVVuBCAmUfbVqLJ9W-35c.mft
rsync://rpki.ripe.net/repository/DEFAULT/u8VfskrVVuBCAmUfbVqLJ9W-35c.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 12 May 2025 07:00:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:bf:00:d4:5c:0f:5b:0d:ef:fe:88:af:3e:12:6b:86:f0
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=bbc55fb24ad556e04202651f6d5a8b27d5bedf97
Validity
Not Before: May 11 11:00:24 2025 GMT
Not After : May 12 11:00:24 2025 GMT
Subject: CN=a775216f954995e02c6de9d2db5ebe28a26839fb
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bc:32:19:da:31:7b:b9:b0:50:f6:bf:46:53:66:
29:aa:06:78:b6:74:ab:ab:7a:f7:92:b6:8e:a1:ed:
ea:84:3a:e7:fe:4c:f6:2b:54:3f:95:53:11:16:bf:
f4:e5:dd:4d:7f:29:bf:db:f0:e8:26:ad:77:cf:01:
1f:25:25:c9:f6:f1:58:ec:d3:92:44:d3:a7:ce:64:
66:2c:d8:49:7b:7b:ac:1b:07:ec:a0:93:71:ec:8d:
31:39:3d:88:f8:53:4f:03:f1:40:9e:9f:d2:0d:dc:
7b:0f:e2:a0:c4:8e:75:09:62:dd:03:3f:f3:f6:ae:
db:0b:44:8c:7a:70:e2:fe:c2:59:5e:69:9d:40:4e:
37:65:ef:96:02:6d:b9:b6:de:48:d5:5f:b3:65:9d:
7a:7c:fd:f2:bd:74:33:ba:19:11:b1:7e:aa:67:b4:
2b:99:b5:ba:1f:60:c1:96:48:65:e4:1e:5a:04:0b:
96:0f:53:10:99:71:bb:f2:0c:47:b9:56:54:98:8b:
97:4e:c8:d7:1e:40:1f:8d:d4:4a:10:4b:28:58:b1:
d5:4f:b5:13:97:ce:f4:85:4c:cd:da:a8:34:ee:2c:
a5:0d:af:b0:ce:0a:a0:5c:ee:db:ce:07:d7:bb:ab:
98:5b:b7:ef:66:b9:11:09:5d:1e:22:11:1f:a4:9b:
e5:c9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A7:75:21:6F:95:49:95:E0:2C:6D:E9:D2:DB:5E:BE:28:A2:68:39:FB
X509v3 Authority Key Identifier:
keyid:BB:C5:5F:B2:4A:D5:56:E0:42:02:65:1F:6D:5A:8B:27:D5:BE:DF:97
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/u8VfskrVVuBCAmUfbVqLJ9W-35c.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/db/46922f-5cb6-4d98-b4fc-93bd5e408f91/1/u8VfskrVVuBCAmUfbVqLJ9W-35c.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/db/46922f-5cb6-4d98-b4fc-93bd5e408f91/1/u8VfskrVVuBCAmUfbVqLJ9W-35c.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
64:80:f5:39:f7:68:a3:d0:68:d2:6f:97:7a:1e:34:4c:15:b8:
85:9f:59:3a:16:48:20:49:a4:5c:48:80:9f:47:07:36:f6:1e:
f0:37:6b:6a:60:23:b8:fe:0d:19:25:dc:21:c0:4c:13:ce:38:
df:71:a0:ee:87:b6:70:58:93:c6:69:66:15:35:04:2e:69:e4:
31:11:55:38:12:23:fe:0f:08:2c:32:d7:1f:bb:16:fb:ea:3d:
a0:23:01:cb:88:f0:d5:34:e9:57:42:75:c4:ae:48:e5:63:12:
6c:ac:d4:3e:db:7a:22:fe:3b:f1:99:70:04:4c:c2:76:05:d0:
cd:65:cf:f9:5a:42:7c:88:a5:f2:75:45:53:4e:fd:d1:1b:62:
b9:8e:a2:93:98:00:a7:25:3c:1d:e5:49:3a:b1:d3:20:f9:b0:
31:2e:97:46:07:96:4e:8d:9b:12:97:0c:6b:b7:c2:48:84:be:
cb:42:3b:6d:ed:27:cc:3e:03:26:8f:d6:d0:dd:5d:61:63:40:
86:20:43:b8:ac:8c:44:5a:a5:c1:3a:0c:24:f2:8b:4c:18:1b:
90:ff:df:8c:5b:50:29:9e:3f:a7:f7:95:5e:2e:e7:15:3b:a0:
f6:bd:d6:d5:ef:90:bc:27:9f:f6:7d:43:1b:16:b7:89:b5:f3:
91:20:5e:f2
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun May 11 14:37:46 2025 by rpki-client