Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/db/b9dab8-d084-4b73-99b2-ee5b5168bf2f/1/u7qOzNl-lhif9uM88RCmyaR3RZw.mft
File: u7qOzNl-lhif9uM88RCmyaR3RZw.mft (raw, json)
Hash identifier: G5LxGYp/GAuTqZpLRCMnCFi3v7d+ErJuKGq3cSn+xxk=
Subject key identifier: B5:CB:A8:87:F7:FE:4F:B8:F9:28:41:4E:E5:89:D5:17:F5:A3:5F:CB
Authority key identifier: BB:BA:8E:CC:D9:7E:96:18:9F:F6:E3:3C:F1:10:A6:C9:A4:77:45:9C
Certificate issuer: /CN=bbba8eccd97e96189ff6e33cf110a6c9a477459c
Certificate serial: 0196B36A69C98A073D3FCBB141968CC22A7D
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/u7qOzNl-lhif9uM88RCmyaR3RZw.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/db/b9dab8-d084-4b73-99b2-ee5b5168bf2f/1/u7qOzNl-lhif9uM88RCmyaR3RZw.mft
Manifest number: 10B0
Signing time: Fri 09 May 2025 05:00:17 +0000
Manifest this update: Fri 09 May 2025 05:00:17 +0000
Manifest next update: Sat 10 May 2025 05:00:17 +0000
Files and hashes: 1: HxTfLakaEJ_LVNn3ZqoJElNbHoQ.roa (hash: tPr0Odj47LnuFpxE16P/cF19VVsL1tXW82ffakF0EeE=)
2: u7qOzNl-lhif9uM88RCmyaR3RZw.crl (hash: 5HBRH1ANVojqZZ5pAGheVo4Y/4P2BHCjT7LK9lSAtps=)
3: x74EOmKncD9l8_LhQCmRyXpIz94.roa (hash: XUKb+7lZadJCXvjC4Jazh1w2/bHedabOWN8tK0nZBp8=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/db/b9dab8-d084-4b73-99b2-ee5b5168bf2f/1/u7qOzNl-lhif9uM88RCmyaR3RZw.crl
rsync://rpki.ripe.net/repository/DEFAULT/db/b9dab8-d084-4b73-99b2-ee5b5168bf2f/1/u7qOzNl-lhif9uM88RCmyaR3RZw.mft
rsync://rpki.ripe.net/repository/DEFAULT/u7qOzNl-lhif9uM88RCmyaR3RZw.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 10 May 2025 00:00:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:b3:6a:69:c9:8a:07:3d:3f:cb:b1:41:96:8c:c2:2a:7d
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=bbba8eccd97e96189ff6e33cf110a6c9a477459c
Validity
Not Before: May 9 05:00:17 2025 GMT
Not After : May 10 05:00:17 2025 GMT
Subject: CN=b5cba887f7fe4fb8f928414ee589d517f5a35fcb
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b2:9f:54:cc:e4:1a:fd:66:67:bc:41:c8:b7:77:
bb:c6:82:dd:b1:86:c7:7e:10:d6:24:f7:13:ee:05:
5e:d7:46:4f:48:fa:bc:2a:48:1c:d3:01:09:b4:ee:
70:53:22:f9:1c:75:e0:3e:7e:c5:e3:3f:a8:ed:2f:
51:dc:21:6a:e3:47:6c:6b:4a:a0:04:e6:2d:54:24:
70:fd:14:7b:3d:85:7b:af:7b:da:c0:c9:e0:a2:f9:
15:5f:61:c3:fe:c8:58:3d:b2:83:77:72:5a:4c:da:
04:2f:38:1d:28:68:6e:d9:f4:8a:28:4f:3d:02:ae:
40:28:8d:6a:c1:9f:7a:e4:14:24:a0:bb:88:eb:3b:
e6:2f:3a:46:8a:e6:35:86:03:cc:43:c6:ec:03:d8:
b8:94:22:ce:b5:e9:e6:19:00:e7:a8:d5:8e:e7:05:
f7:cb:c2:42:2f:29:d8:aa:06:67:56:30:3c:1e:ff:
e4:1c:19:22:0f:5a:e9:77:56:e5:c6:2f:cd:01:1c:
0f:03:d8:6d:2a:86:7f:cc:09:c6:b2:d8:53:a4:e0:
ac:33:79:2c:e4:e6:da:6a:ea:b1:24:e2:5f:f3:5c:
15:89:93:10:f6:ab:f2:0a:be:33:cd:d9:41:a6:6d:
e4:75:de:d2:b9:28:7d:4a:4f:a2:b9:51:a0:58:d2:
c4:b7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B5:CB:A8:87:F7:FE:4F:B8:F9:28:41:4E:E5:89:D5:17:F5:A3:5F:CB
X509v3 Authority Key Identifier:
keyid:BB:BA:8E:CC:D9:7E:96:18:9F:F6:E3:3C:F1:10:A6:C9:A4:77:45:9C
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/u7qOzNl-lhif9uM88RCmyaR3RZw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/db/b9dab8-d084-4b73-99b2-ee5b5168bf2f/1/u7qOzNl-lhif9uM88RCmyaR3RZw.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/db/b9dab8-d084-4b73-99b2-ee5b5168bf2f/1/u7qOzNl-lhif9uM88RCmyaR3RZw.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
07:0c:39:d2:a4:5b:05:3f:49:46:82:39:47:36:6e:88:c2:f6:
b6:a2:47:93:67:84:8b:49:24:8e:b8:b9:1b:ad:02:aa:ec:11:
ea:da:fc:70:d0:c1:96:9f:d9:7c:69:34:c7:ba:f5:85:5b:f9:
39:dc:5f:a0:2e:44:b8:b9:52:3b:51:2f:f3:12:8f:0c:53:00:
bd:ab:d2:d3:49:8d:ac:56:e4:57:a9:ef:99:77:ac:8d:82:da:
10:5d:d9:78:7d:b8:3e:d2:82:83:f7:7d:4f:24:68:2a:b9:ab:
02:04:67:28:88:68:58:18:24:65:54:ae:91:85:b1:07:fe:61:
7b:0b:78:b5:8e:70:95:e0:e7:65:af:6a:57:d7:96:e7:12:46:
ff:16:81:b7:90:23:46:32:82:bd:c1:2a:ae:61:63:9d:aa:6a:
96:17:ae:59:2a:8d:89:8c:11:35:8e:4a:44:d8:d8:4a:d6:d4:
c3:88:9e:31:7a:44:0e:0d:e2:18:7c:9e:82:76:4f:0f:60:3b:
8e:95:8c:d5:d0:08:48:e9:eb:f6:ff:3c:7c:01:35:f5:49:c1:
1d:9f:5e:43:d1:76:3f:49:2e:12:94:ad:1b:be:6a:56:69:2b:
e1:48:60:97:0e:f0:63:e2:31:00:a1:af:1d:37:85:6d:dd:0e:
e5:d4:56:3b
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZazamnJigc9P8uxQZaMwip9MA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGJiYmE4ZWNjZDk3ZTk2MTg5ZmY2ZTMzY2YxMTBhNmM5YTQ3
NzQ1OWMwHhcNMjUwNTA5MDUwMDE3WhcNMjUwNTEwMDUwMDE3WjAzMTEwLwYDVQQD
EyhiNWNiYTg4N2Y3ZmU0ZmI4ZjkyODQxNGVlNTg5ZDUxN2Y1YTM1ZmNiMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAsp9UzOQa/WZnvEHIt3e7xoLdsYbH
fhDWJPcT7gVe10ZPSPq8Kkgc0wEJtO5wUyL5HHXgPn7F4z+o7S9R3CFq40dsa0qg
BOYtVCRw/RR7PYV7r3vawMngovkVX2HD/shYPbKDd3JaTNoELzgdKGhu2fSKKE89
Aq5AKI1qwZ965BQkoLuI6zvmLzpGiuY1hgPMQ8bsA9i4lCLOtenmGQDnqNWO5wX3
y8JCLynYqgZnVjA8Hv/kHBkiD1rpd1blxi/NARwPA9htKoZ/zAnGsthTpOCsM3ks
5ObaauqxJOJf81wViZMQ9qvyCr4zzdlBpm3kdd7SuSh9Sk+iuVGgWNLEtwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFLXLqIf3/k+4+ShBTuWJ1Rf1o1/LMB8GA1UdIwQY
MBaAFLu6jszZfpYYn/bjPPEQpsmkd0WcMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvdTdxT3pObC1saGlmOXVNODhSQ215YVIzUlp3LmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9kYi9iOWRhYjgtZDA4NC00YjczLTk5YjIt
ZWU1YjUxNjhiZjJmLzEvdTdxT3pObC1saGlmOXVNODhSQ215YVIzUlp3Lm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9kYi9iOWRhYjgtZDA4NC00YjczLTk5YjItZWU1YjUxNjhiZjJm
LzEvdTdxT3pObC1saGlmOXVNODhSQ215YVIzUlp3LmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEABww50qRb
BT9JRoI5RzZuiML2tqJHk2eEi0kkjri5G60CquwR6tr8cNDBlp/ZfGk0x7r1hVv5
OdxfoC5EuLlSO1Ev8xKPDFMAvavS00mNrFbkV6nvmXesjYLaEF3ZeH24PtKCg/d9
TyRoKrmrAgRnKIhoWBgkZVSukYWxB/5hewt4tY5wleDnZa9qV9eW5xJG/xaBt5Aj
RjKCvcEqrmFjnapqlheuWSqNiYwRNY5KRNjYStbUw4ieMXpEDg3iGHyegnZPD2A7
jpWM1dAISOnr9v88fAE19UnBHZ9eQ9F2P0kuEpStG75qVmkr4Uhglw7wY+IxAKGv
HTeFbd0O5dRWOw==
-----END CERTIFICATE-----
Generated at Fri May 9 06:15:05 2025 by rpki-client