Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/eb/b66125-6844-4a87-9bb5-af42623ea431/1/un1KwTROw43OmXaNeKEU6_fxfYU.mft
File: un1KwTROw43OmXaNeKEU6_fxfYU.mft (raw, json)
Hash identifier: rceJAszr2j7ZwA/HeqDmflLMRhM+m9Fog2govNVBivw=
Subject key identifier: EF:E0:1D:F7:0D:50:74:1F:4C:2B:54:50:CE:8D:18:3F:4E:8F:42:D5
Authority key identifier: BA:7D:4A:C1:34:4E:C3:8D:CE:99:76:8D:78:A1:14:EB:F7:F1:7D:85
Certificate issuer: /CN=ba7d4ac1344ec38dce99768d78a114ebf7f17d85
Certificate serial: 0196BFA5FBFF532034749DE888D5E2221324
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/un1KwTROw43OmXaNeKEU6_fxfYU.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/eb/b66125-6844-4a87-9bb5-af42623ea431/1/un1KwTROw43OmXaNeKEU6_fxfYU.mft
Manifest number: 0BEE
Signing time: Sun 11 May 2025 14:00:48 +0000
Manifest this update: Sun 11 May 2025 14:00:48 +0000
Manifest next update: Mon 12 May 2025 14:00:48 +0000
Files and hashes: 1: eJvxqWQVuJlIAcOu0zuhq-FEIwc.roa (hash: T9Btt+1WHrBsFsD5c6tC5d0RHMAv0qfav0ae3k59Hwg=)
2: un1KwTROw43OmXaNeKEU6_fxfYU.crl (hash: PxskPFhssM6tu4SRb27P+ZgWTOVl/FRfYkEvdRp1bDY=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/eb/b66125-6844-4a87-9bb5-af42623ea431/1/un1KwTROw43OmXaNeKEU6_fxfYU.crl
rsync://rpki.ripe.net/repository/DEFAULT/eb/b66125-6844-4a87-9bb5-af42623ea431/1/un1KwTROw43OmXaNeKEU6_fxfYU.mft
rsync://rpki.ripe.net/repository/DEFAULT/un1KwTROw43OmXaNeKEU6_fxfYU.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 12 May 2025 14:00:48 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:bf:a5:fb:ff:53:20:34:74:9d:e8:88:d5:e2:22:13:24
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=ba7d4ac1344ec38dce99768d78a114ebf7f17d85
Validity
Not Before: May 11 14:00:48 2025 GMT
Not After : May 12 14:00:48 2025 GMT
Subject: CN=efe01df70d50741f4c2b5450ce8d183f4e8f42d5
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b8:81:f1:b3:e2:4f:d8:c5:68:e4:75:ef:9d:d4:
95:45:52:d8:4a:22:b9:47:26:6f:01:0f:e6:c3:e1:
49:4e:5d:8e:01:52:ea:df:01:41:5b:f4:3f:87:17:
7b:e5:32:b8:9a:4f:c6:31:b6:32:f4:84:6b:ba:c2:
e4:f8:e1:77:59:a9:af:db:a9:09:c8:b2:ef:55:16:
19:cb:97:46:0e:11:39:fe:cf:3f:3b:34:15:42:3d:
8c:a9:a3:80:d7:e6:ab:1d:46:1a:c6:d2:48:0e:8d:
e1:62:a6:cc:03:42:85:ae:41:4c:16:5a:3c:9b:55:
75:f1:82:7c:62:cf:75:6f:fb:58:55:aa:5f:2d:e1:
9c:d1:5a:7a:5c:e0:e7:d6:65:a1:3a:89:29:d6:80:
b3:c7:df:06:8a:31:91:61:41:30:10:22:b8:e0:d3:
29:3f:cd:ed:e6:4e:0f:14:d6:1c:3b:ec:a0:ad:e9:
cf:83:2b:49:fb:bf:83:87:dc:14:20:5e:76:62:54:
60:38:60:d5:b5:bb:68:b4:84:ec:6a:3f:84:2a:de:
6b:04:4d:fd:e1:82:8a:b9:4d:46:f0:95:07:37:0e:
2d:ff:29:8b:b9:94:69:04:13:e2:93:fd:72:bc:ae:
f8:55:60:0f:ce:39:1f:1c:73:c2:6c:a1:c6:ee:6f:
ee:ff
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
EF:E0:1D:F7:0D:50:74:1F:4C:2B:54:50:CE:8D:18:3F:4E:8F:42:D5
X509v3 Authority Key Identifier:
keyid:BA:7D:4A:C1:34:4E:C3:8D:CE:99:76:8D:78:A1:14:EB:F7:F1:7D:85
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/un1KwTROw43OmXaNeKEU6_fxfYU.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/eb/b66125-6844-4a87-9bb5-af42623ea431/1/un1KwTROw43OmXaNeKEU6_fxfYU.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/eb/b66125-6844-4a87-9bb5-af42623ea431/1/un1KwTROw43OmXaNeKEU6_fxfYU.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
c4:46:3b:00:7e:bd:16:b2:ae:b6:52:c3:eb:2b:18:b2:fb:6f:
fc:53:02:8f:c2:08:9b:de:c0:87:23:be:f7:73:b3:b3:3b:f4:
38:af:a4:2c:02:fd:2f:45:22:1b:05:cb:70:8c:5b:d6:72:fc:
4f:c2:da:68:47:33:03:3e:65:d2:ca:66:68:76:2f:f3:72:84:
32:dd:a3:04:16:cf:37:fa:74:41:4a:49:ee:ed:54:d7:78:50:
0f:a1:1c:52:dd:00:d1:87:d3:c6:f7:e9:c0:53:83:63:94:fa:
48:9d:1d:4b:20:fa:8a:b9:1a:70:20:f7:a1:b7:ae:70:57:b6:
0a:a9:13:1d:7b:30:d6:5b:4e:03:20:c7:f8:e7:93:a6:0f:5c:
f9:18:7f:0d:96:2f:c0:2a:73:6f:e3:d8:2c:a2:53:bc:37:01:
1c:36:31:ed:4b:ac:22:82:58:18:b2:b1:c8:5a:fc:24:49:a3:
42:03:9f:90:78:3c:ef:2d:ec:e6:d7:21:4f:6a:3a:95:f0:d0:
c2:76:f3:1a:fd:44:83:8d:58:9b:ea:c8:59:01:e9:81:49:7d:
ab:17:4c:af:0f:88:1f:25:b9:73:04:f7:31:b7:75:3f:1d:dc:
c5:10:e7:81:b3:71:a7:f9:00:ac:1d:45:c4:47:3d:da:8a:7a:
4a:55:53:9b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun May 11 22:00:40 2025 by rpki-client