Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/eb/f66b6b-cdde-40cb-a182-c5229863aeba/1/uytI9kNYARx4QtPOxcstRwaLg20.mft
File: uytI9kNYARx4QtPOxcstRwaLg20.mft (raw, json)
Hash identifier: eVNZFwDOkvRJ8MnDcyAxXHGuDHgJe0yb2v97JHvcRnY=
Subject key identifier: C9:CC:88:C3:4E:E4:FA:D4:EF:5A:6F:A1:4B:CE:D9:9F:CE:77:05:69
Authority key identifier: BB:2B:48:F6:43:58:01:1C:78:42:D3:CE:C5:CB:2D:47:06:8B:83:6D
Certificate issuer: /CN=bb2b48f64358011c7842d3cec5cb2d47068b836d
Certificate serial: 0196C87204295A4EB9B99A4CF4A33ECC2E0C
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/uytI9kNYARx4QtPOxcstRwaLg20.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/eb/f66b6b-cdde-40cb-a182-c5229863aeba/1/uytI9kNYARx4QtPOxcstRwaLg20.mft
Manifest number: 154C
Signing time: Tue 13 May 2025 07:00:37 +0000
Manifest this update: Tue 13 May 2025 07:00:37 +0000
Manifest next update: Wed 14 May 2025 07:00:37 +0000
Files and hashes: 1: 1-K85qD4oivLUF1xQTVdq9r6NP7E.roa (hash: nx/kf+a12fPw7UIC5V6RoawXCPrhI9ndmVDlY4gQn1s=)
2: U-t-KYuIcMt9Lh-EEvDxBNSehA0.roa (hash: fNtqhAHoXJ8NAQIhvkEaB4dv9gnWdklcvBIBzltM3i4=)
3: uytI9kNYARx4QtPOxcstRwaLg20.crl (hash: pzD681u+22bNzFFOG+uv2ekUxqTTyozBVRGxIfEF+NA=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/eb/f66b6b-cdde-40cb-a182-c5229863aeba/1/uytI9kNYARx4QtPOxcstRwaLg20.crl
rsync://rpki.ripe.net/repository/DEFAULT/eb/f66b6b-cdde-40cb-a182-c5229863aeba/1/uytI9kNYARx4QtPOxcstRwaLg20.mft
rsync://rpki.ripe.net/repository/DEFAULT/uytI9kNYARx4QtPOxcstRwaLg20.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 14 May 2025 07:00:37 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:c8:72:04:29:5a:4e:b9:b9:9a:4c:f4:a3:3e:cc:2e:0c
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=bb2b48f64358011c7842d3cec5cb2d47068b836d
Validity
Not Before: May 13 07:00:37 2025 GMT
Not After : May 14 07:00:37 2025 GMT
Subject: CN=c9cc88c34ee4fad4ef5a6fa14bced99fce770569
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b6:45:78:8a:e8:ea:d2:5b:bd:75:9f:42:04:10:
70:78:d6:79:be:4f:cd:44:af:4e:b5:f0:31:ad:4b:
c6:90:10:e3:d7:75:c8:ec:b8:c3:68:59:a7:a4:f3:
01:73:e3:58:51:8a:0f:c9:40:eb:5f:0f:ec:08:f6:
39:03:c3:69:21:dd:d6:56:08:89:2d:27:ab:77:18:
97:c9:7d:e6:27:a0:7f:b5:f2:3e:6e:11:43:92:4a:
c5:80:17:c4:48:9b:ca:2b:64:c8:16:fd:47:81:08:
10:ee:08:a7:8d:83:db:51:a1:d8:03:25:a2:13:99:
7c:6e:4f:b2:5b:7c:be:50:52:fe:a6:e2:ea:c2:39:
6f:f0:12:02:fd:61:59:45:2a:f7:cb:c2:f6:df:c8:
9c:69:88:70:2d:05:05:22:6d:8c:c5:65:b6:65:2e:
bf:2d:d7:97:0f:42:73:fa:81:03:30:d4:ad:4e:d4:
a7:40:0c:da:01:81:cc:1d:db:1c:43:43:fe:06:a0:
9e:26:25:7c:f3:3b:dc:85:d1:7b:bd:32:cc:e9:e1:
31:e9:a9:b4:3f:9b:2e:56:20:0a:56:de:50:da:1c:
f4:f5:dd:e3:a4:a3:c2:82:b2:9e:dd:da:12:de:82:
ad:a0:d9:82:13:91:dc:3c:2f:0d:c3:4a:6b:85:b5:
9b:bf
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C9:CC:88:C3:4E:E4:FA:D4:EF:5A:6F:A1:4B:CE:D9:9F:CE:77:05:69
X509v3 Authority Key Identifier:
keyid:BB:2B:48:F6:43:58:01:1C:78:42:D3:CE:C5:CB:2D:47:06:8B:83:6D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/uytI9kNYARx4QtPOxcstRwaLg20.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/eb/f66b6b-cdde-40cb-a182-c5229863aeba/1/uytI9kNYARx4QtPOxcstRwaLg20.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/eb/f66b6b-cdde-40cb-a182-c5229863aeba/1/uytI9kNYARx4QtPOxcstRwaLg20.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
78:f9:1d:21:3a:73:3f:a6:3f:83:59:30:25:17:52:37:7f:16:
04:e3:16:b2:0d:d7:87:a1:69:06:7f:6d:23:00:4a:27:b3:a6:
c6:b5:1e:e7:7f:b7:dd:80:fe:9f:c6:d0:0e:a4:1f:86:66:5e:
93:64:62:66:b2:e5:ea:9c:e6:65:a2:10:02:22:ba:7b:c6:de:
55:b4:c3:92:8a:10:44:93:f4:0c:cd:65:a4:c8:4f:4a:1a:9c:
d2:1f:ee:5a:ea:07:0c:1a:68:b9:5b:47:86:0c:1b:a0:91:4b:
ee:67:60:99:56:e8:d1:2f:81:9b:e3:33:70:d5:3c:c2:11:c5:
e3:75:41:cf:00:f3:48:94:29:e5:29:bf:32:2c:af:04:7e:87:
58:83:a8:80:b9:42:d5:a8:e7:31:6c:a2:64:25:35:33:b2:a6:
eb:08:cb:c4:0f:9e:9f:71:39:e5:5f:30:85:69:4a:f9:5b:62:
38:fe:ad:5a:e3:57:46:62:81:a7:9c:02:29:18:87:39:02:94:
7a:b4:8a:6c:f1:9d:f5:65:d2:65:bb:7d:45:6b:d1:b5:e0:45:
1f:f0:c2:4d:19:99:02:c8:26:ab:41:fd:2e:0f:e3:2f:bb:13:
c5:42:cd:b2:10:6f:ca:88:f7:f3:86:ef:fa:16:00:3c:64:07:
e8:c8:75:0a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue May 13 16:55:13 2025 by rpki-client