Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/fe/4a79a1-3d19-4de4-be89-8a200691f724/1/u_pCfUICOv2oiOhBX07c97ffGwU.mft
File: u_pCfUICOv2oiOhBX07c97ffGwU.mft (raw, json)
Hash identifier: PyPVELKGTvi6RYpW+/qT1uExuq+P8ajRd0sFGtM8+L0=
Subject key identifier: E7:79:15:2A:44:80:40:CD:2F:D7:D4:4E:1A:FF:65:EC:D8:DC:AD:ED
Authority key identifier: BB:FA:42:7D:42:02:3A:FD:A8:88:E8:41:5F:4E:DC:F7:B7:DF:1B:05
Certificate issuer: /CN=bbfa427d42023afda888e8415f4edcf7b7df1b05
Certificate serial: 01969E2C931DD19AEFCE094EEEB7E30E26F9
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/u_pCfUICOv2oiOhBX07c97ffGwU.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/fe/4a79a1-3d19-4de4-be89-8a200691f724/1/u_pCfUICOv2oiOhBX07c97ffGwU.mft
Manifest number: 0776
Signing time: Mon 05 May 2025 02:00:43 +0000
Manifest this update: Mon 05 May 2025 02:00:43 +0000
Manifest next update: Tue 06 May 2025 02:00:43 +0000
Files and hashes: 1: K2GMWCCFEI_TRfahmMRjDe9YKEI.roa (hash: vdZSYQjeBwZE35DhIdNU+zQ/gO9XDbHhs5nRKTUQzYc=)
2: u_pCfUICOv2oiOhBX07c97ffGwU.crl (hash: zgjSqfmHQeXRtndrkgoZGvddtcgk1g0PHwUfyUHx7+Y=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/fe/4a79a1-3d19-4de4-be89-8a200691f724/1/u_pCfUICOv2oiOhBX07c97ffGwU.crl
rsync://rpki.ripe.net/repository/DEFAULT/fe/4a79a1-3d19-4de4-be89-8a200691f724/1/u_pCfUICOv2oiOhBX07c97ffGwU.mft
rsync://rpki.ripe.net/repository/DEFAULT/u_pCfUICOv2oiOhBX07c97ffGwU.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 05 May 2025 22:00:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:9e:2c:93:1d:d1:9a:ef:ce:09:4e:ee:b7:e3:0e:26:f9
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=bbfa427d42023afda888e8415f4edcf7b7df1b05
Validity
Not Before: May 5 02:00:43 2025 GMT
Not After : May 6 02:00:43 2025 GMT
Subject: CN=e779152a448040cd2fd7d44e1aff65ecd8dcaded
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c2:d3:df:db:14:5c:c3:4d:01:0b:18:ad:c4:83:
7f:71:17:fa:a5:5c:28:40:0a:15:95:eb:d7:84:d8:
4e:0b:33:5d:d9:66:79:85:e5:29:ae:4f:82:27:61:
c5:61:85:8e:3c:e0:e2:5b:4b:6c:13:3d:ae:29:99:
b2:e5:49:e8:e3:b4:ce:ca:ce:47:24:ac:0a:05:c0:
95:76:a9:42:d1:74:1c:df:ba:e1:9f:6a:83:f1:f0:
44:0a:69:6e:79:d7:1d:09:e9:7d:5c:61:a1:0d:cc:
f7:5b:8b:f4:68:b3:69:d8:6e:37:fd:9c:38:57:b1:
8d:bf:a0:27:8d:0e:8c:9b:72:07:50:ea:fe:7e:1e:
6c:66:49:38:86:b8:70:3b:dc:4a:91:00:04:b6:5a:
54:dc:bf:f6:90:be:ae:b0:66:a5:46:f7:f9:81:b6:
06:7d:74:ff:a5:eb:a9:b6:73:4e:ff:e1:d0:15:49:
b1:0c:cb:4a:39:25:c9:f3:67:35:71:4d:16:f7:50:
70:0c:01:71:97:ea:9e:8c:85:06:2f:15:de:d1:ab:
8b:e5:05:99:09:56:36:c3:05:93:22:25:75:04:b5:
bc:16:90:1f:b2:67:ed:3a:ac:f3:a8:1c:eb:7a:8e:
44:c2:d6:f0:74:30:11:c6:86:91:ae:4d:95:13:92:
0c:d5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E7:79:15:2A:44:80:40:CD:2F:D7:D4:4E:1A:FF:65:EC:D8:DC:AD:ED
X509v3 Authority Key Identifier:
keyid:BB:FA:42:7D:42:02:3A:FD:A8:88:E8:41:5F:4E:DC:F7:B7:DF:1B:05
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/u_pCfUICOv2oiOhBX07c97ffGwU.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/fe/4a79a1-3d19-4de4-be89-8a200691f724/1/u_pCfUICOv2oiOhBX07c97ffGwU.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/fe/4a79a1-3d19-4de4-be89-8a200691f724/1/u_pCfUICOv2oiOhBX07c97ffGwU.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
2a:a2:99:ae:e6:08:6e:38:f8:18:c2:4a:30:4f:f9:ea:4d:37:
9b:3d:eb:0d:4c:04:0c:6e:d7:21:d1:10:53:09:3a:9e:ed:4e:
cf:c3:a9:be:87:81:a8:e8:46:f6:5a:37:d6:4b:93:0a:e1:d9:
71:91:78:20:ca:be:11:4a:80:ad:c7:34:f0:ae:a9:d5:f0:85:
8f:2a:19:a7:ee:31:af:64:e2:05:8e:7d:bb:0d:4a:8e:c2:08:
c8:f2:a6:fc:62:10:ab:62:ee:76:29:8c:8d:a2:8c:e2:c1:26:
a0:cf:5c:76:fb:19:6e:58:84:fd:19:39:ea:c4:86:55:66:32:
d7:fa:6f:aa:81:a9:6c:56:17:db:c9:79:66:32:d4:67:8e:d9:
e3:b1:54:94:9d:97:1f:3a:e3:db:cf:29:78:75:4d:07:f4:c9:
3d:52:5d:52:6d:9e:e2:0b:67:7b:bc:0c:6d:40:23:82:5f:75:
c1:34:c3:b0:dd:c9:72:fb:97:1f:7a:1a:48:1b:64:19:22:6a:
5e:80:2c:b5:88:15:c0:6b:92:bb:cb:0e:a0:cb:9d:15:69:b1:
16:a4:84:c7:20:62:b6:78:9c:ff:e4:35:da:f4:89:33:74:e0:
ac:8a:59:a9:f0:5f:5c:42:3d:d8:7b:30:cf:8c:5c:11:35:5c:
5c:bb:d6:38
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon May 5 06:06:45 2025 by rpki-client