Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/1a/6703ca-ced4-4207-ab05-4a6f55771bd1/1/urRT2Xui9KBFhD5rSpU7PlEG6vI.mft
File: urRT2Xui9KBFhD5rSpU7PlEG6vI.mft (raw, json)
Hash identifier: OgpUcsIrnV5CPY7ohcp45K/22zBPS79G5Pk32R696+c=
Subject key identifier: CA:A5:0E:D5:CA:84:2D:68:97:40:7A:FF:58:C4:EF:07:64:17:94:15
Authority key identifier: BA:B4:53:D9:7B:A2:F4:A0:45:84:3E:6B:4A:95:3B:3E:51:06:EA:F2
Certificate issuer: /CN=bab453d97ba2f4a045843e6b4a953b3e5106eaf2
Certificate serial: 019676E7D71CE5F557BF1CAE4E36FFB6F366
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/urRT2Xui9KBFhD5rSpU7PlEG6vI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/1a/6703ca-ced4-4207-ab05-4a6f55771bd1/1/urRT2Xui9KBFhD5rSpU7PlEG6vI.mft
Manifest number: 151B
Signing time: Sun 27 Apr 2025 11:00:27 +0000
Manifest this update: Sun 27 Apr 2025 11:00:27 +0000
Manifest next update: Mon 28 Apr 2025 11:00:27 +0000
Files and hashes: 1: YAxMGVlnNVMBFh-Gqpd9ShmUpMs.roa (hash: inn0TlW8MH3WwBY3JfZOQs90fUrqGnIJpl+K9OSU93o=)
2: urRT2Xui9KBFhD5rSpU7PlEG6vI.crl (hash: JbibHlZCWDQ5lP1zc2+1JmCd0tQBp2zz0A42+1zN7C8=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/1a/6703ca-ced4-4207-ab05-4a6f55771bd1/1/urRT2Xui9KBFhD5rSpU7PlEG6vI.crl
rsync://rpki.ripe.net/repository/DEFAULT/1a/6703ca-ced4-4207-ab05-4a6f55771bd1/1/urRT2Xui9KBFhD5rSpU7PlEG6vI.mft
rsync://rpki.ripe.net/repository/DEFAULT/urRT2Xui9KBFhD5rSpU7PlEG6vI.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 28 Apr 2025 05:00:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:76:e7:d7:1c:e5:f5:57:bf:1c:ae:4e:36:ff:b6:f3:66
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=bab453d97ba2f4a045843e6b4a953b3e5106eaf2
Validity
Not Before: Apr 27 11:00:27 2025 GMT
Not After : Apr 28 11:00:27 2025 GMT
Subject: CN=caa50ed5ca842d6897407aff58c4ef0764179415
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:87:5b:b3:87:a7:bd:5f:72:ac:a4:f8:4d:e7:7d:
2d:d0:b0:d5:41:18:45:49:f7:3d:cd:11:f7:fb:ca:
93:ca:dd:d1:3c:de:f1:46:97:17:2f:bc:d8:3d:bf:
40:53:d4:82:05:2e:a7:2d:29:fd:42:d2:67:09:5c:
a0:7d:79:4a:a4:91:66:86:d5:d7:c0:3f:d7:95:e2:
c3:b3:95:58:d6:64:22:2e:a0:1b:35:14:a3:a1:e7:
d8:e8:c4:0e:4e:a1:43:1e:58:ba:0a:a8:58:58:52:
23:5e:96:cc:ef:e6:0a:15:e6:f2:ef:21:d6:a6:5d:
1b:75:df:ca:d1:cc:b8:45:64:e3:5b:0b:e1:09:77:
6d:04:0b:9a:12:08:1c:4a:cf:35:3c:b9:a1:18:90:
86:7a:1e:43:fc:61:4e:eb:52:13:85:c0:23:e8:4f:
44:44:98:66:48:64:e3:c4:fb:c3:89:f9:de:68:02:
b4:f1:98:f2:ae:37:de:93:c9:07:2b:53:3b:0e:cc:
4c:25:21:2b:74:d8:70:22:7f:93:14:c0:70:a0:b1:
00:e0:a3:1b:f9:9a:9e:81:0c:dd:da:66:ec:37:8c:
2c:28:2d:47:5e:09:5d:59:f8:74:bc:a4:52:0a:f8:
eb:61:47:67:d3:8f:b5:45:35:bd:e6:0d:b4:17:1b:
88:f5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
CA:A5:0E:D5:CA:84:2D:68:97:40:7A:FF:58:C4:EF:07:64:17:94:15
X509v3 Authority Key Identifier:
keyid:BA:B4:53:D9:7B:A2:F4:A0:45:84:3E:6B:4A:95:3B:3E:51:06:EA:F2
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/urRT2Xui9KBFhD5rSpU7PlEG6vI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/1a/6703ca-ced4-4207-ab05-4a6f55771bd1/1/urRT2Xui9KBFhD5rSpU7PlEG6vI.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/1a/6703ca-ced4-4207-ab05-4a6f55771bd1/1/urRT2Xui9KBFhD5rSpU7PlEG6vI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
b8:e6:77:d1:3f:ef:db:ba:4f:6d:6e:ff:94:f9:55:c2:37:46:
6a:a2:b8:ad:3a:68:1b:13:99:06:d1:e0:70:7b:ec:c2:cd:a4:
4d:1f:c3:f8:de:0a:02:58:22:fa:8a:33:61:28:15:86:a8:12:
93:1e:11:21:34:23:81:33:47:7e:39:2d:88:f3:c5:48:10:47:
a2:7c:9e:f4:30:37:df:c9:06:59:35:1e:4c:c2:dc:63:3a:79:
24:50:8e:eb:8c:02:6e:4d:74:c3:a3:12:bd:a9:48:e3:b2:dd:
c5:16:4a:9c:69:07:42:bd:39:0f:8b:c7:58:61:54:80:3b:fd:
f8:fb:1c:20:d5:d1:28:34:02:75:8f:82:be:08:0c:b6:5f:fa:
4f:58:47:3f:82:63:a9:5f:4d:30:e3:02:3d:4e:53:9f:cb:0b:
6d:23:6d:27:8c:2b:f5:c6:43:6f:46:59:3e:cb:aa:01:5c:c6:
ad:60:5c:6f:c7:47:72:1c:d2:fb:87:8b:4d:9e:0d:60:35:43:
09:d2:2b:16:9e:ee:9d:c8:0a:fd:6b:8d:76:d2:ee:16:14:b7:
dd:1a:e3:a7:c2:0f:e6:a5:f9:5e:fa:69:e5:2f:f3:dc:d1:95:
c8:0e:bb:21:bf:44:e8:3a:f6:7d:04:34:31:96:f8:d4:66:e4:
14:e9:68:af
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Apr 27 14:14:56 2025 by rpki-client