Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/2e/a58bde-c461-483f-911b-d179881d0618/1/u9ky9wZLH96aEiXzMnefwi5nMjk.mft
File: u9ky9wZLH96aEiXzMnefwi5nMjk.mft (raw, json)
Hash identifier: L8NKe1JNnzEsH1Va2XSxI/7BFuhajL1fXFl0RxGCT7Y=
Subject key identifier: EC:F7:84:5C:9B:B9:50:E6:12:41:F4:02:07:D1:68:C5:02:DE:E8:42
Authority key identifier: BB:D9:32:F7:06:4B:1F:DE:9A:12:25:F3:32:77:9F:C2:2E:67:32:39
Certificate issuer: /CN=bbd932f7064b1fde9a1225f332779fc22e673239
Certificate serial: 019685ED80583DD836B0D772417B0CC457A0
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/u9ky9wZLH96aEiXzMnefwi5nMjk.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/2e/a58bde-c461-483f-911b-d179881d0618/1/u9ky9wZLH96aEiXzMnefwi5nMjk.mft
Manifest number: 1517
Signing time: Wed 30 Apr 2025 09:00:56 +0000
Manifest this update: Wed 30 Apr 2025 09:00:56 +0000
Manifest next update: Thu 01 May 2025 09:00:56 +0000
Files and hashes: 1: IeGYeKSb1mNrsDIK_MI2sgH59I8.roa (hash: oXG5f/ORp1JUaZ43fOOSU/ciwmtq1CAOULwIZj8cXsU=)
2: eXtnT82vLrkQIX6pAwLJMLSD-bg.roa (hash: Rihs3zkVa6kI7f06D37U5dnfsQw2ilSm2htFUgyMqTU=)
3: u9ky9wZLH96aEiXzMnefwi5nMjk.crl (hash: KLEurVxSDuAeWh1IMZA2X6+OZyfGzD6VZRByEmKnci8=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/2e/a58bde-c461-483f-911b-d179881d0618/1/u9ky9wZLH96aEiXzMnefwi5nMjk.crl
rsync://rpki.ripe.net/repository/DEFAULT/2e/a58bde-c461-483f-911b-d179881d0618/1/u9ky9wZLH96aEiXzMnefwi5nMjk.mft
rsync://rpki.ripe.net/repository/DEFAULT/u9ky9wZLH96aEiXzMnefwi5nMjk.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 01 May 2025 09:00:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:85:ed:80:58:3d:d8:36:b0:d7:72:41:7b:0c:c4:57:a0
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=bbd932f7064b1fde9a1225f332779fc22e673239
Validity
Not Before: Apr 30 09:00:56 2025 GMT
Not After : May 1 09:00:56 2025 GMT
Subject: CN=ecf7845c9bb950e61241f40207d168c502dee842
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a1:fe:56:92:00:d1:b9:54:a5:9c:82:7e:8c:c4:
59:60:9b:f0:3a:eb:08:2d:3f:c9:99:53:8e:b4:8f:
68:32:32:a2:a4:f7:80:30:60:4e:83:07:25:8a:d0:
d3:c0:4d:c5:f3:bd:00:13:d6:46:67:5f:e6:ee:ea:
b5:6f:e3:82:fd:7e:87:e1:76:34:32:72:aa:2d:d6:
8c:2d:be:e9:bf:77:c9:01:83:e7:47:e5:81:59:ea:
50:19:70:43:52:c1:45:d2:c5:3e:06:be:25:30:72:
2e:7c:f3:a0:1b:83:0d:99:d0:97:e6:7e:28:44:3e:
f4:c8:be:91:f7:7a:14:08:0b:67:ca:81:3d:bd:3a:
0f:c3:4c:f4:d7:80:25:34:2a:44:71:d4:23:2b:af:
95:bf:b1:b3:68:df:1e:a2:13:70:cd:b1:18:70:6c:
91:d3:e2:2a:25:ed:0c:83:50:3a:7b:9a:ca:3e:8c:
aa:c3:9a:46:97:4e:05:4c:48:1f:0a:eb:4b:78:9f:
72:d0:57:70:e9:73:3e:a8:c1:f0:c6:b3:75:c9:3c:
09:3a:26:f1:a3:09:33:d4:46:04:6a:ad:c9:bd:4a:
53:df:a8:42:00:a7:b0:41:0d:fb:79:69:bb:cc:48:
b1:a1:d8:54:7f:a4:1e:13:ac:75:e2:1f:ec:c2:23:
df:4b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
EC:F7:84:5C:9B:B9:50:E6:12:41:F4:02:07:D1:68:C5:02:DE:E8:42
X509v3 Authority Key Identifier:
keyid:BB:D9:32:F7:06:4B:1F:DE:9A:12:25:F3:32:77:9F:C2:2E:67:32:39
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/u9ky9wZLH96aEiXzMnefwi5nMjk.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/2e/a58bde-c461-483f-911b-d179881d0618/1/u9ky9wZLH96aEiXzMnefwi5nMjk.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/2e/a58bde-c461-483f-911b-d179881d0618/1/u9ky9wZLH96aEiXzMnefwi5nMjk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
72:ac:ed:da:af:ea:ce:60:85:f2:fe:48:1c:7f:a2:26:21:fe:
e7:c4:2f:65:6c:d9:50:33:30:b6:4a:cc:f6:11:70:aa:d9:9e:
db:13:b7:c6:58:b4:90:e2:bc:1e:77:28:3c:1d:7e:79:32:ec:
01:65:51:56:e1:b1:64:f6:9e:74:42:10:47:ee:7a:19:cf:ba:
97:2c:3f:41:6e:53:f4:26:b4:ae:0c:05:b3:b9:8f:37:25:fe:
91:a9:56:90:8f:cd:a1:9f:4e:b9:c6:92:7d:62:ac:23:3e:f0:
20:78:6b:ea:07:a7:c6:01:e8:69:10:10:10:36:20:77:da:56:
aa:07:fa:a6:2a:bc:00:d6:ad:a8:99:2f:9c:71:ad:36:76:f3:
bd:5a:88:ad:51:c5:11:34:53:0f:0f:08:07:1e:26:c4:c2:56:
0f:62:62:99:a5:72:c7:58:2d:85:a0:02:59:9d:1a:0d:f8:24:
a7:ad:4b:9f:3f:07:d6:d2:eb:de:92:90:4a:a6:cb:68:6d:b3:
59:da:f1:c7:e3:96:24:38:80:e2:31:3b:91:b6:3a:e5:5e:6c:
e1:0c:67:b4:e9:48:a0:a2:25:1b:a9:b7:a7:5e:0b:e3:7c:be:
89:e6:8e:f3:19:fb:0c:79:f3:70:db:fd:38:a0:fa:49:78:c7:
dd:f5:91:a3
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Apr 30 14:48:00 2025 by rpki-client