Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/2f/c212a2-37e9-4ad6-bbe6-835a5842b94c/1/u0cxiEug9XP6YYtuetUDoSyWWvM.mft
File: u0cxiEug9XP6YYtuetUDoSyWWvM.mft (raw, json)
Hash identifier: 58vNabEVv1lHUvl5007rjnoIZinysQoh+U/y1KQ+ZjY=
Subject key identifier: A9:38:0C:F0:B8:7B:B6:F7:AB:9D:85:BE:5C:89:E8:E1:0B:D3:9C:52
Authority key identifier: BB:47:31:88:4B:A0:F5:73:FA:61:8B:6E:7A:D5:03:A1:2C:96:5A:F3
Certificate issuer: /CN=bb4731884ba0f573fa618b6e7ad503a12c965af3
Certificate serial: 01967679D3CC405F5D2801C41D9F5AFB2747
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/u0cxiEug9XP6YYtuetUDoSyWWvM.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/2f/c212a2-37e9-4ad6-bbe6-835a5842b94c/1/u0cxiEug9XP6YYtuetUDoSyWWvM.mft
Manifest number: 0C9E
Signing time: Sun 27 Apr 2025 09:00:17 +0000
Manifest this update: Sun 27 Apr 2025 09:00:17 +0000
Manifest next update: Mon 28 Apr 2025 09:00:17 +0000
Files and hashes: 1: J2J2124S8bl0D8F_rprl_YIDy9g.roa (hash: EwSuszD8kbzr8hDPn6y6v2FnpMpKvYRTbCp+B6KwMRQ=)
2: TgyKwJa2KkbDi0Hpkc1sfLVSKbY.roa (hash: PBkxa8WbS+Zs7wyVcsYo6bQBjySTnxQqvA/GU7hJEfs=)
3: u0cxiEug9XP6YYtuetUDoSyWWvM.crl (hash: T89QjPqe8JB7QTtZT5mw9aLoJb0XuHoTa+x1fLYXWgo=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/2f/c212a2-37e9-4ad6-bbe6-835a5842b94c/1/u0cxiEug9XP6YYtuetUDoSyWWvM.crl
rsync://rpki.ripe.net/repository/DEFAULT/2f/c212a2-37e9-4ad6-bbe6-835a5842b94c/1/u0cxiEug9XP6YYtuetUDoSyWWvM.mft
rsync://rpki.ripe.net/repository/DEFAULT/u0cxiEug9XP6YYtuetUDoSyWWvM.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 28 Apr 2025 07:29:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:76:79:d3:cc:40:5f:5d:28:01:c4:1d:9f:5a:fb:27:47
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=bb4731884ba0f573fa618b6e7ad503a12c965af3
Validity
Not Before: Apr 27 09:00:17 2025 GMT
Not After : Apr 28 09:00:17 2025 GMT
Subject: CN=a9380cf0b87bb6f7ab9d85be5c89e8e10bd39c52
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d7:e5:7f:d1:81:80:af:d0:7d:83:e2:8c:ef:e8:
84:c3:83:a6:49:3a:fa:03:3f:4c:8f:75:b8:30:69:
47:7e:d5:e6:55:6d:8b:d0:c1:78:22:45:78:db:7e:
34:84:47:ba:b5:67:4f:91:5f:b6:6f:50:cf:49:96:
59:78:97:f7:72:c4:91:94:ae:26:c8:27:f2:06:ac:
63:77:db:2c:89:e3:08:46:04:4c:f2:f0:5e:bf:f1:
29:a2:89:75:f8:b4:aa:22:5d:9b:ef:36:79:a9:b1:
fd:b9:b9:6c:ce:60:50:80:5f:53:1d:a4:7d:b5:74:
6a:24:11:a3:14:d9:69:de:46:c0:f6:13:cc:c5:20:
f8:cf:98:ea:2b:61:69:32:0a:90:05:90:87:17:b3:
e4:70:22:8e:54:4a:cd:cd:35:3c:32:c5:58:31:e3:
fe:32:7c:ea:90:07:40:6c:01:cf:28:e8:22:41:48:
8a:a4:c0:f8:af:85:84:05:ce:e3:72:1b:18:b9:51:
1d:07:a1:67:db:96:55:b7:59:c4:be:c6:5e:0b:5d:
50:2d:23:0f:a8:87:b8:82:71:c6:eb:f3:20:8e:5c:
52:87:6f:76:b1:3b:ac:0a:c4:dc:c7:91:9e:2a:25:
2d:dc:5d:fa:28:72:fa:d9:c2:f5:7d:d3:c9:54:98:
f0:69
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A9:38:0C:F0:B8:7B:B6:F7:AB:9D:85:BE:5C:89:E8:E1:0B:D3:9C:52
X509v3 Authority Key Identifier:
keyid:BB:47:31:88:4B:A0:F5:73:FA:61:8B:6E:7A:D5:03:A1:2C:96:5A:F3
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/u0cxiEug9XP6YYtuetUDoSyWWvM.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/2f/c212a2-37e9-4ad6-bbe6-835a5842b94c/1/u0cxiEug9XP6YYtuetUDoSyWWvM.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/2f/c212a2-37e9-4ad6-bbe6-835a5842b94c/1/u0cxiEug9XP6YYtuetUDoSyWWvM.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
26:45:e1:69:eb:86:19:3f:0a:30:83:76:0d:44:ba:e5:a6:82:
ba:55:a3:05:8b:63:e1:6b:42:30:6c:f6:e1:9c:cb:c0:97:9c:
00:7b:1e:9d:7d:12:ab:f1:4f:b9:91:d4:ed:1c:06:fe:89:e1:
f7:82:c3:da:7b:ca:80:bd:75:ef:38:5d:a3:09:95:4b:60:b2:
bb:2c:34:92:ad:2b:4f:b7:17:b1:3f:fb:84:82:e3:65:0e:79:
0c:de:9b:f0:b5:5b:c9:71:61:d9:dd:01:49:37:79:f8:5a:f2:
c6:32:2d:a1:a8:f9:b3:dd:ea:8f:d7:2c:d6:66:f0:b0:87:ae:
69:5a:cb:bd:57:dc:aa:e0:f9:ef:9e:0e:59:5b:80:0d:95:e7:
6f:33:52:01:a3:47:e6:69:65:1a:24:fd:38:86:5b:8a:67:ae:
b7:8a:25:23:a7:62:7f:b7:53:d0:0d:c4:33:de:4d:dd:2b:36:
84:2c:ad:28:66:4b:f6:9e:ef:69:3f:81:c5:00:1f:3a:a9:44:
49:4b:81:3c:d8:c0:0b:d2:d5:93:2f:83:8d:c7:8a:1a:90:3b:
ab:f2:d3:be:2f:8a:22:1f:cb:26:dc:f2:32:ec:5c:63:83:eb:
13:b9:d2:fe:6e:41:7d:ca:71:0d:3b:ff:38:46:4f:b7:8e:5c:
92:9e:73:fb
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Apr 27 17:11:22 2025 by rpki-client