Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/46/b62c33-cc9c-4baf-a0ee-ed142e464335/1/u9zIw3chdOR7rIuTLlvse0ex2Ss.mft
File: u9zIw3chdOR7rIuTLlvse0ex2Ss.mft (raw, json)
Hash identifier: PQf/V6D2XfyKRF9ej18a1SKMV4hiJObyMs4KLZ6Wc20=
Subject key identifier: 3F:D0:95:47:58:D1:D8:0B:6A:46:3D:57:55:AF:D4:53:DC:72:90:B4
Authority key identifier: BB:DC:C8:C3:77:21:74:E4:7B:AC:8B:93:2E:5B:EC:7B:47:B1:D9:2B
Certificate issuer: /CN=bbdcc8c3772174e47bac8b932e5bec7b47b1d92b
Certificate serial: 019678684221C76F3EA4815F9F75D72644EC
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/u9zIw3chdOR7rIuTLlvse0ex2Ss.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/46/b62c33-cc9c-4baf-a0ee-ed142e464335/1/u9zIw3chdOR7rIuTLlvse0ex2Ss.mft
Manifest number: 1511
Signing time: Sun 27 Apr 2025 18:00:20 +0000
Manifest this update: Sun 27 Apr 2025 18:00:20 +0000
Manifest next update: Mon 28 Apr 2025 18:00:20 +0000
Files and hashes: 1: tUE8baZVU1NdKeMuH6kAeF6d40U.roa (hash: oR4YGvS/x8NPWIpEMxxjQSUvcEGgnnG9XZinqPPpzBA=)
2: u9zIw3chdOR7rIuTLlvse0ex2Ss.crl (hash: dSaxBbVNMuZMj92v25aGwXYE9uRBnknBt0pS2fIiYXQ=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/46/b62c33-cc9c-4baf-a0ee-ed142e464335/1/u9zIw3chdOR7rIuTLlvse0ex2Ss.crl
rsync://rpki.ripe.net/repository/DEFAULT/46/b62c33-cc9c-4baf-a0ee-ed142e464335/1/u9zIw3chdOR7rIuTLlvse0ex2Ss.mft
rsync://rpki.ripe.net/repository/DEFAULT/u9zIw3chdOR7rIuTLlvse0ex2Ss.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 28 Apr 2025 14:00:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:78:68:42:21:c7:6f:3e:a4:81:5f:9f:75:d7:26:44:ec
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=bbdcc8c3772174e47bac8b932e5bec7b47b1d92b
Validity
Not Before: Apr 27 18:00:20 2025 GMT
Not After : Apr 28 18:00:20 2025 GMT
Subject: CN=3fd0954758d1d80b6a463d5755afd453dc7290b4
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bd:b2:0b:71:ab:e9:f7:77:45:71:29:23:7d:8f:
26:c0:02:47:70:7e:bf:18:ae:2e:69:83:30:34:66:
99:42:5e:ac:02:f7:b8:7f:d3:22:17:7c:c0:af:61:
5b:33:c8:5d:56:4f:a0:ad:6e:b0:22:5e:cb:29:15:
c9:4f:9a:23:2a:2d:62:43:94:b7:ed:68:8e:1e:fd:
6b:58:b0:6f:95:04:10:42:67:b6:c1:2e:13:65:7c:
b2:2a:2c:6d:bb:c3:94:15:d2:96:5e:15:40:f4:69:
6c:ba:90:53:10:d8:2d:ce:c4:bd:68:dd:83:8c:f8:
e7:70:05:9e:76:00:ee:a6:23:23:f3:97:fd:a8:86:
9c:b4:fa:fe:d3:29:30:a7:5e:76:f1:77:b8:25:ed:
8a:95:99:ef:79:d7:a0:00:97:fd:a6:d5:d1:dc:de:
a4:68:7f:46:94:dc:43:6e:29:29:30:c3:d6:9a:f5:
eb:66:c2:14:b9:93:14:d6:05:9b:85:98:c8:1c:05:
18:5e:45:2c:6c:4f:ff:76:20:18:be:22:36:d2:f0:
10:11:f3:ea:15:28:3e:4d:0f:4f:3b:ae:ea:86:a2:
51:8e:6e:d5:36:23:8c:2b:93:4e:4f:73:ef:2c:58:
ed:7b:4d:d2:70:d0:02:f1:df:74:fd:ff:5b:25:92:
41:41
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
3F:D0:95:47:58:D1:D8:0B:6A:46:3D:57:55:AF:D4:53:DC:72:90:B4
X509v3 Authority Key Identifier:
keyid:BB:DC:C8:C3:77:21:74:E4:7B:AC:8B:93:2E:5B:EC:7B:47:B1:D9:2B
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/u9zIw3chdOR7rIuTLlvse0ex2Ss.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/46/b62c33-cc9c-4baf-a0ee-ed142e464335/1/u9zIw3chdOR7rIuTLlvse0ex2Ss.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/46/b62c33-cc9c-4baf-a0ee-ed142e464335/1/u9zIw3chdOR7rIuTLlvse0ex2Ss.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
27:a7:bd:97:09:6c:04:c8:58:ca:eb:ed:cd:e3:c3:17:fb:26:
e8:7e:28:be:a1:c5:7f:e7:89:90:19:95:69:ee:05:be:90:58:
28:12:66:3c:11:21:79:50:7d:d2:10:0a:be:ee:c7:c8:27:5b:
ae:30:0b:f4:74:2c:95:40:02:7b:ec:d1:bb:34:66:5e:c8:49:
e4:ea:49:25:8c:93:e3:23:63:9d:ec:50:ac:7a:68:a2:9d:75:
d4:19:83:cb:8e:1e:7c:2e:f5:d7:45:f4:2d:cd:47:81:50:8d:
36:38:be:80:21:e1:48:60:61:cd:90:aa:8d:fd:bf:eb:31:18:
df:d9:51:9f:d0:17:1d:72:c9:ae:28:c7:e2:9a:f8:e4:09:6c:
19:be:bb:b0:95:58:98:0e:2e:10:25:30:87:6c:f0:4e:b1:14:
de:93:7a:f9:8f:e7:81:d5:2e:2b:da:ce:db:48:89:c7:e2:68:
06:48:68:37:91:a5:0b:73:ab:a0:45:2b:80:9c:67:b8:ea:6b:
ca:68:ae:bb:7f:e6:62:49:13:f0:86:0f:4e:90:57:e9:a2:00:
ac:27:06:24:40:62:0a:89:e7:a5:55:02:e5:f4:92:6d:44:38:
b2:d7:3d:4c:97:0d:d8:b2:b8:d5:21:58:cb:c6:a8:aa:fb:f6:
bf:35:74:ae
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Apr 27 20:59:03 2025 by rpki-client