Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/47/2f1207-ea0a-4507-9a54-94ef19707382/1/rU-Hnz-XrYzXMZPYBp5JsBtrrd0.mft
File: rU-Hnz-XrYzXMZPYBp5JsBtrrd0.mft (raw, json)
Hash identifier: pr3hS7r15JeLn9vyGkR3Xf8HfBZCYI7LpPu/UWEga+A=
Subject key identifier: BD:F9:78:6F:64:79:5A:97:9A:48:48:C7:22:B9:D3:8A:76:BF:01:E3
Authority key identifier: AD:4F:87:9F:3F:97:AD:8C:D7:31:93:D8:06:9E:49:B0:1B:6B:AD:DD
Certificate issuer: /CN=ad4f879f3f97ad8cd73193d8069e49b01b6baddd
Certificate serial: 01967FEB2A3710150DAB284E927FDC4CAAAC
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/rU-Hnz-XrYzXMZPYBp5JsBtrrd0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/47/2f1207-ea0a-4507-9a54-94ef19707382/1/rU-Hnz-XrYzXMZPYBp5JsBtrrd0.mft
Manifest number: 0139
Signing time: Tue 29 Apr 2025 05:00:40 +0000
Manifest this update: Tue 29 Apr 2025 05:00:40 +0000
Manifest next update: Wed 30 Apr 2025 05:00:40 +0000
Files and hashes: 1: rU-Hnz-XrYzXMZPYBp5JsBtrrd0.crl (hash: puOf0ptcjbQDhSac6iZbjOosKtTi+9Fc/lj4Q3T1O7c=)
2: tvk_TWflCJ8ZNrh2M-7M5_dNgEY.roa (hash: 4b/TkGaMkrVO4glHhMzqT0WO1c7HhD8mCemv7gvN81c=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/47/2f1207-ea0a-4507-9a54-94ef19707382/1/rU-Hnz-XrYzXMZPYBp5JsBtrrd0.crl
rsync://rpki.ripe.net/repository/DEFAULT/47/2f1207-ea0a-4507-9a54-94ef19707382/1/rU-Hnz-XrYzXMZPYBp5JsBtrrd0.mft
rsync://rpki.ripe.net/repository/DEFAULT/rU-Hnz-XrYzXMZPYBp5JsBtrrd0.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 30 Apr 2025 00:00:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:7f:eb:2a:37:10:15:0d:ab:28:4e:92:7f:dc:4c:aa:ac
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=ad4f879f3f97ad8cd73193d8069e49b01b6baddd
Validity
Not Before: Apr 29 05:00:40 2025 GMT
Not After : Apr 30 05:00:40 2025 GMT
Subject: CN=bdf9786f64795a979a4848c722b9d38a76bf01e3
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e8:02:24:0c:5f:34:e4:62:f7:5d:f0:2d:2e:08:
ae:18:c0:72:a0:07:ff:98:7d:a7:07:5c:de:93:81:
0b:03:db:14:1d:b3:b9:69:34:bd:fc:16:f5:e6:69:
2c:6b:9a:48:01:90:a6:d1:33:d5:6e:48:60:c0:eb:
26:5c:c0:cc:d6:35:eb:7e:29:8a:dc:09:bb:e0:5c:
c1:d8:43:bf:97:6d:72:07:f0:24:4f:55:00:be:c9:
2b:ae:84:79:85:b1:2e:62:41:7d:c7:15:58:d7:20:
c9:59:a7:3a:46:37:e9:0c:a2:a2:36:83:03:f0:6c:
9d:05:ae:f7:8c:1b:e0:85:33:58:83:06:4e:d6:42:
f6:28:0f:e9:e7:26:a6:fb:2d:c5:d8:65:24:81:da:
29:79:fe:9b:82:88:48:7e:e8:78:17:73:90:04:9a:
87:16:9b:d1:33:2b:1e:cd:fe:b9:7f:8f:08:14:cd:
7d:7b:84:81:87:f0:5f:fb:ca:f5:27:c3:94:25:f6:
c5:dd:c6:d9:2b:54:24:a9:fc:65:15:8a:04:9b:f2:
c2:cc:fc:42:a4:5c:5b:4c:6e:a2:13:d2:20:af:d2:
ac:78:1d:4a:76:f0:2e:72:62:74:db:ff:10:39:fb:
74:a7:9a:c8:eb:62:ea:18:6e:06:50:95:c4:0b:e2:
dc:21
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
BD:F9:78:6F:64:79:5A:97:9A:48:48:C7:22:B9:D3:8A:76:BF:01:E3
X509v3 Authority Key Identifier:
keyid:AD:4F:87:9F:3F:97:AD:8C:D7:31:93:D8:06:9E:49:B0:1B:6B:AD:DD
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/rU-Hnz-XrYzXMZPYBp5JsBtrrd0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/47/2f1207-ea0a-4507-9a54-94ef19707382/1/rU-Hnz-XrYzXMZPYBp5JsBtrrd0.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/47/2f1207-ea0a-4507-9a54-94ef19707382/1/rU-Hnz-XrYzXMZPYBp5JsBtrrd0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
99:ec:02:63:2d:1d:ae:ca:67:15:f4:cd:d5:da:1e:71:9e:46:
e5:33:6f:44:9b:0f:ce:0e:8e:fd:f1:17:6c:70:a8:07:a2:c0:
f7:4b:78:62:8e:d3:0c:44:7b:15:6e:21:f4:15:c9:ea:d7:eb:
02:e3:cb:71:2d:1e:21:8e:eb:c5:87:82:b7:45:09:bb:0e:a1:
08:c4:a6:0a:5e:ce:97:96:30:0c:bc:65:29:cd:a6:6a:23:72:
e2:e3:ab:e4:b5:ed:32:94:47:7b:7d:c6:e0:2f:3e:5b:a5:35:
a1:25:b4:07:90:97:da:90:03:ec:d9:bf:08:f2:e1:f8:c4:3c:
39:fe:71:08:41:71:71:7c:dc:b7:7d:54:0c:98:88:31:dc:92:
63:2d:83:d5:c4:0e:5c:11:1e:fb:58:4c:b8:55:b6:6a:1f:61:
e5:76:27:d9:9c:3e:09:11:60:c2:a8:90:dc:fa:4b:a5:67:9a:
3f:c4:fb:16:6d:b7:36:fb:bd:4f:e6:d2:90:19:68:23:b2:8c:
88:09:86:e4:ab:4b:32:37:9e:12:d6:43:21:95:20:c7:a2:53:
41:c3:e3:d6:bf:30:cd:24:0d:2b:1c:bb:54:46:48:81:0a:ad:
72:f7:21:dd:d5:9a:c4:a5:a9:96:7e:32:cb:93:eb:d0:b3:44:
2d:1e:32:62
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Apr 29 09:40:31 2025 by rpki-client