Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/48/c071a8-54aa-4abd-8127-edf7bb653f13/1/u-Eo3LaBD_3FArowR81BkTLaInQ.mft
File: u-Eo3LaBD_3FArowR81BkTLaInQ.mft (raw, json)
Hash identifier: GtvB+OrG65ykZw+HIbdtGxH5hehYkQ+fT3zEtwO0BfQ=
Subject key identifier: 94:44:32:98:A6:C7:79:F5:2B:44:84:79:EF:3A:AA:A7:02:8F:CF:7A
Authority key identifier: BB:E1:28:DC:B6:81:0F:FD:C5:02:BA:30:47:CD:41:91:32:DA:22:74
Certificate issuer: /CN=bbe128dcb6810ffdc502ba3047cd419132da2274
Certificate serial: 01967B3257E25C7A3163AA685A16A5BF44B0
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/u-Eo3LaBD_3FArowR81BkTLaInQ.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/48/c071a8-54aa-4abd-8127-edf7bb653f13/1/u-Eo3LaBD_3FArowR81BkTLaInQ.mft
Manifest number: 1464
Signing time: Mon 28 Apr 2025 07:00:18 +0000
Manifest this update: Mon 28 Apr 2025 07:00:18 +0000
Manifest next update: Tue 29 Apr 2025 07:00:18 +0000
Files and hashes: 1: KyDiW-yP4PoEMeO0WHmm0uQpXzo.roa (hash: 7vZ+OrglKDbrLCd5IBuAg6rXUphyAUCG7HZaGMHHYfs=)
2: u-Eo3LaBD_3FArowR81BkTLaInQ.crl (hash: bM1pMbxqa0m7VD+sO9D/n/UpwcJfwBXtfmKwczGsUqY=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/48/c071a8-54aa-4abd-8127-edf7bb653f13/1/u-Eo3LaBD_3FArowR81BkTLaInQ.crl
rsync://rpki.ripe.net/repository/DEFAULT/48/c071a8-54aa-4abd-8127-edf7bb653f13/1/u-Eo3LaBD_3FArowR81BkTLaInQ.mft
rsync://rpki.ripe.net/repository/DEFAULT/u-Eo3LaBD_3FArowR81BkTLaInQ.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 29 Apr 2025 07:00:18 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:7b:32:57:e2:5c:7a:31:63:aa:68:5a:16:a5:bf:44:b0
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=bbe128dcb6810ffdc502ba3047cd419132da2274
Validity
Not Before: Apr 28 07:00:18 2025 GMT
Not After : Apr 29 07:00:18 2025 GMT
Subject: CN=94443298a6c779f52b448479ef3aaaa7028fcf7a
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8d:46:a0:3e:c1:29:00:49:c3:20:2c:77:b9:9e:
b7:96:bd:0f:1d:ef:5c:af:32:80:7f:ff:84:53:c1:
c0:0d:d2:43:8e:87:fc:12:0c:c6:6c:68:ba:1f:99:
88:97:07:05:db:05:7c:71:52:40:ad:24:87:90:b6:
cf:fe:73:5f:2e:09:0a:b3:93:1a:2f:12:1c:e0:6e:
1d:e0:c5:b0:6f:aa:27:8d:01:59:41:15:68:e4:d6:
7f:ce:fd:49:50:5f:f4:07:c8:42:0f:f0:69:a2:bd:
cd:91:63:04:2b:9b:0e:72:9a:6c:18:21:46:f0:ad:
8c:c8:28:e6:02:29:2c:e3:ed:03:ac:2f:f9:70:50:
17:5a:03:84:d7:46:cc:a1:05:7c:72:d7:3a:29:2d:
2e:0a:9b:73:7a:d5:30:86:b0:1e:fa:5d:b3:6f:19:
9f:7d:13:8e:eb:ee:fc:a5:08:3d:c9:3a:7b:30:19:
c5:2b:06:b3:1c:78:38:39:97:16:33:c2:d0:5e:b2:
50:46:0d:5f:7d:0d:ca:de:c2:e6:2d:9c:32:a7:eb:
55:40:eb:a5:ab:ee:d7:74:99:dc:00:d9:7d:d6:1a:
14:44:09:ee:0c:1e:36:13:f9:7f:89:67:c6:a0:a8:
35:7a:58:44:b0:1f:61:4e:e5:3f:fb:70:72:e5:38:
20:85
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
94:44:32:98:A6:C7:79:F5:2B:44:84:79:EF:3A:AA:A7:02:8F:CF:7A
X509v3 Authority Key Identifier:
keyid:BB:E1:28:DC:B6:81:0F:FD:C5:02:BA:30:47:CD:41:91:32:DA:22:74
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/u-Eo3LaBD_3FArowR81BkTLaInQ.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/48/c071a8-54aa-4abd-8127-edf7bb653f13/1/u-Eo3LaBD_3FArowR81BkTLaInQ.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/48/c071a8-54aa-4abd-8127-edf7bb653f13/1/u-Eo3LaBD_3FArowR81BkTLaInQ.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
d7:bb:2d:b7:db:b2:70:00:1b:f8:4e:7e:db:6a:1f:49:ca:da:
12:7f:10:67:33:5d:91:8b:f7:46:e6:c6:ae:b2:0b:e8:8d:d9:
52:f5:6c:3a:62:03:60:52:d8:46:d4:20:56:03:81:25:f5:0f:
47:1e:07:0e:5a:49:48:a7:b6:f7:58:2f:7f:df:ac:f1:81:53:
8b:57:28:ac:e1:ff:68:d4:76:ea:ff:cc:05:7c:37:73:84:12:
bd:86:48:d8:a9:2a:f6:d9:fa:fe:e0:6e:60:67:e9:63:4b:2d:
80:23:57:09:13:9f:4c:53:9c:a0:0d:d7:4e:10:ea:fe:50:42:
1b:66:3c:20:0b:28:c6:eb:59:93:1e:8c:f6:04:71:a7:d1:09:
12:11:13:1d:0a:6c:32:a2:42:0e:f7:f0:d9:8f:9e:61:83:90:
c9:59:cb:8a:a9:a8:41:2a:58:43:5a:1f:a8:96:17:0b:57:72:
91:8d:13:32:c3:df:50:5e:9b:75:75:93:24:d9:10:1b:37:3e:
fa:db:69:d9:e7:1b:5a:e8:d5:28:55:d0:19:5e:bb:6a:4a:92:
22:91:e5:ce:4c:18:30:38:8d:27:60:be:c8:a6:d8:ee:1f:73:
93:d5:f2:70:35:5b:40:4f:c1:58:55:55:d1:99:5e:4b:b5:cf:
e0:33:b6:63
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 28 17:36:38 2025 by rpki-client