Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/66/11c411-a775-4868-9d27-590f540c456d/1/u_e8bHyTo8-x4lu778TyB64lvaU.mft
File: u_e8bHyTo8-x4lu778TyB64lvaU.mft (raw, json)
Hash identifier: kHaY99s3T7cLUpcBZJ4vM43E+MBSvGJgwF+yXY4rcuQ=
Subject key identifier: A1:C3:EC:3D:E9:81:F0:09:A5:5A:65:7B:DF:BB:EA:26:EF:26:09:FA
Authority key identifier: BB:F7:BC:6C:7C:93:A3:CF:B1:E2:5B:BB:EF:C4:F2:07:AE:25:BD:A5
Certificate issuer: /CN=bbf7bc6c7c93a3cfb1e25bbbefc4f207ae25bda5
Certificate serial: 019674C2902803ADAAA525E35F5AA5E5FFAE
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/u_e8bHyTo8-x4lu778TyB64lvaU.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/66/11c411-a775-4868-9d27-590f540c456d/1/u_e8bHyTo8-x4lu778TyB64lvaU.mft
Manifest number: 0840
Signing time: Sun 27 Apr 2025 01:00:29 +0000
Manifest this update: Sun 27 Apr 2025 01:00:29 +0000
Manifest next update: Mon 28 Apr 2025 01:00:29 +0000
Files and hashes: 1: BbjjnTO6x8pCO-c9XIXawU4Q-Wg.roa (hash: O0QT5VY+thGDoU+G5JqnH6rDs/DiZAhj1p6YD6BBCu4=)
2: u_e8bHyTo8-x4lu778TyB64lvaU.crl (hash: 6cO58PYg5jb4NfBTS1uA4bBinYhFTMA+nVEX4De41M0=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/66/11c411-a775-4868-9d27-590f540c456d/1/u_e8bHyTo8-x4lu778TyB64lvaU.crl
rsync://rpki.ripe.net/repository/DEFAULT/66/11c411-a775-4868-9d27-590f540c456d/1/u_e8bHyTo8-x4lu778TyB64lvaU.mft
rsync://rpki.ripe.net/repository/DEFAULT/u_e8bHyTo8-x4lu778TyB64lvaU.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 27 Apr 2025 20:00:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:74:c2:90:28:03:ad:aa:a5:25:e3:5f:5a:a5:e5:ff:ae
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=bbf7bc6c7c93a3cfb1e25bbbefc4f207ae25bda5
Validity
Not Before: Apr 27 01:00:29 2025 GMT
Not After : Apr 28 01:00:29 2025 GMT
Subject: CN=a1c3ec3de981f009a55a657bdfbbea26ef2609fa
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cd:a4:cd:84:75:72:90:87:fc:f6:aa:0b:36:2a:
14:22:fb:a9:36:47:39:80:32:ac:6c:e9:68:a9:b1:
d6:d4:19:92:ad:4e:52:9d:d0:cb:f9:e1:28:90:db:
6d:91:bf:b9:0d:02:80:33:b1:0e:f1:50:4a:f8:d2:
e0:a6:84:ba:1a:ea:f4:d7:a2:69:ac:0d:6d:7b:80:
79:92:fe:88:7f:74:17:6d:9c:91:bb:d8:03:04:80:
02:63:33:26:22:a5:4b:8b:77:d8:e8:b5:60:82:4b:
0f:89:c3:f0:ae:b2:cf:0e:29:c0:9a:61:89:3a:27:
75:7a:ea:e4:d9:33:a2:91:53:ac:94:72:2a:d9:5b:
bc:26:b3:01:e5:0a:08:43:99:7f:c8:c1:f5:69:53:
04:8d:b0:8f:6f:cd:2a:7a:62:61:06:d1:b9:72:53:
5b:9c:a6:40:78:b0:a4:8f:e7:46:e5:96:8d:2f:18:
62:bc:09:10:a6:b8:99:d4:39:48:f9:d2:88:12:17:
17:a2:b4:82:56:ab:f5:57:35:20:d9:9b:34:63:9b:
1a:60:0c:27:5a:7a:db:09:35:39:52:db:e4:65:8b:
68:d8:a8:3e:45:10:4d:bd:5d:f1:4e:26:59:45:45:
9e:23:7c:b2:b2:9b:3f:32:d3:98:a5:ae:a6:97:d3:
87:a5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A1:C3:EC:3D:E9:81:F0:09:A5:5A:65:7B:DF:BB:EA:26:EF:26:09:FA
X509v3 Authority Key Identifier:
keyid:BB:F7:BC:6C:7C:93:A3:CF:B1:E2:5B:BB:EF:C4:F2:07:AE:25:BD:A5
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/u_e8bHyTo8-x4lu778TyB64lvaU.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/66/11c411-a775-4868-9d27-590f540c456d/1/u_e8bHyTo8-x4lu778TyB64lvaU.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/66/11c411-a775-4868-9d27-590f540c456d/1/u_e8bHyTo8-x4lu778TyB64lvaU.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
50:8c:10:58:58:16:38:d3:20:a8:41:3a:f2:47:90:b5:a0:bc:
34:b2:42:a8:3a:37:72:f1:54:53:84:5a:a0:65:0b:ca:28:59:
59:e9:d8:49:b9:65:3e:35:58:a7:12:4b:52:e3:a4:ff:b6:d2:
cc:a8:bf:a2:ab:35:ef:31:1c:05:bf:4e:0a:7c:2b:bc:4b:9a:
06:42:f7:34:40:84:a4:f5:a1:ff:35:14:d9:13:82:67:4a:39:
cb:2d:e5:bd:36:04:43:48:24:d2:1e:18:e5:c2:ce:7b:f9:17:
74:af:95:1e:04:c4:59:07:9e:bf:47:94:83:f4:6a:dd:ea:4d:
db:4b:69:70:1e:89:83:c8:2b:1b:53:18:e0:e9:dd:36:50:80:
a9:a4:89:60:ad:e4:fe:4d:fa:78:32:51:63:0e:ad:e7:4b:95:
70:88:41:65:3b:26:58:b0:3a:29:46:34:6e:6a:36:42:d9:a9:
58:27:6b:ab:10:d1:12:d8:23:ef:30:df:4e:e7:b6:f6:64:99:
52:1a:0f:1c:f2:33:84:56:e3:25:c9:ec:e4:84:90:3d:08:ab:
2a:c0:9c:c3:17:f7:3c:f3:ab:b4:3f:ca:5b:3b:59:3d:44:da:
f7:4e:64:34:68:f1:f7:2d:52:21:6f:bd:7c:49:7c:e1:6b:a8:
84:29:2b:3b
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZZ0wpAoA62qpSXjX1ql5f+uMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGJiZjdiYzZjN2M5M2EzY2ZiMWUyNWJiYmVmYzRmMjA3YWUy
NWJkYTUwHhcNMjUwNDI3MDEwMDI5WhcNMjUwNDI4MDEwMDI5WjAzMTEwLwYDVQQD
EyhhMWMzZWMzZGU5ODFmMDA5YTU1YTY1N2JkZmJiZWEyNmVmMjYwOWZhMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAzaTNhHVykIf89qoLNioUIvupNkc5
gDKsbOloqbHW1BmSrU5SndDL+eEokNttkb+5DQKAM7EO8VBK+NLgpoS6Gur016Jp
rA1te4B5kv6If3QXbZyRu9gDBIACYzMmIqVLi3fY6LVggksPicPwrrLPDinAmmGJ
Oid1eurk2TOikVOslHIq2Vu8JrMB5QoIQ5l/yMH1aVMEjbCPb80qemJhBtG5clNb
nKZAeLCkj+dG5ZaNLxhivAkQpriZ1DlI+dKIEhcXorSCVqv1VzUg2Zs0Y5saYAwn
WnrbCTU5UtvkZYto2Kg+RRBNvV3xTiZZRUWeI3yysps/MtOYpa6ml9OHpQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFKHD7D3pgfAJpVple9+76ibvJgn6MB8GA1UdIwQY
MBaAFLv3vGx8k6PPseJbu+/E8geuJb2lMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvdV9lOGJIeVRvOC14NGx1Nzc4VHlCNjRsdmFVLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC82Ni8xMWM0MTEtYTc3NS00ODY4LTlkMjct
NTkwZjU0MGM0NTZkLzEvdV9lOGJIeVRvOC14NGx1Nzc4VHlCNjRsdmFVLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC82Ni8xMWM0MTEtYTc3NS00ODY4LTlkMjctNTkwZjU0MGM0NTZk
LzEvdV9lOGJIeVRvOC14NGx1Nzc4VHlCNjRsdmFVLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAUIwQWFgW
ONMgqEE68keQtaC8NLJCqDo3cvFUU4RaoGULyihZWenYSbllPjVYpxJLUuOk/7bS
zKi/oqs17zEcBb9OCnwrvEuaBkL3NECEpPWh/zUU2ROCZ0o5yy3lvTYEQ0gk0h4Y
5cLOe/kXdK+VHgTEWQeev0eUg/Rq3epN20tpcB6Jg8grG1MY4OndNlCAqaSJYK3k
/k36eDJRYw6t50uVcIhBZTsmWLA6KUY0bmo2QtmpWCdrqxDREtgj7zDfTue29mSZ
UhoPHPIzhFbjJcns5ISQPQirKsCcwxf3PPOrtD/KWztZPUTa905kNGjx9y1SIW+9
fEl84WuohCkrOw==
-----END CERTIFICATE-----
Generated at Sun Apr 27 05:52:31 2025 by rpki-client