Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/6a/ffbf18-aa03-434c-8bbd-141450f10a85/1/u2L-a389NkMyvNbg2veSJsz4CeI.mft
File: u2L-a389NkMyvNbg2veSJsz4CeI.mft (raw, json)
Hash identifier: YsNlvmomER3obSfVOviMmxmccfcQx76gUKq+0l804aI=
Subject key identifier: B2:23:CE:51:62:F6:1F:04:30:38:18:69:F7:FC:02:50:69:38:77:11
Authority key identifier: BB:62:FE:6B:7F:3D:36:43:32:BC:D6:E0:DA:F7:92:26:CC:F8:09:E2
Certificate issuer: /CN=bb62fe6b7f3d364332bcd6e0daf79226ccf809e2
Certificate serial: 0196767AAC59C37FFFE330E5A5EBBD47FBCD
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/u2L-a389NkMyvNbg2veSJsz4CeI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/6a/ffbf18-aa03-434c-8bbd-141450f10a85/1/u2L-a389NkMyvNbg2veSJsz4CeI.mft
Manifest number: 0F69
Signing time: Sun 27 Apr 2025 09:01:13 +0000
Manifest this update: Sun 27 Apr 2025 09:01:13 +0000
Manifest next update: Mon 28 Apr 2025 09:01:13 +0000
Files and hashes: 1: r_R3L74YEYwgwhUjmdIRM8Gt5Co.roa (hash: 3ISVt6WPiJRKb5tRNRRN7hMIBSFWG9w6qCsEMd5nA3Q=)
2: u2L-a389NkMyvNbg2veSJsz4CeI.crl (hash: Ve5ohtBGhpTcq34aL34mNR4Wzsct8plYoBspWODvgiE=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/6a/ffbf18-aa03-434c-8bbd-141450f10a85/1/u2L-a389NkMyvNbg2veSJsz4CeI.crl
rsync://rpki.ripe.net/repository/DEFAULT/6a/ffbf18-aa03-434c-8bbd-141450f10a85/1/u2L-a389NkMyvNbg2veSJsz4CeI.mft
rsync://rpki.ripe.net/repository/DEFAULT/u2L-a389NkMyvNbg2veSJsz4CeI.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 28 Apr 2025 07:29:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:76:7a:ac:59:c3:7f:ff:e3:30:e5:a5:eb:bd:47:fb:cd
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=bb62fe6b7f3d364332bcd6e0daf79226ccf809e2
Validity
Not Before: Apr 27 09:01:13 2025 GMT
Not After : Apr 28 09:01:13 2025 GMT
Subject: CN=b223ce5162f61f0430381869f7fc025069387711
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b8:f2:55:13:32:8e:33:dd:86:97:10:20:db:6c:
7f:d9:a9:a7:88:1d:32:e8:6e:bd:30:c7:c2:9a:e4:
cb:5a:f6:f0:4e:b1:23:5c:ed:62:98:e6:f6:a3:bd:
47:81:43:6b:b1:65:57:09:ec:83:a2:36:72:40:d3:
84:6a:70:fd:22:20:da:06:2a:76:2c:c1:d5:2c:32:
82:eb:da:85:27:e8:94:84:65:d2:cb:67:6f:df:93:
86:da:2e:8d:4f:91:12:7f:b4:cc:86:fa:ac:a3:a8:
a5:f4:04:4f:ee:3f:c9:28:26:9e:35:69:9f:b3:39:
9f:66:c4:f7:58:41:07:50:bc:84:58:aa:69:a3:a7:
46:89:5f:53:ab:fe:84:9c:41:ff:63:26:75:2f:45:
ec:13:87:0c:dc:63:1e:c5:28:73:07:2a:a5:e8:09:
be:dc:33:fc:de:59:62:da:02:8e:cf:54:83:06:83:
37:31:92:a7:f7:19:15:97:8f:aa:36:48:d6:72:d8:
b5:e8:7d:6d:3e:89:49:c1:e3:b1:65:6a:a4:0c:42:
70:b7:0a:dd:f9:96:fe:af:d6:84:23:4f:8e:85:e4:
3d:d9:e5:fd:c0:ca:97:b7:97:79:f3:d4:6a:73:62:
d3:a1:12:aa:c6:68:ff:26:56:ca:5f:03:ad:09:1f:
9a:f7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B2:23:CE:51:62:F6:1F:04:30:38:18:69:F7:FC:02:50:69:38:77:11
X509v3 Authority Key Identifier:
keyid:BB:62:FE:6B:7F:3D:36:43:32:BC:D6:E0:DA:F7:92:26:CC:F8:09:E2
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/u2L-a389NkMyvNbg2veSJsz4CeI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/6a/ffbf18-aa03-434c-8bbd-141450f10a85/1/u2L-a389NkMyvNbg2veSJsz4CeI.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/6a/ffbf18-aa03-434c-8bbd-141450f10a85/1/u2L-a389NkMyvNbg2veSJsz4CeI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
6c:5a:6c:c9:4a:24:0d:e3:e9:e0:5f:7f:3a:c4:7f:d4:0e:29:
f2:d3:61:4e:48:bc:3c:de:6e:6c:e4:ec:44:eb:44:68:96:46:
dd:8d:66:42:4f:c6:da:13:85:20:63:aa:4c:0e:43:41:19:8d:
c8:17:ce:d7:f3:cb:e8:77:98:57:12:7d:89:00:c3:9a:04:af:
b2:7b:2c:f3:44:ba:6c:e4:2f:80:cc:b5:4e:a6:1c:8d:bc:ae:
68:22:12:43:37:0b:b4:8d:84:1a:54:60:c6:58:a1:d8:01:42:
cb:a2:1c:84:0a:9b:33:b9:33:33:e2:f2:91:f6:cf:98:ae:f7:
d0:a4:15:a6:dc:91:2a:a4:11:bc:c9:c9:c7:98:3b:3c:99:2a:
3b:77:f7:97:ec:da:9e:95:dc:a9:9c:4b:8f:17:56:24:c2:64:
79:b5:14:38:34:ac:3c:65:a1:85:97:48:bc:ac:bb:14:80:b8:
f4:c8:38:28:f7:f8:25:bc:be:6d:9a:99:b4:4d:9a:6c:6d:89:
a1:04:80:e7:23:52:1d:bb:b4:05:9c:5b:a8:a2:1e:a6:37:62:
d3:9b:92:ee:f2:ba:84:e0:13:97:a0:7b:21:8f:42:e7:27:31:
bd:0b:f6:5e:0c:a7:13:dd:13:5c:c3:ad:87:b3:07:7e:f7:96:
c3:2d:99:d5
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Apr 27 16:38:18 2025 by rpki-client