Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/76/11cd10-3ef7-4105-8248-ba51323db4e5/1/u_Th_bQkqRICI7OnXGzMMbb2Iko.mft
File: u_Th_bQkqRICI7OnXGzMMbb2Iko.mft (raw, json)
Hash identifier: rcJizsCoNqS44jU6ToxVLrIP+RnDcqOLkqYSMTTjoBQ=
Subject key identifier: AA:FE:1D:9C:30:B1:65:BE:A1:8C:36:2D:BD:63:CA:6F:15:75:33:1A
Authority key identifier: BB:F4:E1:FD:B4:24:A9:12:02:23:B3:A7:5C:6C:CC:31:B6:F6:22:4A
Certificate issuer: /CN=bbf4e1fdb424a9120223b3a75c6ccc31b6f6224a
Certificate serial: 019685ED96A3D02759A9D0BD0ADFDD04DB2D
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/u_Th_bQkqRICI7OnXGzMMbb2Iko.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/76/11cd10-3ef7-4105-8248-ba51323db4e5/1/u_Th_bQkqRICI7OnXGzMMbb2Iko.mft
Manifest number: 13EE
Signing time: Wed 30 Apr 2025 09:01:02 +0000
Manifest this update: Wed 30 Apr 2025 09:01:02 +0000
Manifest next update: Thu 01 May 2025 09:01:02 +0000
Files and hashes: 1: Hd2tJFK8FHI5IxfZApcFzOSYT3E.roa (hash: M8+A1yW8hq7cWzg9bjqGF7iG0x4F0G6mxL/iqnm6fL0=)
2: kWTTmcIIlDRdQ1_UbjyGHGmL5gQ.roa (hash: 95qxE5aHeVHU5YRLlJvt+EwGhxpcIfgYbsmlarjDLf0=)
3: ktlX_rOO3raXC83lO5IDJm4TL_s.roa (hash: Zr/8yGPdIQcj4Ieb5b5PEzjsiZpTZuJn6Ep06lhBllc=)
4: u_Th_bQkqRICI7OnXGzMMbb2Iko.crl (hash: B058oOajjhazRtQSuddLvpA8M/5dv3oIbOvdSe/AjBE=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/76/11cd10-3ef7-4105-8248-ba51323db4e5/1/u_Th_bQkqRICI7OnXGzMMbb2Iko.crl
rsync://rpki.ripe.net/repository/DEFAULT/76/11cd10-3ef7-4105-8248-ba51323db4e5/1/u_Th_bQkqRICI7OnXGzMMbb2Iko.mft
rsync://rpki.ripe.net/repository/DEFAULT/u_Th_bQkqRICI7OnXGzMMbb2Iko.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 01 May 2025 09:01:02 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:85:ed:96:a3:d0:27:59:a9:d0:bd:0a:df:dd:04:db:2d
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=bbf4e1fdb424a9120223b3a75c6ccc31b6f6224a
Validity
Not Before: Apr 30 09:01:02 2025 GMT
Not After : May 1 09:01:02 2025 GMT
Subject: CN=aafe1d9c30b165bea18c362dbd63ca6f1575331a
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c8:40:39:3b:15:41:82:e4:e3:d4:da:e9:1b:a8:
72:5b:0b:2c:b5:1e:c0:d3:22:d1:56:3b:e1:5b:b0:
8a:c3:95:80:8b:94:bf:b7:67:ae:01:1f:94:b9:54:
b9:d5:7d:17:c0:36:5b:18:7a:d9:5a:41:27:7a:4e:
21:38:6e:c9:54:e9:35:43:48:ea:b8:4d:05:b7:c8:
d8:0b:dc:e9:53:20:46:d4:17:0c:96:b3:ca:d5:ea:
dc:b2:42:91:19:2e:0d:b6:0d:94:0c:d7:28:8c:49:
ea:63:cc:1b:c7:46:f5:f4:7d:12:1a:a2:ec:53:01:
b0:f2:4f:f0:bb:9c:f6:72:a4:78:e0:b8:7f:00:e2:
23:be:a2:82:3c:45:a1:c3:c2:11:27:10:f6:0f:0d:
96:98:44:c7:48:d4:c4:fe:29:34:eb:70:72:fc:57:
a3:cb:53:e1:bc:99:5b:ea:b0:3d:ee:35:b0:9e:2b:
d3:15:60:06:6c:6c:ce:1a:64:10:5a:25:69:a7:39:
95:d5:37:d5:ae:70:8d:e3:d9:b3:24:4f:d9:0c:9b:
1c:26:67:f7:d2:85:3e:b9:2a:80:59:fd:1f:7a:ee:
8e:c5:a3:9c:3a:83:4f:cb:7a:0e:32:10:a5:99:5c:
f7:56:f4:36:2c:78:92:d8:a7:f2:05:04:d4:cc:72:
83:7b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
AA:FE:1D:9C:30:B1:65:BE:A1:8C:36:2D:BD:63:CA:6F:15:75:33:1A
X509v3 Authority Key Identifier:
keyid:BB:F4:E1:FD:B4:24:A9:12:02:23:B3:A7:5C:6C:CC:31:B6:F6:22:4A
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/u_Th_bQkqRICI7OnXGzMMbb2Iko.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/76/11cd10-3ef7-4105-8248-ba51323db4e5/1/u_Th_bQkqRICI7OnXGzMMbb2Iko.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/76/11cd10-3ef7-4105-8248-ba51323db4e5/1/u_Th_bQkqRICI7OnXGzMMbb2Iko.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
9e:a6:05:f2:7f:17:32:a0:01:a7:a8:37:e4:61:cc:14:db:ae:
4b:d7:30:44:ea:da:df:f4:eb:c9:55:88:7e:92:70:33:77:8e:
a3:c0:1a:17:23:bc:94:83:03:07:5f:e2:26:0a:6e:a2:b1:e2:
ab:27:43:76:c9:87:4e:78:f1:d7:24:98:a4:82:7b:12:1e:be:
14:65:4a:32:b3:1c:2f:6f:e4:79:ed:e7:f1:a5:b6:7e:c8:9a:
46:18:45:6e:27:36:5b:39:22:01:6c:43:b7:d3:c9:81:45:8e:
9b:b3:3f:ac:e8:7c:0d:07:4f:11:78:80:de:ff:4a:1d:3f:a7:
1b:e0:3b:cf:e3:ff:e5:18:b5:17:0e:09:4b:03:6b:11:6a:2e:
63:b8:ac:1a:4c:ca:47:33:69:55:10:1e:e9:38:3f:be:1d:9f:
e7:38:36:fb:06:c9:87:aa:6b:ed:a6:02:03:b4:95:46:d7:0d:
27:bf:2e:42:1f:9f:a9:03:38:30:fe:5a:37:5b:cc:d1:c0:e7:
22:7b:55:64:94:d2:24:b8:a6:b3:2c:05:cd:8b:9a:e5:ad:8a:
09:9b:25:54:c7:ae:da:76:03:83:d8:55:ed:03:03:29:03:e6:
5c:9b:36:33:85:98:63:5f:28:23:ae:b4:20:8a:77:9a:11:22:
d4:93:7d:ea
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Apr 30 15:53:49 2025 by rpki-client