Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/8b/561d24-e921-4ec8-a611-4dc20c5b6268/1/u8o_JdVGILUO-FIGV2NNOwlrrFc.mft
File: u8o_JdVGILUO-FIGV2NNOwlrrFc.mft (raw, json)
Hash identifier: XY4wXdZzfmjVBaVseieLAopESv2C+55ZJZpDlNjMhB8=
Subject key identifier: 78:92:7D:4E:B1:85:03:58:9C:1A:A7:B8:2F:7C:1C:CF:03:03:24:08
Authority key identifier: BB:CA:3F:25:D5:46:20:B5:0E:F8:52:06:57:63:4D:3B:09:6B:AC:57
Certificate issuer: /CN=bbca3f25d54620b50ef8520657634d3b096bac57
Certificate serial: 019679B21BA2FB9CAED1763F12386A06A3B7
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/u8o_JdVGILUO-FIGV2NNOwlrrFc.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/8b/561d24-e921-4ec8-a611-4dc20c5b6268/1/u8o_JdVGILUO-FIGV2NNOwlrrFc.mft
Manifest number: 0D42
Signing time: Mon 28 Apr 2025 00:00:37 +0000
Manifest this update: Mon 28 Apr 2025 00:00:37 +0000
Manifest next update: Tue 29 Apr 2025 00:00:37 +0000
Files and hashes: 1: Rp_msz1sKXospi7oXq9Ephc77qY.roa (hash: 62qZ7LL8c9IYZnsBXvNbfGkN5Rp0kCxvzgl0G0a3B3E=)
2: u8o_JdVGILUO-FIGV2NNOwlrrFc.crl (hash: 5Rq8zge+wfgZctTTL/+QEpE9gsFB5MLtypvoPpShRhk=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/8b/561d24-e921-4ec8-a611-4dc20c5b6268/1/u8o_JdVGILUO-FIGV2NNOwlrrFc.crl
rsync://rpki.ripe.net/repository/DEFAULT/8b/561d24-e921-4ec8-a611-4dc20c5b6268/1/u8o_JdVGILUO-FIGV2NNOwlrrFc.mft
rsync://rpki.ripe.net/repository/DEFAULT/u8o_JdVGILUO-FIGV2NNOwlrrFc.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 28 Apr 2025 16:00:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:79:b2:1b:a2:fb:9c:ae:d1:76:3f:12:38:6a:06:a3:b7
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=bbca3f25d54620b50ef8520657634d3b096bac57
Validity
Not Before: Apr 28 00:00:37 2025 GMT
Not After : Apr 29 00:00:37 2025 GMT
Subject: CN=78927d4eb18503589c1aa7b82f7c1ccf03032408
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b1:8a:8e:cc:70:c3:59:58:5c:5a:22:e1:ae:be:
ac:c8:ac:20:57:75:c2:a6:67:00:45:25:09:81:89:
be:ad:72:53:ee:8a:89:9f:3f:cd:f4:06:4d:6f:80:
fc:25:da:dc:34:42:ce:39:4a:f7:c1:3b:ad:a6:85:
d8:c0:9d:3a:d4:5c:d7:55:ae:e4:fe:bd:05:84:20:
8e:de:b9:6b:f5:55:1d:6c:75:2c:43:16:f5:c3:ee:
5f:86:e0:f6:55:35:a3:ea:79:d6:38:ec:66:7e:3a:
3b:9c:37:d1:e5:99:28:2c:24:f6:9e:5c:7b:24:20:
eb:a1:e6:9f:8c:a3:9c:23:e7:05:54:17:c6:23:e3:
c1:32:34:1e:0f:4d:17:11:d0:aa:d2:b3:ec:d2:05:
3c:40:5a:27:21:24:ec:27:49:03:a3:39:aa:32:05:
74:40:1c:60:69:ab:f9:e2:0a:44:d1:f8:a9:48:c0:
99:79:55:31:aa:f7:a6:cb:f5:02:ae:bb:f1:d5:8f:
aa:b7:74:5b:6a:59:84:d2:35:19:27:76:73:a8:2a:
ed:35:f4:24:6a:ba:5a:72:22:8b:9c:78:0a:fd:e3:
c6:f5:78:74:41:94:62:a7:60:14:0d:61:cc:04:90:
de:0e:d8:a3:72:53:e6:8f:6b:a8:09:57:81:24:6c:
41:f1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
78:92:7D:4E:B1:85:03:58:9C:1A:A7:B8:2F:7C:1C:CF:03:03:24:08
X509v3 Authority Key Identifier:
keyid:BB:CA:3F:25:D5:46:20:B5:0E:F8:52:06:57:63:4D:3B:09:6B:AC:57
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/u8o_JdVGILUO-FIGV2NNOwlrrFc.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/8b/561d24-e921-4ec8-a611-4dc20c5b6268/1/u8o_JdVGILUO-FIGV2NNOwlrrFc.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/8b/561d24-e921-4ec8-a611-4dc20c5b6268/1/u8o_JdVGILUO-FIGV2NNOwlrrFc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
67:09:7d:d3:46:9e:71:47:a0:5c:72:24:12:17:47:90:25:51:
91:05:ca:df:c0:f4:a3:c9:b9:22:87:07:d0:13:35:79:8e:d7:
49:01:6d:0e:56:15:f6:59:98:39:fc:ea:6e:85:d1:74:51:d2:
b4:e6:73:8a:fc:c9:d9:92:3d:49:fe:6f:41:e4:b5:53:14:84:
64:ac:d5:f9:41:b9:40:20:ad:42:46:f0:be:78:f9:9a:34:0a:
e7:3b:82:23:74:f9:08:78:d3:14:c7:48:13:ad:e9:62:c2:0f:
0a:2e:48:cd:15:77:75:3d:da:62:f2:2f:22:c6:d8:d1:7a:00:
be:2d:3a:5b:ce:d2:da:9c:3b:f4:90:04:4f:e5:9c:f9:d6:4b:
bb:93:af:e2:f3:cb:d9:3b:10:08:b8:46:cc:f5:4e:47:ab:46:
b8:ca:da:38:6d:dd:ca:f4:a5:9d:d8:51:7a:08:30:12:39:df:
c1:4c:b5:bb:93:f3:47:fc:30:a2:71:17:29:50:da:26:56:8d:
5b:f1:a9:23:8e:1d:d9:17:1f:c3:29:64:55:a3:1d:f9:72:b6:
c1:08:e3:af:f4:6d:b2:28:13:72:30:cf:d3:25:96:49:30:8d:
94:b3:ef:97:c4:23:f2:01:f1:08:22:97:c4:bf:ee:06:6a:05:
13:d4:78:2f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 28 02:39:11 2025 by rpki-client