Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/92/0ca59b-32d1-46a2-be48-0c33e1264d7f/1/u5NpM9w6oDs9qgbls4c_Nb2rVdI.mft
File: u5NpM9w6oDs9qgbls4c_Nb2rVdI.mft (raw, json)
Hash identifier: PWfqscfD4ykAso/N7Lg8bk07VAQ24bQ7Cgf5Xo3FjaM=
Subject key identifier: 5F:E7:8B:B4:8A:91:19:35:53:BE:0E:E8:A4:58:40:4A:4C:38:C6:4C
Authority key identifier: BB:93:69:33:DC:3A:A0:3B:3D:AA:06:E5:B3:87:3F:35:BD:AB:55:D2
Certificate issuer: /CN=bb936933dc3aa03b3daa06e5b3873f35bdab55d2
Certificate serial: 0196771EED327C1DEFA8C3DBFCC7C362F3C8
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/u5NpM9w6oDs9qgbls4c_Nb2rVdI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/92/0ca59b-32d1-46a2-be48-0c33e1264d7f/1/u5NpM9w6oDs9qgbls4c_Nb2rVdI.mft
Manifest number: 02EA
Signing time: Sun 27 Apr 2025 12:00:37 +0000
Manifest this update: Sun 27 Apr 2025 12:00:37 +0000
Manifest next update: Mon 28 Apr 2025 12:00:37 +0000
Files and hashes: 1: 1-d2k_vU-BkEDRcLdH-TIekg9VxQ.roa (hash: BNmjLGfRynwPkim2jPmJ7ZmYJ2M4K6NMjQ6A9ZIWsHE=)
2: u5NpM9w6oDs9qgbls4c_Nb2rVdI.crl (hash: QXzkc5Md4e4kT3wcSPrZKDTNP4oU1xKmMEdnVej/aiU=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/92/0ca59b-32d1-46a2-be48-0c33e1264d7f/1/u5NpM9w6oDs9qgbls4c_Nb2rVdI.crl
rsync://rpki.ripe.net/repository/DEFAULT/92/0ca59b-32d1-46a2-be48-0c33e1264d7f/1/u5NpM9w6oDs9qgbls4c_Nb2rVdI.mft
rsync://rpki.ripe.net/repository/DEFAULT/u5NpM9w6oDs9qgbls4c_Nb2rVdI.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 28 Apr 2025 12:00:37 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:77:1e:ed:32:7c:1d:ef:a8:c3:db:fc:c7:c3:62:f3:c8
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=bb936933dc3aa03b3daa06e5b3873f35bdab55d2
Validity
Not Before: Apr 27 12:00:37 2025 GMT
Not After : Apr 28 12:00:37 2025 GMT
Subject: CN=5fe78bb48a91193553be0ee8a458404a4c38c64c
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b9:ea:45:b8:49:71:aa:c5:80:3f:aa:a8:fc:65:
70:6d:77:4c:50:e2:45:8a:c4:b4:1c:ce:47:65:2c:
7f:2e:f4:01:1c:0b:d2:7c:c1:9e:e7:d3:27:1b:fb:
d3:e9:e5:8d:c1:09:e5:e0:64:b6:aa:fd:28:8a:5c:
16:dd:af:72:64:ab:98:2b:63:e7:ee:ce:90:f4:bf:
16:a9:d8:2d:33:05:f6:32:b6:78:f4:f2:ab:81:79:
29:f9:24:34:09:17:a6:a0:00:88:c5:de:8a:71:41:
41:61:20:22:87:d6:be:c9:3b:b6:c6:c6:fe:09:de:
5f:88:1b:9a:99:eb:65:f3:5a:c4:dc:0e:37:85:c0:
fd:e9:66:c2:3d:c9:71:4b:81:62:9f:2c:ed:68:15:
41:ad:18:03:78:1d:fb:52:e9:42:fe:90:a1:2d:53:
cd:06:93:61:56:4b:fd:6d:88:71:c7:c1:32:5c:cd:
12:a4:57:5b:0d:c6:3f:18:56:35:20:d6:ad:11:4e:
60:01:b1:b9:da:0b:b5:55:67:dd:67:d8:2b:96:f8:
92:52:08:45:10:1f:1d:72:de:be:d3:27:28:3e:6b:
d2:7d:54:ae:8c:2b:ca:f7:e8:52:cb:c7:72:41:9d:
6b:8b:f9:7a:6c:19:64:09:7c:d1:09:d5:b9:f4:bb:
1f:03
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
5F:E7:8B:B4:8A:91:19:35:53:BE:0E:E8:A4:58:40:4A:4C:38:C6:4C
X509v3 Authority Key Identifier:
keyid:BB:93:69:33:DC:3A:A0:3B:3D:AA:06:E5:B3:87:3F:35:BD:AB:55:D2
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/u5NpM9w6oDs9qgbls4c_Nb2rVdI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/92/0ca59b-32d1-46a2-be48-0c33e1264d7f/1/u5NpM9w6oDs9qgbls4c_Nb2rVdI.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/92/0ca59b-32d1-46a2-be48-0c33e1264d7f/1/u5NpM9w6oDs9qgbls4c_Nb2rVdI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
27:d4:1a:4e:1f:28:c7:5e:02:a6:c0:d2:23:c8:6f:a7:96:10:
f1:f7:e5:ed:11:36:35:0e:c3:81:19:9a:ed:b2:a9:ca:53:01:
f1:64:9c:7b:17:1f:cd:f6:92:c4:96:ba:b0:52:56:78:a4:4f:
2b:54:64:19:42:1e:33:f9:a0:07:8a:f1:4d:0c:a3:b0:0f:60:
39:59:42:a8:8a:b1:9b:cc:34:f4:ed:d6:ba:1a:ec:6a:e0:cf:
45:14:41:88:90:a2:76:94:53:d2:b8:ee:c0:c7:dc:73:9c:9d:
13:cd:96:cd:6c:e0:db:20:3b:7f:41:f3:7b:bb:5a:ed:de:5e:
e8:1d:a6:be:4c:f5:6b:1d:f8:ea:7e:0e:33:c0:41:24:63:a7:
f1:45:0b:bc:c3:e0:03:ab:19:69:5c:f5:e8:37:71:85:25:0a:
99:45:37:ae:6b:6d:aa:7d:56:e0:0a:2f:3d:c0:38:4d:20:76:
ef:e5:09:46:43:42:d6:90:2f:d3:f8:e2:d3:91:f1:fb:d5:d6:
ab:a7:cc:05:94:2d:bc:ff:9e:6b:4c:9b:22:18:7d:4c:a3:39:
c1:5b:92:ae:46:e6:31:ff:48:81:84:d4:96:c6:a8:67:27:97:
47:76:41:53:80:c5:85:f3:5d:e9:6f:6b:36:e4:0a:05:4d:21:
0a:a6:4a:cc
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Apr 27 20:19:49 2025 by rpki-client