Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/a0/12c66d-ac63-43fc-8894-ab087f43b595/1/u4rmO3V9oa95DyD1nGNIEe7rG8w.mft
File: u4rmO3V9oa95DyD1nGNIEe7rG8w.mft (raw, json)
Hash identifier: PKqUG7enx6GwyLJMxAh0O7520UEGt+CIsmE0BkaxhSo=
Subject key identifier: E0:13:34:3E:25:8F:69:DE:DA:34:CF:10:AA:E5:B3:B8:56:24:46:C3
Authority key identifier: BB:8A:E6:3B:75:7D:A1:AF:79:0F:20:F5:9C:63:48:11:EE:EB:1B:CC
Certificate issuer: /CN=bb8ae63b757da1af790f20f59c634811eeeb1bcc
Certificate serial: 019679B219A32C3A20D140226536BA031765
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/u4rmO3V9oa95DyD1nGNIEe7rG8w.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/a0/12c66d-ac63-43fc-8894-ab087f43b595/1/u4rmO3V9oa95DyD1nGNIEe7rG8w.mft
Manifest number: 09B2
Signing time: Mon 28 Apr 2025 00:00:37 +0000
Manifest this update: Mon 28 Apr 2025 00:00:37 +0000
Manifest next update: Tue 29 Apr 2025 00:00:37 +0000
Files and hashes: 1: DIYIrtOVCh0oZUgoHnsBzDVYRgk.roa (hash: 9ygbw2KxTYEdLBVrIZpBTqLv2Fu0lBk+DuBHrlgf8dM=)
2: u4rmO3V9oa95DyD1nGNIEe7rG8w.crl (hash: oxvvyvnPqlh5MnY2AiBg6TZMNoXUjBCtMxTRbRm9CuY=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/a0/12c66d-ac63-43fc-8894-ab087f43b595/1/u4rmO3V9oa95DyD1nGNIEe7rG8w.crl
rsync://rpki.ripe.net/repository/DEFAULT/a0/12c66d-ac63-43fc-8894-ab087f43b595/1/u4rmO3V9oa95DyD1nGNIEe7rG8w.mft
rsync://rpki.ripe.net/repository/DEFAULT/u4rmO3V9oa95DyD1nGNIEe7rG8w.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 28 Apr 2025 23:00:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:79:b2:19:a3:2c:3a:20:d1:40:22:65:36:ba:03:17:65
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=bb8ae63b757da1af790f20f59c634811eeeb1bcc
Validity
Not Before: Apr 28 00:00:37 2025 GMT
Not After : Apr 29 00:00:37 2025 GMT
Subject: CN=e013343e258f69deda34cf10aae5b3b8562446c3
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d2:45:01:88:17:ad:da:a4:a1:58:81:ba:80:99:
95:78:c4:c2:2b:f5:34:1b:e1:85:db:f2:85:9b:6b:
ca:b4:17:1c:e7:92:52:06:97:00:be:a1:89:6e:71:
84:37:f8:29:e6:f0:11:67:80:8c:6d:ab:d7:8d:7c:
ee:fa:43:40:8c:a7:5c:cc:e6:2c:1e:5a:23:21:d3:
45:a0:5e:f7:76:74:d2:ca:75:a3:49:b3:a8:64:c9:
77:e0:d1:db:a5:d7:da:7d:a9:50:56:12:76:ef:1a:
9a:8d:5c:64:6b:d3:66:2f:d0:f8:97:f3:77:9f:c3:
63:e0:fd:76:85:65:78:a8:f8:58:20:9c:04:47:cd:
23:8d:b1:28:bc:b0:76:02:b3:65:e1:12:90:30:72:
b8:4b:bd:35:db:84:7d:f6:4f:35:b5:02:c0:ab:7a:
dc:8a:48:d8:d4:ae:e3:00:cd:bd:f6:cb:8a:f5:82:
d5:3b:ce:c4:1e:80:7d:95:ac:9f:0d:db:29:9d:e1:
b1:5d:50:fa:23:23:ce:d0:45:d7:b4:15:0e:97:01:
f9:ad:71:00:79:f7:05:d5:b3:ac:97:26:dd:97:98:
b5:7b:54:bc:50:98:c2:80:bd:ff:33:41:7f:b1:5f:
1d:62:e6:51:af:94:8e:a5:89:aa:a9:25:8c:f7:7a:
48:5d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E0:13:34:3E:25:8F:69:DE:DA:34:CF:10:AA:E5:B3:B8:56:24:46:C3
X509v3 Authority Key Identifier:
keyid:BB:8A:E6:3B:75:7D:A1:AF:79:0F:20:F5:9C:63:48:11:EE:EB:1B:CC
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/u4rmO3V9oa95DyD1nGNIEe7rG8w.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a0/12c66d-ac63-43fc-8894-ab087f43b595/1/u4rmO3V9oa95DyD1nGNIEe7rG8w.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/a0/12c66d-ac63-43fc-8894-ab087f43b595/1/u4rmO3V9oa95DyD1nGNIEe7rG8w.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
2d:7d:3c:66:a0:ab:b2:f7:9a:69:23:7c:14:b6:c4:0c:08:77:
00:8d:4d:8f:e2:98:63:bc:a5:2a:e6:72:0f:f7:1f:a1:a7:20:
e1:10:f7:9d:5a:fe:9a:4a:65:49:f3:6c:c8:37:4a:8a:ac:3c:
97:a6:4f:f4:98:33:3d:28:16:cb:42:25:45:c5:64:f3:60:5b:
31:26:47:4a:c3:f4:8b:b3:b4:d8:60:e6:3f:ad:d0:09:5c:24:
f5:69:1b:4f:21:ba:1b:64:6b:48:41:8c:ad:e4:d9:83:f7:da:
46:c3:07:8b:24:db:01:9f:0f:ef:a0:38:0b:dc:c5:38:fc:56:
ae:d4:b4:db:8b:cf:ab:91:72:42:e6:91:fd:35:ca:9e:1d:d3:
02:f3:2e:c7:a9:a7:de:46:48:a8:6b:9c:21:7a:c6:67:04:8a:
4e:b2:0c:64:80:f6:ea:d9:29:82:b6:0a:b3:7a:29:39:c7:6b:
1a:9d:ad:a1:93:31:a1:cc:a0:1d:41:d0:fe:35:70:32:82:b1:
26:3a:66:bd:95:2b:e6:04:c5:e4:b2:48:6f:5b:ea:08:25:ae:
74:45:05:48:e9:df:79:88:18:f4:a3:94:35:c5:ce:0d:1c:76:
f7:dd:45:34:be:3a:7e:e8:9f:12:39:00:19:54:bf:eb:05:22:
a1:7c:40:91
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 28 06:10:46 2025 by rpki-client