Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b7/00df29-5022-405e-895d-77ca89cf436a/1/urXl5gHL9dGdENTbR2qSOzs2-Cc.mft
File: urXl5gHL9dGdENTbR2qSOzs2-Cc.mft (raw, json)
Hash identifier: EjYO8NHMbScNN1Q2/40Ijo7bPpf3FAc37mWwLiQwzHo=
Subject key identifier: 2B:00:D9:57:5A:14:F6:B1:EC:79:0F:AE:55:C9:42:79:E4:F8:3F:5F
Authority key identifier: BA:B5:E5:E6:01:CB:F5:D1:9D:10:D4:DB:47:6A:92:3B:3B:36:F8:27
Certificate issuer: /CN=bab5e5e601cbf5d19d10d4db476a923b3b36f827
Certificate serial: 01969DBEC4330F6F5F20A3C67B989884CFA6
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/urXl5gHL9dGdENTbR2qSOzs2-Cc.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/b7/00df29-5022-405e-895d-77ca89cf436a/1/urXl5gHL9dGdENTbR2qSOzs2-Cc.mft
Manifest number: 1525
Signing time: Mon 05 May 2025 00:00:46 +0000
Manifest this update: Mon 05 May 2025 00:00:46 +0000
Manifest next update: Tue 06 May 2025 00:00:46 +0000
Files and hashes: 1: 8n66jbpw-c2Aqy4SU3OEjHIQ8Ng.roa (hash: 5aUols723XY3S6GAB1kKE/l7w8plVtAbUtwN3H30tYU=)
2: urXl5gHL9dGdENTbR2qSOzs2-Cc.crl (hash: /5PUDk4zSiG7332KGXpyOOn/A+Kry0Et8UwAjOy7qgE=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/b7/00df29-5022-405e-895d-77ca89cf436a/1/urXl5gHL9dGdENTbR2qSOzs2-Cc.crl
rsync://rpki.ripe.net/repository/DEFAULT/b7/00df29-5022-405e-895d-77ca89cf436a/1/urXl5gHL9dGdENTbR2qSOzs2-Cc.mft
rsync://rpki.ripe.net/repository/DEFAULT/urXl5gHL9dGdENTbR2qSOzs2-Cc.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 06 May 2025 00:00:46 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:9d:be:c4:33:0f:6f:5f:20:a3:c6:7b:98:98:84:cf:a6
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=bab5e5e601cbf5d19d10d4db476a923b3b36f827
Validity
Not Before: May 5 00:00:46 2025 GMT
Not After : May 6 00:00:46 2025 GMT
Subject: CN=2b00d9575a14f6b1ec790fae55c94279e4f83f5f
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:aa:9f:65:e5:7a:25:9c:0a:3d:65:2b:8c:09:07:
8b:4f:09:7f:0c:1d:06:29:eb:3c:b2:db:d8:c1:38:
6f:8e:a5:e0:c1:bc:3f:b1:5b:bf:79:3d:f0:06:2f:
bf:be:49:cc:e4:b8:2e:7b:e8:6d:62:93:c8:0d:63:
c1:83:2a:6f:3f:c0:fb:69:fb:ed:50:5e:8c:69:32:
6c:32:64:26:bb:eb:46:62:79:c4:b6:da:b0:fa:23:
89:07:38:20:63:79:4d:de:0f:96:a3:ea:f8:91:af:
56:87:09:10:dc:d2:fd:87:aa:7b:38:62:88:82:54:
7e:8f:c4:73:ae:0f:31:73:59:2f:49:3a:d7:d0:d9:
7b:ae:a8:36:e9:93:dc:7f:54:da:38:56:af:76:cd:
84:86:27:85:5e:95:9c:44:d6:de:0f:4b:6b:e1:b5:
62:e6:ba:47:0d:9f:db:2d:c8:20:ea:90:29:cf:cd:
e6:71:8d:ed:01:b9:2f:6e:c8:4c:6c:0f:92:f4:01:
55:50:47:40:c1:ac:91:bc:ee:49:c0:4e:68:51:c3:
50:3c:e0:09:ef:f7:cc:61:3c:fd:5f:94:59:11:1d:
61:cd:79:14:74:c2:87:6c:91:c4:5d:64:82:f7:39:
7f:c8:34:ce:86:b8:3a:3e:b7:9a:cc:c5:a9:3e:0e:
85:4f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
2B:00:D9:57:5A:14:F6:B1:EC:79:0F:AE:55:C9:42:79:E4:F8:3F:5F
X509v3 Authority Key Identifier:
keyid:BA:B5:E5:E6:01:CB:F5:D1:9D:10:D4:DB:47:6A:92:3B:3B:36:F8:27
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/urXl5gHL9dGdENTbR2qSOzs2-Cc.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b7/00df29-5022-405e-895d-77ca89cf436a/1/urXl5gHL9dGdENTbR2qSOzs2-Cc.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/b7/00df29-5022-405e-895d-77ca89cf436a/1/urXl5gHL9dGdENTbR2qSOzs2-Cc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
1a:fd:6b:60:bb:b8:08:0e:fb:60:13:61:3e:8e:19:fb:bb:d2:
c1:58:43:67:c1:13:70:e4:03:c4:ed:4a:06:59:7e:ce:0b:49:
ed:f1:47:dc:2e:8c:6f:a4:df:3c:20:90:b3:15:88:77:5f:4e:
3b:06:d5:f0:2e:36:b9:af:fa:ea:bd:01:47:fd:a8:cf:05:3b:
1f:7e:ac:2b:8d:f4:20:77:6f:74:24:89:63:39:3d:5a:18:98:
d3:bb:f1:3d:25:96:c9:55:ca:54:7a:5e:9c:f3:0b:8a:54:86:
02:c6:a8:b7:09:7a:be:f6:ff:f2:a7:6c:51:e8:fc:34:bb:a4:
0a:26:c7:2f:59:ce:7c:b1:08:fe:a7:b5:f3:5e:7e:5c:e2:4f:
68:05:33:b9:3a:2d:e2:5c:86:d2:70:eb:c3:07:de:02:f8:b6:
ca:93:35:fe:f6:5c:76:04:07:7e:7a:fa:8b:8a:e3:c0:5b:58:
18:20:b9:cb:bd:ed:e4:cb:6e:d6:2c:ce:fc:96:20:2d:1c:87:
f6:7d:c5:5b:8d:5e:50:8c:6e:0a:2e:b2:36:01:a0:a3:fa:67:
2b:90:2c:60:63:0a:a5:47:31:67:a3:2f:b0:84:d0:a5:16:7d:
10:d6:c6:0d:f1:13:86:70:01:00:58:96:bf:2e:67:32:ed:10:
bb:a2:71:24
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon May 5 09:44:39 2025 by rpki-client