Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/db/b9dab8-d084-4b73-99b2-ee5b5168bf2f/1/u7qOzNl-lhif9uM88RCmyaR3RZw.mft
File: u7qOzNl-lhif9uM88RCmyaR3RZw.mft (raw, json)
Hash identifier: PErQQb4TApQwhqxvIP659QWd/IC2bM8/x5Skh1JVE2Q=
Subject key identifier: 5A:7C:2C:6B:41:E7:02:F0:1B:62:C0:14:C6:35:EA:B3:5B:94:59:52
Authority key identifier: BB:BA:8E:CC:D9:7E:96:18:9F:F6:E3:3C:F1:10:A6:C9:A4:77:45:9C
Certificate issuer: /CN=bbba8eccd97e96189ff6e33cf110a6c9a477459c
Certificate serial: 01968CCADC81B378F69C11057A9AC2CEA2E0
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/u7qOzNl-lhif9uM88RCmyaR3RZw.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/db/b9dab8-d084-4b73-99b2-ee5b5168bf2f/1/u7qOzNl-lhif9uM88RCmyaR3RZw.mft
Manifest number: 109C
Signing time: Thu 01 May 2025 17:00:27 +0000
Manifest this update: Thu 01 May 2025 17:00:27 +0000
Manifest next update: Fri 02 May 2025 17:00:27 +0000
Files and hashes: 1: HxTfLakaEJ_LVNn3ZqoJElNbHoQ.roa (hash: tPr0Odj47LnuFpxE16P/cF19VVsL1tXW82ffakF0EeE=)
2: u7qOzNl-lhif9uM88RCmyaR3RZw.crl (hash: 0hinXQIqFkiMPEi2b5kwBvIVdkhv5C2dqTklBI62m3c=)
3: x74EOmKncD9l8_LhQCmRyXpIz94.roa (hash: XUKb+7lZadJCXvjC4Jazh1w2/bHedabOWN8tK0nZBp8=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/db/b9dab8-d084-4b73-99b2-ee5b5168bf2f/1/u7qOzNl-lhif9uM88RCmyaR3RZw.crl
rsync://rpki.ripe.net/repository/DEFAULT/db/b9dab8-d084-4b73-99b2-ee5b5168bf2f/1/u7qOzNl-lhif9uM88RCmyaR3RZw.mft
rsync://rpki.ripe.net/repository/DEFAULT/u7qOzNl-lhif9uM88RCmyaR3RZw.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 02 May 2025 16:00:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:8c:ca:dc:81:b3:78:f6:9c:11:05:7a:9a:c2:ce:a2:e0
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=bbba8eccd97e96189ff6e33cf110a6c9a477459c
Validity
Not Before: May 1 17:00:27 2025 GMT
Not After : May 2 17:00:27 2025 GMT
Subject: CN=5a7c2c6b41e702f01b62c014c635eab35b945952
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:97:47:07:b1:67:67:af:45:25:93:d1:cf:0f:d0:
34:13:0f:c4:5a:24:12:6e:8c:48:3e:67:43:1c:e9:
36:98:c9:bb:71:14:68:cb:76:50:da:43:b2:13:f8:
b1:58:28:81:e7:23:a7:46:e3:0a:e2:ca:02:a9:ee:
09:9c:2c:1f:84:7d:10:ac:94:7d:b1:84:07:b6:fc:
40:ca:02:7f:bd:a9:a5:1b:f5:21:9b:97:34:0d:8f:
59:35:35:c2:63:7c:c4:69:96:76:8d:cd:37:32:be:
f9:29:71:42:66:6d:9d:f9:a5:40:48:09:61:18:23:
de:9d:73:6a:3c:55:e0:8f:ae:ba:65:05:da:4b:09:
14:bd:74:ff:51:4e:23:70:b4:4c:07:05:9e:30:6a:
a3:5e:29:af:2d:a0:19:28:ee:0a:5b:db:89:70:92:
77:4c:ab:b4:89:9f:d1:99:93:40:09:4a:7c:a6:84:
fb:45:6b:fa:73:5c:ca:ce:2f:6c:0a:25:9b:d2:29:
53:82:9a:12:19:83:d1:b9:56:2d:25:17:9d:7a:f9:
51:b9:c9:f4:25:da:f2:d9:05:03:b4:66:49:b0:6a:
c3:6b:9b:d3:8f:ca:0b:3a:7c:5e:73:10:e4:98:9c:
9e:cc:bc:e2:4c:83:f7:64:d9:97:b7:a7:7c:6d:a9:
05:11
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
5A:7C:2C:6B:41:E7:02:F0:1B:62:C0:14:C6:35:EA:B3:5B:94:59:52
X509v3 Authority Key Identifier:
keyid:BB:BA:8E:CC:D9:7E:96:18:9F:F6:E3:3C:F1:10:A6:C9:A4:77:45:9C
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/u7qOzNl-lhif9uM88RCmyaR3RZw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/db/b9dab8-d084-4b73-99b2-ee5b5168bf2f/1/u7qOzNl-lhif9uM88RCmyaR3RZw.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/db/b9dab8-d084-4b73-99b2-ee5b5168bf2f/1/u7qOzNl-lhif9uM88RCmyaR3RZw.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
9f:92:74:9c:95:8d:39:b7:8e:4f:84:4b:51:7e:78:72:c2:a1:
0d:b6:3b:d3:d3:ba:4c:b5:cf:af:86:4e:48:38:22:a5:5b:da:
97:80:61:3d:61:d9:5f:b3:8f:89:94:ea:15:08:bd:5e:ae:49:
ae:ac:52:2d:3e:5c:16:32:59:b1:fe:29:ba:4d:db:03:67:14:
f1:aa:e4:a7:9c:73:09:eb:58:8d:4d:ea:e4:2b:1c:1c:42:26:
36:7e:a5:52:c9:84:31:41:dd:b3:b5:f0:d7:fd:74:94:8f:5d:
fc:9d:b5:92:ec:c5:2b:a9:48:df:13:d2:a5:d7:d8:42:ea:23:
9a:c4:5a:1f:d4:ef:b9:3d:6c:6a:43:dc:e5:57:bc:84:85:c0:
c2:e9:0b:46:9e:32:8b:60:a4:68:a4:b8:3e:10:04:8f:09:f6:
98:ef:78:04:32:ca:6a:7c:ad:fd:84:c0:a7:16:da:b5:3a:6c:
e7:a1:d1:58:e0:65:7c:d1:ff:e8:82:f1:85:dc:3e:9b:0a:bc:
e6:20:5e:e7:06:50:89:bb:42:ff:70:9a:d9:53:57:e3:b7:a2:
3e:44:78:55:70:bc:39:af:91:8c:13:2c:e9:50:f6:43:69:47:
39:19:e6:97:b2:da:b5:2c:55:35:c7:7e:05:c5:b1:88:b7:13:
74:e6:f2:e9
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu May 1 21:35:49 2025 by rpki-client