Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e0/ea4e64-6d70-4bfd-909d-f0546cfab061/1/u8JktaZJT4kPoxT2H9fSdYfjWDA.mft
File: u8JktaZJT4kPoxT2H9fSdYfjWDA.mft (raw, json)
Hash identifier: yQ8nKlHq9hkho3+g81x2G/18bg3Y7ajUXfrgp+5Ld1M=
Subject key identifier: 75:E8:4B:E8:25:D7:23:A0:79:3F:E7:DF:AE:FB:3E:C6:52:DB:35:20
Authority key identifier: BB:C2:64:B5:A6:49:4F:89:0F:A3:14:F6:1F:D7:D2:75:87:E3:58:30
Certificate issuer: /CN=bbc264b5a6494f890fa314f61fd7d27587e35830
Certificate serial: 01968B13359C21371DFE8A91E30535E4BC7A
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/u8JktaZJT4kPoxT2H9fSdYfjWDA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/e0/ea4e64-6d70-4bfd-909d-f0546cfab061/1/u8JktaZJT4kPoxT2H9fSdYfjWDA.mft
Manifest number: 151D
Signing time: Thu 01 May 2025 09:00:14 +0000
Manifest this update: Thu 01 May 2025 09:00:14 +0000
Manifest next update: Fri 02 May 2025 09:00:14 +0000
Files and hashes: 1: t4qANnEhvVWnrRLkZS7CKoTPpCQ.roa (hash: dm6ZxXeDx09W/sn7TAuJSwJg3JzyL+0jwWDxaTnORrU=)
2: u8JktaZJT4kPoxT2H9fSdYfjWDA.crl (hash: wMEgsjt+nu30yhfLsw5ZmXcKUYAKSk3FsojBBgJeuzE=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/e0/ea4e64-6d70-4bfd-909d-f0546cfab061/1/u8JktaZJT4kPoxT2H9fSdYfjWDA.crl
rsync://rpki.ripe.net/repository/DEFAULT/e0/ea4e64-6d70-4bfd-909d-f0546cfab061/1/u8JktaZJT4kPoxT2H9fSdYfjWDA.mft
rsync://rpki.ripe.net/repository/DEFAULT/u8JktaZJT4kPoxT2H9fSdYfjWDA.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 02 May 2025 07:00:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:8b:13:35:9c:21:37:1d:fe:8a:91:e3:05:35:e4:bc:7a
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=bbc264b5a6494f890fa314f61fd7d27587e35830
Validity
Not Before: May 1 09:00:14 2025 GMT
Not After : May 2 09:00:14 2025 GMT
Subject: CN=75e84be825d723a0793fe7dfaefb3ec652db3520
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ef:9b:20:4d:66:32:1d:0c:8b:1f:24:a1:c4:7f:
77:d4:08:79:08:18:71:5c:04:07:9f:df:bd:c6:f9:
53:30:36:80:ae:d1:ae:26:4b:1d:d0:1e:1f:f6:a9:
4a:84:4e:b0:2e:34:ec:b3:5b:43:9f:85:68:de:75:
9b:f8:b4:bc:51:8b:c0:02:66:e5:4f:2e:c6:36:ac:
1f:83:73:b5:71:05:b0:d7:12:92:94:a3:c1:4c:f0:
38:47:e9:2b:df:a7:03:2e:f0:75:88:91:4e:7e:31:
06:aa:9a:4e:7f:91:ea:43:22:8f:2e:57:d3:05:00:
cf:ef:7a:cc:9b:59:4c:e8:8a:62:bc:15:0f:16:50:
8e:43:b5:92:5d:3c:b6:01:61:43:7d:82:b1:39:a5:
56:fe:e4:d9:1f:9b:7a:11:72:86:84:c4:b7:2c:99:
6d:1e:59:15:4c:37:60:25:fc:5f:dc:7e:45:55:aa:
7e:4d:fa:91:22:b1:55:13:75:cc:b6:d2:e0:12:86:
3b:94:38:b3:b6:8e:31:79:cb:2b:61:48:e8:34:64:
42:c2:af:d1:83:49:cf:ea:62:78:60:a6:c1:3e:50:
de:c3:68:16:c4:01:63:b0:82:30:16:a7:7b:fe:e1:
1e:79:ad:66:35:37:68:70:c6:7e:3f:a1:90:e4:3f:
37:f9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
75:E8:4B:E8:25:D7:23:A0:79:3F:E7:DF:AE:FB:3E:C6:52:DB:35:20
X509v3 Authority Key Identifier:
keyid:BB:C2:64:B5:A6:49:4F:89:0F:A3:14:F6:1F:D7:D2:75:87:E3:58:30
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/u8JktaZJT4kPoxT2H9fSdYfjWDA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e0/ea4e64-6d70-4bfd-909d-f0546cfab061/1/u8JktaZJT4kPoxT2H9fSdYfjWDA.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/e0/ea4e64-6d70-4bfd-909d-f0546cfab061/1/u8JktaZJT4kPoxT2H9fSdYfjWDA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
3a:03:df:84:c0:87:03:55:79:b2:01:79:25:d7:db:ae:80:76:
71:38:4f:98:c9:7d:c7:88:e1:e8:eb:06:a3:50:1a:0c:87:41:
9a:d6:d4:55:92:a2:37:1b:7e:20:db:6d:65:bf:48:62:3e:fe:
c7:8d:c4:64:d8:cb:d2:f6:60:16:36:5e:3d:67:5c:fc:c8:3d:
c1:d1:41:10:c9:b7:2c:cb:f2:7f:88:e4:ac:95:c9:af:d8:ba:
0d:e3:15:40:45:46:58:c4:67:46:fc:03:c0:71:4a:0f:94:84:
59:08:e0:61:d3:f9:8c:c8:6b:96:84:53:7e:27:ce:fd:04:4a:
d2:5c:fb:19:f0:11:a6:a9:c6:b5:c7:ec:71:b7:92:62:5a:07:
e6:e5:8e:1e:e3:cf:5f:2a:fe:28:94:c2:51:3b:48:8a:08:4f:
2e:07:6d:02:df:b3:2e:93:f0:76:d1:36:4c:65:81:e2:2d:5b:
a5:ec:27:2d:5b:59:48:3e:24:63:f5:a0:95:79:35:50:83:8b:
89:9c:0e:84:4b:09:53:71:bb:8e:54:26:cb:75:83:dc:2d:77:
48:49:1e:a0:df:06:64:a1:fa:aa:0c:45:1e:d4:d8:47:73:09:
f0:b9:cc:6d:37:f4:e1:ac:36:1c:54:a9:09:33:78:8c:34:8d:
77:c2:65:75
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZaLEzWcITcd/oqR4wU15Lx6MA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGJiYzI2NGI1YTY0OTRmODkwZmEzMTRmNjFmZDdkMjc1ODdl
MzU4MzAwHhcNMjUwNTAxMDkwMDE0WhcNMjUwNTAyMDkwMDE0WjAzMTEwLwYDVQQD
Eyg3NWU4NGJlODI1ZDcyM2EwNzkzZmU3ZGZhZWZiM2VjNjUyZGIzNTIwMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA75sgTWYyHQyLHyShxH931Ah5CBhx
XAQHn9+9xvlTMDaArtGuJksd0B4f9qlKhE6wLjTss1tDn4Vo3nWb+LS8UYvAAmbl
Ty7GNqwfg3O1cQWw1xKSlKPBTPA4R+kr36cDLvB1iJFOfjEGqppOf5HqQyKPLlfT
BQDP73rMm1lM6IpivBUPFlCOQ7WSXTy2AWFDfYKxOaVW/uTZH5t6EXKGhMS3LJlt
HlkVTDdgJfxf3H5FVap+TfqRIrFVE3XMttLgEoY7lDizto4xecsrYUjoNGRCwq/R
g0nP6mJ4YKbBPlDew2gWxAFjsIIwFqd7/uEeea1mNTdocMZ+P6GQ5D83+QIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFHXoS+gl1yOgeT/n3677PsZS2zUgMB8GA1UdIwQY
MBaAFLvCZLWmSU+JD6MU9h/X0nWH41gwMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvdThKa3RhWkpUNGtQb3hUMkg5ZlNkWWZqV0RBLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9lMC9lYTRlNjQtNmQ3MC00YmZkLTkwOWQt
ZjA1NDZjZmFiMDYxLzEvdThKa3RhWkpUNGtQb3hUMkg5ZlNkWWZqV0RBLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9lMC9lYTRlNjQtNmQ3MC00YmZkLTkwOWQtZjA1NDZjZmFiMDYx
LzEvdThKa3RhWkpUNGtQb3hUMkg5ZlNkWWZqV0RBLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAOgPfhMCH
A1V5sgF5JdfbroB2cThPmMl9x4jh6OsGo1AaDIdBmtbUVZKiNxt+INttZb9IYj7+
x43EZNjL0vZgFjZePWdc/Mg9wdFBEMm3LMvyf4jkrJXJr9i6DeMVQEVGWMRnRvwD
wHFKD5SEWQjgYdP5jMhrloRTfifO/QRK0lz7GfARpqnGtcfscbeSYloH5uWOHuPP
Xyr+KJTCUTtIighPLgdtAt+zLpPwdtE2TGWB4i1bpewnLVtZSD4kY/WglXk1UIOL
iZwOhEsJU3G7jlQmy3WD3C13SEkeoN8GZKH6qgxFHtTYR3MJ8LnMbTf04aw2HFSp
CTN4jDSNd8JldQ==
-----END CERTIFICATE-----
Generated at Thu May 1 11:10:26 2025 by rpki-client