Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e8/75d4fd-90f5-4baa-a35c-87a6333d6e64/1/u-b-FLh1XZ_3Rm-pfEpV9zUYMkk.mft
File: u-b-FLh1XZ_3Rm-pfEpV9zUYMkk.mft (raw, json)
Hash identifier: /P7PGW0AhvSCVJgCsZ7j26a0RsM62wuzd3hPBxZVmN8=
Subject key identifier: C4:52:24:E3:D0:1A:65:9B:30:48:ED:8F:0D:69:0E:45:4F:0E:70:25
Authority key identifier: BB:E6:FE:14:B8:75:5D:9F:F7:46:6F:A9:7C:4A:55:F7:35:18:32:49
Certificate issuer: /CN=bbe6fe14b8755d9ff7466fa97c4a55f735183249
Certificate serial: 019677FAEED803DEB76E1DACD4CA35176C67
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/u-b-FLh1XZ_3Rm-pfEpV9zUYMkk.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/e8/75d4fd-90f5-4baa-a35c-87a6333d6e64/1/u-b-FLh1XZ_3Rm-pfEpV9zUYMkk.mft
Manifest number: 02A0
Signing time: Sun 27 Apr 2025 16:00:55 +0000
Manifest this update: Sun 27 Apr 2025 16:00:55 +0000
Manifest next update: Mon 28 Apr 2025 16:00:55 +0000
Files and hashes: 1: C14DRI-snEsOkMIiNc-U5aBQhaY.roa (hash: 5Ry3pWdioDfi9ncgeY0rIB8W8oudaHMSAsLacYeKQos=)
2: Ug4nXcExKYw0HQJvuRnQRFIifi4.roa (hash: IsLyJr6VvvPjlgsDoJhXlSp7Ms5JrJ3DUw9MD905qA8=)
3: jeMcQRYZ_oYZiw07CtOXr5jFtyU.roa (hash: aHtdDlixj/M+4CUwjHPA7Rj7IL2V/Zp5w9edz80DuFQ=)
4: u-b-FLh1XZ_3Rm-pfEpV9zUYMkk.crl (hash: XaPG44yWmq1b6I5yngRJezOj+cM9UTnjOZ0Dld1CRI0=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/e8/75d4fd-90f5-4baa-a35c-87a6333d6e64/1/u-b-FLh1XZ_3Rm-pfEpV9zUYMkk.crl
rsync://rpki.ripe.net/repository/DEFAULT/e8/75d4fd-90f5-4baa-a35c-87a6333d6e64/1/u-b-FLh1XZ_3Rm-pfEpV9zUYMkk.mft
rsync://rpki.ripe.net/repository/DEFAULT/u-b-FLh1XZ_3Rm-pfEpV9zUYMkk.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 28 Apr 2025 14:00:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:77:fa:ee:d8:03:de:b7:6e:1d:ac:d4:ca:35:17:6c:67
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=bbe6fe14b8755d9ff7466fa97c4a55f735183249
Validity
Not Before: Apr 27 16:00:55 2025 GMT
Not After : Apr 28 16:00:55 2025 GMT
Subject: CN=c45224e3d01a659b3048ed8f0d690e454f0e7025
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ad:06:c3:8e:3c:49:44:b8:2c:c5:ef:e6:24:7f:
46:99:85:51:fa:a1:0f:6b:f4:6f:88:21:12:40:7b:
44:ab:63:1d:ee:83:bc:3d:c4:8b:74:0d:c1:ab:bd:
6b:ce:e2:d0:0b:58:e8:0b:49:7d:4d:12:51:ca:26:
c4:a9:b4:d1:28:e5:47:50:46:43:2c:ca:8f:65:a2:
d1:32:87:fd:ac:22:73:6a:f4:10:05:c6:0c:d5:87:
ff:05:14:ae:bd:dc:d5:18:54:10:97:d5:ae:fb:9c:
44:eb:d9:c8:d5:56:12:5c:ab:7a:99:a7:71:33:1f:
81:de:f8:a3:4f:52:47:aa:9a:30:25:ab:97:32:07:
b3:3f:d8:64:f3:a7:00:db:85:b4:56:42:8e:19:1c:
d5:b1:a5:82:52:6b:81:27:72:8e:77:44:8e:5c:a8:
d3:3f:18:3a:23:4a:b6:71:e8:99:d0:e3:cb:76:b2:
41:fd:fc:59:6e:01:ea:87:f3:5d:42:22:35:b5:ce:
b0:df:98:aa:27:4f:cb:12:b1:7d:6c:13:ce:1a:4d:
d7:88:87:af:80:e5:e6:cf:80:5b:af:c0:05:3c:cd:
c6:0b:73:51:60:2d:eb:0e:26:68:2f:8e:8c:b9:29:
02:9e:24:70:91:24:fc:81:77:75:0d:89:ab:f0:d1:
f2:8b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C4:52:24:E3:D0:1A:65:9B:30:48:ED:8F:0D:69:0E:45:4F:0E:70:25
X509v3 Authority Key Identifier:
keyid:BB:E6:FE:14:B8:75:5D:9F:F7:46:6F:A9:7C:4A:55:F7:35:18:32:49
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/u-b-FLh1XZ_3Rm-pfEpV9zUYMkk.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e8/75d4fd-90f5-4baa-a35c-87a6333d6e64/1/u-b-FLh1XZ_3Rm-pfEpV9zUYMkk.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/e8/75d4fd-90f5-4baa-a35c-87a6333d6e64/1/u-b-FLh1XZ_3Rm-pfEpV9zUYMkk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
29:c6:57:cd:00:7b:e1:26:61:af:8a:c2:e8:19:21:db:9b:a0:
9d:1c:c7:7d:fb:9c:b7:ba:2a:50:cc:23:3c:5d:0b:2f:5f:af:
0b:ce:5e:18:68:c9:1f:74:19:4b:18:a0:8d:c3:a6:12:23:da:
a9:56:79:05:17:04:37:86:e2:c6:7f:03:c3:91:9f:f0:c2:5c:
c8:f3:1a:b9:06:66:e3:b9:18:58:9b:73:c2:1e:b6:84:d3:e6:
48:07:94:17:89:24:43:7c:fd:5c:b9:77:b0:22:64:66:4a:96:
cf:10:7f:a2:1e:0f:5a:4a:ca:3a:ce:89:5b:bf:0b:74:b0:af:
03:7c:2e:ba:90:38:87:71:c1:06:29:44:a3:73:b3:4f:0a:e6:
1b:d0:26:bc:75:95:ae:24:25:78:cf:9b:74:18:df:8c:31:0e:
2e:d1:77:b9:8f:ed:67:68:7b:7b:63:26:d4:8f:88:76:ec:64:
32:d1:70:2a:c0:a1:d1:e4:70:9d:59:df:be:84:1f:1e:32:69:
8e:11:72:8d:d4:65:61:ce:39:d2:8b:b7:e8:7d:c5:f2:a1:5d:
64:e5:e8:3d:6a:94:2d:19:f5:8f:f8:08:a8:ca:6d:ec:ce:3b:
4a:02:24:46:53:08:3f:c0:f2:dc:fb:d9:85:d5:e9:97:c8:c9:
29:48:41:05
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Apr 27 19:45:39 2025 by rpki-client