Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f3/d68a35-b191-4197-ab78-f4c93601c859/1/unuTQCuSGNf2ErT5YmJwpxrmvi0.mft
File: unuTQCuSGNf2ErT5YmJwpxrmvi0.mft (raw, json)
Hash identifier: MTO2tz5hDxoy8jYN+7E5mnQQ7hIFwVjed+TZswq7G60=
Subject key identifier: CB:B9:D5:08:63:A0:5E:26:2C:5B:6B:C9:25:C4:67:68:30:C1:5E:93
Authority key identifier: BA:7B:93:40:2B:92:18:D7:F6:12:B4:F9:62:62:70:A7:1A:E6:BE:2D
Certificate issuer: /CN=ba7b93402b9218d7f612b4f9626270a71ae6be2d
Certificate serial: 019677FA85211ACF8BAD6C5BFBC0FBBC81D6
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/unuTQCuSGNf2ErT5YmJwpxrmvi0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/f3/d68a35-b191-4197-ab78-f4c93601c859/1/unuTQCuSGNf2ErT5YmJwpxrmvi0.mft
Manifest number: 1519
Signing time: Sun 27 Apr 2025 16:00:28 +0000
Manifest this update: Sun 27 Apr 2025 16:00:28 +0000
Manifest next update: Mon 28 Apr 2025 16:00:28 +0000
Files and hashes: 1: unuTQCuSGNf2ErT5YmJwpxrmvi0.crl (hash: Z8DJl0U2x0Hfj2QAHvkcbH367nNC1NCaSlugRDhdE20=)
2: vU-75r0gInbOCnxxQxxUry9G0nQ.roa (hash: AiFvk2ANcPHqNEPfHYWxiUIKCo2C9zQXm47cQDdAzO0=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/f3/d68a35-b191-4197-ab78-f4c93601c859/1/unuTQCuSGNf2ErT5YmJwpxrmvi0.crl
rsync://rpki.ripe.net/repository/DEFAULT/f3/d68a35-b191-4197-ab78-f4c93601c859/1/unuTQCuSGNf2ErT5YmJwpxrmvi0.mft
rsync://rpki.ripe.net/repository/DEFAULT/unuTQCuSGNf2ErT5YmJwpxrmvi0.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 28 Apr 2025 14:00:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:77:fa:85:21:1a:cf:8b:ad:6c:5b:fb:c0:fb:bc:81:d6
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=ba7b93402b9218d7f612b4f9626270a71ae6be2d
Validity
Not Before: Apr 27 16:00:28 2025 GMT
Not After : Apr 28 16:00:28 2025 GMT
Subject: CN=cbb9d50863a05e262c5b6bc925c4676830c15e93
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ac:31:66:0e:5f:c9:6f:29:21:b6:56:2e:5f:14:
18:54:16:18:e4:3b:d1:42:95:8f:06:fe:10:42:bc:
9e:eb:d3:44:a4:e5:66:19:e0:50:c7:8e:77:c2:b4:
b9:76:c3:b0:2f:e2:52:a6:42:c0:2b:bf:0a:89:ac:
39:69:a1:39:c7:cf:e4:44:bb:79:c4:00:ad:5a:55:
46:b0:a2:fe:77:6b:11:1d:f0:e1:a1:39:86:f9:17:
f2:31:27:b2:d4:0c:4a:ec:20:e9:33:ae:05:f4:67:
79:29:7a:c8:3e:06:41:d3:7d:d3:fa:f7:eb:61:1a:
44:6f:04:b5:45:4e:2d:57:0b:3e:d2:9b:a6:91:d6:
9a:83:24:0e:23:c5:04:e9:ad:4f:15:d5:6b:dc:28:
05:94:a1:e3:b0:8b:c3:fe:c0:66:56:6a:2b:fe:e4:
2c:14:b9:d7:94:58:5e:7d:b2:c7:33:13:2b:26:f8:
ba:6a:0c:90:bf:ef:57:48:74:a1:52:93:52:33:fc:
66:ff:be:fc:2e:3b:ac:df:5a:c7:d2:84:ad:a5:62:
19:48:95:04:1d:e9:f1:2d:a6:8c:0f:c4:9d:4a:9f:
74:31:c7:1a:08:e7:09:61:c6:77:41:5c:0c:6b:a8:
12:88:d8:13:9a:6b:cd:40:ac:52:56:d8:87:ca:30:
b9:21
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
CB:B9:D5:08:63:A0:5E:26:2C:5B:6B:C9:25:C4:67:68:30:C1:5E:93
X509v3 Authority Key Identifier:
keyid:BA:7B:93:40:2B:92:18:D7:F6:12:B4:F9:62:62:70:A7:1A:E6:BE:2D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/unuTQCuSGNf2ErT5YmJwpxrmvi0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f3/d68a35-b191-4197-ab78-f4c93601c859/1/unuTQCuSGNf2ErT5YmJwpxrmvi0.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/f3/d68a35-b191-4197-ab78-f4c93601c859/1/unuTQCuSGNf2ErT5YmJwpxrmvi0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
41:ad:3f:e5:57:84:bb:a8:fd:45:ef:28:0b:45:48:b7:29:13:
c5:da:1e:d1:a7:01:04:8f:f0:3b:eb:f8:f7:d5:22:a2:42:0d:
38:4c:13:4e:1a:41:39:cb:cd:18:b6:72:64:a6:a3:5d:c6:b5:
b3:e5:77:a1:1c:ed:f5:58:56:9b:d5:46:c5:68:a1:f1:49:2d:
1f:44:e2:4e:e1:b2:59:c2:98:07:36:3d:52:3e:76:85:21:ef:
4b:48:ab:c5:c4:48:54:bd:14:08:07:2a:f5:97:a0:c8:03:74:
a0:a7:e3:7d:12:b5:12:3c:89:fe:59:d8:9c:b7:38:13:e0:8a:
a3:21:ed:d2:87:6f:f3:45:7b:4e:17:5d:e9:f3:d5:b3:c7:38:
8e:2d:93:96:dd:70:16:2a:5c:f8:d4:d6:61:44:b5:8a:fd:43:
58:bb:84:f1:2d:7e:6a:aa:6b:05:b8:ce:c6:da:75:c1:8b:56:
8f:23:6f:70:68:40:9b:22:b8:bf:c1:9e:b2:fa:42:f6:ee:f1:
12:c6:ed:15:68:63:00:45:7a:3d:dc:72:c5:83:31:a3:31:c7:
54:98:bb:81:cc:ab:d4:47:78:78:f4:c8:ae:58:2d:af:63:6b:
50:b1:f0:9f:51:40:75:ec:60:f7:8b:83:99:f2:54:76:c1:5f:
e4:cf:5d:08
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Apr 27 18:31:16 2025 by rpki-client