Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/20/cf10db-7582-4553-bf1b-17911594ae51/1/urwezBf2YNW9ieFhZ7nVAxv2oMs.mft
File: urwezBf2YNW9ieFhZ7nVAxv2oMs.mft (raw, json)
Hash identifier: OmKaQWR2X2ddOvq16870nUUHuzuWD7vVabtV6Fs6Xn8=
Subject key identifier: B5:C9:4B:74:BA:FD:A2:AE:B0:A1:31:EF:E9:F7:8C:B3:D6:AB:A7:0E
Authority key identifier: BA:BC:1E:CC:17:F6:60:D5:BD:89:E1:61:67:B9:D5:03:1B:F6:A0:CB
Certificate issuer: /CN=babc1ecc17f660d5bd89e16167b9d5031bf6a0cb
Certificate serial: 0196545C41E606390A8084F87C5BDB170FB1
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/urwezBf2YNW9ieFhZ7nVAxv2oMs.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/20/cf10db-7582-4553-bf1b-17911594ae51/1/urwezBf2YNW9ieFhZ7nVAxv2oMs.mft
Manifest number: 0864
Signing time: Sun 20 Apr 2025 18:00:54 +0000
Manifest this update: Sun 20 Apr 2025 18:00:54 +0000
Manifest next update: Mon 21 Apr 2025 18:00:54 +0000
Files and hashes: 1: 2mA9oJ3ejOWgdJjYgfXkHnMZSOY.roa (hash: rFBnJEg4/3ovWS1Mn/GxMWwNkECurmsywX62nk463FU=)
2: urwezBf2YNW9ieFhZ7nVAxv2oMs.crl (hash: ARW/W5RyxUt8shvXypkRZDrNKxOhrHoZWpy7sbmqMo0=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/20/cf10db-7582-4553-bf1b-17911594ae51/1/urwezBf2YNW9ieFhZ7nVAxv2oMs.crl
rsync://rpki.ripe.net/repository/DEFAULT/20/cf10db-7582-4553-bf1b-17911594ae51/1/urwezBf2YNW9ieFhZ7nVAxv2oMs.mft
rsync://rpki.ripe.net/repository/DEFAULT/urwezBf2YNW9ieFhZ7nVAxv2oMs.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 21 Apr 2025 18:00:54 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:54:5c:41:e6:06:39:0a:80:84:f8:7c:5b:db:17:0f:b1
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=babc1ecc17f660d5bd89e16167b9d5031bf6a0cb
Validity
Not Before: Apr 20 18:00:54 2025 GMT
Not After : Apr 21 18:00:54 2025 GMT
Subject: CN=b5c94b74bafda2aeb0a131efe9f78cb3d6aba70e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d2:f8:7c:c4:c3:a4:8c:04:d7:78:0d:f3:15:27:
a5:fd:52:95:81:79:5d:8d:13:e0:54:65:7d:5a:3a:
a7:d9:98:6c:14:7c:fb:ee:1b:60:5d:38:d3:5e:a9:
32:e0:85:76:31:85:48:58:21:33:e4:41:6a:25:89:
43:26:a4:29:fb:1c:76:f1:3c:09:1e:fa:b5:0f:98:
d5:7e:b7:b8:f7:f6:5a:89:22:ec:49:de:e2:ad:4b:
6a:60:2e:fe:fd:97:bb:24:63:70:1a:0e:e7:ce:d6:
64:b1:3c:40:0a:f4:0a:3e:b3:9b:6c:f0:5f:b2:13:
60:34:3a:b9:61:d9:f1:3f:96:1f:50:8e:bf:93:58:
7b:bb:c4:19:0a:ed:26:d6:ee:a9:6b:11:e7:d0:de:
bb:86:55:a0:72:5e:be:3c:ff:d3:91:30:4e:ff:b1:
33:7f:9a:2f:f2:15:ee:60:d3:27:91:69:a4:19:67:
7c:c4:1b:c5:98:9b:1c:07:00:09:78:80:78:ca:ab:
39:b6:22:96:7c:1a:12:ab:3a:e7:9b:fa:6a:ce:21:
5a:83:55:99:7b:c5:fe:29:c9:95:b5:5f:d2:30:30:
54:bb:d8:72:a7:68:f1:1a:93:45:43:10:d0:97:61:
85:77:a8:a2:18:84:5f:3e:6f:98:03:2a:96:dd:cf:
92:1b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B5:C9:4B:74:BA:FD:A2:AE:B0:A1:31:EF:E9:F7:8C:B3:D6:AB:A7:0E
X509v3 Authority Key Identifier:
keyid:BA:BC:1E:CC:17:F6:60:D5:BD:89:E1:61:67:B9:D5:03:1B:F6:A0:CB
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/urwezBf2YNW9ieFhZ7nVAxv2oMs.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/20/cf10db-7582-4553-bf1b-17911594ae51/1/urwezBf2YNW9ieFhZ7nVAxv2oMs.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/20/cf10db-7582-4553-bf1b-17911594ae51/1/urwezBf2YNW9ieFhZ7nVAxv2oMs.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
1c:b8:03:2f:45:45:44:08:2e:f1:df:7a:70:75:4b:33:14:1b:
ce:48:5d:c9:f0:d2:ab:9d:87:10:0d:39:af:70:b4:94:dd:b4:
89:14:f5:8a:a8:d3:0e:f8:5c:45:16:b2:5d:a9:6f:e8:fd:fa:
29:c1:88:f1:b5:b3:2e:83:ba:e6:60:75:e4:1e:46:84:ca:a7:
89:b8:41:45:06:a1:75:9f:73:78:93:45:2b:a5:20:b7:0e:1b:
71:2c:dd:d8:c9:f5:90:3f:57:6e:22:51:53:60:69:ca:56:07:
e9:b6:93:9c:02:bf:34:86:2a:15:dd:0b:3e:54:e9:5a:f0:a6:
d7:38:71:ad:6b:e2:f2:10:4e:13:23:7b:a4:fc:ac:de:c8:7e:
95:05:72:2f:48:c9:5a:97:19:46:ba:da:f7:82:72:07:bb:3a:
88:ed:b3:6d:c4:87:7d:fc:6a:2b:a5:e3:20:8b:c3:44:f8:fb:
f8:60:af:9d:df:f5:a2:bf:2a:29:90:c6:56:b4:38:26:1e:ef:
83:1e:1d:14:41:0d:22:6f:57:b2:09:ab:b5:df:54:0c:4e:7e:
53:78:40:07:c8:4b:37:e6:84:dc:37:94:d1:e8:f3:e0:72:66:
3e:35:dc:0f:3f:18:f3:9c:cd:6d:89:76:9a:0a:fd:4a:76:5a:
75:c9:2b:1d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 21 04:06:44 2025 by rpki-client