Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/84/f2640a-46e7-4650-83c5-cc55b81302cf/1/u76WEtFEC8bHBOBGXw711spzl6Y.mft
File: u76WEtFEC8bHBOBGXw711spzl6Y.mft (raw, json)
Hash identifier: Vhvk3ZXGQUFuwrd/WUCYZ4JnYwh4utIdkF1a541vJfA=
Subject key identifier: 11:97:62:95:E0:A5:A5:C9:E0:01:93:A8:1C:38:48:FB:54:EF:B6:8D
Authority key identifier: BB:BE:96:12:D1:44:0B:C6:C7:04:E0:46:5F:0E:F5:D6:CA:73:97:A6
Certificate issuer: /CN=bbbe9612d1440bc6c704e0465f0ef5d6ca7397a6
Certificate serial: 01965E03DCA38719749BAFC03D488F93E9AA
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/u76WEtFEC8bHBOBGXw711spzl6Y.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/84/f2640a-46e7-4650-83c5-cc55b81302cf/1/u76WEtFEC8bHBOBGXw711spzl6Y.mft
Manifest number: 1502
Signing time: Tue 22 Apr 2025 15:00:33 +0000
Manifest this update: Tue 22 Apr 2025 15:00:33 +0000
Manifest next update: Wed 23 Apr 2025 15:00:33 +0000
Files and hashes: 1: D46VMQb05uTNgl5dbNVDFYzDjzE.roa (hash: V0B6OmfcULHphu50p4sAuyLvveC3GQAGdFvTao1f9Y8=)
2: u76WEtFEC8bHBOBGXw711spzl6Y.crl (hash: xqeIi+wgoyVYgBAED52au+cjnUtd5M7FWb8x3AcyKwI=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/84/f2640a-46e7-4650-83c5-cc55b81302cf/1/u76WEtFEC8bHBOBGXw711spzl6Y.crl
rsync://rpki.ripe.net/repository/DEFAULT/84/f2640a-46e7-4650-83c5-cc55b81302cf/1/u76WEtFEC8bHBOBGXw711spzl6Y.mft
rsync://rpki.ripe.net/repository/DEFAULT/u76WEtFEC8bHBOBGXw711spzl6Y.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 23 Apr 2025 14:46:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:5e:03:dc:a3:87:19:74:9b:af:c0:3d:48:8f:93:e9:aa
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=bbbe9612d1440bc6c704e0465f0ef5d6ca7397a6
Validity
Not Before: Apr 22 15:00:33 2025 GMT
Not After : Apr 23 15:00:33 2025 GMT
Subject: CN=11976295e0a5a5c9e00193a81c3848fb54efb68d
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8e:f0:f3:1c:cb:b9:b6:4b:09:bf:01:1f:3d:73:
37:63:b6:cd:0c:59:6f:90:da:76:40:56:bd:ca:b5:
b8:35:34:7d:6b:3e:7e:f9:ce:ab:7f:5a:02:1e:75:
8a:27:0f:8a:34:cd:db:2d:5e:64:0f:8f:fe:05:d9:
33:88:80:4f:64:57:f2:64:29:e0:63:ad:69:f8:46:
d5:86:c3:85:d5:f2:75:cc:b8:12:44:29:1b:f9:86:
8d:11:a5:9a:a6:36:e2:5a:2c:fd:ab:7b:d0:6a:3d:
ff:18:7c:1c:54:68:0b:fd:91:e3:ce:78:ac:2d:98:
9c:b1:6a:34:e1:87:1e:c1:a3:d8:70:ce:45:22:4a:
da:09:e1:1d:62:9a:c1:3e:7d:b9:4f:34:fe:43:01:
c0:cc:4f:41:9a:36:04:d5:85:16:57:7f:40:c4:d3:
24:87:85:36:6a:91:d5:99:40:70:60:70:2f:bd:76:
e8:67:c1:d3:e8:b6:9c:3c:9a:bf:ee:90:bc:bc:38:
7b:32:0b:d7:88:a0:fc:e1:c2:0a:32:2a:1f:9b:0b:
08:46:57:95:be:49:13:54:55:07:b2:60:e4:ad:dc:
5e:34:34:dc:86:03:fa:ce:a5:a9:3a:9c:95:9b:bf:
c5:fc:9c:7c:25:19:d1:f7:36:a5:16:74:d6:09:54:
4c:2d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
11:97:62:95:E0:A5:A5:C9:E0:01:93:A8:1C:38:48:FB:54:EF:B6:8D
X509v3 Authority Key Identifier:
keyid:BB:BE:96:12:D1:44:0B:C6:C7:04:E0:46:5F:0E:F5:D6:CA:73:97:A6
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/u76WEtFEC8bHBOBGXw711spzl6Y.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/84/f2640a-46e7-4650-83c5-cc55b81302cf/1/u76WEtFEC8bHBOBGXw711spzl6Y.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/84/f2640a-46e7-4650-83c5-cc55b81302cf/1/u76WEtFEC8bHBOBGXw711spzl6Y.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
34:b7:fa:fb:95:d3:c5:1a:35:a2:f2:7d:71:22:bb:88:20:fe:
06:dc:a0:8a:02:49:58:e4:f5:b2:44:c2:bf:95:bf:fb:27:81:
a6:b9:bb:1c:76:fe:f0:f3:7b:f4:ea:5d:2f:d5:f4:66:9a:e4:
8c:1b:a7:14:f1:57:ce:82:30:e3:0f:95:c9:d2:b5:1a:63:0d:
3d:64:0e:73:8e:5c:57:7b:d9:06:64:1d:46:cf:45:f0:49:ab:
82:eb:e4:5b:0d:d6:62:14:8d:65:ba:ff:fd:87:a2:3d:97:09:
bf:47:81:0c:1e:96:24:5e:79:54:6d:f9:ae:8f:57:6d:10:10:
47:6d:9f:4d:f8:fa:05:20:64:fb:c6:ef:5e:f9:02:09:54:ee:
6e:56:29:c4:91:a5:83:af:04:79:54:f0:98:f1:73:f8:d6:59:
9c:d9:9d:d5:ee:dd:3f:e8:b4:fd:fe:c8:16:66:66:9c:bc:06:
ad:8e:76:da:c4:4f:58:ce:99:ee:da:01:9a:7b:7f:c8:18:29:
cf:ad:47:9a:c7:a0:55:e4:f9:ff:b5:92:58:5f:4e:89:8c:f6:
8c:9c:93:98:76:57:f4:0b:ef:ea:b5:64:c6:ce:d3:31:9a:ad:
1b:6a:73:18:c9:48:3d:c8:3a:5a:88:cb:8e:15:38:5d:a9:71:
2f:d8:e3:ba
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Apr 22 19:24:16 2025 by rpki-client