Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/86/1b0998-ab81-4cce-8c46-f212666725b4/1/u0oK8VYzLTx-y1hfruOpDZvyoJY.mft
File: u0oK8VYzLTx-y1hfruOpDZvyoJY.mft (raw, json)
Hash identifier: HnO0LEX6tS1JsWzYJp0Q2pvNY6p3Jl2Gt5a6GLxw+fs=
Subject key identifier: 10:16:17:33:AD:C7:D4:EF:85:EE:63:29:2E:AC:EF:03:7D:C5:BC:8F
Authority key identifier: BB:4A:0A:F1:56:33:2D:3C:7E:CB:58:5F:AE:E3:A9:0D:9B:F2:A0:96
Certificate issuer: /CN=bb4a0af156332d3c7ecb585faee3a90d9bf2a096
Certificate serial: 01965D28036ADECDC07ED91B5E03048FB7D5
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/u0oK8VYzLTx-y1hfruOpDZvyoJY.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/86/1b0998-ab81-4cce-8c46-f212666725b4/1/u0oK8VYzLTx-y1hfruOpDZvyoJY.mft
Manifest number: 1221
Signing time: Tue 22 Apr 2025 11:00:25 +0000
Manifest this update: Tue 22 Apr 2025 11:00:25 +0000
Manifest next update: Wed 23 Apr 2025 11:00:25 +0000
Files and hashes: 1: b3ZtzLlxeNLOehH6AKtYdH5OpTQ.roa (hash: KgbQQ56PF7r41MO3Zy3vYzefbru0LRGx/vG1JD/z6f0=)
2: bW9q1xazXYiVEag1HYCLt--dBC0.roa (hash: wNhTvIanJ1l0YImMDQYRtPwse6zs1La1STbUdSSY9lE=)
3: u0oK8VYzLTx-y1hfruOpDZvyoJY.crl (hash: j3x/aYSrqGteBnzyWfjkEvc53yfWJFmA53Q+jy3sD7s=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/86/1b0998-ab81-4cce-8c46-f212666725b4/1/u0oK8VYzLTx-y1hfruOpDZvyoJY.crl
rsync://rpki.ripe.net/repository/DEFAULT/86/1b0998-ab81-4cce-8c46-f212666725b4/1/u0oK8VYzLTx-y1hfruOpDZvyoJY.mft
rsync://rpki.ripe.net/repository/DEFAULT/u0oK8VYzLTx-y1hfruOpDZvyoJY.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 23 Apr 2025 11:00:25 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:5d:28:03:6a:de:cd:c0:7e:d9:1b:5e:03:04:8f:b7:d5
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=bb4a0af156332d3c7ecb585faee3a90d9bf2a096
Validity
Not Before: Apr 22 11:00:25 2025 GMT
Not After : Apr 23 11:00:25 2025 GMT
Subject: CN=10161733adc7d4ef85ee63292eacef037dc5bc8f
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9b:1c:03:05:f4:02:98:a9:be:d7:ae:ff:02:0b:
d4:c8:0d:b1:8b:69:76:1c:c7:98:2f:85:85:dc:31:
33:c5:00:ae:5d:ff:c6:36:40:d5:6d:78:b0:13:a0:
f9:ad:47:92:76:c7:ac:ea:8f:fc:92:ec:ae:70:51:
38:40:60:a5:4c:03:ae:78:ec:1f:c9:6e:de:7d:b6:
9d:da:99:53:06:61:a4:e7:76:dc:03:44:4c:3d:db:
d8:12:85:c3:82:3c:0a:64:e2:5e:ee:4e:ba:89:a4:
48:f0:86:8d:6d:08:64:ec:2a:81:5e:99:78:51:d3:
9a:be:ad:60:d2:ec:d2:c1:00:11:ef:1f:94:ee:d1:
a4:77:84:92:29:cd:d7:69:ee:ca:d0:6b:6c:83:c0:
8b:48:b1:61:cd:a0:a2:f7:78:a4:5b:6f:20:f6:84:
fc:02:c6:d4:2f:86:30:50:0a:13:54:1f:33:ad:f2:
14:d4:29:e3:8a:e9:a8:15:56:56:e3:27:c5:11:f1:
1a:20:80:e1:4f:cc:3a:a8:d2:11:a8:0f:ee:37:fb:
03:f9:af:2d:16:8a:71:01:00:91:2d:a6:2c:8b:14:
e9:51:f5:28:47:91:31:66:f7:4c:3b:31:d3:3a:1b:
07:6b:25:8f:73:8a:e1:ad:97:b6:53:32:02:36:8b:
df:ef
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
10:16:17:33:AD:C7:D4:EF:85:EE:63:29:2E:AC:EF:03:7D:C5:BC:8F
X509v3 Authority Key Identifier:
keyid:BB:4A:0A:F1:56:33:2D:3C:7E:CB:58:5F:AE:E3:A9:0D:9B:F2:A0:96
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/u0oK8VYzLTx-y1hfruOpDZvyoJY.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/86/1b0998-ab81-4cce-8c46-f212666725b4/1/u0oK8VYzLTx-y1hfruOpDZvyoJY.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/86/1b0998-ab81-4cce-8c46-f212666725b4/1/u0oK8VYzLTx-y1hfruOpDZvyoJY.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
69:8d:4b:c8:4e:0b:76:2e:f1:8d:fb:91:a5:52:a6:e6:fb:34:
83:94:cb:15:fa:6e:9c:70:2c:ba:d9:3f:08:3a:b9:a4:12:b2:
58:c2:d6:8e:a1:1a:c2:73:42:22:4e:76:f1:54:91:71:f4:58:
81:11:06:24:a7:24:f3:f2:2b:f3:ba:db:13:6c:e7:1b:b7:2a:
1c:fe:f7:f6:0e:ac:a0:5a:03:13:f0:97:88:3f:62:2b:8a:d7:
7e:37:b1:d3:34:7f:4a:d1:8d:ba:53:fd:ca:a7:eb:8e:b1:e7:
12:a2:08:65:f6:a6:ad:6d:61:b8:13:a6:5b:a0:8a:e7:79:d6:
32:f5:14:df:3d:7e:ad:d9:bd:e7:42:4b:52:0c:9c:af:e9:09:
3b:59:72:bc:b5:6e:a7:6e:76:cd:ce:5b:03:3b:da:14:f6:58:
46:e3:9d:f0:a8:07:cb:7f:5d:b4:80:c3:c3:bd:7e:0e:a7:66:
ea:e0:f4:b3:ce:1f:ba:83:3a:4a:6f:83:42:29:ac:69:e9:26:
f2:9f:2a:94:2f:01:80:12:b1:18:9c:2e:7b:9e:1b:b4:5d:b6:
b1:f3:e8:6e:fb:38:86:89:f6:9a:ac:3d:34:87:8f:c7:6d:9a:
20:e4:4d:01:4d:e2:48:15:f1:5a:b5:37:07:81:f8:23:6c:7c:
f8:8a:e8:2d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Apr 22 18:07:13 2025 by rpki-client