Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/a4/4b2c23-f535-4b6d-a445-e04dac61ce9d/1/to-UDxzFd_Nw8oQohQ3Hv3QY8SE.mft
File: to-UDxzFd_Nw8oQohQ3Hv3QY8SE.mft (raw, json)
Hash identifier: 2pUYlXunhUGfOS0Lrkb4IxEc/5LUs1LLUkWfuzXweKs=
Subject key identifier: A0:F2:B4:F6:7E:44:1E:BB:F7:B9:68:44:AB:AF:9B:BE:69:2C:58:B7
Authority key identifier: B6:8F:94:0F:1C:C5:77:F3:70:F2:84:28:85:0D:C7:BF:74:18:F1:21
Certificate issuer: /CN=b68f940f1cc577f370f28428850dc7bf7418f121
Certificate serial: 019642563DA204C749AAF5DAEE2F8CA914CF
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/to-UDxzFd_Nw8oQohQ3Hv3QY8SE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/a4/4b2c23-f535-4b6d-a445-e04dac61ce9d/1/to-UDxzFd_Nw8oQohQ3Hv3QY8SE.mft
Manifest number: 0C7C
Signing time: Thu 17 Apr 2025 06:01:10 +0000
Manifest this update: Thu 17 Apr 2025 06:01:10 +0000
Manifest next update: Fri 18 Apr 2025 06:01:10 +0000
Files and hashes: 1: 5OzibFSrr2gY0VaIFYLHJq_qzxU.roa (hash: I/bqIkdkYHAIm/Bp0vXDzU7ykzf4ma6u4Mih9TldA8Q=)
2: dSK-93-WLyaDQuBO7u17opJXxWo.roa (hash: RuyjgNqJJjjgMNL3Y8FPmQey/oZcSD6yyDRCtPRrlOs=)
3: j7ph1xFBs0MWNVt9udcCJXXzBEI.roa (hash: b+N43kqTE0jfX2C+M9LwxS/gPLGBPUPCdAw73VTzTVs=)
4: to-UDxzFd_Nw8oQohQ3Hv3QY8SE.crl (hash: D4URzcs9XGA27rg2zMrSc3yWCviBB4Qsm2SpMnPwwyA=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/a4/4b2c23-f535-4b6d-a445-e04dac61ce9d/1/to-UDxzFd_Nw8oQohQ3Hv3QY8SE.crl
rsync://rpki.ripe.net/repository/DEFAULT/a4/4b2c23-f535-4b6d-a445-e04dac61ce9d/1/to-UDxzFd_Nw8oQohQ3Hv3QY8SE.mft
rsync://rpki.ripe.net/repository/DEFAULT/to-UDxzFd_Nw8oQohQ3Hv3QY8SE.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 18 Apr 2025 06:01:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:42:56:3d:a2:04:c7:49:aa:f5:da:ee:2f:8c:a9:14:cf
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=b68f940f1cc577f370f28428850dc7bf7418f121
Validity
Not Before: Apr 17 06:01:10 2025 GMT
Not After : Apr 18 06:01:10 2025 GMT
Subject: CN=a0f2b4f67e441ebbf7b96844abaf9bbe692c58b7
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b2:05:16:30:fe:10:fc:10:d5:9c:e9:ea:35:ed:
6d:a6:94:27:81:d9:53:53:89:cd:5f:36:17:bf:3e:
f7:11:f0:47:36:9c:cd:7c:6d:f3:37:c2:15:15:00:
e1:f4:94:a1:89:51:80:68:6b:eb:34:81:bb:c2:a2:
db:eb:2b:e2:2a:0e:85:b4:19:ad:f0:38:40:30:4b:
6a:48:0c:8a:59:66:33:f0:04:b4:d4:68:34:25:68:
11:99:12:cb:0a:66:05:ad:55:ac:2c:24:e3:8f:1b:
37:64:54:50:5c:f0:f7:6b:53:9d:db:56:9c:16:21:
cc:95:13:17:3a:11:ac:f7:a5:2b:1e:f1:fb:7d:d6:
90:46:60:43:6f:5a:67:c7:b0:47:ce:88:6d:03:b5:
08:99:93:92:b9:2c:34:2e:90:d2:2d:ba:51:ca:a6:
a6:f4:be:bf:ed:93:0c:08:99:82:3a:30:a2:82:a4:
f5:97:09:19:a9:f0:f3:a3:59:96:1e:c4:d3:2b:8d:
03:1c:09:0f:a3:5e:4f:1c:15:50:fc:87:18:29:52:
c4:71:e0:c1:13:2b:17:b1:7f:13:03:7a:bf:37:6c:
e9:3a:d0:dd:97:dc:3e:2b:43:c6:3c:90:7a:16:48:
1a:da:70:e0:c4:60:02:35:61:19:8e:20:b4:9b:63:
37:05
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A0:F2:B4:F6:7E:44:1E:BB:F7:B9:68:44:AB:AF:9B:BE:69:2C:58:B7
X509v3 Authority Key Identifier:
keyid:B6:8F:94:0F:1C:C5:77:F3:70:F2:84:28:85:0D:C7:BF:74:18:F1:21
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/to-UDxzFd_Nw8oQohQ3Hv3QY8SE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a4/4b2c23-f535-4b6d-a445-e04dac61ce9d/1/to-UDxzFd_Nw8oQohQ3Hv3QY8SE.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/a4/4b2c23-f535-4b6d-a445-e04dac61ce9d/1/to-UDxzFd_Nw8oQohQ3Hv3QY8SE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
aa:45:7f:31:21:b0:3e:6c:79:3e:01:11:9f:bb:fd:fa:f0:fa:
6e:b6:0a:54:2c:57:88:58:25:43:04:e4:6e:34:3d:13:ee:85:
34:b0:d0:30:24:8a:31:bb:99:d1:be:9a:1a:7f:04:ad:31:36:
1c:22:25:e5:e0:08:82:fb:32:23:1d:07:b3:da:cd:71:db:85:
27:f8:82:a7:ae:05:ec:1a:88:6a:0c:c0:10:a6:b6:27:b2:49:
e6:81:ce:56:58:ed:4c:67:df:fd:54:c4:09:b8:45:9f:47:df:
6b:82:7e:db:2f:83:15:d1:59:5e:b6:ba:5f:3e:ae:4e:c5:d1:
18:9e:98:c1:45:d7:78:07:ca:c8:d7:90:eb:74:db:da:9a:48:
f7:96:a9:b8:b8:f8:ab:54:be:cf:f9:80:4e:55:45:89:00:46:
87:97:c1:71:e4:bf:0d:c5:52:21:7c:e1:66:de:11:8b:b4:1e:
1a:2e:b9:cc:b2:4a:ea:07:a5:f5:f3:14:6a:51:c3:3c:6b:41:
44:19:be:73:ad:3d:12:da:69:cc:80:00:40:cc:aa:f9:a4:70:
e8:59:d4:14:25:04:c3:f5:43:ad:64:c1:5a:36:75:63:01:e2:
23:a6:7d:87:44:1a:30:6f:be:bd:c8:0f:b9:8b:b3:29:be:88:
60:68:c0:da
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Apr 17 14:56:46 2025 by rpki-client