Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e0/ea4e64-6d70-4bfd-909d-f0546cfab061/1/u8JktaZJT4kPoxT2H9fSdYfjWDA.mft
File: u8JktaZJT4kPoxT2H9fSdYfjWDA.mft (raw, json)
Hash identifier: m5kgsd7Zg0DGYprGYVDCdMl+cya0YBqyzByq83fOrSM=
Subject key identifier: 71:49:98:B7:6F:74:CF:BB:8A:CE:F6:BD:46:D1:2B:5C:E4:71:77:84
Authority key identifier: BB:C2:64:B5:A6:49:4F:89:0F:A3:14:F6:1F:D7:D2:75:87:E3:58:30
Certificate issuer: /CN=bbc264b5a6494f890fa314f61fd7d27587e35830
Certificate serial: 01965EA85F07272731DE8C06C628CD83D73D
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/u8JktaZJT4kPoxT2H9fSdYfjWDA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/e0/ea4e64-6d70-4bfd-909d-f0546cfab061/1/u8JktaZJT4kPoxT2H9fSdYfjWDA.mft
Manifest number: 1506
Signing time: Tue 22 Apr 2025 18:00:14 +0000
Manifest this update: Tue 22 Apr 2025 18:00:14 +0000
Manifest next update: Wed 23 Apr 2025 18:00:14 +0000
Files and hashes: 1: t4qANnEhvVWnrRLkZS7CKoTPpCQ.roa (hash: dm6ZxXeDx09W/sn7TAuJSwJg3JzyL+0jwWDxaTnORrU=)
2: u8JktaZJT4kPoxT2H9fSdYfjWDA.crl (hash: y1TQwKPO1vejwEUQ5k3/XI9ySEQ3q1GSUUXyHfBAB8U=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/e0/ea4e64-6d70-4bfd-909d-f0546cfab061/1/u8JktaZJT4kPoxT2H9fSdYfjWDA.crl
rsync://rpki.ripe.net/repository/DEFAULT/e0/ea4e64-6d70-4bfd-909d-f0546cfab061/1/u8JktaZJT4kPoxT2H9fSdYfjWDA.mft
rsync://rpki.ripe.net/repository/DEFAULT/u8JktaZJT4kPoxT2H9fSdYfjWDA.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 23 Apr 2025 14:46:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:5e:a8:5f:07:27:27:31:de:8c:06:c6:28:cd:83:d7:3d
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=bbc264b5a6494f890fa314f61fd7d27587e35830
Validity
Not Before: Apr 22 18:00:14 2025 GMT
Not After : Apr 23 18:00:14 2025 GMT
Subject: CN=714998b76f74cfbb8acef6bd46d12b5ce4717784
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a7:99:3c:8a:04:0c:7b:c9:8c:63:96:ed:f8:bd:
0e:6a:a3:49:ec:c5:3b:c6:5b:21:61:c9:5a:14:35:
6f:bf:2b:7b:3c:7c:0d:2c:45:17:f6:37:aa:0e:36:
e4:0c:db:00:10:c4:ab:20:03:0b:69:1b:17:fe:1e:
15:01:9d:a4:19:dd:61:92:b0:a0:e5:48:c5:23:ca:
df:b4:35:f9:3d:79:4d:4a:2c:a8:ed:5d:da:a5:67:
5f:8e:f9:82:eb:c8:19:af:87:49:fc:14:da:5f:2e:
44:9d:15:14:b3:be:ed:2b:98:90:44:76:c6:aa:7d:
73:df:60:4b:3b:97:a5:5a:d8:f3:34:6d:7e:85:45:
b1:14:9e:6b:bf:1d:ff:79:ee:46:69:26:c2:5b:70:
55:c9:4a:ab:da:25:16:aa:b6:bd:12:62:e0:6c:7f:
e7:49:24:44:5c:ee:f9:e1:82:70:91:f1:fb:e3:50:
d8:eb:56:87:27:16:48:53:c9:4a:72:b0:81:d3:4e:
24:25:70:72:f9:b9:c2:22:5e:6b:6e:58:74:ac:76:
62:a1:af:05:e9:cf:ce:4d:22:c5:c5:09:f4:07:04:
df:c5:f9:26:c2:76:30:03:2f:ea:7b:05:9e:8c:8c:
c1:48:6c:ea:0c:29:0e:3b:52:18:30:20:9d:f0:86:
a8:13
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
71:49:98:B7:6F:74:CF:BB:8A:CE:F6:BD:46:D1:2B:5C:E4:71:77:84
X509v3 Authority Key Identifier:
keyid:BB:C2:64:B5:A6:49:4F:89:0F:A3:14:F6:1F:D7:D2:75:87:E3:58:30
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/u8JktaZJT4kPoxT2H9fSdYfjWDA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e0/ea4e64-6d70-4bfd-909d-f0546cfab061/1/u8JktaZJT4kPoxT2H9fSdYfjWDA.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/e0/ea4e64-6d70-4bfd-909d-f0546cfab061/1/u8JktaZJT4kPoxT2H9fSdYfjWDA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
22:d4:71:da:51:83:00:c6:c6:9a:03:a6:f4:a7:34:5a:49:61:
08:71:b9:db:a1:8a:9a:da:64:56:d3:35:71:26:eb:58:c3:98:
fc:c6:e9:a3:1a:23:bd:6c:1a:12:27:4c:b1:30:a9:74:30:26:
74:8e:df:53:78:be:83:39:78:15:16:7f:83:75:16:75:22:fe:
e5:08:2b:4d:3c:3a:16:11:17:e2:84:9f:59:75:05:17:95:0f:
54:d4:f8:49:4f:dd:e5:ea:97:f8:60:39:ad:4a:a5:f6:f5:9b:
e0:71:c0:19:40:15:48:98:86:c8:e7:e1:7c:77:5c:8f:3f:75:
cf:d7:4e:8f:17:03:83:2b:1f:62:1b:7e:2f:82:a5:c8:3d:d8:
81:38:ce:2b:b4:00:42:50:5e:b9:6c:84:6f:c7:bd:df:4c:8d:
06:71:0f:70:a9:0a:9f:de:ae:eb:5f:b3:7b:9e:a1:6d:c3:13:
8d:7c:71:7b:49:e9:a7:9d:f6:85:7d:1c:ab:17:04:ce:06:d6:
fd:44:e8:38:90:05:12:37:b7:7a:c8:f0:31:d9:ab:64:ac:cd:
44:bf:41:e1:4c:50:cb:e6:99:05:7a:90:b0:98:a2:82:05:cb:
c8:f1:ef:27:5c:c4:63:b3:5e:3e:84:f6:33:56:da:b4:a8:5c:
ed:ab:15:bd
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Apr 22 20:58:52 2025 by rpki-client