Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/0c/120715-2689-4b1c-a6b8-417320cbae55/1/u3C4koHNt2GgSty8CsQXBUExUOk.mft
File: u3C4koHNt2GgSty8CsQXBUExUOk.mft (raw, json)
Hash identifier: 0lssV+/Nxcjj7n7mq7n3sP3T+nLzjx5NTHbg8nJABT4=
Subject key identifier: 57:38:EC:0C:7D:4A:6A:F9:9D:ED:57:57:80:93:CB:9F:00:79:52:3D
Authority key identifier: BB:70:B8:92:81:CD:B7:61:A0:4A:DC:BC:0A:C4:17:05:41:31:50:E9
Certificate issuer: /CN=bb70b89281cdb761a04adcbc0ac41705413150e9
Certificate serial: 019640D56D4985E90F0287D97FF9C9FCEDC1
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/u3C4koHNt2GgSty8CsQXBUExUOk.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/0c/120715-2689-4b1c-a6b8-417320cbae55/1/u3C4koHNt2GgSty8CsQXBUExUOk.mft
Manifest number: 0825
Signing time: Wed 16 Apr 2025 23:00:50 +0000
Manifest this update: Wed 16 Apr 2025 23:00:50 +0000
Manifest next update: Thu 17 Apr 2025 23:00:50 +0000
Files and hashes: 1: 6JxEiaEvYS9lMNYU9-YVInF7e8w.roa (hash: 70NWS2RXJlvS8eFFeFd9DCGoEyQrpgXb5vcUfy1RN8w=)
2: u3C4koHNt2GgSty8CsQXBUExUOk.crl (hash: 7JvuGi+eFnIYp2Cu0I4pJswY5lLDooWZszDrxfT234I=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/0c/120715-2689-4b1c-a6b8-417320cbae55/1/u3C4koHNt2GgSty8CsQXBUExUOk.crl
rsync://rpki.ripe.net/repository/DEFAULT/0c/120715-2689-4b1c-a6b8-417320cbae55/1/u3C4koHNt2GgSty8CsQXBUExUOk.mft
rsync://rpki.ripe.net/repository/DEFAULT/u3C4koHNt2GgSty8CsQXBUExUOk.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 17 Apr 2025 21:57:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:40:d5:6d:49:85:e9:0f:02:87:d9:7f:f9:c9:fc:ed:c1
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=bb70b89281cdb761a04adcbc0ac41705413150e9
Validity
Not Before: Apr 16 23:00:50 2025 GMT
Not After : Apr 17 23:00:50 2025 GMT
Subject: CN=5738ec0c7d4a6af99ded57578093cb9f0079523d
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9d:60:3c:57:29:cd:98:db:d5:6f:53:2c:34:51:
8a:42:55:1e:9c:c5:11:8e:d8:6f:28:f5:67:d2:49:
be:3f:4c:20:53:1a:63:cd:a3:0f:9e:47:00:c4:a3:
9d:95:f8:3a:08:08:df:72:b7:7f:0e:62:47:ab:a4:
d4:b4:92:fa:7e:43:7d:50:f9:d9:ba:13:52:c0:c7:
6c:0d:82:f0:2d:ac:2b:66:88:be:51:e5:77:26:8e:
a3:c3:28:a7:32:e7:5a:61:60:e8:2f:06:74:1a:be:
6c:40:9c:60:fe:48:9e:1f:bd:55:0c:dc:36:b4:28:
63:fa:ba:cc:ea:28:24:1a:42:16:ba:f1:e4:cd:eb:
7c:b5:a0:c1:de:1d:eb:c4:57:1b:0f:54:3e:da:e9:
e2:20:ce:4d:c2:40:3c:a2:05:45:38:a7:50:99:b2:
96:9a:4a:41:fe:8d:e5:6e:16:3b:51:28:f0:04:7d:
2f:8c:cd:c1:68:4f:b2:cf:b7:24:3b:8b:81:e5:0f:
1d:13:a3:13:a1:15:62:88:a3:45:87:dc:93:f6:b5:
af:49:5e:4a:68:cc:e1:97:08:b5:9b:57:4a:5f:c5:
23:82:8e:1d:16:6a:de:44:e4:6f:aa:e6:2e:06:bc:
7a:c3:1c:6d:84:a1:be:68:1b:a4:bd:af:bb:11:89:
f1:01
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
57:38:EC:0C:7D:4A:6A:F9:9D:ED:57:57:80:93:CB:9F:00:79:52:3D
X509v3 Authority Key Identifier:
keyid:BB:70:B8:92:81:CD:B7:61:A0:4A:DC:BC:0A:C4:17:05:41:31:50:E9
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/u3C4koHNt2GgSty8CsQXBUExUOk.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/0c/120715-2689-4b1c-a6b8-417320cbae55/1/u3C4koHNt2GgSty8CsQXBUExUOk.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/0c/120715-2689-4b1c-a6b8-417320cbae55/1/u3C4koHNt2GgSty8CsQXBUExUOk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
29:bf:c1:a2:d0:aa:1c:34:f0:ab:b3:cd:10:2e:56:a8:6f:03:
d0:d4:f4:20:5e:6b:27:5b:46:eb:29:c6:05:ef:47:fc:9a:65:
54:7b:52:3f:c5:82:ca:b3:fc:bd:ba:95:ff:1c:23:20:8d:3f:
97:ac:ea:7e:9d:28:fc:6f:df:18:7b:3b:d3:5a:9a:94:31:cf:
73:fa:33:24:32:7d:0d:13:a2:d5:e7:66:15:12:4a:f7:b1:a2:
d0:89:60:30:e6:3c:a6:eb:23:cb:58:9a:60:fc:2c:7a:af:c6:
5e:a4:e8:33:67:d9:e8:7c:69:fa:4f:b7:d6:d0:0b:1f:c1:35:
49:2d:9b:44:a8:38:ef:e7:d9:3f:54:a7:8a:6f:ad:e6:34:98:
59:83:67:9f:00:4e:83:85:42:98:c7:e6:9a:c5:d4:e2:09:c1:
d6:ca:13:1f:ee:2c:a7:86:d2:38:6f:5c:05:65:c2:b8:fb:0c:
88:bc:ab:a4:30:23:3c:ce:46:6d:96:1a:a1:75:ab:16:b0:26:
60:1e:6e:0b:32:82:42:2f:9c:57:c0:76:ad:fd:ef:21:40:e1:
a9:3d:77:7a:16:28:78:28:df:2b:8d:b6:f9:f0:10:96:a1:36:
15:20:9a:e4:0e:79:c9:6d:b2:37:44:b0:5e:3d:6d:c9:3c:2e:
61:9c:9d:0e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Apr 17 06:01:56 2025 by rpki-client