Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/2f/54b006-6809-441b-84d7-a24cb572298e/1/u7w9vRpPIkq4StYJwmgHn7Yktb0.mft
File: u7w9vRpPIkq4StYJwmgHn7Yktb0.mft (raw, json)
Hash identifier: HYLzBV71Dumd4wzYo6uVn751xCl6O6fkrqLomjKHh2Q=
Subject key identifier: 15:E6:D2:D5:0D:71:5E:BF:2C:16:A6:9A:A8:86:75:3D:77:47:18:C5
Authority key identifier: BB:BC:3D:BD:1A:4F:22:4A:B8:4A:D6:09:C2:68:07:9F:B6:24:B5:BD
Certificate issuer: /CN=bbbc3dbd1a4f224ab84ad609c268079fb624b5bd
Certificate serial: 01965236789B61162ACD2F56D59D700378EA
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/u7w9vRpPIkq4StYJwmgHn7Yktb0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/2f/54b006-6809-441b-84d7-a24cb572298e/1/u7w9vRpPIkq4StYJwmgHn7Yktb0.mft
Manifest number: 011F
Signing time: Sun 20 Apr 2025 08:00:23 +0000
Manifest this update: Sun 20 Apr 2025 08:00:23 +0000
Manifest next update: Mon 21 Apr 2025 08:00:23 +0000
Files and hashes: 1: AnOjAErapOHwpd7AwIATrv6oaPs.roa (hash: Z5NCDzdRe0c7oL58VbkecPbcKaio1C3c2yksvrR6h14=)
2: u7w9vRpPIkq4StYJwmgHn7Yktb0.crl (hash: yOtqBmKSLqyP7qLjJDkMEdafPlo734VBJoW2bTvHmhk=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/2f/54b006-6809-441b-84d7-a24cb572298e/1/u7w9vRpPIkq4StYJwmgHn7Yktb0.crl
rsync://rpki.ripe.net/repository/DEFAULT/2f/54b006-6809-441b-84d7-a24cb572298e/1/u7w9vRpPIkq4StYJwmgHn7Yktb0.mft
rsync://rpki.ripe.net/repository/DEFAULT/u7w9vRpPIkq4StYJwmgHn7Yktb0.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 21 Apr 2025 08:00:23 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:52:36:78:9b:61:16:2a:cd:2f:56:d5:9d:70:03:78:ea
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=bbbc3dbd1a4f224ab84ad609c268079fb624b5bd
Validity
Not Before: Apr 20 08:00:23 2025 GMT
Not After : Apr 21 08:00:23 2025 GMT
Subject: CN=15e6d2d50d715ebf2c16a69aa886753d774718c5
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:af:34:e6:a0:6e:64:24:c9:64:8e:cf:8f:58:b2:
32:eb:0e:ce:0f:19:b4:e1:1c:82:7d:49:77:d4:cb:
29:8b:f1:21:e7:ed:5e:80:94:8e:c3:50:c5:38:28:
19:31:fe:07:bf:6c:71:ab:37:19:00:57:6c:b9:0b:
af:46:3a:4b:0c:3e:c2:ea:2d:ed:8c:36:d6:33:81:
86:9e:41:8f:59:79:1b:4d:d1:1f:de:4b:c4:a3:7f:
8c:bd:bc:70:37:13:71:35:e3:f0:01:c7:00:04:7e:
0b:aa:bb:db:4e:37:10:51:47:9f:e1:0a:f6:e0:e9:
b3:69:11:5b:74:1d:e0:cf:3c:4b:68:48:39:35:99:
c7:7a:94:c4:81:9f:86:fd:27:a1:2e:a7:98:49:cb:
53:34:bb:05:7b:df:c7:f3:5c:52:19:b2:d7:ea:1a:
6f:b8:4d:b2:6e:03:4c:e8:a5:ee:88:fb:d2:de:76:
b6:bb:d1:36:ae:4f:71:82:d3:e7:8b:54:b5:13:fb:
eb:58:71:32:8c:59:59:67:29:5f:d4:13:36:62:ba:
62:a4:eb:5a:a8:4a:19:5f:d2:4c:dc:45:3c:fd:2f:
9d:98:cb:cb:ca:9d:84:0b:aa:5d:e1:80:7d:16:94:
44:a4:78:9c:09:0f:42:09:78:9d:34:13:0f:50:42:
7f:f5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
15:E6:D2:D5:0D:71:5E:BF:2C:16:A6:9A:A8:86:75:3D:77:47:18:C5
X509v3 Authority Key Identifier:
keyid:BB:BC:3D:BD:1A:4F:22:4A:B8:4A:D6:09:C2:68:07:9F:B6:24:B5:BD
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/u7w9vRpPIkq4StYJwmgHn7Yktb0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/2f/54b006-6809-441b-84d7-a24cb572298e/1/u7w9vRpPIkq4StYJwmgHn7Yktb0.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/2f/54b006-6809-441b-84d7-a24cb572298e/1/u7w9vRpPIkq4StYJwmgHn7Yktb0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
05:bc:b0:10:55:16:19:31:7d:1a:46:9c:90:32:21:78:83:c7:
81:50:f4:37:d5:72:27:0a:34:df:a7:1c:d7:48:5f:e2:52:d9:
39:ec:77:87:42:4d:80:ac:7d:b8:7e:3a:94:1e:cc:3e:f1:1d:
b4:8c:41:c8:55:b6:0b:35:0f:f4:6e:b0:81:53:ca:42:be:1e:
95:35:2a:a5:95:7b:07:97:10:b7:99:6b:b7:0f:00:ab:bd:45:
4b:80:87:7b:05:47:7a:36:cf:60:64:38:9b:b8:99:02:e8:28:
9b:29:a8:ac:9a:11:36:36:05:03:d0:e2:56:27:74:ce:73:a6:
4d:3a:4f:db:7b:89:da:08:27:ab:49:b2:6c:e3:ed:5c:8e:89:
7a:18:2b:ac:ba:b4:d7:b3:32:e4:1a:d8:ea:1c:8e:63:2d:2e:
a5:9f:85:8e:f4:df:ba:de:99:7a:16:29:1b:e3:9e:64:4c:9b:
16:f5:d6:ce:64:ac:6a:14:f8:81:e9:76:a4:86:6b:13:42:e0:
a5:4e:14:7d:9f:bd:1c:01:01:a7:54:b9:97:04:a2:49:b4:3d:
25:f1:08:79:4a:6a:a0:5e:2f:a2:5a:e4:75:8e:f6:ba:78:fe:
d2:db:3a:99:a5:84:ee:30:80:0f:97:9d:06:38:2f:fc:9d:c3:
c7:fc:43:b6
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Apr 20 19:13:16 2025 by rpki-client