Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/2f/54b006-6809-441b-84d7-a24cb572298e/1/u7w9vRpPIkq4StYJwmgHn7Yktb0.mft
File: u7w9vRpPIkq4StYJwmgHn7Yktb0.mft (raw, json)
Hash identifier: SbH7IiA7cuGlsDHGVSMoVT/O01hOXC2I0TOYCHPFx+Q=
Subject key identifier: D1:5E:1E:50:A4:B1:65:B9:A6:43:D4:55:2A:F3:7D:7C:D0:82:A3:E4
Authority key identifier: BB:BC:3D:BD:1A:4F:22:4A:B8:4A:D6:09:C2:68:07:9F:B6:24:B5:BD
Certificate issuer: /CN=bbbc3dbd1a4f224ab84ad609c268079fb624b5bd
Certificate serial: 0194C49A6F31DE64741814161D982EA3808D
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/u7w9vRpPIkq4StYJwmgHn7Yktb0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/2f/54b006-6809-441b-84d7-a24cb572298e/1/u7w9vRpPIkq4StYJwmgHn7Yktb0.mft
Manifest number: 51
Signing time: Sun 02 Feb 2025 03:00:42 +0000
Manifest this update: Sun 02 Feb 2025 03:00:42 +0000
Manifest next update: Mon 03 Feb 2025 03:00:42 +0000
Files and hashes: 1: AnOjAErapOHwpd7AwIATrv6oaPs.roa (hash: Z5NCDzdRe0c7oL58VbkecPbcKaio1C3c2yksvrR6h14=)
2: u7w9vRpPIkq4StYJwmgHn7Yktb0.crl (hash: G5SoDzHJ27HEJsOf80vecTqro9zy17xSnWmotfErkxc=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/2f/54b006-6809-441b-84d7-a24cb572298e/1/u7w9vRpPIkq4StYJwmgHn7Yktb0.crl
rsync://rpki.ripe.net/repository/DEFAULT/2f/54b006-6809-441b-84d7-a24cb572298e/1/u7w9vRpPIkq4StYJwmgHn7Yktb0.mft
rsync://rpki.ripe.net/repository/DEFAULT/u7w9vRpPIkq4StYJwmgHn7Yktb0.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 03 Feb 2025 00:00:06 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:c4:9a:6f:31:de:64:74:18:14:16:1d:98:2e:a3:80:8d
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=bbbc3dbd1a4f224ab84ad609c268079fb624b5bd
Validity
Not Before: Feb 2 03:00:42 2025 GMT
Not After : Feb 3 03:00:42 2025 GMT
Subject: CN=d15e1e50a4b165b9a643d4552af37d7cd082a3e4
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a3:85:1b:6e:22:7c:05:54:11:d5:63:74:c0:68:
98:eb:ac:2d:f8:a7:be:19:a3:53:4f:9b:fd:ca:64:
89:fd:b3:bf:d1:4b:f4:9b:27:ec:6c:27:68:81:15:
3d:64:23:e9:73:12:1b:e4:cc:1c:de:b6:59:61:28:
45:47:12:dc:5e:0d:cb:d1:61:17:64:0b:fa:be:84:
51:8a:ca:4c:96:7a:dd:24:27:eb:7b:f8:23:fe:47:
3f:f1:66:c8:e1:8b:cb:4a:f9:db:48:7f:04:46:39:
c8:70:f2:4c:ad:eb:8c:16:05:73:06:42:7b:46:7d:
c7:d5:95:a8:99:b7:d8:a5:ed:af:55:17:83:d1:5b:
2f:12:3e:93:cc:5f:fa:5c:87:d5:06:4b:cc:28:12:
f6:d3:99:ed:8f:d8:78:79:b9:ce:fd:bd:df:f3:f6:
00:9c:65:1b:a3:10:db:68:0c:b6:a9:42:ea:ca:b9:
93:d0:a1:9e:e5:54:1c:51:3b:dc:ce:2c:34:26:fe:
67:ba:c1:9b:e1:2d:b6:8e:28:64:fe:53:83:3b:45:
f1:fb:79:bb:f5:76:b6:b6:8b:f8:d1:a7:b1:35:fb:
24:7e:02:cf:84:05:4c:9c:73:18:b1:65:ea:1d:8f:
05:11:a6:08:e5:70:73:b7:1b:39:1c:e4:92:71:89:
b4:87
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D1:5E:1E:50:A4:B1:65:B9:A6:43:D4:55:2A:F3:7D:7C:D0:82:A3:E4
X509v3 Authority Key Identifier:
keyid:BB:BC:3D:BD:1A:4F:22:4A:B8:4A:D6:09:C2:68:07:9F:B6:24:B5:BD
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/u7w9vRpPIkq4StYJwmgHn7Yktb0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/2f/54b006-6809-441b-84d7-a24cb572298e/1/u7w9vRpPIkq4StYJwmgHn7Yktb0.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/2f/54b006-6809-441b-84d7-a24cb572298e/1/u7w9vRpPIkq4StYJwmgHn7Yktb0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
67:37:c9:f1:81:19:3b:3e:6a:40:9f:c9:e0:ff:70:ba:b0:ee:
06:68:3a:5b:4d:4e:d3:af:75:80:3c:0d:67:9b:05:34:f0:76:
7e:50:30:82:1d:30:43:b5:f0:51:d9:93:40:2d:7f:19:1b:58:
c9:b2:b5:7b:e9:e4:ca:99:e8:f1:6c:96:0c:ae:1d:0f:58:d0:
99:11:2d:e7:ed:ff:ff:cc:48:c3:c9:10:e2:89:72:94:00:85:
b6:1e:de:a8:3f:4d:c5:75:09:be:61:0f:2f:a6:83:e8:b0:33:
be:6c:cc:aa:f8:af:f0:13:dd:b0:6e:5f:98:50:83:19:f7:d7:
97:ba:cb:7b:ee:9b:1b:35:b7:a9:2e:77:c0:32:a5:91:95:2b:
96:55:ae:3e:15:0b:b5:3c:15:42:10:a7:fb:db:be:fe:5c:25:
8f:1f:53:49:70:92:a3:ad:44:17:c6:dc:d5:06:95:8f:68:ba:
3b:47:4b:0f:8d:d6:2c:da:30:75:4a:ea:c6:10:39:3c:bf:2e:
e8:c1:ec:00:8f:26:24:57:72:99:2f:f4:db:dd:8a:01:1e:94:
0d:cf:14:75:0f:62:4b:d5:4d:fa:f8:62:dd:08:e3:aa:88:10:
c6:9e:37:d1:4f:2a:18:58:10:5e:47:99:f0:1b:a8:17:cd:b8:
ec:32:03:10
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Feb 2 05:50:03 2025 by rpki-client