Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/48/c071a8-54aa-4abd-8127-edf7bb653f13/1/u-Eo3LaBD_3FArowR81BkTLaInQ.mft
File: u-Eo3LaBD_3FArowR81BkTLaInQ.mft (raw, json)
Hash identifier: Ij0895ko1nW2OJ2je+X/+Jr8dgRlCGZL5/U3vjrdymk=
Subject key identifier: 44:AB:32:1F:E3:A3:42:67:27:8F:76:22:D0:E6:A3:07:93:27:9C:34
Authority key identifier: BB:E1:28:DC:B6:81:0F:FD:C5:02:BA:30:47:CD:41:91:32:DA:22:74
Certificate issuer: /CN=bbe128dcb6810ffdc502ba3047cd419132da2274
Certificate serial: 0196586FD5A66B50792303C3DD758C663715
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/u-Eo3LaBD_3FArowR81BkTLaInQ.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/48/c071a8-54aa-4abd-8127-edf7bb653f13/1/u-Eo3LaBD_3FArowR81BkTLaInQ.mft
Manifest number: 1452
Signing time: Mon 21 Apr 2025 13:00:46 +0000
Manifest this update: Mon 21 Apr 2025 13:00:46 +0000
Manifest next update: Tue 22 Apr 2025 13:00:46 +0000
Files and hashes: 1: KyDiW-yP4PoEMeO0WHmm0uQpXzo.roa (hash: 7vZ+OrglKDbrLCd5IBuAg6rXUphyAUCG7HZaGMHHYfs=)
2: u-Eo3LaBD_3FArowR81BkTLaInQ.crl (hash: XE7mqignZv7IyDiJjmoUaXWEfqLmQcojYySUy/q60SA=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/48/c071a8-54aa-4abd-8127-edf7bb653f13/1/u-Eo3LaBD_3FArowR81BkTLaInQ.crl
rsync://rpki.ripe.net/repository/DEFAULT/48/c071a8-54aa-4abd-8127-edf7bb653f13/1/u-Eo3LaBD_3FArowR81BkTLaInQ.mft
rsync://rpki.ripe.net/repository/DEFAULT/u-Eo3LaBD_3FArowR81BkTLaInQ.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 22 Apr 2025 10:00:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:58:6f:d5:a6:6b:50:79:23:03:c3:dd:75:8c:66:37:15
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=bbe128dcb6810ffdc502ba3047cd419132da2274
Validity
Not Before: Apr 21 13:00:46 2025 GMT
Not After : Apr 22 13:00:46 2025 GMT
Subject: CN=44ab321fe3a34267278f7622d0e6a30793279c34
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d4:94:2a:37:74:2b:6a:72:93:71:bb:21:46:f6:
5b:12:e7:a4:b0:35:a0:2f:42:50:54:8b:16:83:ff:
0c:0a:ec:4d:21:38:25:e0:43:09:fe:e5:26:8d:b1:
a7:ed:08:72:f1:51:2e:50:3a:3b:33:cd:32:8e:d3:
2c:0f:11:c3:f4:b1:66:17:22:b3:ea:7d:16:ed:9b:
f9:d1:64:15:24:e8:be:d8:cc:83:bb:dd:52:d2:53:
7e:b7:f5:2c:a4:ed:aa:7f:c0:8c:3c:49:b7:1f:fd:
3c:f6:20:86:79:f2:bb:47:9e:0b:87:33:3c:87:e9:
c4:2f:8f:e2:f1:af:20:3d:ac:44:fc:57:07:f8:c1:
6e:88:a0:16:94:91:b2:f8:07:d0:6f:b6:e7:49:1b:
26:d9:2a:23:c8:a7:63:4e:9f:d6:2c:89:c6:1f:83:
b5:6e:a9:7f:4e:7f:7a:e1:db:3a:41:bf:b6:04:c4:
f8:58:75:8f:4a:43:55:e0:6b:44:92:9f:bf:13:0a:
88:fd:6d:21:02:a9:ba:97:be:38:e3:a4:99:05:0c:
9d:40:d4:48:4c:f8:8b:b3:06:67:f2:8f:c7:5e:a9:
78:bd:05:32:25:ec:ce:33:bb:24:f3:78:04:10:4b:
f2:13:ec:e1:f7:4f:42:75:b2:71:e0:bb:35:77:c1:
b7:05
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
44:AB:32:1F:E3:A3:42:67:27:8F:76:22:D0:E6:A3:07:93:27:9C:34
X509v3 Authority Key Identifier:
keyid:BB:E1:28:DC:B6:81:0F:FD:C5:02:BA:30:47:CD:41:91:32:DA:22:74
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/u-Eo3LaBD_3FArowR81BkTLaInQ.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/48/c071a8-54aa-4abd-8127-edf7bb653f13/1/u-Eo3LaBD_3FArowR81BkTLaInQ.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/48/c071a8-54aa-4abd-8127-edf7bb653f13/1/u-Eo3LaBD_3FArowR81BkTLaInQ.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
a7:52:21:08:a0:c3:10:e8:21:d7:59:b8:9c:d9:cd:36:a7:60:
34:bc:f5:8d:97:b4:f5:71:eb:62:1e:72:43:52:64:76:af:78:
cf:3a:48:fb:ed:8b:66:00:5d:ce:19:c9:2e:d4:80:a1:30:a0:
35:67:8d:78:3f:50:e1:1f:ca:d5:6f:98:f4:63:6e:33:e7:32:
3c:c7:23:17:3e:87:d2:0c:28:4e:5d:25:20:0e:1a:97:60:77:
10:af:97:7e:a2:6c:d5:f2:af:bb:cd:57:d1:18:6d:31:e2:a4:
b2:0f:6d:7d:50:76:31:94:5e:61:3f:86:86:79:19:81:ff:e7:
60:4b:df:fb:a7:6b:3b:7d:3a:76:49:a1:03:b6:c5:34:1c:bd:
6e:4c:4a:64:6e:e2:f9:13:21:57:4f:48:38:85:0b:33:31:cf:
98:63:01:d2:dc:8d:27:d0:a2:a6:77:f9:41:f8:77:28:23:d7:
1c:b9:c2:ee:96:54:c0:c2:76:73:3c:84:cb:f8:f9:bc:37:83:
68:a9:96:c1:09:e5:a9:2f:8a:90:20:8e:d0:4c:ee:a9:16:91:
a5:36:5c:57:07:18:f5:dd:53:4a:83:7d:32:82:99:65:89:c4:
bc:fc:d1:81:9f:c7:c8:e2:e1:e9:0c:1f:1b:4d:14:ce:44:21:
09:df:13:88
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 21 15:04:54 2025 by rpki-client