Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/70/93f8fb-d424-4dab-9a0e-0f5be224f820/1/urc2dvq68SBW7bucedcVT-3gHyw.mft
File: urc2dvq68SBW7bucedcVT-3gHyw.mft (raw, json)
Hash identifier: 5ajP/F7MZbY8PnmVL0bnDgYT14tntmxVudfvLfO0UZs=
Subject key identifier: 5F:63:BF:37:43:D1:F6:FD:A4:11:C0:E1:87:6E:31:A1:21:EF:C8:98
Authority key identifier: BA:B7:36:76:FA:BA:F1:20:56:ED:BB:9C:79:D7:15:4F:ED:E0:1F:2C
Certificate issuer: /CN=bab73676fabaf12056edbb9c79d7154fede01f2c
Certificate serial: 01958B4D8943B2B29C3C695E2BE71E1AC449
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/urc2dvq68SBW7bucedcVT-3gHyw.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/70/93f8fb-d424-4dab-9a0e-0f5be224f820/1/urc2dvq68SBW7bucedcVT-3gHyw.mft
Manifest number: 1494
Signing time: Wed 12 Mar 2025 17:01:09 +0000
Manifest this update: Wed 12 Mar 2025 17:01:09 +0000
Manifest next update: Thu 13 Mar 2025 17:01:09 +0000
Files and hashes: 1: urc2dvq68SBW7bucedcVT-3gHyw.crl (hash: oP5v9TMnXOywkeWFq0pPHx6OJrm0gWlr38g/hWEmHkk=)
2: ysmv8pVpOBMqQ9sWsS6x7ZzfCkE.roa (hash: l1esLwaLrNWre2KIEqdSBUJWZATlA9afvfAUu1SgNbA=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/70/93f8fb-d424-4dab-9a0e-0f5be224f820/1/urc2dvq68SBW7bucedcVT-3gHyw.crl
rsync://rpki.ripe.net/repository/DEFAULT/70/93f8fb-d424-4dab-9a0e-0f5be224f820/1/urc2dvq68SBW7bucedcVT-3gHyw.mft
rsync://rpki.ripe.net/repository/DEFAULT/urc2dvq68SBW7bucedcVT-3gHyw.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 13 Mar 2025 17:01:09 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:95:8b:4d:89:43:b2:b2:9c:3c:69:5e:2b:e7:1e:1a:c4:49
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=bab73676fabaf12056edbb9c79d7154fede01f2c
Validity
Not Before: Mar 12 17:01:09 2025 GMT
Not After : Mar 13 17:01:09 2025 GMT
Subject: CN=5f63bf3743d1f6fda411c0e1876e31a121efc898
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c7:8b:00:17:64:7f:32:87:d3:92:f5:9e:cb:14:
d0:fb:e6:af:76:82:69:29:e2:0a:ab:62:9d:7d:dd:
9a:6f:d0:2a:7f:ad:03:e8:b5:ca:b9:f4:58:1a:92:
e1:05:98:07:3d:ad:73:48:8e:8e:18:35:22:8b:0e:
6b:2f:f2:7a:9e:6e:d9:33:35:4a:be:33:bd:2a:6e:
5c:43:40:b6:85:a6:02:53:2e:98:a9:d9:7b:31:b6:
50:2a:a3:d3:08:80:4e:95:80:bd:f8:49:34:2f:8c:
d8:e1:ea:0e:cd:56:c1:39:a9:8c:4b:87:eb:23:b6:
bc:23:88:96:18:86:80:20:22:46:9c:93:0c:dd:2f:
2c:f8:54:87:1b:0c:37:c0:ff:0a:20:c9:4a:1a:40:
26:56:33:a4:12:9a:26:6d:5b:fd:2d:d9:1c:24:5d:
29:97:ea:9a:1e:43:8d:3f:9f:bb:50:e2:98:db:00:
c4:12:31:d7:8d:e8:4a:6a:0d:15:e3:31:2d:d2:bb:
bf:95:a0:ca:ea:27:fd:07:d7:1a:bc:cf:84:4b:ca:
b0:36:a5:8c:0a:6f:da:a4:28:89:53:33:79:13:22:
68:d1:aa:2a:a9:d2:eb:34:c7:8c:00:26:3e:8a:7a:
0e:8f:13:84:a5:21:4d:80:0e:f7:fe:e9:b9:8d:c6:
31:e9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
5F:63:BF:37:43:D1:F6:FD:A4:11:C0:E1:87:6E:31:A1:21:EF:C8:98
X509v3 Authority Key Identifier:
keyid:BA:B7:36:76:FA:BA:F1:20:56:ED:BB:9C:79:D7:15:4F:ED:E0:1F:2C
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/urc2dvq68SBW7bucedcVT-3gHyw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/70/93f8fb-d424-4dab-9a0e-0f5be224f820/1/urc2dvq68SBW7bucedcVT-3gHyw.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/70/93f8fb-d424-4dab-9a0e-0f5be224f820/1/urc2dvq68SBW7bucedcVT-3gHyw.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
60:2e:54:56:91:0c:c9:74:fb:38:7d:6b:85:3f:11:cb:3a:38:
a0:45:fa:7c:3e:58:39:3a:42:29:05:ee:9d:6d:07:70:93:72:
ba:a0:56:0a:03:e6:63:97:9f:03:6a:d4:23:7b:ac:12:91:b4:
3b:c7:a4:f6:45:58:4c:3c:d2:6e:29:be:3e:ff:cc:de:66:71:
d4:68:9d:37:7c:7d:0e:19:97:0e:1c:c6:b2:3b:3d:3e:07:54:
f7:90:d1:16:c4:dd:df:f8:10:f8:f2:74:cb:ff:e2:4e:24:50:
fc:ae:14:b6:9c:e1:df:7c:62:6f:f9:ae:72:2d:d0:f7:6a:a5:
fb:57:b9:32:67:0f:0b:28:d3:55:aa:57:8c:95:02:18:e1:aa:
b2:d8:19:bc:89:6f:20:43:72:61:39:c4:38:3c:48:2d:98:8a:
63:56:1d:fa:7e:ba:0b:7e:7b:66:b3:19:00:43:69:14:b7:6e:
d2:42:23:eb:de:8d:8d:34:a4:d3:c0:6b:c6:af:0f:b9:33:62:
55:cf:7b:8b:60:bb:14:c3:0d:63:8e:10:9e:d2:52:16:9d:c9:
7e:0c:9a:ad:ab:00:b8:5f:c3:88:7f:d8:67:bf:0f:5d:fc:3c:
cd:3e:8a:c2:5b:58:a9:ab:d3:12:29:c6:5e:a4:7d:ba:a0:73:
e7:8a:ea:be
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 13 02:15:39 2025 by rpki-client