Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/76/11cd10-3ef7-4105-8248-ba51323db4e5/1/u_Th_bQkqRICI7OnXGzMMbb2Iko.mft
File: u_Th_bQkqRICI7OnXGzMMbb2Iko.mft (raw, json)
Hash identifier: ZOS6/tgKiOWawUFx4/d29hDQCwnFY+hBYt/0IyWGjMI=
Subject key identifier: EA:1B:8D:8D:E2:81:7C:5C:D3:F1:19:F2:5F:D2:1D:D2:74:FD:A8:C3
Authority key identifier: BB:F4:E1:FD:B4:24:A9:12:02:23:B3:A7:5C:6C:CC:31:B6:F6:22:4A
Certificate issuer: /CN=bbf4e1fdb424a9120223b3a75c6ccc31b6f6224a
Certificate serial: 01962D18F6C6B517D5939153B67E865B1337
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/u_Th_bQkqRICI7OnXGzMMbb2Iko.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/76/11cd10-3ef7-4105-8248-ba51323db4e5/1/u_Th_bQkqRICI7OnXGzMMbb2Iko.mft
Manifest number: 13C0
Signing time: Sun 13 Apr 2025 03:02:12 +0000
Manifest this update: Sun 13 Apr 2025 03:02:12 +0000
Manifest next update: Mon 14 Apr 2025 03:02:12 +0000
Files and hashes: 1: Hd2tJFK8FHI5IxfZApcFzOSYT3E.roa (hash: M8+A1yW8hq7cWzg9bjqGF7iG0x4F0G6mxL/iqnm6fL0=)
2: kWTTmcIIlDRdQ1_UbjyGHGmL5gQ.roa (hash: 95qxE5aHeVHU5YRLlJvt+EwGhxpcIfgYbsmlarjDLf0=)
3: ktlX_rOO3raXC83lO5IDJm4TL_s.roa (hash: Zr/8yGPdIQcj4Ieb5b5PEzjsiZpTZuJn6Ep06lhBllc=)
4: u_Th_bQkqRICI7OnXGzMMbb2Iko.crl (hash: k+/CjcYR7yrD2rVzSVTsX77/cHm7A7o9XojcIZ0yxmU=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/76/11cd10-3ef7-4105-8248-ba51323db4e5/1/u_Th_bQkqRICI7OnXGzMMbb2Iko.crl
rsync://rpki.ripe.net/repository/DEFAULT/76/11cd10-3ef7-4105-8248-ba51323db4e5/1/u_Th_bQkqRICI7OnXGzMMbb2Iko.mft
rsync://rpki.ripe.net/repository/DEFAULT/u_Th_bQkqRICI7OnXGzMMbb2Iko.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 14 Apr 2025 03:00:59 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:2d:18:f6:c6:b5:17:d5:93:91:53:b6:7e:86:5b:13:37
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=bbf4e1fdb424a9120223b3a75c6ccc31b6f6224a
Validity
Not Before: Apr 13 03:02:12 2025 GMT
Not After : Apr 14 03:02:12 2025 GMT
Subject: CN=ea1b8d8de2817c5cd3f119f25fd21dd274fda8c3
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:98:e1:0e:31:26:58:13:42:17:6f:d4:4c:82:9e:
23:78:09:a2:ff:67:a6:57:d4:ff:2b:6d:d8:d2:f8:
d9:98:f5:b3:a6:80:c9:6b:3c:ec:7f:65:72:c0:04:
c2:47:f0:32:19:6f:86:23:1d:f2:52:b2:75:28:df:
7c:59:3a:96:7d:93:00:8e:e8:08:bc:5f:ee:65:8e:
bf:e0:31:16:f8:c6:0a:92:d2:b6:f9:0b:c5:14:17:
1c:a6:1b:49:2f:94:6c:a0:0b:6a:88:29:74:db:b0:
f1:38:c3:71:0b:27:0a:89:6a:08:a9:72:ca:b5:f4:
7a:11:b0:79:d2:04:f1:c9:db:67:61:77:da:52:23:
dc:5f:63:ef:4e:9d:35:27:68:b4:da:0a:13:23:5e:
1a:c4:7d:8d:b4:60:b5:ed:67:0b:02:b7:cc:ec:63:
73:cf:43:a8:4a:20:33:b3:bd:8f:22:a5:c1:34:b8:
85:8a:16:99:a6:c5:4f:0a:77:45:c6:7c:29:58:fa:
d5:8e:b8:9d:44:18:05:78:0a:1f:9c:af:bb:4a:fe:
44:92:e3:96:1e:40:6e:82:82:ac:b7:b0:16:73:98:
41:24:f9:6f:28:8b:c1:50:90:40:1a:90:a4:2f:e1:
b8:be:b1:0e:48:7b:d2:27:ee:60:0a:4d:ac:35:68:
0e:87
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
EA:1B:8D:8D:E2:81:7C:5C:D3:F1:19:F2:5F:D2:1D:D2:74:FD:A8:C3
X509v3 Authority Key Identifier:
keyid:BB:F4:E1:FD:B4:24:A9:12:02:23:B3:A7:5C:6C:CC:31:B6:F6:22:4A
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/u_Th_bQkqRICI7OnXGzMMbb2Iko.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/76/11cd10-3ef7-4105-8248-ba51323db4e5/1/u_Th_bQkqRICI7OnXGzMMbb2Iko.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/76/11cd10-3ef7-4105-8248-ba51323db4e5/1/u_Th_bQkqRICI7OnXGzMMbb2Iko.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
66:18:ca:82:08:26:dc:09:b8:a6:32:7b:58:f2:f0:81:8e:c4:
a3:9d:e8:65:00:aa:6f:76:aa:39:e2:48:bc:6e:8d:f3:66:be:
ab:ff:1a:f9:b3:33:d5:bc:1c:8e:b1:db:93:e9:4f:53:cd:bb:
a4:c5:a6:e3:2a:5e:03:81:6f:d9:f9:fd:c5:73:9e:aa:40:67:
41:3c:1b:2a:7b:bf:54:b8:85:dc:51:32:40:4e:89:27:ea:96:
ad:c9:da:24:16:70:bd:12:00:51:ec:59:7c:ce:fb:01:d3:87:
b8:4c:a6:70:43:4e:2e:c0:ed:69:b9:2b:2d:94:89:a3:44:04:
bd:11:3b:6a:b5:2c:e3:5d:34:57:95:35:85:83:b3:cf:ef:59:
4d:08:bf:34:74:f7:7a:52:42:eb:83:5c:ca:2d:50:10:61:91:
44:9b:42:a8:c3:8f:a2:b9:a1:95:89:b0:6b:39:59:7f:a5:27:
e0:af:9d:b4:b1:e0:d9:81:df:59:8b:ed:bd:5f:1c:b1:ad:a5:
49:62:82:f3:d7:a6:ea:ac:3f:8e:ff:cb:c7:c5:48:48:15:1f:
a4:ff:d3:90:c9:d5:14:fe:e8:cb:c9:58:a4:33:64:fc:60:21:
27:42:5c:f3:32:42:ef:09:3a:b0:08:5e:08:78:e7:ee:ee:fe:
c6:b4:63:57
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Apr 13 11:58:42 2025 by rpki-client