Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/92/0ca59b-32d1-46a2-be48-0c33e1264d7f/1/u5NpM9w6oDs9qgbls4c_Nb2rVdI.mft
File: u5NpM9w6oDs9qgbls4c_Nb2rVdI.mft (raw, json)
Hash identifier: UR1sAISICeUxO1Yd2K2MXnIT2xJ8KJ9GxXXVV32m8+Y=
Subject key identifier: 67:B1:C6:A3:19:78:D1:93:7D:58:6D:98:81:59:5E:EE:1F:C9:D1:29
Authority key identifier: BB:93:69:33:DC:3A:A0:3B:3D:AA:06:E5:B3:87:3F:35:BD:AB:55:D2
Certificate issuer: /CN=bb936933dc3aa03b3daa06e5b3873f35bdab55d2
Certificate serial: 0196545C5BE707FC5F1FE49DF82AA623B772
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/u5NpM9w6oDs9qgbls4c_Nb2rVdI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/92/0ca59b-32d1-46a2-be48-0c33e1264d7f/1/u5NpM9w6oDs9qgbls4c_Nb2rVdI.mft
Manifest number: 02D8
Signing time: Sun 20 Apr 2025 18:01:00 +0000
Manifest this update: Sun 20 Apr 2025 18:01:00 +0000
Manifest next update: Mon 21 Apr 2025 18:01:00 +0000
Files and hashes: 1: 1-d2k_vU-BkEDRcLdH-TIekg9VxQ.roa (hash: BNmjLGfRynwPkim2jPmJ7ZmYJ2M4K6NMjQ6A9ZIWsHE=)
2: u5NpM9w6oDs9qgbls4c_Nb2rVdI.crl (hash: FhtPfWeGJ7zYWWiXymlcNBM68mpzwx6o32tAPMed4kw=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/92/0ca59b-32d1-46a2-be48-0c33e1264d7f/1/u5NpM9w6oDs9qgbls4c_Nb2rVdI.crl
rsync://rpki.ripe.net/repository/DEFAULT/92/0ca59b-32d1-46a2-be48-0c33e1264d7f/1/u5NpM9w6oDs9qgbls4c_Nb2rVdI.mft
rsync://rpki.ripe.net/repository/DEFAULT/u5NpM9w6oDs9qgbls4c_Nb2rVdI.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 21 Apr 2025 18:01:00 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:54:5c:5b:e7:07:fc:5f:1f:e4:9d:f8:2a:a6:23:b7:72
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=bb936933dc3aa03b3daa06e5b3873f35bdab55d2
Validity
Not Before: Apr 20 18:01:00 2025 GMT
Not After : Apr 21 18:01:00 2025 GMT
Subject: CN=67b1c6a31978d1937d586d9881595eee1fc9d129
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ac:9c:73:b6:64:8e:46:6b:aa:60:08:84:16:d3:
f9:f4:2f:11:3c:16:17:df:18:7c:dc:fa:ab:35:b3:
d0:45:cc:03:e0:5a:ce:d0:c0:44:0d:65:27:e2:83:
4a:12:11:31:df:40:1a:e8:8b:75:54:be:09:09:35:
72:dd:bf:1b:d9:31:24:3e:81:5f:1b:9b:66:a0:0e:
db:90:15:15:80:bd:61:43:43:2b:36:5e:19:04:89:
89:44:de:5f:41:58:f0:6e:91:bd:c7:5c:e4:06:34:
d3:77:1e:e0:30:a9:d8:8a:bc:18:bc:67:e5:26:f5:
20:62:26:e9:96:7f:95:90:d9:a6:e6:9c:41:58:bc:
cb:06:12:41:f2:19:06:ad:ea:1f:75:92:a2:a3:3b:
71:94:9c:bc:08:13:45:c3:88:06:5b:a9:50:71:8c:
30:b2:49:60:62:04:7d:3c:ea:cb:20:2f:1e:36:4f:
3e:3f:02:6c:1a:eb:e0:ac:28:8b:54:a9:be:69:29:
50:cb:5e:ca:4c:7f:05:e4:ed:b9:24:6b:d0:87:63:
b5:bf:5e:c8:86:e5:87:2e:86:25:f7:89:56:67:6e:
c6:d2:4c:53:94:c1:b7:70:7a:d3:f0:e8:aa:fe:e6:
62:52:7d:30:a8:69:64:68:9c:ab:80:bc:fb:58:ca:
eb:3f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
67:B1:C6:A3:19:78:D1:93:7D:58:6D:98:81:59:5E:EE:1F:C9:D1:29
X509v3 Authority Key Identifier:
keyid:BB:93:69:33:DC:3A:A0:3B:3D:AA:06:E5:B3:87:3F:35:BD:AB:55:D2
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/u5NpM9w6oDs9qgbls4c_Nb2rVdI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/92/0ca59b-32d1-46a2-be48-0c33e1264d7f/1/u5NpM9w6oDs9qgbls4c_Nb2rVdI.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/92/0ca59b-32d1-46a2-be48-0c33e1264d7f/1/u5NpM9w6oDs9qgbls4c_Nb2rVdI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
0b:f0:9e:4c:c4:7b:ee:29:68:b5:d6:09:0f:43:46:ff:33:76:
c1:f8:6e:b5:e6:6e:eb:62:1c:45:59:01:8d:13:54:b9:f7:75:
14:30:f0:10:43:d5:fa:d3:24:f8:00:06:94:89:53:c1:86:19:
19:1e:88:7f:46:90:4f:40:f5:04:79:27:f6:31:e8:97:27:ed:
3c:a4:0b:aa:e2:8e:81:2b:3f:3b:06:12:b3:d4:6f:1d:12:7d:
81:5c:57:dc:1d:c6:91:f2:49:aa:cd:b7:49:4d:dc:14:6c:50:
b6:e7:18:43:99:e0:db:65:56:b5:6c:c9:8e:fb:71:eb:4e:f3:
de:de:20:00:92:f1:f4:1b:51:40:d6:41:4a:c2:8c:ed:5e:1b:
92:6f:f1:08:12:d6:8f:2f:62:bc:5d:d3:f0:a5:46:8b:89:4a:
c2:96:36:67:f5:02:1e:fe:88:d9:48:60:59:d1:d0:6d:4f:90:
fb:c1:5b:84:78:13:c6:e9:3e:65:c8:9c:a2:0f:5e:00:8f:8c:
ab:01:4b:03:bc:89:51:f8:7d:45:5b:09:08:86:f4:1c:90:48:
e8:e3:22:10:e2:69:a1:6b:f4:dd:14:8a:47:b0:f6:0b:f8:f2:
a3:9d:89:a1:a4:0d:00:df:dd:3a:a8:30:9f:c4:49:0b:81:6d:
88:18:ed:d4
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 21 02:55:21 2025 by rpki-client