Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/98/7a7ce6-06a6-41d3-b5fa-97174a96e815/1/u0u9M0WB3c3ZNbzvR9mgTLzl_e0.mft
File: u0u9M0WB3c3ZNbzvR9mgTLzl_e0.mft (raw, json)
Hash identifier: ttYYR7YbjzoKE2IVVCVRuTf/8kwTPEUI/7ImnpVLZpI=
Subject key identifier: 8B:58:4F:61:85:AB:E2:27:43:3D:36:49:FC:E3:F6:70:11:34:CC:2C
Authority key identifier: BB:4B:BD:33:45:81:DD:CD:D9:35:BC:EF:47:D9:A0:4C:BC:E5:FD:ED
Certificate issuer: /CN=bb4bbd334581ddcdd935bcef47d9a04cbce5fded
Certificate serial: 019601C01F286A0AAF37618D1DCB5638ED71
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/u0u9M0WB3c3ZNbzvR9mgTLzl_e0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/98/7a7ce6-06a6-41d3-b5fa-97174a96e815/1/u0u9M0WB3c3ZNbzvR9mgTLzl_e0.mft
Manifest number: 14D3
Signing time: Fri 04 Apr 2025 17:01:30 +0000
Manifest this update: Fri 04 Apr 2025 17:01:30 +0000
Manifest next update: Sat 05 Apr 2025 17:01:30 +0000
Files and hashes: 1: 83yHnqR55YpNJ6sDNSfeUwQPJSU.roa (hash: e+9U+VRAv+pY6TcOM+TtKl2lfx0rhjB5FDO+9Jovf1k=)
2: 9VNSF5UtFgYDcn-DHdVIflEkK2g.roa (hash: Bd8gptXnsyCaZSIm/0DdWBDRk8HDyH1Zijph4Kg4wIw=)
3: u0u9M0WB3c3ZNbzvR9mgTLzl_e0.crl (hash: +7MDS4K9z/dDoFkcjvKMUFz/hCkhbITAA5qk1uc0bMc=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/98/7a7ce6-06a6-41d3-b5fa-97174a96e815/1/u0u9M0WB3c3ZNbzvR9mgTLzl_e0.crl
rsync://rpki.ripe.net/repository/DEFAULT/98/7a7ce6-06a6-41d3-b5fa-97174a96e815/1/u0u9M0WB3c3ZNbzvR9mgTLzl_e0.mft
rsync://rpki.ripe.net/repository/DEFAULT/u0u9M0WB3c3ZNbzvR9mgTLzl_e0.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 05 Apr 2025 17:01:30 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:01:c0:1f:28:6a:0a:af:37:61:8d:1d:cb:56:38:ed:71
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=bb4bbd334581ddcdd935bcef47d9a04cbce5fded
Validity
Not Before: Apr 4 17:01:30 2025 GMT
Not After : Apr 5 17:01:30 2025 GMT
Subject: CN=8b584f6185abe227433d3649fce3f6701134cc2c
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ad:8c:13:77:8b:78:6f:bb:67:9c:8b:b3:f4:b9:
4b:10:24:68:ee:b1:84:95:eb:50:9c:7b:81:06:5d:
99:4a:63:8d:55:49:1c:23:80:38:6c:cc:9c:78:07:
a3:96:6b:17:77:65:d0:c4:f5:4d:44:da:bc:64:3b:
4f:17:7e:cf:39:ef:5d:59:32:fe:14:d3:55:fa:fe:
7d:38:d2:c6:0d:da:b3:ed:a2:3b:60:9a:7b:ab:c8:
b1:88:78:21:b8:b5:1f:a4:ee:b7:e5:70:a7:53:6a:
96:b4:3b:1b:02:fc:d1:24:9f:ab:fb:27:7d:29:27:
5a:00:3a:97:e2:25:ac:3f:13:1b:cd:d3:81:57:a6:
77:15:df:88:ab:60:6a:81:c5:ee:15:ec:60:65:65:
f9:0e:bb:ce:9e:f1:b0:c6:c7:72:3a:1e:92:d3:71:
10:00:80:17:00:b3:b5:ff:50:7a:7b:e8:c3:f7:d3:
e1:83:16:1a:7f:0e:79:ac:c5:4a:9e:b5:70:8b:c2:
7d:f7:0a:ac:10:c8:d8:81:70:9e:a8:77:a3:cb:cc:
17:2f:08:f0:f7:28:f8:0b:fb:b1:bc:31:58:de:11:
05:69:b2:d1:32:1a:39:5a:e8:65:4c:3d:95:7a:64:
0c:c4:32:8d:c2:4f:cf:98:08:13:02:c2:04:1c:f6:
50:c5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
8B:58:4F:61:85:AB:E2:27:43:3D:36:49:FC:E3:F6:70:11:34:CC:2C
X509v3 Authority Key Identifier:
keyid:BB:4B:BD:33:45:81:DD:CD:D9:35:BC:EF:47:D9:A0:4C:BC:E5:FD:ED
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/u0u9M0WB3c3ZNbzvR9mgTLzl_e0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/98/7a7ce6-06a6-41d3-b5fa-97174a96e815/1/u0u9M0WB3c3ZNbzvR9mgTLzl_e0.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/98/7a7ce6-06a6-41d3-b5fa-97174a96e815/1/u0u9M0WB3c3ZNbzvR9mgTLzl_e0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
3f:52:82:ef:ef:6d:6e:9b:c3:8d:28:bc:8f:d3:3d:91:73:cf:
4e:2b:8c:3f:24:2a:83:12:07:e3:8a:ed:66:3e:19:46:84:26:
de:f4:23:40:f4:92:47:9c:6a:1b:ef:03:27:d4:64:3f:d7:5c:
37:23:bf:5a:f5:a8:3b:0f:66:58:9a:46:12:92:f8:90:18:71:
12:e7:da:a4:4f:9c:a6:2d:8f:48:85:d1:cd:42:57:ca:9a:87:
6a:c4:78:b0:fc:9b:d2:91:16:8e:27:92:e7:3f:df:b8:72:bd:
d1:22:29:3b:f0:53:5e:6f:17:19:34:be:54:a2:3e:cc:79:c6:
a5:ec:b8:bc:a6:eb:79:b3:fe:03:e5:01:4d:f9:1b:11:05:63:
b1:b0:76:4c:b5:1a:be:8e:bb:e9:4a:7e:fb:af:9c:2f:a0:43:
4d:04:3f:86:62:ff:2a:57:c6:0d:3f:17:f6:c9:b6:c0:fa:f9:
43:27:67:ea:3f:36:56:e7:25:f4:90:b7:d6:e3:72:28:dd:e6:
f3:1c:22:60:89:2b:b0:18:ab:e3:ad:75:63:14:c0:a8:a5:90:
8e:95:09:e1:9b:2e:20:b9:84:1c:b0:29:f9:4d:61:e6:9a:e1:
94:c8:8c:ee:88:6e:ab:7f:18:57:ff:cb:5f:55:48:1c:10:da:
e7:1e:55:7c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 5 03:50:50 2025 by rpki-client