Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b3/d6e44d-89ab-460e-9379-95c50531d4d8/1/u_s2ccn8dGocpjRJVGVXyp6afW0.mft
File: u_s2ccn8dGocpjRJVGVXyp6afW0.mft (raw, json)
Hash identifier: EOYf1ovRZOS+Nk02fjkPegTuaubb6lpHGHnMKEacYWQ=
Subject key identifier: 7E:F2:49:4D:7B:D4:F3:5B:A4:03:9F:62:6A:B3:37:1F:EC:BE:07:6E
Authority key identifier: BB:FB:36:71:C9:FC:74:6A:1C:A6:34:49:54:65:57:CA:9E:9A:7D:6D
Certificate issuer: /CN=bbfb3671c9fc746a1ca63449546557ca9e9a7d6d
Certificate serial: 0196108DE7D9805065CDE47FBC44945C41BE
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/u_s2ccn8dGocpjRJVGVXyp6afW0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/b3/d6e44d-89ab-460e-9379-95c50531d4d8/1/u_s2ccn8dGocpjRJVGVXyp6afW0.mft
Manifest number: 0FB1
Signing time: Mon 07 Apr 2025 14:00:57 +0000
Manifest this update: Mon 07 Apr 2025 14:00:57 +0000
Manifest next update: Tue 08 Apr 2025 14:00:57 +0000
Files and hashes: 1: 32nP1LvtRVdCKIN4142saT_Xx00.roa (hash: +Gb5LqGe4SV2w+cVQK+90z4z/8TXd3aISD85SuHYYCk=)
2: u_s2ccn8dGocpjRJVGVXyp6afW0.crl (hash: eXhoRJvlfJcqCPcftSNLUCw+p0NUkWObLAo6ahmD9yU=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/b3/d6e44d-89ab-460e-9379-95c50531d4d8/1/u_s2ccn8dGocpjRJVGVXyp6afW0.crl
rsync://rpki.ripe.net/repository/DEFAULT/b3/d6e44d-89ab-460e-9379-95c50531d4d8/1/u_s2ccn8dGocpjRJVGVXyp6afW0.mft
rsync://rpki.ripe.net/repository/DEFAULT/u_s2ccn8dGocpjRJVGVXyp6afW0.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 08 Apr 2025 14:00:57 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:10:8d:e7:d9:80:50:65:cd:e4:7f:bc:44:94:5c:41:be
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=bbfb3671c9fc746a1ca63449546557ca9e9a7d6d
Validity
Not Before: Apr 7 14:00:57 2025 GMT
Not After : Apr 8 14:00:57 2025 GMT
Subject: CN=7ef2494d7bd4f35ba4039f626ab3371fecbe076e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ca:28:6e:10:20:ce:72:6c:03:f7:d2:cb:ba:7b:
55:9d:21:15:a4:d9:4b:3f:f8:c2:c3:9f:8f:b1:d0:
fb:73:3e:70:78:6a:f1:1a:b2:b0:3c:eb:bc:64:00:
23:07:50:f8:9d:4c:c5:42:9e:ca:90:f6:5e:36:32:
96:3e:19:c2:1e:7c:b9:95:0a:b6:46:a3:e5:1c:e2:
e2:05:01:b0:ef:23:2b:d9:53:06:b2:1a:66:d4:4b:
f8:b2:fd:5d:c3:c7:1b:c2:8b:04:73:b6:e7:c9:13:
bc:f4:1e:96:d8:4b:f0:61:0a:4a:4e:13:db:97:8c:
0a:2e:5e:7c:8c:95:eb:6f:17:a6:64:1a:39:f1:32:
08:14:c7:09:00:0d:8c:ac:2c:c3:7c:d2:30:3e:18:
fb:e5:1a:43:4e:20:09:b7:6c:c8:17:77:98:6f:ba:
4c:18:bd:a4:56:70:74:df:31:2c:08:4a:a9:39:d9:
5e:5b:94:2f:9a:70:6d:dc:5a:a9:23:fd:af:c8:59:
83:76:e4:39:b2:33:e9:61:36:2c:7f:14:f4:32:46:
0f:58:62:de:ab:bf:b9:77:eb:6e:26:c0:bc:08:38:
3a:02:6b:b9:a4:c7:bc:7a:10:6d:74:a0:51:42:8d:
8b:80:e0:70:f0:b8:bf:8b:d7:6b:be:6f:12:35:63:
10:23
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
7E:F2:49:4D:7B:D4:F3:5B:A4:03:9F:62:6A:B3:37:1F:EC:BE:07:6E
X509v3 Authority Key Identifier:
keyid:BB:FB:36:71:C9:FC:74:6A:1C:A6:34:49:54:65:57:CA:9E:9A:7D:6D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/u_s2ccn8dGocpjRJVGVXyp6afW0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b3/d6e44d-89ab-460e-9379-95c50531d4d8/1/u_s2ccn8dGocpjRJVGVXyp6afW0.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/b3/d6e44d-89ab-460e-9379-95c50531d4d8/1/u_s2ccn8dGocpjRJVGVXyp6afW0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
20:94:92:b6:1e:15:99:02:13:b1:02:11:32:b0:c0:e9:ef:73:
26:d9:f8:05:f9:ba:45:24:a8:74:f9:34:c6:b6:6f:3e:0a:79:
8a:84:96:70:e5:fe:6e:3c:24:be:ea:6b:3b:b4:2e:7d:96:46:
2f:eb:1d:06:df:4e:c6:80:2e:fd:ab:d8:76:f2:79:80:f7:06:
51:06:ab:99:bf:30:63:04:8b:90:e9:8d:fe:be:6e:1b:21:81:
dd:a9:10:d1:ff:36:74:f2:e2:3e:f9:f9:61:b8:aa:07:c9:9c:
1c:84:60:e9:de:91:ba:e6:3e:89:73:6f:27:82:6f:d6:59:85:
64:81:4b:27:02:5f:96:62:86:04:de:4e:6f:bb:20:27:bf:c3:
65:ac:5c:94:69:a8:71:bc:b9:2a:4b:dd:d8:16:e3:b1:40:79:
5d:35:27:b3:4a:51:a2:a6:6f:fd:a1:0d:d1:12:36:b7:fc:77:
08:98:81:14:70:b5:3f:c5:8b:d1:09:66:7f:62:68:74:d8:6b:
83:a5:8a:1a:b8:2b:f6:df:c8:f1:59:4f:d1:61:2a:d5:f2:35:
36:65:0c:76:07:8f:5c:97:d5:89:da:e4:c8:f5:9c:c1:8c:1f:
f9:6c:0b:d5:da:65:b0:56:53:22:5a:07:b4:08:ff:e5:89:e6:
39:1a:af:7b
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZYQjefZgFBlzeR/vESUXEG+MA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGJiZmIzNjcxYzlmYzc0NmExY2E2MzQ0OTU0NjU1N2NhOWU5
YTdkNmQwHhcNMjUwNDA3MTQwMDU3WhcNMjUwNDA4MTQwMDU3WjAzMTEwLwYDVQQD
Eyg3ZWYyNDk0ZDdiZDRmMzViYTQwMzlmNjI2YWIzMzcxZmVjYmUwNzZlMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAyihuECDOcmwD99LLuntVnSEVpNlL
P/jCw5+PsdD7cz5weGrxGrKwPOu8ZAAjB1D4nUzFQp7KkPZeNjKWPhnCHny5lQq2
RqPlHOLiBQGw7yMr2VMGshpm1Ev4sv1dw8cbwosEc7bnyRO89B6W2EvwYQpKThPb
l4wKLl58jJXrbxemZBo58TIIFMcJAA2MrCzDfNIwPhj75RpDTiAJt2zIF3eYb7pM
GL2kVnB03zEsCEqpOdleW5QvmnBt3FqpI/2vyFmDduQ5sjPpYTYsfxT0MkYPWGLe
q7+5d+tuJsC8CDg6Amu5pMe8ehBtdKBRQo2LgOBw8Li/i9drvm8SNWMQIwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFH7ySU171PNbpAOfYmqzNx/svgduMB8GA1UdIwQY
MBaAFLv7NnHJ/HRqHKY0SVRlV8qemn1tMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvdV9zMmNjbjhkR29jcGpSSlZHVlh5cDZhZlcwLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9iMy9kNmU0NGQtODlhYi00NjBlLTkzNzkt
OTVjNTA1MzFkNGQ4LzEvdV9zMmNjbjhkR29jcGpSSlZHVlh5cDZhZlcwLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9iMy9kNmU0NGQtODlhYi00NjBlLTkzNzktOTVjNTA1MzFkNGQ4
LzEvdV9zMmNjbjhkR29jcGpSSlZHVlh5cDZhZlcwLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAIJSSth4V
mQITsQIRMrDA6e9zJtn4Bfm6RSSodPk0xrZvPgp5ioSWcOX+bjwkvuprO7QufZZG
L+sdBt9OxoAu/avYdvJ5gPcGUQarmb8wYwSLkOmN/r5uGyGB3akQ0f82dPLiPvn5
YbiqB8mcHIRg6d6RuuY+iXNvJ4Jv1lmFZIFLJwJflmKGBN5Ob7sgJ7/DZaxclGmo
cby5Kkvd2BbjsUB5XTUns0pRoqZv/aEN0RI2t/x3CJiBFHC1P8WL0Qlmf2JodNhr
g6WKGrgr9t/I8VlP0WEq1fI1NmUMdgePXJfVidrkyPWcwYwf+WwL1dplsFZTIloH
tAj/5YnmORqvew==
-----END CERTIFICATE-----
Generated at Mon Apr 7 23:27:26 2025 by rpki-client