Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b7/00df29-5022-405e-895d-77ca89cf436a/1/urXl5gHL9dGdENTbR2qSOzs2-Cc.mft
File: urXl5gHL9dGdENTbR2qSOzs2-Cc.mft (raw, json)
Hash identifier: WU0REhKSLLu2Zofx8TmklOMgGzCrmcf7aK9MzBxq9Kg=
Subject key identifier: E4:8B:7D:46:D1:4E:D6:8A:2E:95:69:F7:AE:D7:5A:76:03:1D:B8:D5
Authority key identifier: BA:B5:E5:E6:01:CB:F5:D1:9D:10:D4:DB:47:6A:92:3B:3B:36:F8:27
Certificate issuer: /CN=bab5e5e601cbf5d19d10d4db476a923b3b36f827
Certificate serial: 01974D7C17DEB0916BADA37400B71DBED8F5
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/urXl5gHL9dGdENTbR2qSOzs2-Cc.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/b7/00df29-5022-405e-895d-77ca89cf436a/1/urXl5gHL9dGdENTbR2qSOzs2-Cc.mft
Manifest number: 1580
Signing time: Sun 08 Jun 2025 03:01:07 +0000
Manifest this update: Sun 08 Jun 2025 03:01:07 +0000
Manifest next update: Mon 09 Jun 2025 03:01:07 +0000
Files and hashes: 1: 8n66jbpw-c2Aqy4SU3OEjHIQ8Ng.roa (hash: 5aUols723XY3S6GAB1kKE/l7w8plVtAbUtwN3H30tYU=)
2: urXl5gHL9dGdENTbR2qSOzs2-Cc.crl (hash: XS+1pFLkNKT3QhfM73gIiGlB3TTnU3zl5R1BkyfQZgU=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/b7/00df29-5022-405e-895d-77ca89cf436a/1/urXl5gHL9dGdENTbR2qSOzs2-Cc.crl
rsync://rpki.ripe.net/repository/DEFAULT/b7/00df29-5022-405e-895d-77ca89cf436a/1/urXl5gHL9dGdENTbR2qSOzs2-Cc.mft
rsync://rpki.ripe.net/repository/DEFAULT/urXl5gHL9dGdENTbR2qSOzs2-Cc.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 09 Jun 2025 03:00:17 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:4d:7c:17:de:b0:91:6b:ad:a3:74:00:b7:1d:be:d8:f5
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=bab5e5e601cbf5d19d10d4db476a923b3b36f827
Validity
Not Before: Jun 8 03:01:07 2025 GMT
Not After : Jun 9 03:01:07 2025 GMT
Subject: CN=e48b7d46d14ed68a2e9569f7aed75a76031db8d5
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d2:a5:60:61:2c:e0:8d:09:f3:61:33:bf:ce:3a:
d9:17:63:a2:55:af:21:ec:dd:fc:d6:35:ef:29:78:
49:96:9a:b6:15:b7:45:fd:be:56:30:4f:36:eb:66:
cb:23:93:09:4d:d0:e3:d5:8a:83:32:d4:e9:d2:8b:
85:ac:46:85:c5:c5:bf:37:fd:0e:0c:ee:44:33:f4:
51:98:f1:66:c7:c9:88:53:9a:8e:39:4f:83:35:ca:
ee:a6:44:f5:49:07:55:5c:23:bd:b9:9a:77:16:93:
e6:e2:f4:21:23:21:2a:54:e3:fb:73:3e:3d:ec:83:
88:26:f7:ea:91:8a:5d:d4:85:83:37:69:8e:31:f7:
22:ea:0b:3b:d2:ed:0f:29:f8:e6:5a:b5:89:59:b0:
bc:40:c1:ce:6d:06:9d:58:80:9a:46:1a:4a:70:23:
be:00:1c:63:45:d7:83:79:ab:d6:90:20:30:3d:b1:
ac:54:96:ea:8a:c0:d9:4f:eb:1b:fc:20:b4:08:68:
9c:a7:9e:7a:2e:e8:f7:45:df:13:ee:ec:45:b0:de:
91:7f:cf:ed:73:95:5d:cb:25:eb:8c:ca:82:fc:97:
fd:ce:9b:92:1e:10:96:3b:26:0c:4c:9f:0a:0e:79:
17:7d:8c:6f:71:08:3c:8b:80:73:c9:4e:b0:dc:19:
e8:5b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E4:8B:7D:46:D1:4E:D6:8A:2E:95:69:F7:AE:D7:5A:76:03:1D:B8:D5
X509v3 Authority Key Identifier:
keyid:BA:B5:E5:E6:01:CB:F5:D1:9D:10:D4:DB:47:6A:92:3B:3B:36:F8:27
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/urXl5gHL9dGdENTbR2qSOzs2-Cc.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b7/00df29-5022-405e-895d-77ca89cf436a/1/urXl5gHL9dGdENTbR2qSOzs2-Cc.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/b7/00df29-5022-405e-895d-77ca89cf436a/1/urXl5gHL9dGdENTbR2qSOzs2-Cc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
03:88:7c:de:3e:9c:74:af:b8:99:17:99:31:c7:c6:7a:98:5c:
d3:aa:09:f4:d6:e2:a0:79:da:ee:1a:7f:26:74:b9:93:de:10:
e2:d5:f4:0c:4d:03:9d:a1:b9:cc:f6:47:2f:49:55:49:58:0d:
4f:86:26:c7:a8:e9:70:8a:bd:9a:d7:02:9a:37:f8:2c:cb:05:
bb:3b:28:44:f6:99:dc:95:24:36:15:7c:b9:d9:bc:67:b0:cd:
1b:2a:0a:1c:c7:e1:7d:d2:e2:82:86:41:dc:24:df:45:d8:d0:
ba:ec:ab:ad:71:bd:cb:1c:fe:b7:44:b6:61:e1:43:b4:5a:42:
1f:1b:ba:74:c3:07:a8:8d:0c:88:f7:fd:04:d8:3e:9f:a9:1e:
a1:78:07:85:7d:3d:af:ab:05:45:a4:92:9b:00:75:8a:ac:d7:
cf:83:ae:c9:97:85:5f:45:ce:57:5e:33:98:c7:99:62:d6:7f:
a4:2a:31:23:44:1f:4c:12:33:04:57:fc:29:a4:23:05:57:a0:
88:6c:6c:25:08:81:16:39:ce:78:72:d4:fc:31:49:b4:4c:26:
09:56:77:c9:93:82:41:fc:a1:e3:94:f1:6e:7b:e9:97:0a:02:
6a:39:db:a9:a4:e0:af:2b:57:df:60:92:b2:31:c4:e7:f0:5d:
cf:07:89:a9
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jun 8 08:45:04 2025 by rpki-client