Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/bc/9e0f5e-8141-43c9-8f44-33ebab24bbb3/1/u303nAT4F1s172c9dsaORMcOgz8.mft
File: u303nAT4F1s172c9dsaORMcOgz8.mft (raw, json)
Hash identifier: Rsp/BgHLy2zyoUPJxNdcdzUdtnT9gnUmQfRLYRhUxfo=
Subject key identifier: D9:A9:1B:00:C6:50:DB:AA:2C:91:4B:29:A4:A7:E8:EC:94:D6:7A:C4
Authority key identifier: BB:7D:37:9C:04:F8:17:5B:35:EF:67:3D:76:C6:8E:44:C7:0E:83:3F
Certificate issuer: /CN=bb7d379c04f8175b35ef673d76c68e44c70e833f
Certificate serial: 0195790FC04C35996E92F83F45B6F631E387
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/u303nAT4F1s172c9dsaORMcOgz8.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/bc/9e0f5e-8141-43c9-8f44-33ebab24bbb3/1/u303nAT4F1s172c9dsaORMcOgz8.mft
Manifest number: 148B
Signing time: Sun 09 Mar 2025 04:00:30 +0000
Manifest this update: Sun 09 Mar 2025 04:00:30 +0000
Manifest next update: Mon 10 Mar 2025 04:00:30 +0000
Files and hashes: 1: SQLnF00Areuw5taMbfkFtdu1wjU.roa (hash: 5CPinLFNfDrIVGYwg0jIgmWM06cJ2LCZHAkJ/JRfIwc=)
2: u303nAT4F1s172c9dsaORMcOgz8.crl (hash: +sWAR277zdjLhj+1FNctEOLVanBxIIcLz0Q/lNkN8/4=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/bc/9e0f5e-8141-43c9-8f44-33ebab24bbb3/1/u303nAT4F1s172c9dsaORMcOgz8.crl
rsync://rpki.ripe.net/repository/DEFAULT/bc/9e0f5e-8141-43c9-8f44-33ebab24bbb3/1/u303nAT4F1s172c9dsaORMcOgz8.mft
rsync://rpki.ripe.net/repository/DEFAULT/u303nAT4F1s172c9dsaORMcOgz8.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 10 Mar 2025 04:00:30 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:95:79:0f:c0:4c:35:99:6e:92:f8:3f:45:b6:f6:31:e3:87
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=bb7d379c04f8175b35ef673d76c68e44c70e833f
Validity
Not Before: Mar 9 04:00:30 2025 GMT
Not After : Mar 10 04:00:30 2025 GMT
Subject: CN=d9a91b00c650dbaa2c914b29a4a7e8ec94d67ac4
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b4:db:96:7c:cf:e7:a1:39:19:30:39:cc:cb:ac:
10:d6:f1:ba:7d:eb:b3:5d:ea:88:a1:2f:a5:38:32:
4a:1a:29:71:f1:ac:f7:da:47:27:b3:91:aa:09:3c:
da:a0:7a:3c:f6:3e:f7:66:be:ab:b1:5a:2c:f3:56:
ee:71:2a:5a:45:0c:d4:c1:91:cf:f9:a0:28:24:f4:
85:4a:33:b2:e2:57:24:a8:48:32:da:ea:48:26:bf:
1c:f8:9b:06:65:4e:3b:ae:7c:02:52:aa:fc:aa:e4:
d3:a2:da:9d:46:b5:de:87:2a:52:4c:d1:aa:36:80:
d7:38:be:95:66:54:84:c4:84:83:c2:4c:ed:a5:f6:
75:64:bd:d3:ac:e8:3f:b6:0b:fb:f8:2d:9c:fa:f8:
d1:75:fe:ec:87:42:d9:19:52:c1:0f:9e:88:47:25:
3a:1d:bd:83:fe:c0:93:5e:de:e1:ec:4a:f0:77:01:
e2:3c:e9:4e:d4:a3:10:8b:2d:57:ae:c4:97:e8:f0:
db:97:ae:e2:91:59:f4:be:08:a6:3b:65:0c:a1:66:
51:47:bc:f9:6b:8b:44:3c:b1:0f:3e:d0:e0:35:73:
ac:7e:fa:3b:25:29:33:2a:0c:15:53:d3:39:91:e3:
58:5c:76:d6:0b:9a:7c:2d:1e:8e:c6:76:db:41:08:
2b:73
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D9:A9:1B:00:C6:50:DB:AA:2C:91:4B:29:A4:A7:E8:EC:94:D6:7A:C4
X509v3 Authority Key Identifier:
keyid:BB:7D:37:9C:04:F8:17:5B:35:EF:67:3D:76:C6:8E:44:C7:0E:83:3F
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/u303nAT4F1s172c9dsaORMcOgz8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/bc/9e0f5e-8141-43c9-8f44-33ebab24bbb3/1/u303nAT4F1s172c9dsaORMcOgz8.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/bc/9e0f5e-8141-43c9-8f44-33ebab24bbb3/1/u303nAT4F1s172c9dsaORMcOgz8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
76:d0:f8:78:4e:67:11:b7:78:d1:21:fb:ba:f8:a5:4c:a7:c6:
9b:ff:a0:46:b2:f2:42:d3:04:4b:5f:1f:4c:96:5b:8e:f9:79:
34:36:1f:10:ac:0c:2b:03:84:f3:f7:41:e9:37:3c:81:36:81:
41:b6:22:6b:28:d3:5c:85:7c:df:03:09:90:4f:6e:7c:f5:c9:
07:dd:85:5d:66:b7:ad:55:28:2d:ea:b2:6c:d1:11:5d:ba:84:
2d:7e:9c:54:6e:7d:1a:c5:f3:6f:ed:1d:41:4c:d1:c7:80:da:
b0:a4:66:6c:0c:60:ae:e0:27:81:ec:49:b3:5b:53:44:87:5d:
b3:13:1d:fa:db:12:0d:76:e2:67:67:8a:2e:fa:9a:f9:a7:2d:
bf:93:f8:99:46:e9:3b:1a:6f:ef:27:b9:af:dc:d7:1e:a6:ae:
c1:fa:20:2d:1d:97:ab:d6:9e:e2:73:9d:4a:f7:05:b9:9d:9f:
9a:04:87:25:42:b8:7b:e8:b6:72:51:24:28:a8:3e:3b:01:8f:
76:40:d6:1a:fd:62:53:40:16:58:78:75:eb:b7:c8:23:27:20:
64:d7:b7:d4:81:75:a2:e7:7d:85:08:cb:52:e5:7b:8e:27:a2:
61:40:a4:1c:ca:31:92:bc:0b:8f:8c:ae:7d:8e:2b:ae:37:fa:
41:4f:52:d7
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Mar 9 11:39:44 2025 by rpki-client