Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d0/4008e4-d984-43b3-a51e-b3c742543ddf/1/u0sZOGaLJ7BSxoPR4mDAzT1Wh1s.mft
File: u0sZOGaLJ7BSxoPR4mDAzT1Wh1s.mft (raw, json)
Hash identifier: o+ZrsXTMjOi5D/AKh9bBLIuIYudiBb8W4fcS/t2ZjjI=
Subject key identifier: 4A:53:81:06:1B:B4:C1:E7:4E:5C:3E:61:5E:51:75:40:A5:3C:C9:ED
Authority key identifier: BB:4B:19:38:66:8B:27:B0:52:C6:83:D1:E2:60:C0:CD:3D:56:87:5B
Certificate issuer: /CN=bb4b1938668b27b052c683d1e260c0cd3d56875b
Certificate serial: 01974CA038E9D8D5E52616540831F409E43B
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/u0sZOGaLJ7BSxoPR4mDAzT1Wh1s.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/d0/4008e4-d984-43b3-a51e-b3c742543ddf/1/u0sZOGaLJ7BSxoPR4mDAzT1Wh1s.mft
Manifest number: 0305
Signing time: Sat 07 Jun 2025 23:00:58 +0000
Manifest this update: Sat 07 Jun 2025 23:00:58 +0000
Manifest next update: Sun 08 Jun 2025 23:00:58 +0000
Files and hashes: 1: u0sZOGaLJ7BSxoPR4mDAzT1Wh1s.crl (hash: HpPYTUnnixuC0zLf8ODpxxmXneSQJ60moGN961o4JCY=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/d0/4008e4-d984-43b3-a51e-b3c742543ddf/1/u0sZOGaLJ7BSxoPR4mDAzT1Wh1s.crl
rsync://rpki.ripe.net/repository/DEFAULT/d0/4008e4-d984-43b3-a51e-b3c742543ddf/1/u0sZOGaLJ7BSxoPR4mDAzT1Wh1s.mft
rsync://rpki.ripe.net/repository/DEFAULT/u0sZOGaLJ7BSxoPR4mDAzT1Wh1s.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 08 Jun 2025 18:00:17 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:4c:a0:38:e9:d8:d5:e5:26:16:54:08:31:f4:09:e4:3b
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=bb4b1938668b27b052c683d1e260c0cd3d56875b
Validity
Not Before: Jun 7 23:00:58 2025 GMT
Not After : Jun 8 23:00:58 2025 GMT
Subject: CN=4a5381061bb4c1e74e5c3e615e517540a53cc9ed
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b5:b5:ba:96:de:0f:29:32:5e:43:6e:9d:2e:9d:
bb:bc:d1:55:4a:4b:a3:cd:84:9d:ad:63:da:5b:cb:
68:70:6c:69:ab:3c:70:b5:a5:c2:13:8d:df:da:85:
0d:e0:7f:08:ee:91:3a:fe:5a:83:ed:ed:d6:d6:46:
fa:d4:ac:b8:0a:7f:f5:b7:52:6b:68:84:93:a9:1f:
c7:53:eb:e2:52:c8:5e:9c:52:6a:b2:3a:48:09:6d:
96:e2:74:c8:f2:c1:5d:73:87:a2:a7:4d:8c:6c:59:
40:86:2e:5e:30:02:f1:05:17:e8:0b:4f:49:3b:0f:
8c:2f:84:27:31:48:4c:73:38:6b:0f:ef:b8:c1:f1:
94:db:5e:52:17:6d:cc:d5:c3:c3:8d:64:55:ab:b9:
16:48:47:c5:7a:9c:72:d7:04:ca:06:42:91:ff:b1:
1a:86:fe:31:3d:a9:c4:8b:54:5a:e6:c5:7b:a7:72:
12:a7:d5:a4:97:0e:fa:c8:38:11:19:d7:78:80:2b:
e9:14:31:3b:fc:3d:b9:50:d6:48:b4:91:43:5a:18:
62:12:dc:ce:4c:60:99:01:07:e3:9f:33:db:d8:ac:
af:7e:ec:cb:b4:c3:bb:2d:27:31:5b:2c:cc:3d:98:
fa:44:51:81:f4:fd:b2:d1:26:cb:2b:66:d0:61:bc:
6a:53
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
4A:53:81:06:1B:B4:C1:E7:4E:5C:3E:61:5E:51:75:40:A5:3C:C9:ED
X509v3 Authority Key Identifier:
keyid:BB:4B:19:38:66:8B:27:B0:52:C6:83:D1:E2:60:C0:CD:3D:56:87:5B
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/u0sZOGaLJ7BSxoPR4mDAzT1Wh1s.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d0/4008e4-d984-43b3-a51e-b3c742543ddf/1/u0sZOGaLJ7BSxoPR4mDAzT1Wh1s.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/d0/4008e4-d984-43b3-a51e-b3c742543ddf/1/u0sZOGaLJ7BSxoPR4mDAzT1Wh1s.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
5d:ae:44:2b:d0:49:13:b6:c9:96:1b:eb:b3:e3:cf:99:4f:27:
fa:74:d9:ae:aa:48:d7:3f:1a:0d:6e:d6:a0:11:73:67:a2:75:
12:f5:d0:82:55:93:f6:62:d1:c7:99:e5:48:46:ad:c6:cb:fd:
c6:a6:8d:05:d3:87:63:6a:b7:a1:d7:d6:e6:4a:3d:e0:2f:0f:
dd:d0:33:9e:25:87:e1:e2:00:be:69:21:61:49:4a:f9:0b:61:
30:8b:c7:98:1e:c3:29:2a:c7:2b:6d:aa:93:d2:37:48:4b:0d:
ba:c1:0e:1e:b7:9f:1d:f8:e4:74:bd:ff:a6:57:a8:c0:8a:d9:
cd:66:9a:91:56:23:05:98:a4:49:54:c4:0c:6e:bf:59:02:9c:
08:7e:c1:c8:e8:05:4e:7e:f7:63:a0:9f:06:a0:ee:55:62:88:
1b:d1:43:10:49:1b:d8:c2:c2:82:83:3d:d3:0b:fd:fd:dd:3c:
70:28:35:6b:0b:37:b8:be:6f:88:02:c3:9f:04:e2:f8:4a:cb:
50:b1:db:58:37:c8:fa:d7:7a:c3:5e:b8:8d:32:a5:03:50:62:
67:22:a3:71:03:24:4f:6a:e8:c0:18:c6:9f:e4:49:1d:43:a8:
34:fa:f3:9e:6f:b5:84:47:97:49:c4:be:4a:3b:2f:37:d6:7b:
84:47:d2:e9
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jun 8 05:16:37 2025 by rpki-client