Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d4/10b28e-f928-4a30-94f3-69d406e18653/1/UsbdFxnihP9ccH-BIujtDYeVrz0.mft
File: UsbdFxnihP9ccH-BIujtDYeVrz0.mft (raw, json)
Hash identifier: 0OQUyQ6B1VjU/riePbYFTKSFTAjIIw+t3AiBpUWa5U4=
Subject key identifier: 49:EB:E2:BC:EA:0A:5D:62:97:D2:7B:F2:DC:F4:BD:7F:57:B2:A8:B7
Authority key identifier: 52:C6:DD:17:19:E2:84:FF:5C:70:7F:81:22:E8:ED:0D:87:95:AF:3D
Certificate issuer: /CN=52c6dd1719e284ff5c707f8122e8ed0d8795af3d
Certificate serial: 01964CA26B335A716DBEC8B783201E9E830B
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/UsbdFxnihP9ccH-BIujtDYeVrz0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/d4/10b28e-f928-4a30-94f3-69d406e18653/1/UsbdFxnihP9ccH-BIujtDYeVrz0.mft
Manifest number: 0C60
Signing time: Sat 19 Apr 2025 06:00:34 +0000
Manifest this update: Sat 19 Apr 2025 06:00:34 +0000
Manifest next update: Sun 20 Apr 2025 06:00:34 +0000
Files and hashes: 1: SumLRFjRvRGsHVms3q07VcTY_zw.roa (hash: BPeYsAog1nRhSt1D1QkdbQMs20o6awTKDrStYSXvjag=)
2: UsbdFxnihP9ccH-BIujtDYeVrz0.crl (hash: Pg7C1UxizZ1DYGqPcPaBAD5mI9MtCTi244tYDGZwhOc=)
3: xXmylsNIs75YVB4GEqmFrbYzlMQ.roa (hash: yK7A998kaxjXj5Rw2EsVAdh1pDJ8+Nt5YxCPheVH4gI=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/d4/10b28e-f928-4a30-94f3-69d406e18653/1/UsbdFxnihP9ccH-BIujtDYeVrz0.crl
rsync://rpki.ripe.net/repository/DEFAULT/d4/10b28e-f928-4a30-94f3-69d406e18653/1/UsbdFxnihP9ccH-BIujtDYeVrz0.mft
rsync://rpki.ripe.net/repository/DEFAULT/UsbdFxnihP9ccH-BIujtDYeVrz0.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 20 Apr 2025 06:00:34 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:4c:a2:6b:33:5a:71:6d:be:c8:b7:83:20:1e:9e:83:0b
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=52c6dd1719e284ff5c707f8122e8ed0d8795af3d
Validity
Not Before: Apr 19 06:00:34 2025 GMT
Not After : Apr 20 06:00:34 2025 GMT
Subject: CN=49ebe2bcea0a5d6297d27bf2dcf4bd7f57b2a8b7
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:99:71:63:00:e2:63:be:6c:8e:2f:1d:5a:b1:3b:
e7:40:3d:58:67:ae:c7:16:15:96:e8:9c:df:e9:be:
06:fa:a3:9c:fe:2c:c1:a2:cf:93:3e:99:aa:bf:80:
e8:dd:68:2f:c4:ad:c7:b8:91:28:fe:a8:33:0b:2a:
89:5a:96:7c:16:a5:ac:36:94:89:be:0a:2a:8c:e2:
5e:4e:62:f0:f7:14:40:c4:1f:77:19:bc:7b:5a:dc:
f7:8f:f5:dc:32:66:36:88:43:e8:79:93:f3:d2:7a:
22:9f:48:a8:3c:3a:79:65:c8:96:40:d1:35:99:63:
68:9c:d5:cc:c8:47:82:c4:f4:62:8f:a8:be:2f:da:
1f:98:d3:c6:72:50:00:d8:3b:d9:fb:48:20:05:41:
a5:73:37:d2:3f:2e:0b:71:cd:9f:a0:8a:98:11:92:
b2:b4:bd:9e:bf:bc:73:ce:00:06:3b:4b:8f:dc:b6:
a7:93:f1:54:d3:36:3a:2e:28:a8:8f:16:c1:29:33:
26:e3:53:e5:54:66:cc:0e:74:ff:8f:9a:1b:65:3f:
1d:48:71:0a:e9:5f:de:49:02:46:40:0d:96:0c:24:
03:18:75:eb:3b:dd:ff:7a:ae:b5:b2:85:49:bd:ed:
4e:27:d3:8c:df:a0:c5:9c:0c:e5:d1:b7:22:14:97:
24:83
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
49:EB:E2:BC:EA:0A:5D:62:97:D2:7B:F2:DC:F4:BD:7F:57:B2:A8:B7
X509v3 Authority Key Identifier:
keyid:52:C6:DD:17:19:E2:84:FF:5C:70:7F:81:22:E8:ED:0D:87:95:AF:3D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/UsbdFxnihP9ccH-BIujtDYeVrz0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d4/10b28e-f928-4a30-94f3-69d406e18653/1/UsbdFxnihP9ccH-BIujtDYeVrz0.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/d4/10b28e-f928-4a30-94f3-69d406e18653/1/UsbdFxnihP9ccH-BIujtDYeVrz0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
9e:f6:25:b1:88:93:cb:34:cb:0c:b7:e2:0b:c9:d0:dd:12:dd:
ed:06:05:f3:05:d6:19:6c:84:e7:4e:89:46:72:a2:2a:4f:c2:
57:64:28:5e:db:a5:19:db:00:ac:f1:7b:11:e9:5b:b6:20:7c:
da:10:71:e3:cd:ea:e7:95:10:5a:71:5f:79:97:de:75:13:81:
47:ca:1c:21:8e:b9:14:22:4f:d8:e0:30:66:c5:fd:79:0c:7e:
a0:fb:a7:60:33:b9:b7:da:89:42:56:c8:d7:ea:7d:7d:9b:55:
4d:c5:b1:8c:16:78:30:98:84:09:93:ad:77:cd:cb:04:ff:74:
c3:73:79:ba:68:59:e2:f6:50:f9:f0:08:dd:65:62:a6:da:97:
53:29:e6:1f:57:f7:27:47:52:0b:2e:14:3e:f2:28:b5:07:56:
e3:b3:c8:bc:ca:d4:0a:6a:37:c0:43:22:48:af:84:e8:d9:e6:
96:d6:0f:77:83:66:68:6b:dc:67:08:65:d5:28:c3:d1:2c:f2:
67:e6:25:40:bf:dc:8f:3e:cb:10:3b:d1:82:45:1c:1b:fb:00:
cc:30:65:7e:60:4e:19:30:75:f4:0c:78:bf:61:f0:4a:f4:36:
12:d8:5b:98:de:2b:13:92:2a:81:45:82:86:55:07:80:08:48:
cc:2b:e0:8a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 19 15:24:55 2025 by rpki-client