Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/db/46922f-5cb6-4d98-b4fc-93bd5e408f91/1/u8VfskrVVuBCAmUfbVqLJ9W-35c.mft
File: u8VfskrVVuBCAmUfbVqLJ9W-35c.mft (raw, json)
Hash identifier: JlzBqZV53vkrwz4yZz9W0MiUZqa/5m3HOICRyVRpQ/I=
Subject key identifier: 70:B8:4D:FD:A1:2C:65:EA:D0:4C:E1:F2:8E:ED:14:50:23:9C:34:AE
Authority key identifier: BB:C5:5F:B2:4A:D5:56:E0:42:02:65:1F:6D:5A:8B:27:D5:BE:DF:97
Certificate issuer: /CN=bbc55fb24ad556e04202651f6d5a8b27d5bedf97
Certificate serial: 01961ADA6E5387FB120D9CB4B2A3070D1DE4
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/u8VfskrVVuBCAmUfbVqLJ9W-35c.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/db/46922f-5cb6-4d98-b4fc-93bd5e408f91/1/u8VfskrVVuBCAmUfbVqLJ9W-35c.mft
Manifest number: 11BC
Signing time: Wed 09 Apr 2025 14:00:44 +0000
Manifest this update: Wed 09 Apr 2025 14:00:44 +0000
Manifest next update: Thu 10 Apr 2025 14:00:44 +0000
Files and hashes: 1: JsF7FSwQaPNv5Ht3PNC4VICZzd4.roa (hash: fSvD3kvN3V7LC//WVhYwoHgh3jtQgyM95Ezj/Ar5cRU=)
2: mt-PyfiXYcQcKgR1e8Hsx5c4PoM.roa (hash: LeF0Pn1F55UIMk8YIasYk9VsWh941JF4CLigZGdvfv8=)
3: u8VfskrVVuBCAmUfbVqLJ9W-35c.crl (hash: nmlTU6C05Bx2TVmh3503BnpOj+X57dQ6a0OO3rVm7OU=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/db/46922f-5cb6-4d98-b4fc-93bd5e408f91/1/u8VfskrVVuBCAmUfbVqLJ9W-35c.crl
rsync://rpki.ripe.net/repository/DEFAULT/db/46922f-5cb6-4d98-b4fc-93bd5e408f91/1/u8VfskrVVuBCAmUfbVqLJ9W-35c.mft
rsync://rpki.ripe.net/repository/DEFAULT/u8VfskrVVuBCAmUfbVqLJ9W-35c.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 10 Apr 2025 14:00:44 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:1a:da:6e:53:87:fb:12:0d:9c:b4:b2:a3:07:0d:1d:e4
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=bbc55fb24ad556e04202651f6d5a8b27d5bedf97
Validity
Not Before: Apr 9 14:00:44 2025 GMT
Not After : Apr 10 14:00:44 2025 GMT
Subject: CN=70b84dfda12c65ead04ce1f28eed1450239c34ae
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a1:14:00:f2:05:43:e4:c3:8f:55:4e:1f:83:39:
0a:a7:0f:c5:7a:ce:62:ab:51:81:8f:ba:54:0e:03:
64:7f:5e:9f:ce:a8:08:7f:92:d9:6d:e5:4f:59:66:
32:1d:17:f5:e5:49:c4:aa:56:0c:53:cc:33:96:6b:
b3:93:e8:53:45:39:29:78:19:66:6e:f3:c3:e6:7e:
66:ae:24:54:f1:e3:e2:9f:22:23:fc:4b:e6:04:01:
76:76:29:ee:b8:d2:b9:8d:8e:91:89:2d:81:83:ac:
98:67:24:8a:6a:62:bf:17:0b:00:2d:b3:ab:e9:65:
b1:5f:09:aa:4e:f3:69:9d:05:88:cb:81:8b:f3:7c:
89:70:dc:5c:d3:48:52:81:8f:ee:e5:81:34:0d:07:
27:86:4f:90:44:4a:89:eb:85:d7:90:d8:04:f5:c5:
39:2d:cd:b1:a3:a8:b3:58:89:33:29:2e:aa:ae:7c:
7f:df:38:e6:3a:96:23:72:c9:18:18:5f:a7:99:07:
06:67:ed:76:99:de:fb:fe:5f:65:da:d7:8b:ed:e2:
a0:d2:49:ba:cd:cc:6a:0b:eb:a0:e1:6e:ea:c3:4d:
10:72:19:0c:1c:36:88:0f:46:89:af:bc:43:a7:21:
f8:c3:6b:c5:32:2e:eb:3d:4c:06:29:31:54:35:70:
80:ab
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
70:B8:4D:FD:A1:2C:65:EA:D0:4C:E1:F2:8E:ED:14:50:23:9C:34:AE
X509v3 Authority Key Identifier:
keyid:BB:C5:5F:B2:4A:D5:56:E0:42:02:65:1F:6D:5A:8B:27:D5:BE:DF:97
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/u8VfskrVVuBCAmUfbVqLJ9W-35c.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/db/46922f-5cb6-4d98-b4fc-93bd5e408f91/1/u8VfskrVVuBCAmUfbVqLJ9W-35c.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/db/46922f-5cb6-4d98-b4fc-93bd5e408f91/1/u8VfskrVVuBCAmUfbVqLJ9W-35c.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
15:81:02:88:80:34:4d:81:2b:d0:94:6b:f8:cd:fd:82:41:b3:
09:5a:01:fd:f6:2e:86:28:61:66:2f:ec:6c:fd:da:e8:0f:c8:
6a:50:f7:d6:9d:24:81:92:2f:36:71:71:6d:d0:87:b6:70:b6:
80:bf:76:36:52:c7:00:d4:b1:d7:41:e4:d5:84:24:7f:18:9d:
ec:dc:0c:2c:ab:83:29:f9:fb:79:c1:e5:ea:a2:aa:66:38:d2:
30:3e:86:7b:f5:46:7c:26:37:16:0a:37:60:a6:bb:29:23:c5:
43:c9:b9:62:35:c3:f6:72:b2:4d:c3:e2:3b:f4:5f:92:06:4b:
a8:db:26:e8:52:af:ea:0b:ee:f5:c6:25:cc:33:bc:19:55:24:
6c:9d:dd:c9:24:a3:76:64:98:57:ad:11:c0:4d:f0:2b:e0:1a:
f8:9d:f4:f2:28:54:32:48:f3:67:4e:4a:07:f1:a0:4d:1a:04:
6b:70:2b:d4:db:27:5e:48:e0:d6:78:e8:ef:88:82:2b:55:03:
78:57:c5:03:c3:48:be:3e:14:38:07:52:b4:8c:f0:10:c9:63:
99:ed:6b:6f:83:9c:88:44:d3:93:99:00:e7:10:42:b2:18:17:
a5:f1:97:bb:57:94:6f:05:18:ed:d1:54:6d:af:08:4a:71:0e:
82:06:93:06
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Apr 9 16:16:54 2025 by rpki-client