Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/db/b9dab8-d084-4b73-99b2-ee5b5168bf2f/1/u7qOzNl-lhif9uM88RCmyaR3RZw.mft
File: u7qOzNl-lhif9uM88RCmyaR3RZw.mft (raw, json)
Hash identifier: QKRnV0mcPJFjOZzqpAbpD0Nt4/3sFppN7AK6FdreTD4=
Subject key identifier: E4:82:61:E4:2D:45:87:69:12:0E:AF:A5:DA:ED:04:35:17:F9:2F:6B
Authority key identifier: BB:BA:8E:CC:D9:7E:96:18:9F:F6:E3:3C:F1:10:A6:C9:A4:77:45:9C
Certificate issuer: /CN=bbba8eccd97e96189ff6e33cf110a6c9a477459c
Certificate serial: 01961ADA5BB60EDA852F0F68D28A0A94B16D
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/u7qOzNl-lhif9uM88RCmyaR3RZw.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/db/b9dab8-d084-4b73-99b2-ee5b5168bf2f/1/u7qOzNl-lhif9uM88RCmyaR3RZw.mft
Manifest number: 1061
Signing time: Wed 09 Apr 2025 14:00:39 +0000
Manifest this update: Wed 09 Apr 2025 14:00:39 +0000
Manifest next update: Thu 10 Apr 2025 14:00:39 +0000
Files and hashes: 1: HxTfLakaEJ_LVNn3ZqoJElNbHoQ.roa (hash: tPr0Odj47LnuFpxE16P/cF19VVsL1tXW82ffakF0EeE=)
2: u7qOzNl-lhif9uM88RCmyaR3RZw.crl (hash: tAZ8wyGvQgJxMkqsifDeEbXNJJAmnF9u57A7horn/CA=)
3: x74EOmKncD9l8_LhQCmRyXpIz94.roa (hash: XUKb+7lZadJCXvjC4Jazh1w2/bHedabOWN8tK0nZBp8=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/db/b9dab8-d084-4b73-99b2-ee5b5168bf2f/1/u7qOzNl-lhif9uM88RCmyaR3RZw.crl
rsync://rpki.ripe.net/repository/DEFAULT/db/b9dab8-d084-4b73-99b2-ee5b5168bf2f/1/u7qOzNl-lhif9uM88RCmyaR3RZw.mft
rsync://rpki.ripe.net/repository/DEFAULT/u7qOzNl-lhif9uM88RCmyaR3RZw.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 10 Apr 2025 14:00:39 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:1a:da:5b:b6:0e:da:85:2f:0f:68:d2:8a:0a:94:b1:6d
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=bbba8eccd97e96189ff6e33cf110a6c9a477459c
Validity
Not Before: Apr 9 14:00:39 2025 GMT
Not After : Apr 10 14:00:39 2025 GMT
Subject: CN=e48261e42d458769120eafa5daed043517f92f6b
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:af:a4:c7:81:b3:57:36:6f:80:55:5a:16:da:52:
c4:40:5c:89:08:55:7c:d4:3a:36:90:36:31:0c:63:
9c:4c:e0:f6:72:ba:95:a4:cc:de:c0:17:43:6c:92:
04:d1:e3:69:08:5e:9b:d0:3d:b5:bd:16:93:7b:aa:
ae:1b:a9:52:ff:73:83:70:1f:52:67:8b:85:d5:8e:
28:b4:90:34:72:17:0e:f2:75:33:72:58:ea:0e:81:
28:a6:68:5d:a4:78:71:58:e5:2d:ce:c0:a0:8c:d5:
91:9e:15:33:2d:47:d1:e5:6a:65:90:7d:6e:cd:69:
29:e8:65:d9:4d:c7:2f:43:3f:a1:d8:ac:9e:18:34:
6f:13:7c:d5:26:e3:f8:d1:10:6b:d1:c0:e2:85:cd:
5c:5f:e3:d3:14:87:6b:34:53:36:12:34:fc:23:41:
3a:62:83:b6:e6:84:f4:b2:bc:b8:de:e4:2b:d1:af:
b8:74:ca:af:3c:d6:04:46:92:61:11:e5:d6:83:4c:
6c:86:ba:62:a9:57:41:c0:06:67:90:82:fe:eb:b4:
86:d5:67:ae:97:92:0e:6a:5a:d5:14:02:9e:74:7a:
9d:8d:23:ec:c7:71:80:b6:cd:a2:61:ef:d7:42:39:
20:9b:54:55:69:08:42:da:74:9e:d5:64:36:e4:51:
e6:39
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E4:82:61:E4:2D:45:87:69:12:0E:AF:A5:DA:ED:04:35:17:F9:2F:6B
X509v3 Authority Key Identifier:
keyid:BB:BA:8E:CC:D9:7E:96:18:9F:F6:E3:3C:F1:10:A6:C9:A4:77:45:9C
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/u7qOzNl-lhif9uM88RCmyaR3RZw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/db/b9dab8-d084-4b73-99b2-ee5b5168bf2f/1/u7qOzNl-lhif9uM88RCmyaR3RZw.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/db/b9dab8-d084-4b73-99b2-ee5b5168bf2f/1/u7qOzNl-lhif9uM88RCmyaR3RZw.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
86:2a:86:20:c6:7b:c5:ae:d5:a7:5a:6e:e2:16:ea:90:dd:cd:
fa:dd:44:3a:d1:61:8c:f1:61:79:f2:8d:da:22:59:1e:6e:af:
87:68:a5:59:3d:ad:72:7d:97:ec:10:28:7d:2c:30:d5:9c:86:
91:cc:1d:a1:a0:6c:0a:85:b9:b6:94:4e:c2:33:5b:dd:11:e6:
66:96:a2:a0:5d:3a:71:29:29:0b:81:28:2a:40:f7:ee:e3:5b:
1e:ea:39:dd:55:22:1a:06:14:96:44:8c:86:00:3f:ce:98:8a:
63:17:7e:d3:ec:35:8a:b7:dc:a6:4a:7b:54:3b:d4:f1:30:e1:
5e:70:ba:47:81:dc:7b:2a:d6:ef:ec:aa:fb:2f:86:33:2c:96:
d5:bd:14:55:fe:f1:7d:49:ca:4f:10:08:f0:86:6a:b3:af:d2:
38:ee:f5:aa:93:73:7a:e6:1d:36:31:e1:94:5b:f1:03:91:ab:
f8:c7:99:63:1d:51:e1:a3:15:3a:23:03:0f:ce:d1:ce:d6:49:
9f:68:a7:eb:91:e9:56:f1:eb:40:dc:13:53:f9:49:14:39:2c:
b3:a3:77:c1:61:cb:52:27:c5:8a:32:8e:d9:bf:f6:c7:b8:c9:
72:d2:f0:57:f4:05:6e:84:4e:c4:64:e9:5b:08:c0:43:47:f4:
b8:9f:7d:ac
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Apr 9 19:23:08 2025 by rpki-client