Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/dd/550c39-44a2-431b-933d-ccbf0e5b2add/1/uybM-gcX259Wqji4aSzl3PooJec.mft
File: uybM-gcX259Wqji4aSzl3PooJec.mft (raw, json)
Hash identifier: yRI7Xfrxf+JAtE5Fx1WbfGuAUasVioEZG6+nZLRSAqc=
Subject key identifier: 64:F4:4C:34:DD:21:2E:A8:1A:0B:67:32:3F:79:14:8A:EA:A1:DA:7A
Authority key identifier: BB:26:CC:FA:07:17:DB:9F:56:AA:38:B8:69:2C:E5:DC:FA:28:25:E7
Certificate issuer: /CN=bb26ccfa0717db9f56aa38b8692ce5dcfa2825e7
Certificate serial: 01964BFDFA0495E16B2DF6BF98E53CF107C2
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/uybM-gcX259Wqji4aSzl3PooJec.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/dd/550c39-44a2-431b-933d-ccbf0e5b2add/1/uybM-gcX259Wqji4aSzl3PooJec.mft
Manifest number: C4
Signing time: Sat 19 Apr 2025 03:00:57 +0000
Manifest this update: Sat 19 Apr 2025 03:00:57 +0000
Manifest next update: Sun 20 Apr 2025 03:00:57 +0000
Files and hashes: 1: lakVHG3W0xwUWB-wySLMgQJ_pvo.roa (hash: vGuvZzEzVEJozeZlKkwAw1MUHsR6k7X2w8QfYCIWc2E=)
2: uybM-gcX259Wqji4aSzl3PooJec.crl (hash: dLmz3rnNaY2mLHqrFis7ucvXoNamUZOWMTrEAEj+JWQ=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/dd/550c39-44a2-431b-933d-ccbf0e5b2add/1/uybM-gcX259Wqji4aSzl3PooJec.crl
rsync://rpki.ripe.net/repository/DEFAULT/dd/550c39-44a2-431b-933d-ccbf0e5b2add/1/uybM-gcX259Wqji4aSzl3PooJec.mft
rsync://rpki.ripe.net/repository/DEFAULT/uybM-gcX259Wqji4aSzl3PooJec.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 20 Apr 2025 03:00:57 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:4b:fd:fa:04:95:e1:6b:2d:f6:bf:98:e5:3c:f1:07:c2
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=bb26ccfa0717db9f56aa38b8692ce5dcfa2825e7
Validity
Not Before: Apr 19 03:00:57 2025 GMT
Not After : Apr 20 03:00:57 2025 GMT
Subject: CN=64f44c34dd212ea81a0b67323f79148aeaa1da7a
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b8:9e:1c:8e:b7:50:4d:be:d6:29:4f:71:9a:7a:
d0:1d:7c:c7:e1:c8:ae:d3:ae:53:ea:ef:09:9e:72:
2b:35:d1:bf:af:1c:86:d6:66:f1:0d:06:3e:6a:6c:
81:2e:5f:95:96:6d:9a:d6:c9:c0:af:ce:5f:e1:81:
59:3d:3f:d0:75:5f:b3:b4:c4:01:f5:d9:aa:8f:e1:
95:8d:5e:a3:ca:70:26:42:75:dd:59:a7:75:41:f5:
8c:1b:c6:e2:03:a0:fd:a0:5b:bf:2a:28:10:d5:af:
0f:f0:8a:43:4e:84:3f:90:6d:cb:fc:46:80:49:51:
5b:22:6d:0d:8c:c3:b5:d7:cf:b1:50:0e:84:f5:bb:
a0:2a:d2:c8:43:6c:ec:cb:26:29:4d:b2:84:13:ca:
b1:89:d0:0d:ee:e4:9c:06:83:04:d8:a1:7d:1f:e1:
a7:96:cf:b1:44:70:a0:9c:f9:dc:3e:bc:64:de:0f:
9e:3c:c5:15:51:76:52:b4:47:13:ec:07:29:c0:aa:
b1:71:30:4a:fc:49:a1:02:85:83:51:4d:77:0e:c2:
a7:0c:a8:ac:91:3e:f3:f2:c7:6b:be:91:e0:2d:cd:
9a:b4:bd:8a:8b:a2:3c:5c:f6:a7:eb:fa:74:33:d5:
88:d7:c3:d2:fd:f5:de:da:97:2a:45:7a:16:8a:62:
60:79
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
64:F4:4C:34:DD:21:2E:A8:1A:0B:67:32:3F:79:14:8A:EA:A1:DA:7A
X509v3 Authority Key Identifier:
keyid:BB:26:CC:FA:07:17:DB:9F:56:AA:38:B8:69:2C:E5:DC:FA:28:25:E7
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/uybM-gcX259Wqji4aSzl3PooJec.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/dd/550c39-44a2-431b-933d-ccbf0e5b2add/1/uybM-gcX259Wqji4aSzl3PooJec.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/dd/550c39-44a2-431b-933d-ccbf0e5b2add/1/uybM-gcX259Wqji4aSzl3PooJec.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
2d:28:69:65:88:f5:8a:51:3f:b8:aa:fc:5f:42:ab:1b:95:cb:
56:35:3f:10:06:98:02:b3:8d:85:1d:23:10:81:2b:33:c7:11:
ad:49:63:f6:b6:17:84:c3:c3:ca:7a:bc:cd:61:d7:c5:06:6a:
8c:5f:6d:95:88:40:50:ab:df:ca:79:38:10:f3:df:89:58:f7:
dd:33:78:bc:28:e6:19:66:57:e6:35:36:ba:2f:52:28:72:4a:
8c:2a:f7:18:5d:ed:94:87:f2:5e:7d:b3:bf:00:24:e7:ae:cb:
fc:f5:a2:a4:b8:f3:16:5a:4f:f4:49:78:d9:f7:52:9f:0c:29:
fe:8e:3b:07:99:56:58:b1:f1:8a:c7:8c:13:58:95:ea:b7:ef:
7c:ad:05:fe:6f:24:9d:71:49:b6:90:33:20:b8:1a:e7:72:d7:
70:d6:97:ff:fb:46:b9:85:60:34:46:2c:29:1b:77:5c:86:56:
34:0a:19:a9:14:f4:3e:9e:db:b7:6e:66:07:a7:a9:17:21:5b:
eb:d1:2e:ac:ec:72:44:fc:9e:7b:a6:4c:5e:59:62:2d:92:1c:
f2:20:9a:2b:ec:b3:c0:e9:92:8c:4f:21:54:e9:23:6e:7c:c0:
2c:64:7b:46:51:42:72:99:c4:e6:33:7e:06:27:ff:45:0f:4d:
b2:2e:83:52
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 19 12:37:49 2025 by rpki-client