Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/eb/b66125-6844-4a87-9bb5-af42623ea431/1/un1KwTROw43OmXaNeKEU6_fxfYU.mft
File: un1KwTROw43OmXaNeKEU6_fxfYU.mft (raw, json)
Hash identifier: f6uSesBvS/5HeaQ30oYhO7w36XfyoY4BwQNWtpilWts=
Subject key identifier: 43:77:5C:B2:92:71:D7:F8:68:02:9E:BB:48:C5:0C:AA:25:E0:57:58
Authority key identifier: BA:7D:4A:C1:34:4E:C3:8D:CE:99:76:8D:78:A1:14:EB:F7:F1:7D:85
Certificate issuer: /CN=ba7d4ac1344ec38dce99768d78a114ebf7f17d85
Certificate serial: 01959073D76A4E0DEC02BD49980DD4B5188A
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/un1KwTROw43OmXaNeKEU6_fxfYU.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/eb/b66125-6844-4a87-9bb5-af42623ea431/1/un1KwTROw43OmXaNeKEU6_fxfYU.mft
Manifest number: 0B51
Signing time: Thu 13 Mar 2025 17:01:05 +0000
Manifest this update: Thu 13 Mar 2025 17:01:05 +0000
Manifest next update: Fri 14 Mar 2025 17:01:05 +0000
Files and hashes: 1: eJvxqWQVuJlIAcOu0zuhq-FEIwc.roa (hash: T9Btt+1WHrBsFsD5c6tC5d0RHMAv0qfav0ae3k59Hwg=)
2: un1KwTROw43OmXaNeKEU6_fxfYU.crl (hash: BBKz05iP1U0Nwa4xtRaDNQ/88gpcT8uX74+qt5O7xJA=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/eb/b66125-6844-4a87-9bb5-af42623ea431/1/un1KwTROw43OmXaNeKEU6_fxfYU.crl
rsync://rpki.ripe.net/repository/DEFAULT/eb/b66125-6844-4a87-9bb5-af42623ea431/1/un1KwTROw43OmXaNeKEU6_fxfYU.mft
rsync://rpki.ripe.net/repository/DEFAULT/un1KwTROw43OmXaNeKEU6_fxfYU.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 14 Mar 2025 15:28:49 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:95:90:73:d7:6a:4e:0d:ec:02:bd:49:98:0d:d4:b5:18:8a
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=ba7d4ac1344ec38dce99768d78a114ebf7f17d85
Validity
Not Before: Mar 13 17:01:05 2025 GMT
Not After : Mar 14 17:01:05 2025 GMT
Subject: CN=43775cb29271d7f868029ebb48c50caa25e05758
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bc:a9:05:ee:de:bd:34:4f:61:0c:dc:48:c1:51:
bc:cb:ed:f1:4f:1d:db:8f:b8:b2:c5:a2:92:fc:46:
32:d3:43:27:e5:db:6a:32:4c:39:e3:dd:34:da:b9:
3c:a3:02:26:fd:e9:6a:1f:f1:98:88:06:c2:3f:af:
5e:8d:f5:cd:d8:be:66:d1:15:5a:43:52:28:97:d1:
04:a7:a9:70:ab:a9:83:99:56:b1:d7:3f:22:1e:a0:
d9:48:c3:02:22:0c:32:a6:fa:68:1a:e0:f1:a0:3c:
34:68:0c:0a:85:0c:1d:21:05:a3:fe:12:91:9a:d4:
92:70:8a:6a:a5:12:52:7d:11:35:b7:8f:0b:d2:00:
75:8e:24:8d:d4:e7:69:fb:fc:eb:d8:4c:18:24:e1:
2c:8e:3e:d9:7f:0f:99:6d:57:b0:65:1d:ce:bb:4b:
d8:8f:92:03:11:28:fc:e4:0e:c1:19:3f:ab:f4:65:
cb:e0:fe:79:ec:0d:7c:97:66:10:db:b0:5a:cc:9d:
09:a5:2b:ea:06:cb:bc:01:7e:22:70:70:85:e6:6d:
12:c6:41:35:34:72:1c:6b:41:7c:30:8f:f7:aa:8f:
77:2c:22:eb:e9:17:37:64:94:71:fe:90:15:f0:74:
a7:c0:38:99:03:04:96:b6:91:ea:07:b3:4f:28:15:
ae:7b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
43:77:5C:B2:92:71:D7:F8:68:02:9E:BB:48:C5:0C:AA:25:E0:57:58
X509v3 Authority Key Identifier:
keyid:BA:7D:4A:C1:34:4E:C3:8D:CE:99:76:8D:78:A1:14:EB:F7:F1:7D:85
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/un1KwTROw43OmXaNeKEU6_fxfYU.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/eb/b66125-6844-4a87-9bb5-af42623ea431/1/un1KwTROw43OmXaNeKEU6_fxfYU.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/eb/b66125-6844-4a87-9bb5-af42623ea431/1/un1KwTROw43OmXaNeKEU6_fxfYU.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
9c:0e:7e:13:2e:51:50:9c:f1:9f:4c:91:2d:7b:ec:39:1e:ba:
41:24:5e:86:e8:0f:09:9e:e3:99:13:85:c0:ef:8b:73:76:eb:
8b:8a:94:41:a5:15:b3:21:fe:31:a2:d5:ef:82:a3:6d:7e:4c:
7d:26:ae:44:a0:da:75:4c:83:bd:44:55:0f:1a:6f:8b:c4:22:
a2:93:7b:c9:24:ea:79:cb:19:6d:68:96:cb:14:da:a7:f6:d6:
e3:89:86:42:68:42:5e:aa:39:22:8a:85:29:48:3e:a5:eb:f0:
0c:ad:5b:f1:3f:35:4f:ad:1e:ab:e9:59:23:2b:c4:ff:a1:a1:
95:82:a4:ba:16:6c:c2:ba:c0:4a:3c:a1:90:a8:48:0a:5b:6b:
ae:33:2d:2e:4a:f2:32:5c:ae:88:14:4f:02:02:58:d8:9e:6e:
77:ed:40:d4:fd:b3:9d:e8:ba:52:e4:0f:1f:84:fc:d6:5d:f5:
9c:a3:8d:51:c5:6e:84:09:20:27:37:6c:97:54:63:ab:65:53:
53:94:05:15:39:ff:66:6a:da:da:12:61:89:73:bb:d7:c4:fa:
92:ae:25:b3:87:12:8e:d1:ac:42:d9:48:46:23:2c:01:4b:18:
aa:f6:9e:ed:8b:9a:8e:02:7d:ec:bc:7d:4e:25:79:23:b6:e7:
b2:6e:2d:d2
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZWQc9dqTg3sAr1JmA3UtRiKMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGJhN2Q0YWMxMzQ0ZWMzOGRjZTk5NzY4ZDc4YTExNGViZjdm
MTdkODUwHhcNMjUwMzEzMTcwMTA1WhcNMjUwMzE0MTcwMTA1WjAzMTEwLwYDVQQD
Eyg0Mzc3NWNiMjkyNzFkN2Y4NjgwMjllYmI0OGM1MGNhYTI1ZTA1NzU4MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAvKkF7t69NE9hDNxIwVG8y+3xTx3b
j7iyxaKS/EYy00Mn5dtqMkw549002rk8owIm/elqH/GYiAbCP69ejfXN2L5m0RVa
Q1Iol9EEp6lwq6mDmVax1z8iHqDZSMMCIgwypvpoGuDxoDw0aAwKhQwdIQWj/hKR
mtSScIpqpRJSfRE1t48L0gB1jiSN1Odp+/zr2EwYJOEsjj7Zfw+ZbVewZR3Ou0vY
j5IDESj85A7BGT+r9GXL4P557A18l2YQ27BazJ0JpSvqBsu8AX4icHCF5m0SxkE1
NHIca0F8MI/3qo93LCLr6Rc3ZJRx/pAV8HSnwDiZAwSWtpHqB7NPKBWuewIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFEN3XLKScdf4aAKeu0jFDKol4FdYMB8GA1UdIwQY
MBaAFLp9SsE0TsONzpl2jXihFOv38X2FMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvdW4xS3dUUk93NDNPbVhhTmVLRVU2X2Z4ZllVLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9lYi9iNjYxMjUtNjg0NC00YTg3LTliYjUt
YWY0MjYyM2VhNDMxLzEvdW4xS3dUUk93NDNPbVhhTmVLRVU2X2Z4ZllVLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9lYi9iNjYxMjUtNjg0NC00YTg3LTliYjUtYWY0MjYyM2VhNDMx
LzEvdW4xS3dUUk93NDNPbVhhTmVLRVU2X2Z4ZllVLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAnA5+Ey5R
UJzxn0yRLXvsOR66QSRehugPCZ7jmROFwO+Lc3bri4qUQaUVsyH+MaLV74KjbX5M
fSauRKDadUyDvURVDxpvi8QiopN7ySTqecsZbWiWyxTap/bW44mGQmhCXqo5IoqF
KUg+pevwDK1b8T81T60eq+lZIyvE/6GhlYKkuhZswrrASjyhkKhICltrrjMtLkry
MlyuiBRPAgJY2J5ud+1A1P2znei6UuQPH4T81l31nKONUcVuhAkgJzdsl1Rjq2VT
U5QFFTn/Zmra2hJhiXO718T6kq4ls4cSjtGsQtlIRiMsAUsYqvae7YuajgJ97Lx9
TiV5I7bnsm4t0g==
-----END CERTIFICATE-----
Generated at Thu Mar 13 20:18:22 2025 by rpki-client