Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/eb/b66125-6844-4a87-9bb5-af42623ea431/1/un1KwTROw43OmXaNeKEU6_fxfYU.mft
File: un1KwTROw43OmXaNeKEU6_fxfYU.mft (raw, json)
Hash identifier: /O+3g2+BjcPtGnGh9UiiqCBhIiW1tJ7iGPI1eMq58hs=
Subject key identifier: 57:FB:CF:2C:FE:91:F1:96:18:89:D9:DE:CA:7E:0F:41:2F:38:12:22
Authority key identifier: BA:7D:4A:C1:34:4E:C3:8D:CE:99:76:8D:78:A1:14:EB:F7:F1:7D:85
Certificate issuer: /CN=ba7d4ac1344ec38dce99768d78a114ebf7f17d85
Certificate serial: 01962CE1397F7F46AACA6432894C43069F2A
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/un1KwTROw43OmXaNeKEU6_fxfYU.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/eb/b66125-6844-4a87-9bb5-af42623ea431/1/un1KwTROw43OmXaNeKEU6_fxfYU.mft
Manifest number: 0BA2
Signing time: Sun 13 Apr 2025 02:01:19 +0000
Manifest this update: Sun 13 Apr 2025 02:01:19 +0000
Manifest next update: Mon 14 Apr 2025 02:01:19 +0000
Files and hashes: 1: eJvxqWQVuJlIAcOu0zuhq-FEIwc.roa (hash: T9Btt+1WHrBsFsD5c6tC5d0RHMAv0qfav0ae3k59Hwg=)
2: un1KwTROw43OmXaNeKEU6_fxfYU.crl (hash: yugZHZwLdrpAzmJsAk/idOt4BPe49zR4aUWpLkSeCmU=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/eb/b66125-6844-4a87-9bb5-af42623ea431/1/un1KwTROw43OmXaNeKEU6_fxfYU.crl
rsync://rpki.ripe.net/repository/DEFAULT/eb/b66125-6844-4a87-9bb5-af42623ea431/1/un1KwTROw43OmXaNeKEU6_fxfYU.mft
rsync://rpki.ripe.net/repository/DEFAULT/un1KwTROw43OmXaNeKEU6_fxfYU.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 14 Apr 2025 02:01:19 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:2c:e1:39:7f:7f:46:aa:ca:64:32:89:4c:43:06:9f:2a
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=ba7d4ac1344ec38dce99768d78a114ebf7f17d85
Validity
Not Before: Apr 13 02:01:19 2025 GMT
Not After : Apr 14 02:01:19 2025 GMT
Subject: CN=57fbcf2cfe91f1961889d9deca7e0f412f381222
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d6:70:43:07:ef:a8:7d:87:56:08:dd:3a:4a:e6:
59:85:09:d8:09:b0:56:a0:69:e8:a5:27:37:c8:ba:
ea:6b:9c:fb:76:26:c4:0f:b0:ed:dd:31:78:22:e8:
4c:98:db:f2:45:8c:c7:96:90:07:f0:c8:6e:a0:6a:
5f:5b:fc:b5:0c:1c:4e:fe:b9:a3:93:3f:f8:84:a9:
c0:a7:1d:ce:86:ec:c1:85:14:e9:54:f7:87:ea:af:
09:c9:16:5b:6a:23:8d:2f:46:25:78:41:04:3b:6c:
e4:6f:34:ec:d2:6b:62:4d:5b:7b:00:e8:e1:8b:7c:
bf:64:8d:03:80:ec:0e:95:11:04:a5:5c:c2:ff:a4:
9d:f5:85:a4:72:65:0a:6d:c8:8a:9d:b7:be:a4:04:
2e:e1:45:54:d4:5f:48:36:3c:a4:b1:ff:1a:fb:a4:
3e:8a:ac:5a:a4:13:d1:9d:a2:2a:dc:87:54:53:0b:
88:46:7c:64:1f:be:b0:bd:93:4f:d0:e9:75:c9:74:
23:48:24:82:47:a2:be:3b:a6:65:77:85:83:88:14:
6f:ee:77:f7:4a:07:2a:82:8b:67:04:fb:3b:09:c3:
cb:10:5b:b0:bc:f2:c6:a5:0c:14:9a:95:11:0b:e0:
5c:47:88:26:35:ae:a2:ca:d8:f3:14:f0:e0:56:60:
c9:b7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
57:FB:CF:2C:FE:91:F1:96:18:89:D9:DE:CA:7E:0F:41:2F:38:12:22
X509v3 Authority Key Identifier:
keyid:BA:7D:4A:C1:34:4E:C3:8D:CE:99:76:8D:78:A1:14:EB:F7:F1:7D:85
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/un1KwTROw43OmXaNeKEU6_fxfYU.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/eb/b66125-6844-4a87-9bb5-af42623ea431/1/un1KwTROw43OmXaNeKEU6_fxfYU.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/eb/b66125-6844-4a87-9bb5-af42623ea431/1/un1KwTROw43OmXaNeKEU6_fxfYU.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
1b:df:3f:15:4c:78:3b:79:90:68:d4:8c:c5:d2:fc:99:7c:a2:
f9:7d:f7:b8:17:d3:8a:15:1d:43:de:6c:cd:ad:9d:05:8f:bf:
97:b2:98:07:b8:ee:c9:1a:17:8f:1d:4f:16:d1:89:c7:67:f6:
90:9c:dc:ae:5e:cf:4c:a5:06:21:df:a1:09:1d:1f:ff:d8:55:
dd:d7:39:16:cd:90:76:3f:ca:65:b2:16:9a:70:61:0e:d3:8a:
0e:de:f8:29:f2:67:8c:8a:53:fb:cc:4b:9c:35:c4:8d:f5:c4:
cd:79:7c:c6:16:8c:d1:57:13:64:7c:98:16:de:46:ee:05:8b:
45:75:d8:a6:fd:be:16:1d:36:12:6f:3d:b2:36:91:36:a4:40:
8d:d6:52:14:43:7d:5a:f9:91:9a:8c:f2:16:8d:06:9b:21:79:
af:e8:0a:9d:d7:88:e8:33:6d:bb:1f:2a:24:94:ec:fb:3a:17:
d1:95:24:a5:ce:da:a4:55:df:64:ba:7f:e6:6f:98:b0:86:70:
d0:88:8c:df:3e:01:73:8b:85:e2:bb:d1:a9:12:08:bd:55:da:
9f:9d:bb:df:03:28:8c:d0:ad:dc:a3:51:bd:47:d1:92:b7:9e:
f2:cc:07:1c:44:bd:7b:2e:b0:2b:aa:6c:66:56:1b:87:85:6f:
11:c3:65:9d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Apr 13 12:45:49 2025 by rpki-client