Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/04/10d5b2-85e3-49ed-bdc1-8069c46771cc/1/uiOwejwKyeMz9S6LXUGnaKPTkCU.mft
File: uiOwejwKyeMz9S6LXUGnaKPTkCU.mft (raw, json)
Hash identifier: hk145q0KyelOr3dnbZbBEjO3LH2OTzt2sLu+LFuyw/Y=
Subject key identifier: D0:79:A8:71:25:CF:E5:07:B9:15:16:DA:71:0A:EB:10:83:79:DE:81
Authority key identifier: BA:23:B0:7A:3C:0A:C9:E3:33:F5:2E:8B:5D:41:A7:68:A3:D3:90:25
Certificate issuer: /CN=ba23b07a3c0ac9e333f52e8b5d41a768a3d39025
Certificate serial: 0196AA67B80B86F5AA876A57CCF9F635C8B0
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/uiOwejwKyeMz9S6LXUGnaKPTkCU.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/04/10d5b2-85e3-49ed-bdc1-8069c46771cc/1/uiOwejwKyeMz9S6LXUGnaKPTkCU.mft
Manifest number: 04D0
Signing time: Wed 07 May 2025 11:00:46 +0000
Manifest this update: Wed 07 May 2025 11:00:46 +0000
Manifest next update: Thu 08 May 2025 11:00:46 +0000
Files and hashes: 1: P3Ofhmz_sNehdh6r-5A9aHRvTwk.roa (hash: uFbK3pUhyEcyxB8HRUYhk8hEyAiHRXkZFNHVkwu5yUA=)
2: uiOwejwKyeMz9S6LXUGnaKPTkCU.crl (hash: P5Z7Mp9cb0kWG5LOpol6dQeo90kfOK6GD/vfXcHPGYU=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/04/10d5b2-85e3-49ed-bdc1-8069c46771cc/1/uiOwejwKyeMz9S6LXUGnaKPTkCU.crl
rsync://rpki.ripe.net/repository/DEFAULT/04/10d5b2-85e3-49ed-bdc1-8069c46771cc/1/uiOwejwKyeMz9S6LXUGnaKPTkCU.mft
rsync://rpki.ripe.net/repository/DEFAULT/uiOwejwKyeMz9S6LXUGnaKPTkCU.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 08 May 2025 11:00:46 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:aa:67:b8:0b:86:f5:aa:87:6a:57:cc:f9:f6:35:c8:b0
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=ba23b07a3c0ac9e333f52e8b5d41a768a3d39025
Validity
Not Before: May 7 11:00:46 2025 GMT
Not After : May 8 11:00:46 2025 GMT
Subject: CN=d079a87125cfe507b91516da710aeb108379de81
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c3:26:bc:62:c0:04:da:42:8c:eb:b3:66:53:2b:
3f:61:41:bb:10:c0:d7:98:88:d3:68:2f:3f:c8:5b:
d6:65:a2:5b:9f:2c:99:ec:bc:5f:99:bf:75:47:6b:
53:07:9e:f7:10:fb:73:a2:63:e3:23:f7:a9:c9:03:
78:d6:ed:74:99:69:7b:10:20:0b:2d:15:29:79:3b:
5c:bf:43:c5:1c:98:6a:61:e7:de:4e:b7:28:3a:c0:
f4:ec:4f:95:55:57:c9:cd:b7:d0:a4:d5:f2:d6:a5:
c1:5e:86:31:fc:05:01:d6:1f:73:de:94:ab:a0:af:
60:2f:ac:eb:f0:d6:3f:a0:2f:68:e5:87:97:3c:01:
5c:88:42:ea:a2:43:d0:0f:34:8a:45:21:0b:6f:58:
cf:73:b7:0b:15:8b:4a:6e:b6:14:8b:79:a8:85:a9:
aa:b7:ed:47:8f:aa:84:85:8f:7d:02:02:ef:9b:57:
67:c7:64:4c:21:03:5f:23:de:f5:89:e5:ac:cd:54:
78:56:9d:eb:91:6b:7e:f9:ef:c9:a5:0c:42:09:ca:
a3:3c:bc:16:e8:83:ad:78:73:9e:36:d0:f7:a4:1b:
6e:82:7c:18:ce:20:70:41:a5:84:f6:9a:54:55:be:
a3:d0:b2:b0:1b:d3:d6:06:72:81:cd:6e:61:8c:2f:
b3:b9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D0:79:A8:71:25:CF:E5:07:B9:15:16:DA:71:0A:EB:10:83:79:DE:81
X509v3 Authority Key Identifier:
keyid:BA:23:B0:7A:3C:0A:C9:E3:33:F5:2E:8B:5D:41:A7:68:A3:D3:90:25
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/uiOwejwKyeMz9S6LXUGnaKPTkCU.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/04/10d5b2-85e3-49ed-bdc1-8069c46771cc/1/uiOwejwKyeMz9S6LXUGnaKPTkCU.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/04/10d5b2-85e3-49ed-bdc1-8069c46771cc/1/uiOwejwKyeMz9S6LXUGnaKPTkCU.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
28:72:4e:10:d4:16:e5:c0:24:02:68:a4:1e:1a:6b:b9:e3:2a:
8f:32:33:21:ab:1a:db:50:31:88:67:08:0e:29:b6:ed:16:79:
3a:fa:60:7c:d2:0b:8e:ee:0f:5e:78:65:9a:28:c7:ce:cf:c3:
06:24:1e:d1:fa:21:cc:ea:8b:bb:34:27:cf:81:1c:d0:ae:3c:
e6:5b:73:66:26:2d:67:cb:96:bc:46:90:56:f7:39:7c:16:27:
58:3d:0b:48:56:d6:6f:b7:97:50:3d:81:d1:19:55:0f:4f:b1:
be:05:e9:cf:c8:da:60:d6:f5:97:48:f0:89:e6:03:df:4b:f6:
35:05:f5:aa:73:f6:25:11:c2:81:84:91:27:a6:da:df:e6:8f:
e0:78:8f:17:db:31:f4:cc:fc:b2:c2:92:c8:b0:74:18:cc:60:
e8:61:c6:aa:d0:e6:9d:74:49:1c:b5:b8:eb:62:6e:c0:d1:de:
e2:76:e6:ce:10:f7:49:9f:10:21:12:b6:a8:fb:5f:c6:b3:42:
00:82:cc:33:83:4d:7a:8f:5f:70:b6:e8:2c:1f:fd:36:af:73:
d6:37:f4:a8:27:03:ed:46:84:8e:a4:c3:31:de:01:87:5c:96:
a4:0b:b1:94:52:b7:84:a5:56:2e:77:12:e4:1a:c1:d1:3e:08:
3c:b2:c4:03
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed May 7 19:38:56 2025 by rpki-client