Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/08/11cfb5-acb5-4052-9f83-5e2c9dab8403/1/uREsgEp_SnTOWMxxyZT1qdVhIrE.mft
File: uREsgEp_SnTOWMxxyZT1qdVhIrE.mft (raw, json)
Hash identifier: 4n2a/II9MCJYKhQl/znWmLOwDbW29oOadXdqGvNSPE8=
Subject key identifier: 3F:7C:A4:59:A0:3E:13:72:35:E3:FC:09:D8:A1:CC:D3:BA:98:33:B6
Authority key identifier: B9:11:2C:80:4A:7F:4A:74:CE:58:CC:71:C9:94:F5:A9:D5:61:22:B1
Certificate issuer: /CN=b9112c804a7f4a74ce58cc71c994f5a9d56122b1
Certificate serial: 0196B890B8541A9B830C00C6850AB84B4180
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/uREsgEp_SnTOWMxxyZT1qdVhIrE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/08/11cfb5-acb5-4052-9f83-5e2c9dab8403/1/uREsgEp_SnTOWMxxyZT1qdVhIrE.mft
Manifest number: 0D8D
Signing time: Sat 10 May 2025 05:00:14 +0000
Manifest this update: Sat 10 May 2025 05:00:14 +0000
Manifest next update: Sun 11 May 2025 05:00:14 +0000
Files and hashes: 1: 1patb8mkVp0mJa0slQ7qQ-5WVBk.roa (hash: DsUMv9vQW0wvlxaSYrdoCYfaCKpNMHSpozAHeICWqOw=)
2: uREsgEp_SnTOWMxxyZT1qdVhIrE.crl (hash: ylluQDp03bqmDicXnby5AA/tKBrCMBxPn5SDmcMolg4=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/08/11cfb5-acb5-4052-9f83-5e2c9dab8403/1/uREsgEp_SnTOWMxxyZT1qdVhIrE.crl
rsync://rpki.ripe.net/repository/DEFAULT/08/11cfb5-acb5-4052-9f83-5e2c9dab8403/1/uREsgEp_SnTOWMxxyZT1qdVhIrE.mft
rsync://rpki.ripe.net/repository/DEFAULT/uREsgEp_SnTOWMxxyZT1qdVhIrE.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 11 May 2025 04:00:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:b8:90:b8:54:1a:9b:83:0c:00:c6:85:0a:b8:4b:41:80
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=b9112c804a7f4a74ce58cc71c994f5a9d56122b1
Validity
Not Before: May 10 05:00:14 2025 GMT
Not After : May 11 05:00:14 2025 GMT
Subject: CN=3f7ca459a03e137235e3fc09d8a1ccd3ba9833b6
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cb:78:5f:7f:c3:fc:b6:0b:5e:0e:b6:89:72:8f:
80:94:e0:bf:72:85:9f:54:a5:a3:59:a8:22:7d:45:
6d:2c:d1:c7:02:9e:00:7e:ee:c0:75:35:05:be:dd:
b6:42:3e:63:77:55:bb:67:59:34:7c:e8:df:24:70:
de:e6:02:91:ed:34:11:07:46:6d:28:ee:7d:a1:19:
62:d2:ba:82:01:dd:0c:e1:94:74:b1:30:f2:7c:3f:
25:01:f6:b1:4f:81:94:1a:91:a9:b5:c3:e9:37:ff:
c5:af:ca:5e:eb:4f:6d:67:04:02:47:7c:49:90:87:
63:9e:17:cb:fc:b7:6e:54:fd:4e:81:73:61:c3:2e:
b2:3b:85:4e:01:da:99:33:41:ca:15:38:32:e0:d0:
69:a0:27:bb:fc:61:a0:fa:69:7c:bd:d8:6a:19:60:
ef:59:39:cb:ed:12:20:14:46:a3:cf:08:6a:e1:aa:
2a:5a:ac:83:79:00:16:b6:9b:fb:fd:a0:b5:f4:90:
cb:de:c3:a4:f2:bf:c5:96:22:18:17:0d:a5:97:91:
bd:b8:c3:40:c6:f7:14:9d:15:bd:3d:83:ad:10:01:
95:17:df:cd:de:42:9e:e7:91:9c:34:12:20:d9:f1:
44:f7:c2:13:ec:65:53:91:b4:65:7e:29:86:c1:7c:
4f:1d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
3F:7C:A4:59:A0:3E:13:72:35:E3:FC:09:D8:A1:CC:D3:BA:98:33:B6
X509v3 Authority Key Identifier:
keyid:B9:11:2C:80:4A:7F:4A:74:CE:58:CC:71:C9:94:F5:A9:D5:61:22:B1
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/uREsgEp_SnTOWMxxyZT1qdVhIrE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/08/11cfb5-acb5-4052-9f83-5e2c9dab8403/1/uREsgEp_SnTOWMxxyZT1qdVhIrE.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/08/11cfb5-acb5-4052-9f83-5e2c9dab8403/1/uREsgEp_SnTOWMxxyZT1qdVhIrE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
78:4d:61:5a:e4:5b:d0:47:dd:8f:47:48:fa:5a:a0:38:b3:e8:
5c:4c:b5:b3:18:7c:1b:ce:23:7c:c8:05:56:3d:6a:19:f4:b2:
41:d4:7a:28:dc:6a:89:b9:dd:20:e0:af:c8:61:eb:e5:a8:2d:
d5:7a:65:c6:6b:08:36:bd:04:7e:c4:26:45:10:a6:6d:57:fd:
16:e0:81:7a:b3:d7:86:3d:be:6c:19:a3:6f:bf:52:c8:83:1b:
7d:ff:f7:26:8e:e8:57:a5:0a:fe:56:60:3b:5a:32:bd:6d:65:
95:80:d0:12:ad:7b:14:04:49:fe:6f:79:4a:e9:8d:ec:0b:8d:
70:a2:25:a6:18:c1:e6:78:4f:d5:eb:80:f1:12:42:9f:36:b2:
94:fc:ae:1c:51:92:33:8f:d7:33:de:24:64:d2:43:a0:20:08:
35:fc:00:5b:1d:26:47:b5:ab:a6:e7:09:25:89:cb:d3:4e:57:
c7:d3:9f:ad:d4:b5:f6:c1:01:d1:41:be:80:e8:07:b7:0d:d4:
ab:fb:59:b7:0e:43:aa:b5:66:9c:59:b6:de:e6:d2:a6:a7:3a:
de:41:30:f3:ce:f4:f5:82:e6:b4:2c:58:c5:5a:2e:b0:83:19:
bd:36:8d:e6:90:0a:1c:32:20:3d:9e:ee:c4:0c:e6:5a:d2:44:
3b:4a:ab:4a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat May 10 10:46:09 2025 by rpki-client