Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/0e/3f6178-5fd3-403f-8fec-1a89ff11965e/1/Ua1nkbjb6cNSvWSpMiFytBxLIXE.mft
File: Ua1nkbjb6cNSvWSpMiFytBxLIXE.mft (raw, json)
Hash identifier: /uUiya7tAC9iXx4PSop1NcWP0PpbNGdFfPEGs5j+1Go=
Subject key identifier: B7:EF:B6:D7:96:20:19:EB:84:3D:1D:C3:1D:C2:32:B7:3A:CC:AD:7F
Authority key identifier: 51:AD:67:91:B8:DB:E9:C3:52:BD:64:A9:32:21:72:B4:1C:4B:21:71
Certificate issuer: /CN=51ad6791b8dbe9c352bd64a9322172b41c4b2171
Certificate serial: 0196A6C1E250825AE6CE3E6623B772ABBFEC
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Ua1nkbjb6cNSvWSpMiFytBxLIXE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/0e/3f6178-5fd3-403f-8fec-1a89ff11965e/1/Ua1nkbjb6cNSvWSpMiFytBxLIXE.mft
Manifest number: 04F9
Signing time: Tue 06 May 2025 18:00:46 +0000
Manifest this update: Tue 06 May 2025 18:00:46 +0000
Manifest next update: Wed 07 May 2025 18:00:46 +0000
Files and hashes: 1: Hi9hJLSsqdfwwjDafJDvlExJJoI.roa (hash: PID2YEd+ZOdlQLJzFIlElIOxp8cs3tI73VYlO3AzPb4=)
2: Ua1nkbjb6cNSvWSpMiFytBxLIXE.crl (hash: axUkz0P2ivUoE/Vfs6FGbU+1L2OjZtVg8r45g/fdgN8=)
3: Yy7EyL4jOYhS2ny07A-uohis4hw.roa (hash: 939gAFuZ8T1J06oXgjy3uy3jHGyJvoFV29uIXoQOhss=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/0e/3f6178-5fd3-403f-8fec-1a89ff11965e/1/Ua1nkbjb6cNSvWSpMiFytBxLIXE.crl
rsync://rpki.ripe.net/repository/DEFAULT/0e/3f6178-5fd3-403f-8fec-1a89ff11965e/1/Ua1nkbjb6cNSvWSpMiFytBxLIXE.mft
rsync://rpki.ripe.net/repository/DEFAULT/Ua1nkbjb6cNSvWSpMiFytBxLIXE.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 07 May 2025 14:16:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:a6:c1:e2:50:82:5a:e6:ce:3e:66:23:b7:72:ab:bf:ec
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=51ad6791b8dbe9c352bd64a9322172b41c4b2171
Validity
Not Before: May 6 18:00:46 2025 GMT
Not After : May 7 18:00:46 2025 GMT
Subject: CN=b7efb6d7962019eb843d1dc31dc232b73accad7f
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c5:ac:4b:d0:03:ff:a9:0b:90:09:11:be:b7:ef:
c8:41:14:98:da:2e:9a:87:be:e8:59:6f:2f:9f:61:
d4:c8:b3:06:f4:65:6f:99:60:c7:ac:51:ca:d6:6e:
6c:95:c8:43:96:b7:82:76:18:6a:0d:0b:41:97:22:
c8:21:df:50:c2:b3:74:a3:bc:8c:4a:96:0a:68:1a:
ff:99:61:9c:62:60:73:2a:50:f0:d9:75:b3:c7:c9:
04:68:6b:53:8e:fd:62:57:48:66:61:5c:18:52:ea:
63:9a:1b:a5:59:15:b7:b9:6d:df:ae:68:2e:ba:d1:
3b:17:45:5e:48:32:73:cc:fd:fd:17:6b:80:bd:bd:
5c:40:21:30:c1:a8:62:bd:b9:21:ef:35:0e:54:d9:
8b:21:06:f1:bb:3f:bb:c5:36:cc:c1:1b:0b:92:51:
a5:f3:22:0e:c0:cb:a4:2c:c1:a5:d7:a2:cd:94:ae:
21:b4:a9:ef:70:32:4f:3d:54:b6:4c:24:03:8e:67:
fa:83:c7:46:d2:6f:a8:e3:61:05:e3:d1:b1:31:42:
b1:e1:a9:29:65:89:8a:38:16:a6:b3:84:b8:5f:6e:
32:f7:41:e7:96:ba:23:2d:a1:67:93:e7:04:74:62:
4b:01:85:0a:24:7a:11:fc:69:7a:c7:a1:52:77:95:
ce:99
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B7:EF:B6:D7:96:20:19:EB:84:3D:1D:C3:1D:C2:32:B7:3A:CC:AD:7F
X509v3 Authority Key Identifier:
keyid:51:AD:67:91:B8:DB:E9:C3:52:BD:64:A9:32:21:72:B4:1C:4B:21:71
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Ua1nkbjb6cNSvWSpMiFytBxLIXE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/0e/3f6178-5fd3-403f-8fec-1a89ff11965e/1/Ua1nkbjb6cNSvWSpMiFytBxLIXE.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/0e/3f6178-5fd3-403f-8fec-1a89ff11965e/1/Ua1nkbjb6cNSvWSpMiFytBxLIXE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
ae:52:f7:4a:7f:c6:4a:1c:ec:12:bb:c4:91:f0:4a:eb:64:b4:
f1:98:7e:2e:78:61:4a:fb:ca:6f:71:0a:3a:6e:e6:bc:65:5a:
23:a7:f3:42:e7:a3:33:1d:ef:8b:62:e8:7f:87:de:da:12:2f:
94:fa:8f:06:fe:f9:a3:ab:b5:bb:f9:7d:5f:94:74:95:55:c5:
bf:4b:f3:cf:1b:31:5d:82:5f:72:56:aa:42:59:21:56:98:a1:
58:f6:06:b1:46:e2:29:ec:52:11:1e:05:48:fe:41:e4:c2:25:
aa:2f:d5:7f:a7:25:db:e8:80:df:dc:12:a2:53:e0:4b:86:46:
33:58:47:e9:9a:94:75:a0:c4:a1:b2:7c:ef:bc:b8:80:b9:d4:
5c:86:61:98:12:ac:bd:92:55:23:b5:58:50:94:32:6e:df:68:
5b:39:23:c8:b2:6e:b2:e0:b2:7f:9c:2d:44:51:ca:c2:6e:19:
f1:1c:3c:b4:81:8d:84:40:19:8f:66:ee:17:1c:fd:5e:e7:88:
4a:d1:0d:b2:cc:9f:79:c4:67:3c:bf:c4:c2:d8:5b:82:4d:d9:
20:e0:e4:7d:aa:fb:bf:6d:ec:93:75:94:0e:6b:7d:3a:db:8e:
34:05:58:de:60:c8:06:fe:87:16:29:a3:8f:82:54:a9:9b:b7:
ec:36:06:d9
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue May 6 22:37:19 2025 by rpki-client