Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/0e/6369e6-2304-4922-afdf-e93e2eba69b9/1/uxkNECrJYDtAWzY3TUKYaGBJN68.mft
File: uxkNECrJYDtAWzY3TUKYaGBJN68.mft (raw, json)
Hash identifier: n8ZNsGj+F6XuZP8PSai87VjTNqV99QYFE8QLj4pgN4o=
Subject key identifier: 81:4E:63:B7:3A:E8:86:B6:7C:5B:71:D6:E3:54:3C:3A:9A:99:B7:B0
Authority key identifier: BB:19:0D:10:2A:C9:60:3B:40:5B:36:37:4D:42:98:68:60:49:37:AF
Certificate issuer: /CN=bb190d102ac9603b405b36374d429868604937af
Certificate serial: 0196C502FD8E7E3F9B2A8ADB8A4C3CA3373D
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/uxkNECrJYDtAWzY3TUKYaGBJN68.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/0e/6369e6-2304-4922-afdf-e93e2eba69b9/1/uxkNECrJYDtAWzY3TUKYaGBJN68.mft
Manifest number: 153D
Signing time: Mon 12 May 2025 15:00:29 +0000
Manifest this update: Mon 12 May 2025 15:00:29 +0000
Manifest next update: Tue 13 May 2025 15:00:29 +0000
Files and hashes: 1: KHPRuQDdd-kWMT7LTpUd4Jl5CLc.roa (hash: HHEh/ZmjNau8OqCWaktRrOiEVjCo5faN7oV96b1l4Q8=)
2: XFCSXye-JnBOg9hkUt9_8ox3-Uw.roa (hash: FoESmWnbukcz+6JNvVonKCdjus3ZKbyt/TOI4oU59NU=)
3: uxkNECrJYDtAWzY3TUKYaGBJN68.crl (hash: k3n07ksWrR2H9ymBlQuG41OTaC7OzBhULVfXPRko3Vs=)
4: znWJMiIkbWYiZH5TnewK7kB2zlM.roa (hash: RcLXWJX+JRUva9upa5qvKXN11LB1V2q/utprJ1zUPOo=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/0e/6369e6-2304-4922-afdf-e93e2eba69b9/1/uxkNECrJYDtAWzY3TUKYaGBJN68.crl
rsync://rpki.ripe.net/repository/DEFAULT/0e/6369e6-2304-4922-afdf-e93e2eba69b9/1/uxkNECrJYDtAWzY3TUKYaGBJN68.mft
rsync://rpki.ripe.net/repository/DEFAULT/uxkNECrJYDtAWzY3TUKYaGBJN68.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 13 May 2025 14:31:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:c5:02:fd:8e:7e:3f:9b:2a:8a:db:8a:4c:3c:a3:37:3d
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=bb190d102ac9603b405b36374d429868604937af
Validity
Not Before: May 12 15:00:29 2025 GMT
Not After : May 13 15:00:29 2025 GMT
Subject: CN=814e63b73ae886b67c5b71d6e3543c3a9a99b7b0
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c6:eb:6b:5d:d8:81:37:16:e8:13:b7:97:12:5d:
f3:0b:72:dc:2d:05:f5:aa:4b:cd:d0:ed:ec:c0:e6:
b2:4f:0c:c4:71:44:72:75:c7:6e:02:c5:25:a8:27:
e6:80:55:1d:d5:2e:41:fd:90:89:ed:63:16:12:aa:
6b:52:ae:92:41:1f:c0:76:d1:e1:f9:e8:c4:f6:b9:
42:04:8c:d7:38:7b:19:b7:46:23:dd:f5:c4:6b:72:
82:56:0e:98:06:b3:0c:2b:30:cc:1e:f4:4c:e4:ce:
ee:c5:44:c0:ba:19:22:88:42:75:38:ea:29:e6:ba:
71:c0:4b:8b:48:77:59:13:65:48:05:c7:50:b4:1c:
d5:70:a7:17:74:62:1b:c5:8f:d5:9f:da:e4:93:70:
f7:4f:4a:24:af:92:ff:49:ce:ca:b7:41:eb:46:f7:
ea:be:39:5b:87:de:be:96:e5:13:a1:bd:80:3a:68:
47:61:33:9a:a5:3d:08:c8:d4:94:88:4a:b9:b9:55:
fb:a9:4c:c8:12:df:19:b4:a2:2e:7d:fe:b9:13:8a:
29:7a:0b:02:e8:f5:d1:1e:32:b5:66:32:8e:07:02:
9a:50:08:68:aa:3e:69:44:c5:ad:c9:4a:7e:fb:d3:
3c:69:24:93:dd:a0:ea:e8:dd:4a:1d:89:40:af:cb:
6b:3b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
81:4E:63:B7:3A:E8:86:B6:7C:5B:71:D6:E3:54:3C:3A:9A:99:B7:B0
X509v3 Authority Key Identifier:
keyid:BB:19:0D:10:2A:C9:60:3B:40:5B:36:37:4D:42:98:68:60:49:37:AF
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/uxkNECrJYDtAWzY3TUKYaGBJN68.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/0e/6369e6-2304-4922-afdf-e93e2eba69b9/1/uxkNECrJYDtAWzY3TUKYaGBJN68.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/0e/6369e6-2304-4922-afdf-e93e2eba69b9/1/uxkNECrJYDtAWzY3TUKYaGBJN68.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
b2:3e:12:d1:44:2c:8b:21:ed:01:8c:fd:8a:76:71:cd:5a:31:
a6:93:b5:98:b4:58:64:15:c3:6e:f1:73:59:d5:7b:46:8d:70:
e2:19:c1:42:c3:8e:31:93:43:2c:2d:23:1d:db:27:7b:27:6a:
9a:08:fb:cc:37:dc:82:20:5a:ec:7a:e9:8f:97:e9:63:a7:0e:
a8:9c:01:dc:82:b1:5e:e9:d8:3e:0f:45:75:e1:d7:35:9c:f1:
6c:74:8f:79:86:16:dd:25:52:77:db:bd:d9:86:0f:63:f8:12:
c6:76:1d:05:88:80:1b:39:67:34:72:06:f8:f6:3f:9c:03:b6:
0e:3a:39:e4:2f:3e:c3:e0:64:4c:a0:25:0e:b3:49:c7:08:ff:
0e:2f:d6:ae:30:9b:d9:3a:74:e8:f7:e2:cb:e3:d2:a5:36:d1:
17:7e:ea:a3:e7:ff:32:20:80:ff:3a:39:0d:82:1e:5d:91:f5:
f7:20:0e:28:0b:6b:0b:46:e1:00:f5:24:83:ff:71:19:d4:75:
4b:b2:5b:aa:f8:0b:44:55:92:7f:29:ba:93:d8:30:d4:f8:4e:
2c:27:ed:e4:48:bd:1b:47:37:2e:dd:72:84:bc:1a:ee:00:a8:
a4:8a:ef:19:c0:76:bf:0a:ae:f6:e8:8c:1a:0f:7a:05:b1:46:
ad:18:29:b4
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon May 12 19:24:47 2025 by rpki-client