Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/16/b79871-b1dd-4e6e-95e7-de025e6f8589/1/uzAVV2TLLuD17u_N9Sp7EtNy7d0.mft
File: uzAVV2TLLuD17u_N9Sp7EtNy7d0.mft (raw, json)
Hash identifier: LH2KGF3xACfvWR53JkYGYH7GxYk54iGaw4aoFd/gVbo=
Subject key identifier: A3:88:0C:64:80:2F:89:4D:85:C8:2F:C3:02:0D:71:A2:5B:5A:04:58
Authority key identifier: BB:30:15:57:64:CB:2E:E0:F5:EE:EF:CD:F5:2A:7B:12:D3:72:ED:DD
Certificate issuer: /CN=bb30155764cb2ee0f5eeefcdf52a7b12d372eddd
Certificate serial: 0196C013A0BE86B43E404F73FB1E728F78CD
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/uzAVV2TLLuD17u_N9Sp7EtNy7d0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/16/b79871-b1dd-4e6e-95e7-de025e6f8589/1/uzAVV2TLLuD17u_N9Sp7EtNy7d0.mft
Manifest number: 0DB8
Signing time: Sun 11 May 2025 16:00:33 +0000
Manifest this update: Sun 11 May 2025 16:00:33 +0000
Manifest next update: Mon 12 May 2025 16:00:33 +0000
Files and hashes: 1: LUeFE-e9M56hGD7W3dr7iEaRzQc.roa (hash: +d9SvNclOTnQ6lkDZgYeQTKUTYMS6VbA7XWWCAaY2o8=)
2: uzAVV2TLLuD17u_N9Sp7EtNy7d0.crl (hash: c2LIP0A5QN+GRY3KsrW4ArECTHkqTYsoW2+JZc0nrcA=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/16/b79871-b1dd-4e6e-95e7-de025e6f8589/1/uzAVV2TLLuD17u_N9Sp7EtNy7d0.crl
rsync://rpki.ripe.net/repository/DEFAULT/16/b79871-b1dd-4e6e-95e7-de025e6f8589/1/uzAVV2TLLuD17u_N9Sp7EtNy7d0.mft
rsync://rpki.ripe.net/repository/DEFAULT/uzAVV2TLLuD17u_N9Sp7EtNy7d0.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 12 May 2025 08:00:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:c0:13:a0:be:86:b4:3e:40:4f:73:fb:1e:72:8f:78:cd
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=bb30155764cb2ee0f5eeefcdf52a7b12d372eddd
Validity
Not Before: May 11 16:00:33 2025 GMT
Not After : May 12 16:00:33 2025 GMT
Subject: CN=a3880c64802f894d85c82fc3020d71a25b5a0458
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b3:39:ab:f1:c9:3a:2a:0b:b6:d9:88:15:24:fa:
6a:42:55:cf:04:49:34:8e:ce:b0:1d:93:1f:67:ea:
ba:af:56:a0:6e:5c:67:cb:d4:73:7e:0d:ac:7a:4c:
09:b9:d2:30:dd:a9:9f:b4:b2:24:15:d3:f3:91:da:
d7:d6:23:85:d8:25:54:50:d9:5e:bf:cd:90:71:ea:
06:78:76:76:f6:aa:86:56:08:a1:08:b5:80:ac:7d:
15:e8:cd:18:04:a5:a4:d6:c0:12:12:b1:98:75:1a:
bf:fe:86:45:ee:66:78:7e:de:fe:d7:b8:3d:06:03:
69:8b:62:d6:4b:68:1b:8d:c4:7a:d0:95:50:88:09:
65:ab:ed:54:7e:5d:0e:82:89:5b:3e:69:dd:34:23:
2e:4a:42:cc:16:b1:65:36:77:33:08:53:4c:8e:bb:
d3:d1:d0:25:d6:47:bc:17:ec:14:aa:07:67:f1:df:
ab:ec:9a:0f:34:bb:f6:60:0e:a4:9c:8a:6a:51:99:
fb:56:e6:bc:e7:a4:27:79:ac:53:c6:a0:4f:24:be:
9d:dc:40:e0:90:6d:d8:de:eb:2e:9f:5b:3f:02:cb:
57:02:94:5f:43:42:32:b8:05:49:80:fd:a7:75:9f:
da:b0:89:c2:e8:5c:86:7d:5e:3f:cd:56:72:f3:1c:
62:2b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A3:88:0C:64:80:2F:89:4D:85:C8:2F:C3:02:0D:71:A2:5B:5A:04:58
X509v3 Authority Key Identifier:
keyid:BB:30:15:57:64:CB:2E:E0:F5:EE:EF:CD:F5:2A:7B:12:D3:72:ED:DD
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/uzAVV2TLLuD17u_N9Sp7EtNy7d0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/16/b79871-b1dd-4e6e-95e7-de025e6f8589/1/uzAVV2TLLuD17u_N9Sp7EtNy7d0.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/16/b79871-b1dd-4e6e-95e7-de025e6f8589/1/uzAVV2TLLuD17u_N9Sp7EtNy7d0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
3f:e7:da:da:2d:81:35:97:da:5b:cc:74:f5:11:55:fc:03:86:
34:f4:96:13:3d:88:ac:24:7f:62:04:5b:c4:14:08:bc:66:b4:
13:21:b9:c5:12:02:4e:75:71:b9:30:4d:01:17:18:73:78:2b:
0d:65:f5:2d:a5:4c:ad:32:06:a3:04:24:d0:86:d0:7e:71:67:
62:d6:b5:38:99:dd:9c:b3:3b:87:50:9d:d3:27:b3:34:2a:c4:
c8:05:4d:50:f1:5c:5b:63:e3:85:a5:1b:6b:09:8e:52:65:37:
27:40:d6:b5:d5:d3:d1:6d:a2:be:58:14:1d:9a:c9:b3:85:65:
32:ce:d0:5f:48:a8:71:16:18:7a:92:cb:6c:1d:aa:83:53:6e:
0f:a7:7e:1c:85:c8:35:57:77:0d:39:f8:0e:3c:76:a1:05:7e:
c8:95:7b:05:ab:48:c4:08:9d:69:89:da:0b:4c:71:76:0b:28:
98:18:31:84:dc:76:b2:9c:1c:b6:36:e8:ea:1e:bd:f9:3c:ca:
5d:5f:46:1b:00:c0:a9:1a:00:45:7b:d2:06:25:b8:52:d9:53:
61:1c:4c:c1:30:e1:64:92:72:13:c2:ab:c4:0b:23:e9:f3:60:
25:77:bd:72:5c:b8:4d:6f:49:e5:59:b2:d2:66:9a:cd:b9:95:
d7:ad:4d:01
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun May 11 17:59:30 2025 by rpki-client