Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/25/1d7b0c-2251-4dd3-8690-52874611cd21/1/uT1JCNnEOoX4W-GTNKJvXVE1C8s.mft
File: uT1JCNnEOoX4W-GTNKJvXVE1C8s.mft (raw, json)
Hash identifier: T1CuT/hOmGkarYirePpac9ATR/koDzF+P+CkQkCycPs=
Subject key identifier: 09:7F:D0:64:29:F7:9C:D3:08:55:02:9A:A3:F6:D5:70:7A:A0:67:B0
Authority key identifier: B9:3D:49:08:D9:C4:3A:85:F8:5B:E1:93:34:A2:6F:5D:51:35:0B:CB
Certificate issuer: /CN=b93d4908d9c43a85f85be19334a26f5d51350bcb
Certificate serial: 0196BA487139D30C44B4919A6E4754CBC973
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/uT1JCNnEOoX4W-GTNKJvXVE1C8s.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/25/1d7b0c-2251-4dd3-8690-52874611cd21/1/uT1JCNnEOoX4W-GTNKJvXVE1C8s.mft
Manifest number: 0321
Signing time: Sat 10 May 2025 13:00:31 +0000
Manifest this update: Sat 10 May 2025 13:00:31 +0000
Manifest next update: Sun 11 May 2025 13:00:31 +0000
Files and hashes: 1: 9uAJrIJKgOtOq3ATLuk4JEqJnwE.roa (hash: ps7+JDVzTyszBozCz4/MWq6V+oPhM0t6V9fw2FhYV+o=)
2: jIGs3qKcDxBmqJ2fipFLAdujx6w.roa (hash: KLPs+8T03UuOOCPXUYOJk9ZNwTltd+bx8VIhJhWnYmw=)
3: uT1JCNnEOoX4W-GTNKJvXVE1C8s.crl (hash: TizHHlmjAKYw0Dr5PLEGOliPqGcytrpGkT2b7CX86zQ=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/25/1d7b0c-2251-4dd3-8690-52874611cd21/1/uT1JCNnEOoX4W-GTNKJvXVE1C8s.crl
rsync://rpki.ripe.net/repository/DEFAULT/25/1d7b0c-2251-4dd3-8690-52874611cd21/1/uT1JCNnEOoX4W-GTNKJvXVE1C8s.mft
rsync://rpki.ripe.net/repository/DEFAULT/uT1JCNnEOoX4W-GTNKJvXVE1C8s.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 11 May 2025 13:00:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:ba:48:71:39:d3:0c:44:b4:91:9a:6e:47:54:cb:c9:73
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=b93d4908d9c43a85f85be19334a26f5d51350bcb
Validity
Not Before: May 10 13:00:31 2025 GMT
Not After : May 11 13:00:31 2025 GMT
Subject: CN=097fd06429f79cd30855029aa3f6d5707aa067b0
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c1:f1:ff:11:38:1a:85:33:7e:6c:a4:80:79:9c:
e2:3a:73:a0:b4:7f:0e:28:e3:7a:e8:b2:b8:69:e4:
a3:f4:43:c5:90:d6:a4:6d:2f:75:29:40:00:25:22:
fa:52:86:45:9a:1d:69:64:59:24:1f:55:bd:d9:36:
54:54:c8:94:d8:7a:cb:35:1c:02:cc:34:d0:ea:62:
92:b3:3c:3b:f8:b0:b4:0f:e4:8d:00:a0:bb:f6:6f:
74:18:a5:38:63:95:f2:4d:59:c7:ac:fc:43:9a:2f:
5e:93:29:58:2b:db:67:af:7a:6d:8d:c6:bf:50:52:
19:cc:e8:3f:5c:09:67:6a:41:28:bd:dd:53:f9:dd:
f3:bf:14:57:3f:11:a5:7a:88:ed:7f:48:95:27:fb:
45:0f:4f:24:05:4e:32:09:9a:97:d1:7c:74:c3:8f:
1e:7c:0a:af:7b:c4:13:c8:ed:fe:da:18:df:de:38:
eb:87:cd:47:23:b9:52:df:8a:70:08:27:fa:fc:94:
d5:4a:40:54:fe:0c:7d:99:92:91:ec:6d:55:41:2b:
e4:78:7c:2c:41:32:88:76:75:c8:69:60:6a:2c:49:
72:c1:f0:65:d9:68:bf:1e:03:d0:a8:3a:18:12:e1:
4b:59:5f:0d:2e:e5:05:3e:06:b3:60:6e:80:22:a9:
c8:3b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
09:7F:D0:64:29:F7:9C:D3:08:55:02:9A:A3:F6:D5:70:7A:A0:67:B0
X509v3 Authority Key Identifier:
keyid:B9:3D:49:08:D9:C4:3A:85:F8:5B:E1:93:34:A2:6F:5D:51:35:0B:CB
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/uT1JCNnEOoX4W-GTNKJvXVE1C8s.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/25/1d7b0c-2251-4dd3-8690-52874611cd21/1/uT1JCNnEOoX4W-GTNKJvXVE1C8s.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/25/1d7b0c-2251-4dd3-8690-52874611cd21/1/uT1JCNnEOoX4W-GTNKJvXVE1C8s.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
3d:65:3e:1d:b4:b2:cc:1d:0d:c3:f8:ab:5d:7b:6a:d1:fe:fe:
28:67:bc:7b:95:01:65:6e:4f:a1:5c:b6:a7:96:33:2e:26:c3:
b2:5e:e3:5e:b8:8c:1f:e9:3d:b5:6b:ee:2e:3b:a6:d0:93:db:
ab:be:72:e2:1c:c9:57:7a:44:4a:ff:42:11:03:5c:c5:26:43:
c2:ac:84:a3:6f:b9:9b:c2:68:d6:e6:b9:04:de:88:56:70:86:
13:5a:82:c2:de:c7:66:79:a3:04:19:2d:b0:50:1b:52:c9:92:
99:ce:a8:32:89:c3:db:4f:7a:68:9f:61:f6:57:b8:3c:51:3e:
98:81:16:b5:87:c5:82:4e:71:d3:10:d3:68:5e:e7:29:d1:53:
54:2d:fd:b4:bb:b0:0a:da:77:5d:fc:3b:10:13:7d:53:d4:f9:
9f:e2:d3:14:a8:03:c3:b0:4d:44:ea:d5:d9:d8:73:45:cc:eb:
0b:3e:8c:c0:b3:0e:83:c6:f5:3d:09:7d:fc:c1:f1:1b:09:b1:
dd:35:9b:48:2e:1d:88:75:96:8e:a4:a2:f6:b2:ee:e3:2e:5e:
58:79:be:4f:9a:f0:27:38:ff:93:3c:a6:db:96:e1:67:b9:1e:
7c:a4:89:fb:5d:69:c8:15:34:9c:1c:70:e4:dd:b1:ac:a9:fa:
a4:4f:6a:be
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat May 10 21:53:05 2025 by rpki-client