Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/2f/8c09b3-f6d8-4c9a-964c-8527c9b3e75f/1/uqI_dArVZMVpO3cJHHGzwDE2pYA.mft
File: uqI_dArVZMVpO3cJHHGzwDE2pYA.mft (raw, json)
Hash identifier: JPFT143RVy1ZQHQXk4Hi4tx8HJl84x8KsLOPB1p84AE=
Subject key identifier: 33:D7:F9:7E:5B:FC:AF:D7:F0:D7:24:72:1F:8C:A9:1A:78:EB:D7:12
Authority key identifier: BA:A2:3F:74:0A:D5:64:C5:69:3B:77:09:1C:71:B3:C0:31:36:A5:80
Certificate issuer: /CN=baa23f740ad564c5693b77091c71b3c03136a580
Certificate serial: 0196C15D503E5CBE33A874B121B40098C8C3
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/uqI_dArVZMVpO3cJHHGzwDE2pYA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/2f/8c09b3-f6d8-4c9a-964c-8527c9b3e75f/1/uqI_dArVZMVpO3cJHHGzwDE2pYA.mft
Manifest number: 09AE
Signing time: Sun 11 May 2025 22:00:40 +0000
Manifest this update: Sun 11 May 2025 22:00:40 +0000
Manifest next update: Mon 12 May 2025 22:00:40 +0000
Files and hashes: 1: gQl4YCr829YOGRu3QQEM_8QNnRo.roa (hash: 468s9eqjwKzKxWWYEkQfsVXrMKlrp7YiLVsT2AanKV4=)
2: uqI_dArVZMVpO3cJHHGzwDE2pYA.crl (hash: 82VAHOW/Z1ymxsBQUizDkWXD4oC5awj9btIpLOUY3qw=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/2f/8c09b3-f6d8-4c9a-964c-8527c9b3e75f/1/uqI_dArVZMVpO3cJHHGzwDE2pYA.crl
rsync://rpki.ripe.net/repository/DEFAULT/2f/8c09b3-f6d8-4c9a-964c-8527c9b3e75f/1/uqI_dArVZMVpO3cJHHGzwDE2pYA.mft
rsync://rpki.ripe.net/repository/DEFAULT/uqI_dArVZMVpO3cJHHGzwDE2pYA.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 12 May 2025 16:00:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:c1:5d:50:3e:5c:be:33:a8:74:b1:21:b4:00:98:c8:c3
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=baa23f740ad564c5693b77091c71b3c03136a580
Validity
Not Before: May 11 22:00:40 2025 GMT
Not After : May 12 22:00:40 2025 GMT
Subject: CN=33d7f97e5bfcafd7f0d724721f8ca91a78ebd712
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b3:84:08:20:33:ea:36:6a:c3:90:ef:13:d8:16:
ee:63:6b:47:9b:1d:04:28:06:2c:19:7d:9a:07:57:
ea:d8:8e:7f:f0:13:1e:60:ee:b9:fc:13:41:00:de:
4e:84:fd:49:56:90:e8:5c:33:1e:56:d2:35:2a:c4:
99:9c:f3:a9:9c:c3:14:95:89:f3:78:fc:f2:27:4b:
7e:e9:c6:74:af:a2:45:80:3c:c2:d0:c9:e5:24:06:
52:9d:36:d8:4a:bc:7b:f7:5e:66:bf:83:58:a2:88:
5d:79:a6:55:4a:09:3c:2f:83:e3:3e:9f:c9:89:4a:
38:da:52:a7:26:74:54:5f:26:09:9b:ac:cb:3e:98:
da:10:60:2b:8b:53:1c:c9:fa:7d:af:ea:53:83:11:
3c:43:01:04:91:9b:69:b1:f3:19:46:df:10:dd:89:
6d:a3:d1:53:1e:d3:d4:4f:72:d5:e9:69:d0:06:b0:
c7:06:07:81:9a:34:c6:15:7a:9d:08:c7:15:c6:a1:
14:71:ee:e5:af:d8:fb:80:83:f7:2c:c3:43:da:c5:
6d:7a:e9:2f:fa:f3:6c:64:11:46:ba:9b:9c:98:f8:
79:c3:13:f4:f0:9a:50:c0:8c:a3:ec:b5:ed:ca:0c:
c4:4a:66:c0:ec:6d:2c:94:9d:42:6f:0c:b4:4f:59:
50:57
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
33:D7:F9:7E:5B:FC:AF:D7:F0:D7:24:72:1F:8C:A9:1A:78:EB:D7:12
X509v3 Authority Key Identifier:
keyid:BA:A2:3F:74:0A:D5:64:C5:69:3B:77:09:1C:71:B3:C0:31:36:A5:80
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/uqI_dArVZMVpO3cJHHGzwDE2pYA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/2f/8c09b3-f6d8-4c9a-964c-8527c9b3e75f/1/uqI_dArVZMVpO3cJHHGzwDE2pYA.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/2f/8c09b3-f6d8-4c9a-964c-8527c9b3e75f/1/uqI_dArVZMVpO3cJHHGzwDE2pYA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
a7:99:04:d0:2d:90:c1:f4:ef:91:44:b7:17:3d:79:68:95:c6:
b9:98:f9:80:0c:94:f3:b8:7c:91:48:75:7b:e1:7c:b7:09:f4:
43:2c:57:c6:65:3f:e3:e6:75:5c:9d:9b:a6:cc:82:67:9c:3b:
67:63:aa:9c:8b:fd:a4:4d:61:5a:88:e4:e0:d6:88:3a:a1:4f:
11:3f:84:99:73:23:f2:4d:e9:a2:c1:e7:de:f4:df:17:55:ea:
32:b8:d6:96:a9:1d:44:a5:d0:6a:a9:fd:29:70:9c:bc:95:be:
3c:61:2c:01:25:ac:53:2b:20:e9:54:73:59:30:e4:63:24:8d:
c9:fa:19:15:8f:7c:0a:e4:58:93:22:df:ce:e4:21:84:26:95:
85:f6:e9:94:43:9f:61:ee:41:0d:7e:a6:bc:1a:f9:52:c8:1e:
13:64:3b:c2:36:b1:30:e8:de:53:14:f4:70:77:10:07:7f:4a:
71:a8:21:e6:76:d2:76:f1:04:38:59:d0:64:72:6b:45:63:2e:
74:16:bf:7e:f9:fc:c4:e6:9c:0f:f8:c6:2d:08:84:0a:bf:c6:
b6:06:7b:a6:9b:d1:d9:f4:d7:7a:2f:dd:36:b6:83:ab:63:81:
71:5e:df:9e:7e:44:4f:64:4b:99:2e:a1:39:58:41:36:9c:ee:
cc:74:a4:01
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon May 12 02:21:56 2025 by rpki-client