Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/34/470cda-d0ec-4323-ae9b-994af5c34402/1/uTDaIVGBhBRfbXYhtaE71UA1rIM.mft
File: uTDaIVGBhBRfbXYhtaE71UA1rIM.mft (raw, json)
Hash identifier: gqa1f3mRrNmitqJ11HOlGYLrRHAa8BUxM7x7FTqxGV0=
Subject key identifier: 4E:64:7A:68:03:4A:8B:00:A6:58:A0:3F:7E:00:DA:0C:91:59:27:AA
Authority key identifier: B9:30:DA:21:51:81:84:14:5F:6D:76:21:B5:A1:3B:D5:40:35:AC:83
Certificate issuer: /CN=b930da21518184145f6d7621b5a13bd54035ac83
Certificate serial: 0196CD98973FF7BF4B1EFC40C7A09C2400A6
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/uTDaIVGBhBRfbXYhtaE71UA1rIM.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/34/470cda-d0ec-4323-ae9b-994af5c34402/1/uTDaIVGBhBRfbXYhtaE71UA1rIM.mft
Manifest number: 1539
Signing time: Wed 14 May 2025 07:00:51 +0000
Manifest this update: Wed 14 May 2025 07:00:51 +0000
Manifest next update: Thu 15 May 2025 07:00:51 +0000
Files and hashes: 1: 0ZuWNEBza8m0gvPmhQ-AM48kcBQ.roa (hash: xUiwYtc5YR3YFxWY+1bc8LneAJ3KBiNwufXqEXJk8ms=)
2: 3PAdrrsgdnxX9uVqlWfBy48cF8I.roa (hash: aiaVI8zvf6MQaSEWNjXq4KdEnl//yGJR6Vin5CThos8=)
3: f41rVF_HbkwoS6F1emrNeNKIJNk.roa (hash: 54wEz0a1fqNuQQqN6r9W7L0OlcpYJ4NYnn7Nw3rDVN4=)
4: uTDaIVGBhBRfbXYhtaE71UA1rIM.crl (hash: e7fy0Pf305U/4S+q/Q2AyORg6Q2ByPkgMvDLuralxsI=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/34/470cda-d0ec-4323-ae9b-994af5c34402/1/uTDaIVGBhBRfbXYhtaE71UA1rIM.crl
rsync://rpki.ripe.net/repository/DEFAULT/34/470cda-d0ec-4323-ae9b-994af5c34402/1/uTDaIVGBhBRfbXYhtaE71UA1rIM.mft
rsync://rpki.ripe.net/repository/DEFAULT/uTDaIVGBhBRfbXYhtaE71UA1rIM.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 15 May 2025 07:00:51 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:cd:98:97:3f:f7:bf:4b:1e:fc:40:c7:a0:9c:24:00:a6
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=b930da21518184145f6d7621b5a13bd54035ac83
Validity
Not Before: May 14 07:00:51 2025 GMT
Not After : May 15 07:00:51 2025 GMT
Subject: CN=4e647a68034a8b00a658a03f7e00da0c915927aa
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c4:db:22:51:57:f0:d8:2c:01:8b:f3:00:af:a5:
b0:1a:73:bc:54:82:20:3e:42:50:ff:b7:d3:1d:dd:
1b:cd:48:8c:94:45:0e:60:09:48:7b:c1:83:ae:96:
8b:cc:55:16:9f:1b:1b:39:b9:65:fa:6d:73:39:27:
aa:a4:39:47:dd:93:f8:e2:70:01:88:eb:20:b1:fb:
8c:0d:c9:b3:42:f9:43:45:06:b4:73:7d:a2:8d:82:
03:76:03:10:59:a4:0d:42:06:60:7a:85:53:65:d6:
06:a4:d0:4d:8f:26:a1:1e:c1:51:d5:ea:73:54:ca:
a4:bf:4a:5a:94:a0:89:97:51:c1:1e:f7:41:b5:06:
c6:b2:f4:78:4a:df:e1:b6:ba:ea:77:01:ca:6b:75:
b4:ff:7c:b9:c2:28:3b:bb:c9:a3:74:0b:e4:ed:db:
62:95:83:f5:95:62:37:15:a3:df:cc:3e:30:13:77:
74:4a:a5:28:86:be:8b:5c:f9:4a:e8:ac:ce:f5:10:
bb:d9:2c:ef:c3:15:4b:14:b0:8b:36:d3:e0:9d:43:
d9:9c:4e:a0:bc:0a:c7:fc:66:c2:eb:08:34:b4:e5:
65:71:12:35:f6:fc:bb:17:e8:61:33:e6:33:dd:ee:
7c:97:a9:71:ef:79:c5:9f:ce:66:db:c4:dc:76:f4:
20:4f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
4E:64:7A:68:03:4A:8B:00:A6:58:A0:3F:7E:00:DA:0C:91:59:27:AA
X509v3 Authority Key Identifier:
keyid:B9:30:DA:21:51:81:84:14:5F:6D:76:21:B5:A1:3B:D5:40:35:AC:83
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/uTDaIVGBhBRfbXYhtaE71UA1rIM.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/34/470cda-d0ec-4323-ae9b-994af5c34402/1/uTDaIVGBhBRfbXYhtaE71UA1rIM.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/34/470cda-d0ec-4323-ae9b-994af5c34402/1/uTDaIVGBhBRfbXYhtaE71UA1rIM.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
84:35:09:f5:ad:70:93:aa:f2:af:cb:1a:66:a7:48:69:fb:6b:
2f:56:4c:fc:cf:18:de:3e:6b:a3:dd:3d:04:c1:72:ff:89:0b:
95:bd:4f:a2:3b:52:e4:69:97:4b:2f:06:98:6a:d0:95:51:6a:
e9:b5:02:78:03:c6:dc:0f:b6:ee:8b:07:64:57:f2:43:5a:17:
3b:04:b9:73:4c:90:13:4e:ca:1a:de:e3:90:e4:eb:4d:67:81:
90:d5:aa:ac:49:9c:1a:73:33:e2:6f:ec:ba:aa:c5:61:70:8a:
77:d2:bd:9c:23:0f:4e:a3:12:48:af:b8:9e:04:9f:b6:dd:67:
0a:be:08:90:34:cc:7c:83:29:f4:2b:be:a4:50:a8:d9:7e:87:
6f:d4:56:b4:b7:fb:e0:65:96:a0:fa:de:91:c8:b9:58:2f:08:
27:d2:eb:d3:68:3e:2c:b4:37:45:54:33:4a:2a:6f:c0:c6:30:
56:bb:c0:df:f5:e9:0c:87:a8:be:56:12:44:5a:03:78:41:03:
66:3f:81:c9:60:59:4a:dc:60:ed:f5:92:11:02:7c:a5:cd:47:
25:d8:e7:2d:3a:09:48:c2:3f:b4:bf:f6:23:f4:4d:9b:ce:e2:
91:e5:66:55:5a:36:5e:6e:8b:7e:6f:66:99:1b:a5:25:8a:bf:
4a:38:fd:30
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed May 14 10:29:13 2025 by rpki-client