Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/35/b7393b-6818-48d3-b081-5c68f6b0b2c7/1/uncwHhTWWzo9aG2qwW38SaxIx80.mft
File: uncwHhTWWzo9aG2qwW38SaxIx80.mft (raw, json)
Hash identifier: Hize4IiWsy8uAqZCOrYOysXE/kM56lOY8G3EcpnTJd4=
Subject key identifier: 23:16:B9:6F:7B:51:D0:91:33:C2:C9:AF:DD:07:37:57:BC:B3:34:95
Authority key identifier: BA:77:30:1E:14:D6:5B:3A:3D:68:6D:AA:C1:6D:FC:49:AC:48:C7:CD
Certificate issuer: /CN=ba77301e14d65b3a3d686daac16dfc49ac48c7cd
Certificate serial: 0196A08966F5BAD9FC090F4A2A76E24596B7
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/uncwHhTWWzo9aG2qwW38SaxIx80.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/35/b7393b-6818-48d3-b081-5c68f6b0b2c7/1/uncwHhTWWzo9aG2qwW38SaxIx80.mft
Manifest number: 1141
Signing time: Mon 05 May 2025 13:01:21 +0000
Manifest this update: Mon 05 May 2025 13:01:21 +0000
Manifest next update: Tue 06 May 2025 13:01:21 +0000
Files and hashes: 1: dKpw_-0HjSGrVaWJaUDvP77eqyY.roa (hash: QqA/x8rzftDJLWW2k4Vuop1woZfiPckz4TMZl5sc2Xs=)
2: uncwHhTWWzo9aG2qwW38SaxIx80.crl (hash: 5LpHuoMEylULU/58PaofnjAxLm8usKRJvdz4Jx7ptGQ=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/35/b7393b-6818-48d3-b081-5c68f6b0b2c7/1/uncwHhTWWzo9aG2qwW38SaxIx80.crl
rsync://rpki.ripe.net/repository/DEFAULT/35/b7393b-6818-48d3-b081-5c68f6b0b2c7/1/uncwHhTWWzo9aG2qwW38SaxIx80.mft
rsync://rpki.ripe.net/repository/DEFAULT/uncwHhTWWzo9aG2qwW38SaxIx80.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 06 May 2025 10:00:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:a0:89:66:f5:ba:d9:fc:09:0f:4a:2a:76:e2:45:96:b7
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=ba77301e14d65b3a3d686daac16dfc49ac48c7cd
Validity
Not Before: May 5 13:01:21 2025 GMT
Not After : May 6 13:01:21 2025 GMT
Subject: CN=2316b96f7b51d09133c2c9afdd073757bcb33495
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ce:d3:38:1d:24:c4:27:32:9d:cb:5f:83:8c:80:
ac:ae:4d:2f:63:bc:8e:ce:ee:a9:cf:5f:d2:ce:71:
8c:0c:ee:90:76:78:31:17:e5:4f:9e:49:74:a3:f6:
63:1b:90:fa:61:26:1a:25:ee:a6:c9:dc:e7:ff:56:
1f:74:aa:ff:34:ae:ae:4c:74:24:f2:ed:6b:cb:0c:
37:b8:11:95:58:7d:42:7c:40:e8:e0:4c:a2:25:9e:
7e:d6:27:22:44:7e:4f:f2:63:fb:08:02:8f:75:c6:
83:4d:98:70:a4:af:88:ac:13:92:76:9b:7f:de:a3:
c4:c8:0f:e7:fb:db:23:07:19:84:c5:99:b1:76:af:
4e:1a:b3:2f:a8:fc:6a:a4:3f:c2:3d:c9:d4:c4:30:
db:05:65:13:31:53:bf:5e:04:cb:37:dc:ad:82:bd:
e6:b0:06:f5:c4:7a:47:e2:b0:8b:e1:bd:f9:22:ec:
24:25:30:cc:ee:ad:e6:78:62:2f:25:59:c4:ca:a1:
ce:d3:c1:65:aa:7b:73:81:82:b1:e4:47:25:e2:cc:
c5:f3:37:68:07:cb:4e:e7:5f:12:d8:30:6d:9b:8e:
e6:ef:f3:75:35:76:40:1e:4d:c7:a3:3e:ce:66:44:
7a:cd:07:85:bd:dc:97:ad:0e:30:7e:81:9f:e0:37:
46:15
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
23:16:B9:6F:7B:51:D0:91:33:C2:C9:AF:DD:07:37:57:BC:B3:34:95
X509v3 Authority Key Identifier:
keyid:BA:77:30:1E:14:D6:5B:3A:3D:68:6D:AA:C1:6D:FC:49:AC:48:C7:CD
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/uncwHhTWWzo9aG2qwW38SaxIx80.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/35/b7393b-6818-48d3-b081-5c68f6b0b2c7/1/uncwHhTWWzo9aG2qwW38SaxIx80.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/35/b7393b-6818-48d3-b081-5c68f6b0b2c7/1/uncwHhTWWzo9aG2qwW38SaxIx80.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
07:53:14:93:8f:eb:88:b0:82:e2:09:80:13:82:4d:57:69:27:
97:49:87:2d:67:7b:8b:8b:83:ee:a6:42:7c:8f:f5:10:1e:de:
21:09:66:cc:12:0a:fb:67:e9:8e:cb:71:64:4a:08:1a:d1:d0:
25:e8:4b:c8:f1:0d:da:80:14:ca:66:67:1b:22:89:64:79:04:
64:88:f2:64:8b:3f:ce:79:40:10:52:2c:8b:ac:51:c4:2e:e7:
a2:2a:c8:e8:49:37:f9:87:92:39:fb:93:fe:37:c9:6e:91:85:
b3:32:84:97:22:eb:c4:28:e8:91:94:92:25:fe:52:29:0c:e4:
3e:8b:95:cd:94:d4:b0:dc:d9:33:2b:1b:37:ed:ce:c9:6a:3b:
78:59:ca:d0:ea:d6:72:c7:c0:07:a3:6c:06:40:4c:24:c2:42:
31:70:e6:28:8c:7b:e7:23:34:ce:e4:97:99:5c:09:90:cd:f2:
af:e6:a2:e1:16:70:57:b1:26:d3:f9:ff:17:f4:5f:f5:ca:ca:
ee:9b:00:24:a1:47:24:76:b2:39:94:2a:b5:46:75:2d:f2:ec:
49:a4:48:1e:1e:01:55:e8:80:dd:c0:9c:31:0a:9b:c1:a8:10:
b3:36:21:ee:2f:86:f8:87:c7:d5:b2:54:8c:13:89:d5:08:dd:
46:fb:16:b5
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon May 5 19:33:33 2025 by rpki-client