Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/3a/17ac67-2d5f-439a-8ff9-cacfb67bff9d/1/Uh0sB8KKx7cmqCXTaTr-I5cgneY.mft
File: Uh0sB8KKx7cmqCXTaTr-I5cgneY.mft (raw, json)
Hash identifier: MeQUBrpV1P3gvI/Y6bSWCjFhKPu+qX3IyzrJ/DU4u4A=
Subject key identifier: B2:98:1C:67:2C:17:B2:29:45:27:F3:A5:4E:F6:7A:EE:2F:AE:ED:F4
Authority key identifier: 52:1D:2C:07:C2:8A:C7:B7:26:A8:25:D3:69:3A:FE:23:97:20:9D:E6
Certificate issuer: /CN=521d2c07c28ac7b726a825d3693afe2397209de6
Certificate serial: 0196A240590A37CDE128575C4387C2F3B826
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Uh0sB8KKx7cmqCXTaTr-I5cgneY.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/3a/17ac67-2d5f-439a-8ff9-cacfb67bff9d/1/Uh0sB8KKx7cmqCXTaTr-I5cgneY.mft
Manifest number: 1526
Signing time: Mon 05 May 2025 21:00:48 +0000
Manifest this update: Mon 05 May 2025 21:00:48 +0000
Manifest next update: Tue 06 May 2025 21:00:48 +0000
Files and hashes: 1: Fih80Nlgmx3m_whvZZHZZjIiang.roa (hash: VaQgFDqa2oxdRNRXm5kYRO6eCGdj59ZMDn/K3AC/eNc=)
2: RbrpoNIXXajBUk8qJ4MBqJWZufY.roa (hash: nmur79J+mSsD2EymOR4FrGYKf9dZed60SfRTgagedsI=)
3: Uh0sB8KKx7cmqCXTaTr-I5cgneY.crl (hash: +f/UPiu5+8Y5t8qCQTUrFKD902JWncu15xY0X1Lihbo=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/3a/17ac67-2d5f-439a-8ff9-cacfb67bff9d/1/Uh0sB8KKx7cmqCXTaTr-I5cgneY.crl
rsync://rpki.ripe.net/repository/DEFAULT/3a/17ac67-2d5f-439a-8ff9-cacfb67bff9d/1/Uh0sB8KKx7cmqCXTaTr-I5cgneY.mft
rsync://rpki.ripe.net/repository/DEFAULT/Uh0sB8KKx7cmqCXTaTr-I5cgneY.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 06 May 2025 18:19:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:a2:40:59:0a:37:cd:e1:28:57:5c:43:87:c2:f3:b8:26
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=521d2c07c28ac7b726a825d3693afe2397209de6
Validity
Not Before: May 5 21:00:48 2025 GMT
Not After : May 6 21:00:48 2025 GMT
Subject: CN=b2981c672c17b2294527f3a54ef67aee2faeedf4
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e5:da:ef:88:74:c0:b1:05:ad:b6:1e:24:33:3c:
9d:bc:dd:45:bf:6c:46:20:21:07:bf:d9:43:40:03:
d5:09:67:ff:d6:54:fa:28:31:2c:52:48:41:8d:82:
da:28:cb:9a:59:01:88:41:f5:67:48:a8:5c:3b:c3:
20:34:9a:31:fd:99:fd:45:83:42:66:ad:fd:8e:19:
b8:b2:01:bb:9e:94:8c:66:1f:77:bb:eb:fe:c7:7d:
9b:aa:69:98:e3:05:fc:dd:18:95:57:fc:a6:8e:e4:
42:32:a9:2f:2d:47:6a:69:bf:e0:17:d1:f2:21:f1:
9c:88:4f:7a:d4:3e:ba:37:30:1a:5c:65:27:70:4d:
8d:ac:bd:c7:6b:82:bb:8e:df:56:42:23:af:94:c9:
0b:b2:6b:e6:cc:bd:a9:1c:c5:a2:9a:b7:59:69:1c:
df:48:1e:87:ff:c8:45:49:72:64:58:a0:75:47:12:
83:d1:7c:13:de:34:a3:cc:eb:22:e1:8d:b9:81:82:
f3:f0:9b:81:b3:6d:2e:c4:2d:b6:6b:bb:4d:df:37:
ba:1a:20:58:8a:85:44:31:db:65:3f:35:47:f3:14:
03:1e:1d:ff:f0:c5:b4:74:0e:0a:25:4c:b3:3f:64:
2c:f1:21:a9:ec:a1:d6:14:7d:e2:5f:7b:36:90:81:
fc:89
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B2:98:1C:67:2C:17:B2:29:45:27:F3:A5:4E:F6:7A:EE:2F:AE:ED:F4
X509v3 Authority Key Identifier:
keyid:52:1D:2C:07:C2:8A:C7:B7:26:A8:25:D3:69:3A:FE:23:97:20:9D:E6
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Uh0sB8KKx7cmqCXTaTr-I5cgneY.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/3a/17ac67-2d5f-439a-8ff9-cacfb67bff9d/1/Uh0sB8KKx7cmqCXTaTr-I5cgneY.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/3a/17ac67-2d5f-439a-8ff9-cacfb67bff9d/1/Uh0sB8KKx7cmqCXTaTr-I5cgneY.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
24:31:19:bf:d0:21:ff:f6:3f:73:4a:e4:a1:17:44:c5:23:b6:
41:4a:60:de:28:e9:83:ef:f3:96:08:a6:75:7e:71:21:4c:8b:
45:2a:b2:d2:cf:d3:4d:6f:5c:b5:80:34:5b:96:f4:cf:c6:65:
10:fc:5b:1b:04:55:a8:64:01:88:b8:f0:85:4b:fd:14:58:66:
09:ae:33:f8:e0:02:53:02:74:43:db:d7:4f:c6:27:9d:55:9c:
9b:90:42:32:a1:3a:f2:b6:7d:62:15:fc:a9:45:68:19:4f:85:
27:ff:fa:fd:9d:54:7b:7a:34:0a:89:ce:7e:18:04:78:06:c9:
32:9e:c6:94:de:cb:aa:97:f0:f9:0c:ab:a8:66:fd:39:a1:90:
4f:5b:8e:a1:65:f5:b6:4c:53:6d:81:c2:a2:97:a7:5a:89:b0:
1d:26:81:66:f9:a4:71:53:57:7f:06:f8:48:ef:40:bb:fa:47:
70:ae:bf:45:0f:fe:62:02:c3:d4:ff:51:6d:5c:90:73:75:b7:
66:6c:08:58:b2:74:b4:14:e8:15:7d:1e:1f:35:e5:fd:97:fb:
c9:4a:42:f4:cb:d2:fc:13:01:88:87:02:ed:8a:39:33:c8:b7:
24:38:a7:a5:23:00:e1:3d:df:06:dc:f7:32:56:c2:dd:55:9e:
1d:f5:f2:1e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue May 6 02:17:52 2025 by rpki-client