Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/3b/10d153-c3c3-4011-97cf-10fdca385ea4/1/uohh4X6-1XlQ_zLHs3f8QwQT2-Q.mft
File: uohh4X6-1XlQ_zLHs3f8QwQT2-Q.mft (raw, json)
Hash identifier: vuxn29yHWDyhqH4mvGcsCjcOYxaDj5a9Yo/zRypH+L8=
Subject key identifier: 89:EA:C8:59:97:88:E5:15:EE:83:86:BC:EE:9F:B0:DF:40:32:B9:5C
Authority key identifier: BA:88:61:E1:7E:BE:D5:79:50:FF:32:C7:B3:77:FC:43:04:13:DB:E4
Certificate issuer: /CN=ba8861e17ebed57950ff32c7b377fc430413dbe4
Certificate serial: 0196C4CC0023B899BD1CD18B81C9B4A1C4FE
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/uohh4X6-1XlQ_zLHs3f8QwQT2-Q.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/3b/10d153-c3c3-4011-97cf-10fdca385ea4/1/uohh4X6-1XlQ_zLHs3f8QwQT2-Q.mft
Manifest number: 0C60
Signing time: Mon 12 May 2025 14:00:25 +0000
Manifest this update: Mon 12 May 2025 14:00:25 +0000
Manifest next update: Tue 13 May 2025 14:00:25 +0000
Files and hashes: 1: DKKUdW46_6zXz80AQeVOjRiUJ4A.roa (hash: xKACAtSTQQnsNmsto4dOmpcxKzakaVi9kzieeQlXs5g=)
2: uohh4X6-1XlQ_zLHs3f8QwQT2-Q.crl (hash: WsTL4Mn9z7gCWWIuaApHjBPMNGqkX9e+2nbsC2Y7GWI=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/3b/10d153-c3c3-4011-97cf-10fdca385ea4/1/uohh4X6-1XlQ_zLHs3f8QwQT2-Q.crl
rsync://rpki.ripe.net/repository/DEFAULT/3b/10d153-c3c3-4011-97cf-10fdca385ea4/1/uohh4X6-1XlQ_zLHs3f8QwQT2-Q.mft
rsync://rpki.ripe.net/repository/DEFAULT/uohh4X6-1XlQ_zLHs3f8QwQT2-Q.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 13 May 2025 14:00:25 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:c4:cc:00:23:b8:99:bd:1c:d1:8b:81:c9:b4:a1:c4:fe
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=ba8861e17ebed57950ff32c7b377fc430413dbe4
Validity
Not Before: May 12 14:00:25 2025 GMT
Not After : May 13 14:00:25 2025 GMT
Subject: CN=89eac8599788e515ee8386bcee9fb0df4032b95c
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9b:91:0a:c2:de:a7:92:4e:e5:56:3b:d9:a0:70:
ab:7c:ab:01:51:41:b8:44:b5:16:b0:88:97:ef:90:
1a:b6:f5:39:6b:5d:5f:14:34:96:df:f2:ca:4d:bf:
69:2a:47:95:e2:1d:87:0b:61:1b:13:25:2a:ca:8e:
35:d0:ab:b2:47:ad:a6:f0:9e:da:b0:ea:3c:ab:78:
e8:70:50:8e:55:47:99:cc:a8:44:ca:71:27:af:d8:
42:0a:5e:32:a6:2d:70:73:05:8b:77:b5:00:01:a1:
fc:5f:01:81:73:35:41:65:9b:5c:0f:e1:3a:bd:ae:
d8:41:db:a3:d1:12:d5:f2:7f:aa:02:72:fd:e9:94:
60:19:e7:bf:6f:b4:ad:b1:06:8f:5d:c0:d8:07:c6:
8a:59:79:76:71:72:2c:f2:1d:b4:87:28:58:fe:3b:
62:00:56:bb:cf:35:ff:4f:ab:11:4c:fd:1d:d2:22:
a4:b6:56:6e:5b:e4:35:a7:d7:50:cb:30:82:84:4a:
b0:1f:4d:20:0c:67:0f:f1:a2:0d:d5:3e:8e:13:d6:
c8:9e:06:48:97:5d:9f:72:bb:3d:3a:15:6d:21:a8:
52:53:96:76:64:2d:eb:6c:67:9d:c3:b8:56:7a:f6:
23:d1:38:63:1f:7c:85:ee:b1:8d:c4:4a:a0:39:90:
83:05
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
89:EA:C8:59:97:88:E5:15:EE:83:86:BC:EE:9F:B0:DF:40:32:B9:5C
X509v3 Authority Key Identifier:
keyid:BA:88:61:E1:7E:BE:D5:79:50:FF:32:C7:B3:77:FC:43:04:13:DB:E4
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/uohh4X6-1XlQ_zLHs3f8QwQT2-Q.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/3b/10d153-c3c3-4011-97cf-10fdca385ea4/1/uohh4X6-1XlQ_zLHs3f8QwQT2-Q.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/3b/10d153-c3c3-4011-97cf-10fdca385ea4/1/uohh4X6-1XlQ_zLHs3f8QwQT2-Q.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
14:db:1e:7f:63:9a:09:6a:ab:4a:5f:37:b1:7b:54:56:a1:1a:
3c:65:34:d1:87:dc:27:d8:fa:9d:1b:7d:1e:81:c5:56:a3:fc:
82:72:6b:be:4f:95:6c:fe:ab:81:86:68:d2:32:a4:28:fc:ae:
0e:f3:5d:31:37:85:20:1c:0a:5d:bd:02:15:54:d0:5e:ac:f8:
e3:13:25:17:5a:0c:9d:62:3d:dc:22:a3:5e:f5:98:52:ae:a7:
b2:f1:0b:eb:87:5c:68:e7:f9:c2:24:41:ab:f3:67:85:73:5e:
0a:3f:41:59:f6:0b:57:47:c3:dc:b8:be:48:8e:74:6d:ee:2a:
52:27:fa:0e:0d:98:4a:1a:5a:82:0f:cf:7b:ac:47:37:42:34:
d8:08:c0:03:0e:d1:4a:0d:6d:c7:f9:b1:d4:38:64:87:69:87:
e5:0e:bb:c4:67:59:a8:1d:bf:1c:e9:3e:c0:a1:f6:76:22:50:
12:e3:12:66:f2:2e:b1:87:0b:98:7c:9e:5b:b3:43:95:14:8e:
30:ed:64:48:af:f0:52:26:57:7a:82:70:64:69:3f:3c:63:49:
e9:eb:91:fb:76:ac:f0:97:13:7f:c7:72:85:88:3b:8c:ec:69:
4f:0c:b2:a1:a0:24:17:1a:34:d4:1d:ea:23:86:1c:8a:55:07:
93:3e:e1:42
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon May 12 20:44:19 2025 by rpki-client