Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/3f/360ef9-ec20-4e13-9647-ddfeb424adf5/1/uas2E5RoPk8kOXz8jyPqssaCjeo.mft
File: uas2E5RoPk8kOXz8jyPqssaCjeo.mft (raw, json)
Hash identifier: apWN3FrAfs6jaWECwXpqo9Shd0y6juAoVqSwW/oFsFs=
Subject key identifier: 5E:45:10:59:CB:E3:A7:56:01:57:E0:29:88:23:1F:9F:04:05:D7:93
Authority key identifier: B9:AB:36:13:94:68:3E:4F:24:39:7C:FC:8F:23:EA:B2:C6:82:8D:EA
Certificate issuer: /CN=b9ab361394683e4f24397cfc8f23eab2c6828dea
Certificate serial: 0196B935EE8E40E6F5610A5E6FE271A9D338
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/uas2E5RoPk8kOXz8jyPqssaCjeo.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/3f/360ef9-ec20-4e13-9647-ddfeb424adf5/1/uas2E5RoPk8kOXz8jyPqssaCjeo.mft
Manifest number: 0B81
Signing time: Sat 10 May 2025 08:00:41 +0000
Manifest this update: Sat 10 May 2025 08:00:41 +0000
Manifest next update: Sun 11 May 2025 08:00:41 +0000
Files and hashes: 1: ACKE5m4AhVASTJNcm4VTbtA6kdI.roa (hash: +hhyUiJYozW/jQNJrsdrV+fUd6uIWqN4Ua7y2mknaNU=)
2: nBeQB2Y8xUPw-3swsy1_kLM7Es4.roa (hash: /D6LUGVQYGSE8+TaS0MmXKU2c7huCXgV7UKacZf5IA8=)
3: uas2E5RoPk8kOXz8jyPqssaCjeo.crl (hash: nOqcTGUHO2dat8JJEec3kpqlHtLhtpg/K+dTE1PDYSw=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/3f/360ef9-ec20-4e13-9647-ddfeb424adf5/1/uas2E5RoPk8kOXz8jyPqssaCjeo.crl
rsync://rpki.ripe.net/repository/DEFAULT/3f/360ef9-ec20-4e13-9647-ddfeb424adf5/1/uas2E5RoPk8kOXz8jyPqssaCjeo.mft
rsync://rpki.ripe.net/repository/DEFAULT/uas2E5RoPk8kOXz8jyPqssaCjeo.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 11 May 2025 04:00:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:b9:35:ee:8e:40:e6:f5:61:0a:5e:6f:e2:71:a9:d3:38
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=b9ab361394683e4f24397cfc8f23eab2c6828dea
Validity
Not Before: May 10 08:00:41 2025 GMT
Not After : May 11 08:00:41 2025 GMT
Subject: CN=5e451059cbe3a7560157e02988231f9f0405d793
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a3:f2:72:54:e5:3a:71:d9:4b:93:c0:03:88:e6:
ab:f7:73:7c:29:48:3d:f9:ab:c8:0d:ac:a1:f9:80:
3c:4d:6b:17:fd:db:98:f4:79:ee:05:d1:f4:47:b1:
50:be:ec:70:18:63:3e:ac:a5:45:03:80:b9:a9:76:
7f:ca:87:68:ac:48:db:ad:99:99:6b:47:44:aa:db:
3a:4f:77:71:dd:ee:47:33:86:e3:0c:60:1d:ad:13:
26:02:e0:54:4c:7b:84:e2:97:e5:e2:b3:f2:64:5d:
6a:80:c6:64:d0:45:ad:85:6a:ea:25:dd:2e:d8:b8:
b8:16:6e:62:75:78:e7:e9:7d:84:ae:c9:fc:ee:b4:
1a:c1:4d:13:bb:14:ba:55:ec:a1:37:c1:6c:0f:73:
93:45:29:3c:1e:5a:50:02:84:92:bb:2d:54:c6:56:
d7:3f:38:b9:79:2e:68:99:2f:f6:62:f3:88:06:59:
62:d3:c8:4f:3b:2a:2f:6f:d2:00:ba:a2:e4:c3:a6:
1f:60:74:cb:5b:13:4a:82:e8:4c:9d:e2:0b:a2:d3:
30:88:78:e9:70:b1:9f:eb:56:31:37:30:c5:b4:8c:
d1:0a:0d:c4:58:95:c4:f8:5e:6a:8a:8b:2d:84:5b:
69:97:dc:15:4a:f4:61:c8:1c:27:60:89:20:a6:5f:
a3:97
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
5E:45:10:59:CB:E3:A7:56:01:57:E0:29:88:23:1F:9F:04:05:D7:93
X509v3 Authority Key Identifier:
keyid:B9:AB:36:13:94:68:3E:4F:24:39:7C:FC:8F:23:EA:B2:C6:82:8D:EA
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/uas2E5RoPk8kOXz8jyPqssaCjeo.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/3f/360ef9-ec20-4e13-9647-ddfeb424adf5/1/uas2E5RoPk8kOXz8jyPqssaCjeo.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/3f/360ef9-ec20-4e13-9647-ddfeb424adf5/1/uas2E5RoPk8kOXz8jyPqssaCjeo.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
9e:48:3d:fe:8d:9a:21:88:64:7e:4b:af:ee:18:e8:5c:13:85:
1c:f7:12:b8:e6:7a:d9:b8:85:c3:c0:5a:d0:63:99:ef:cf:26:
41:b4:0c:c5:0c:f5:ea:17:5e:fb:31:07:30:8c:f8:db:c0:6c:
2d:c4:d3:aa:f1:47:69:cf:5d:1c:c5:de:53:ac:e3:88:ee:69:
4a:a3:fd:58:31:0b:e4:c0:c7:20:d6:33:b0:53:55:e1:93:76:
13:a1:3e:f1:7e:65:c1:3b:40:53:8a:57:26:95:01:52:f6:aa:
b6:8f:6c:df:74:3f:ac:8f:66:21:be:cb:52:c0:17:5f:4f:1f:
f1:28:44:0f:17:57:22:72:bf:6b:fb:0b:be:8e:bf:10:07:8a:
85:fc:78:49:e1:f9:9a:9a:f8:8d:65:f8:7b:58:ef:71:2b:62:
c0:b9:f1:9d:66:1c:fa:2d:74:95:12:62:1f:fd:7d:2c:59:f8:
d9:68:19:99:06:ef:97:a1:e3:b0:49:55:35:51:f3:6e:04:56:
36:56:9b:3c:a1:12:3f:a1:47:99:2c:5b:b3:b6:eb:c2:dd:64:
f6:4e:b2:66:5f:ab:06:6c:1d:9d:3f:4b:73:99:74:f2:f3:36:
c8:e4:5e:a4:62:2c:42:4a:a2:2d:77:ed:c3:c3:8a:17:24:32:
b8:c7:62:f9
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat May 10 10:19:01 2025 by rpki-client