Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/43/d916da-8d84-4934-95d7-d8506c95fed8/1/uDlzvOShkjp1HTapHUR-DFwWmP0.mft
File: uDlzvOShkjp1HTapHUR-DFwWmP0.mft (raw, json)
Hash identifier: rhUiTJn1PDEU1VXY80MXo9F4vmVMWD6HS1gHnTUSiqo=
Subject key identifier: 9F:07:D1:B9:3D:95:12:8B:9C:36:4E:D2:61:81:95:79:1E:11:42:20
Authority key identifier: B8:39:73:BC:E4:A1:92:3A:75:1D:36:A9:1D:44:7E:0C:5C:16:98:FD
Certificate issuer: /CN=b83973bce4a1923a751d36a91d447e0c5c1698fd
Certificate serial: 0196BF3801139E0766C57616611E542254C8
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/uDlzvOShkjp1HTapHUR-DFwWmP0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/43/d916da-8d84-4934-95d7-d8506c95fed8/1/uDlzvOShkjp1HTapHUR-DFwWmP0.mft
Manifest number: 093B
Signing time: Sun 11 May 2025 12:00:40 +0000
Manifest this update: Sun 11 May 2025 12:00:40 +0000
Manifest next update: Mon 12 May 2025 12:00:40 +0000
Files and hashes: 1: 7RyFzAenJrRSfpio3z8gQY_GG64.roa (hash: odUPAcO4Dj6oNdh8N9FSZ9wG/7rei3J3ITe8+2Q8Y5M=)
2: EvrHOXABisdzxPR63-7KbbGB5LA.roa (hash: GvQn3h7lMtpAwRUlfjv3mFbaPpDUmsn0fuhGLOvFT5Q=)
3: uDlzvOShkjp1HTapHUR-DFwWmP0.crl (hash: fYAok1Jg3f25TozZMRbJa2AucAJMn6gIBdiPwPqT7qM=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/43/d916da-8d84-4934-95d7-d8506c95fed8/1/uDlzvOShkjp1HTapHUR-DFwWmP0.crl
rsync://rpki.ripe.net/repository/DEFAULT/43/d916da-8d84-4934-95d7-d8506c95fed8/1/uDlzvOShkjp1HTapHUR-DFwWmP0.mft
rsync://rpki.ripe.net/repository/DEFAULT/uDlzvOShkjp1HTapHUR-DFwWmP0.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 12 May 2025 08:00:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:bf:38:01:13:9e:07:66:c5:76:16:61:1e:54:22:54:c8
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=b83973bce4a1923a751d36a91d447e0c5c1698fd
Validity
Not Before: May 11 12:00:40 2025 GMT
Not After : May 12 12:00:40 2025 GMT
Subject: CN=9f07d1b93d95128b9c364ed2618195791e114220
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c6:82:6a:85:71:55:7a:e4:1d:8c:53:a0:35:93:
86:1c:bc:0e:3b:76:30:3d:af:04:d6:d3:5f:1b:a0:
7e:bf:a4:f3:a5:7f:a6:68:3f:5a:b6:09:5b:61:be:
fd:a3:2b:4a:cf:2a:eb:71:39:05:32:db:61:4b:e4:
cb:a5:10:35:c1:fc:7d:b9:5c:0c:54:b8:a7:99:6e:
f7:6e:2b:d6:6c:f0:8c:10:1a:a4:30:2b:8e:38:9d:
24:4b:70:fa:3a:99:b3:ed:2c:3c:05:d8:ed:44:7c:
a8:f0:ef:ed:99:53:3b:12:a1:00:67:48:d2:51:25:
3b:a7:3c:1a:a2:e5:97:1a:13:b8:51:0a:eb:e1:c2:
23:d1:fe:72:5c:3e:87:74:c4:52:2e:2d:26:e2:df:
4b:9b:75:e2:31:45:a3:55:cc:11:68:50:05:5e:e2:
99:b9:80:41:7f:ad:e0:5c:9e:86:4d:ed:99:96:0c:
8b:88:4b:ce:62:02:ca:00:9d:f6:79:59:db:b7:1e:
4a:8a:7c:c8:4d:ab:75:01:54:1d:a9:19:1f:b2:0f:
b7:0f:15:ce:0a:84:fe:42:9d:f9:92:4a:40:75:94:
ca:96:be:67:76:d6:be:66:d9:39:2a:ac:88:56:23:
77:ca:a4:45:d7:ab:a4:40:31:b8:01:3b:bb:7d:c5:
d5:6d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
9F:07:D1:B9:3D:95:12:8B:9C:36:4E:D2:61:81:95:79:1E:11:42:20
X509v3 Authority Key Identifier:
keyid:B8:39:73:BC:E4:A1:92:3A:75:1D:36:A9:1D:44:7E:0C:5C:16:98:FD
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/uDlzvOShkjp1HTapHUR-DFwWmP0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/43/d916da-8d84-4934-95d7-d8506c95fed8/1/uDlzvOShkjp1HTapHUR-DFwWmP0.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/43/d916da-8d84-4934-95d7-d8506c95fed8/1/uDlzvOShkjp1HTapHUR-DFwWmP0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
75:3d:a0:94:ef:c7:8e:9c:13:1c:17:80:62:ad:90:31:c4:2b:
b2:aa:82:23:31:a4:28:b2:27:52:8a:a2:63:cf:be:35:66:76:
5b:0b:32:50:b6:b3:57:31:9f:98:b3:92:d1:2c:ed:2d:28:0f:
d6:22:64:44:81:50:33:1a:f2:93:44:3f:de:22:a6:b8:4a:63:
17:c7:0a:9c:66:4b:59:3f:ff:28:fe:6d:48:1e:a3:e3:13:4c:
1f:d8:f6:e9:7b:0c:0b:fe:43:91:e6:11:7b:1f:f8:57:c8:f9:
ce:60:71:fd:02:c7:dc:78:93:a1:cf:f6:d1:59:fd:b1:19:ba:
0b:8a:54:6e:7e:45:f4:5e:f2:6b:20:f1:b8:fc:55:37:56:cd:
2c:a4:ec:2d:fa:7e:24:38:4b:70:25:77:19:bf:9a:f8:74:65:
04:05:18:57:53:9c:a4:09:a2:a3:d0:af:18:fd:4c:67:ce:bd:
27:84:38:a9:0b:30:bb:f4:4f:0f:e9:5c:75:0f:ae:33:53:8e:
31:1a:75:b0:37:07:e1:84:66:c5:e8:7f:07:2e:c3:3f:9c:18:
65:b0:3c:0a:12:b2:5d:b4:7f:a6:76:88:ad:0f:ba:39:4b:86:
6a:01:a0:3f:49:57:50:17:76:1a:18:32:58:c5:a3:52:84:b5:
ec:84:8a:30
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun May 11 18:11:58 2025 by rpki-client