Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/48/d80877-7f1e-4a50-9957-070a1f71885e/1/uFh0CVxMlCK5NZdacVZPB3HNKS4.mft
File: uFh0CVxMlCK5NZdacVZPB3HNKS4.mft (raw, json)
Hash identifier: B2NYrx/GgvkrDD1CrB75JQBLovhjlUIuwm02eh5ZB4k=
Subject key identifier: 55:43:00:0A:79:CD:9F:EF:E8:43:31:13:1A:35:85:44:58:0D:C1:A7
Authority key identifier: B8:58:74:09:5C:4C:94:22:B9:35:97:5A:71:56:4F:07:71:CD:29:2E
Certificate issuer: /CN=b85874095c4c9422b935975a71564f0771cd292e
Certificate serial: 0196C2DD840BFB75947886535E19C94999B7
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/uFh0CVxMlCK5NZdacVZPB3HNKS4.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/48/d80877-7f1e-4a50-9957-070a1f71885e/1/uFh0CVxMlCK5NZdacVZPB3HNKS4.mft
Manifest number: 04CF
Signing time: Mon 12 May 2025 05:00:19 +0000
Manifest this update: Mon 12 May 2025 05:00:19 +0000
Manifest next update: Tue 13 May 2025 05:00:19 +0000
Files and hashes: 1: 4YgTCDr1c5g3jVQHEpRMEOptksE.roa (hash: M/7AjuESzQHGAA4OkIywfGz3Bl0/7ZHRB4vt9CwoaKo=)
2: uFh0CVxMlCK5NZdacVZPB3HNKS4.crl (hash: KUA1BLqfdwb6x8f4eaw9DFxiw33dMKLwNx2NxYWJtrM=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/48/d80877-7f1e-4a50-9957-070a1f71885e/1/uFh0CVxMlCK5NZdacVZPB3HNKS4.crl
rsync://rpki.ripe.net/repository/DEFAULT/48/d80877-7f1e-4a50-9957-070a1f71885e/1/uFh0CVxMlCK5NZdacVZPB3HNKS4.mft
rsync://rpki.ripe.net/repository/DEFAULT/uFh0CVxMlCK5NZdacVZPB3HNKS4.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 13 May 2025 05:00:19 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:c2:dd:84:0b:fb:75:94:78:86:53:5e:19:c9:49:99:b7
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=b85874095c4c9422b935975a71564f0771cd292e
Validity
Not Before: May 12 05:00:19 2025 GMT
Not After : May 13 05:00:19 2025 GMT
Subject: CN=5543000a79cd9fefe84331131a358544580dc1a7
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a2:00:ab:56:f0:ac:9d:8f:21:fb:5d:17:98:4f:
7f:a9:1f:03:7a:d9:4c:2e:95:78:5c:10:2c:3b:6f:
96:ce:a4:b7:6c:2e:8f:48:23:e6:6f:92:fe:d3:7d:
d2:50:e6:d5:3d:2a:1b:13:2d:5c:2e:02:98:c9:ae:
bf:07:50:82:8f:26:61:04:b0:bf:75:d6:a0:ba:ea:
3b:eb:ab:c7:29:91:4e:90:09:63:94:2d:62:5d:04:
10:00:94:66:88:e6:24:8f:78:9b:c4:ff:3a:05:ba:
19:a4:f0:64:d4:d5:4c:ff:c4:05:5c:e3:c6:95:06:
dc:3e:f5:dc:ad:8c:9c:42:07:8f:2f:71:5f:4e:5c:
cf:f3:38:4f:b3:06:66:a4:92:75:37:ed:40:53:f1:
56:1c:55:43:7e:c7:bb:4f:d5:47:15:2f:b0:cb:b7:
4c:1d:3a:46:bb:c3:07:00:fe:27:b4:0e:e0:d0:3a:
a2:b3:1f:80:14:45:2d:f0:13:da:b5:7d:8c:d6:0b:
fd:e5:24:fd:6f:44:62:f1:6d:9f:e5:45:73:02:ee:
04:7e:c8:df:0e:65:7d:d8:50:94:c2:9a:ea:97:16:
01:db:c4:84:3e:86:88:7e:a6:b8:2b:f2:bd:47:58:
f6:ee:82:6e:cf:95:5e:96:5a:d3:8a:47:c6:6d:33:
c1:e1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
55:43:00:0A:79:CD:9F:EF:E8:43:31:13:1A:35:85:44:58:0D:C1:A7
X509v3 Authority Key Identifier:
keyid:B8:58:74:09:5C:4C:94:22:B9:35:97:5A:71:56:4F:07:71:CD:29:2E
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/uFh0CVxMlCK5NZdacVZPB3HNKS4.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/48/d80877-7f1e-4a50-9957-070a1f71885e/1/uFh0CVxMlCK5NZdacVZPB3HNKS4.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/48/d80877-7f1e-4a50-9957-070a1f71885e/1/uFh0CVxMlCK5NZdacVZPB3HNKS4.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
46:48:2c:15:f0:8b:48:0f:1f:38:2e:cb:d7:6c:5c:62:3d:ae:
5f:3e:99:5f:b2:38:d1:5a:cf:a2:69:96:bb:bf:6e:16:43:00:
a4:c2:0e:67:78:79:da:9b:a6:5d:df:a9:14:d8:f4:86:1b:0e:
32:ab:00:cd:48:b8:d3:70:5a:2c:e8:d0:fb:52:e7:54:bf:ab:
33:50:45:1b:46:3c:10:61:44:32:12:6c:e0:96:77:65:5a:f4:
de:8b:3f:95:e1:c2:e7:33:8a:0a:4e:10:5c:22:34:83:cd:ae:
71:26:a0:d1:01:aa:f4:f7:d1:21:dd:10:cf:0e:4d:81:2e:87:
0e:ce:4d:fa:37:fb:3b:1b:3c:37:54:c7:2f:eb:0e:a8:37:97:
9b:39:3d:8d:a7:e7:8c:4a:e7:4f:f2:b0:2c:c0:b7:cf:e6:07:
7e:4d:89:68:56:af:97:68:60:ed:15:4c:f9:b7:0c:7f:6a:0e:
ea:0d:0f:44:e3:05:94:2e:f4:5f:cb:88:cf:b9:44:ae:1b:08:
c4:17:e4:3c:fe:2e:53:8f:c4:8f:88:98:a7:75:49:13:c0:e5:
53:95:84:95:5d:32:07:61:5b:97:4e:7a:d9:95:36:4c:49:1e:
d7:55:17:bd:b0:b9:1c:e2:86:12:fd:1d:be:40:b4:56:6e:ff:
c8:40:49:6c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon May 12 12:43:28 2025 by rpki-client