Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/4a/7f8f76-0d9d-46af-9bea-47e4e274cf64/1/uqWupvGAqaitmEU17S5kvPyz_ho.mft
File: uqWupvGAqaitmEU17S5kvPyz_ho.mft (raw, json)
Hash identifier: dMTlss1yn7DqLOLfJtbqa79/JPVJdw2arn/0VdCDsc0=
Subject key identifier: 5D:61:6E:C8:FD:3A:C6:CC:77:91:FA:22:77:96:25:A2:AD:DF:29:B2
Authority key identifier: BA:A5:AE:A6:F1:80:A9:A8:AD:98:45:35:ED:2E:64:BC:FC:B3:FE:1A
Certificate issuer: /CN=baa5aea6f180a9a8ad984535ed2e64bcfcb3fe1a
Certificate serial: 01969F3F3609C5EFFE3D1EDAE71081E0EFC0
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/uqWupvGAqaitmEU17S5kvPyz_ho.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/4a/7f8f76-0d9d-46af-9bea-47e4e274cf64/1/uqWupvGAqaitmEU17S5kvPyz_ho.mft
Manifest number: 0D18
Signing time: Mon 05 May 2025 07:00:42 +0000
Manifest this update: Mon 05 May 2025 07:00:42 +0000
Manifest next update: Tue 06 May 2025 07:00:42 +0000
Files and hashes: 1: CsvQEVK-EVJUj9O9Oyr9a1ZVDj8.roa (hash: KNjghiY6hSTnyBcRx4J/plbhEv6EisGMOlJT9AxkWNs=)
2: uqWupvGAqaitmEU17S5kvPyz_ho.crl (hash: AYrKFgn4bwkeYQyowfQsyoEsb0Wn4DQGbbw2/OxhUZ8=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/4a/7f8f76-0d9d-46af-9bea-47e4e274cf64/1/uqWupvGAqaitmEU17S5kvPyz_ho.crl
rsync://rpki.ripe.net/repository/DEFAULT/4a/7f8f76-0d9d-46af-9bea-47e4e274cf64/1/uqWupvGAqaitmEU17S5kvPyz_ho.mft
rsync://rpki.ripe.net/repository/DEFAULT/uqWupvGAqaitmEU17S5kvPyz_ho.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 06 May 2025 01:00:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:9f:3f:36:09:c5:ef:fe:3d:1e:da:e7:10:81:e0:ef:c0
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=baa5aea6f180a9a8ad984535ed2e64bcfcb3fe1a
Validity
Not Before: May 5 07:00:42 2025 GMT
Not After : May 6 07:00:42 2025 GMT
Subject: CN=5d616ec8fd3ac6cc7791fa22779625a2addf29b2
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c4:22:b3:b5:f5:61:29:f2:1e:21:e1:e1:24:a3:
1f:55:48:74:51:5f:81:a2:f7:a0:46:ac:07:01:36:
71:04:32:af:c8:3a:4a:3a:76:64:ef:aa:5f:40:cc:
ff:0f:87:28:56:8d:74:b4:1a:b8:03:68:72:d1:05:
29:bd:55:c4:69:32:29:e8:f0:5b:4f:1a:c5:cb:11:
01:25:be:38:64:60:8e:ca:0e:ac:b4:ae:47:52:9d:
61:84:bc:71:8c:d5:86:85:98:f7:be:12:d6:9b:26:
b4:3c:14:2c:b8:bd:81:0e:7e:8f:db:14:33:2d:5e:
dd:da:8a:17:db:58:ed:ea:28:cc:7a:82:ec:b1:1a:
f8:76:54:01:e0:c1:63:9a:1c:e8:fe:0e:a2:eb:7a:
6b:d3:ce:54:fb:f7:41:a7:e2:c7:e5:6e:a5:d1:90:
b6:56:09:e8:22:06:d2:2a:51:2d:52:39:40:ec:c5:
fc:8e:73:aa:25:ac:81:66:c5:2c:05:68:1b:1d:df:
86:24:84:91:c5:fa:11:8d:66:a5:8c:4a:da:f2:7e:
c5:43:da:d5:5a:01:83:e7:cc:53:3c:50:81:49:69:
9b:be:89:7c:65:8b:8e:f2:db:c0:72:9b:36:e9:e6:
01:1a:9f:ac:85:cc:fa:0e:2c:18:67:41:f9:8b:0e:
3f:01
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
5D:61:6E:C8:FD:3A:C6:CC:77:91:FA:22:77:96:25:A2:AD:DF:29:B2
X509v3 Authority Key Identifier:
keyid:BA:A5:AE:A6:F1:80:A9:A8:AD:98:45:35:ED:2E:64:BC:FC:B3:FE:1A
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/uqWupvGAqaitmEU17S5kvPyz_ho.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/4a/7f8f76-0d9d-46af-9bea-47e4e274cf64/1/uqWupvGAqaitmEU17S5kvPyz_ho.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/4a/7f8f76-0d9d-46af-9bea-47e4e274cf64/1/uqWupvGAqaitmEU17S5kvPyz_ho.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
09:e4:e1:3e:a3:20:bf:21:84:0c:fa:9e:59:f2:8a:b0:8a:89:
d0:90:68:0a:c9:65:81:c4:b0:01:db:ab:84:6b:18:27:c1:90:
e6:bc:50:0e:d3:c9:ac:25:2e:eb:8b:fa:9f:06:10:39:2a:b4:
02:a1:5c:82:e9:bc:b2:25:d0:f2:d0:01:d2:45:5e:56:63:e0:
92:df:ac:b1:42:e7:ab:ca:84:ca:ca:fd:c9:7b:0d:b4:07:45:
7e:44:f7:97:cd:09:50:92:b1:b6:99:06:d8:c8:6c:72:cd:a7:
86:b5:0e:e8:6d:a0:93:0f:af:d6:a8:02:b8:2b:d1:51:59:6d:
aa:53:c9:ef:80:6c:36:37:ff:4b:5f:20:a6:80:c8:fe:96:b0:
e6:ee:3b:61:fe:91:d2:ec:ca:8c:17:19:ef:ff:10:65:65:11:
06:b8:71:e8:05:7c:31:46:45:4b:f8:51:14:2c:04:33:4c:e8:
15:07:47:d7:fd:98:4b:f0:95:a1:da:88:f2:e9:24:b2:30:04:
d1:11:c3:4b:31:0d:ef:72:7b:55:1e:73:a3:0c:dd:cd:60:95:
72:f0:0a:32:b9:ce:89:34:be:2c:69:8d:ff:9a:5d:a7:22:f3:
c7:a4:61:4b:0b:24:60:05:6f:f3:7c:81:6a:f9:fe:ee:04:4c:
52:ac:1e:a7
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon May 5 09:15:00 2025 by rpki-client