
Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/57/3f8cca-6b1d-4ae6-bc2a-f42e7c45935a/1/uwoTocnh3YTt5DKDSQvng4d1SpQ.mft
File: uwoTocnh3YTt5DKDSQvng4d1SpQ.mft (raw, json)
Hash identifier: YQj5cs88etFey9/8lOdXFjjTt11wwZmI1IstVk8sCzM=
Subject key identifier: D0:DE:F7:BC:91:D3:4E:A1:D7:84:B5:E9:63:17:8C:65:8C:7C:06:8C
Authority key identifier: BB:0A:13:A1:C9:E1:DD:84:ED:E4:32:83:49:0B:E7:83:87:75:4A:94
Certificate issuer: /CN=bb0a13a1c9e1dd84ede43283490be78387754a94
Certificate serial: 0196CD9856C319466EE47F2EB3C378C64CA9
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/uwoTocnh3YTt5DKDSQvng4d1SpQ.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/57/3f8cca-6b1d-4ae6-bc2a-f42e7c45935a/1/uwoTocnh3YTt5DKDSQvng4d1SpQ.mft
Manifest number: 153A
Signing time: Wed 14 May 2025 07:00:34 +0000
Manifest this update: Wed 14 May 2025 07:00:34 +0000
Manifest next update: Thu 15 May 2025 07:00:34 +0000
Files and hashes: 1: e4ClDxZZC-HgzfD6jjAt7w6H7rI.roa (hash: s/lm7kNCD/Mf0FKczgw09MeHHAa4AoL+4qjfAKGabq0=)
2: uwoTocnh3YTt5DKDSQvng4d1SpQ.crl (hash: GSr5Ag4D/oUzf9eDAvb4AhEoIZr7uakxsABMX6aMTRI=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/57/3f8cca-6b1d-4ae6-bc2a-f42e7c45935a/1/uwoTocnh3YTt5DKDSQvng4d1SpQ.crl
rsync://rpki.ripe.net/repository/DEFAULT/57/3f8cca-6b1d-4ae6-bc2a-f42e7c45935a/1/uwoTocnh3YTt5DKDSQvng4d1SpQ.mft
rsync://rpki.ripe.net/repository/DEFAULT/uwoTocnh3YTt5DKDSQvng4d1SpQ.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 15 May 2025 07:00:34 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:cd:98:56:c3:19:46:6e:e4:7f:2e:b3:c3:78:c6:4c:a9
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=bb0a13a1c9e1dd84ede43283490be78387754a94
Validity
Not Before: May 14 07:00:34 2025 GMT
Not After : May 15 07:00:34 2025 GMT
Subject: CN=d0def7bc91d34ea1d784b5e963178c658c7c068c
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bc:46:79:90:62:b6:42:67:ff:e3:98:fb:49:27:
19:9d:46:f7:9e:5a:68:97:24:ac:e3:f7:9e:eb:11:
e9:3a:7c:90:a4:21:db:33:5a:51:63:f8:d5:17:79:
59:51:25:d3:bf:49:96:e7:b9:94:41:31:87:2f:3a:
96:76:5c:ea:06:5b:9c:0e:8c:97:98:25:d2:01:41:
48:e6:43:0c:e3:2f:21:66:41:12:aa:85:f2:fc:c8:
10:7d:ee:d9:7a:a0:c6:06:4e:c2:f6:d6:68:15:3c:
3d:69:da:19:4a:96:a1:26:b0:ca:7c:44:09:9e:21:
ed:5c:4d:dc:cd:10:50:78:01:28:0e:54:dc:88:88:
ab:91:a6:75:b1:4b:64:a3:c4:9c:b6:78:30:0e:d2:
5b:a3:cb:70:c9:06:35:f3:23:37:e5:20:d1:68:e7:
34:05:07:55:4c:a3:17:69:3a:40:24:b9:14:84:b0:
d0:1b:8f:f3:c2:39:3e:c1:bf:d6:de:be:02:a7:31:
0a:06:da:23:02:90:f9:71:c6:fe:b6:c7:fd:1d:4d:
e6:a7:c4:cc:95:45:a2:94:fb:a0:52:30:ad:3c:fd:
f1:c7:59:ff:88:92:69:20:cb:84:7a:4d:76:84:ba:
f0:42:af:24:ea:65:f6:30:53:e6:64:93:9b:9d:e7:
de:d7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D0:DE:F7:BC:91:D3:4E:A1:D7:84:B5:E9:63:17:8C:65:8C:7C:06:8C
X509v3 Authority Key Identifier:
keyid:BB:0A:13:A1:C9:E1:DD:84:ED:E4:32:83:49:0B:E7:83:87:75:4A:94
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/uwoTocnh3YTt5DKDSQvng4d1SpQ.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/57/3f8cca-6b1d-4ae6-bc2a-f42e7c45935a/1/uwoTocnh3YTt5DKDSQvng4d1SpQ.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/57/3f8cca-6b1d-4ae6-bc2a-f42e7c45935a/1/uwoTocnh3YTt5DKDSQvng4d1SpQ.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
55:b2:ae:0f:81:70:70:ee:9c:cb:26:a0:54:90:f4:e1:bc:5f:
8f:95:49:13:9e:f0:3d:fb:21:81:cf:14:a2:e4:67:3f:63:d1:
cf:b7:15:5f:b9:81:a3:17:aa:b4:c1:91:75:31:7c:4e:77:1d:
d5:3c:65:a5:61:21:f4:ea:73:37:9a:d9:9b:7d:b6:b4:76:16:
82:dc:46:70:75:6d:a8:c0:41:95:75:5a:c5:16:7e:a4:04:26:
d5:4b:73:01:cf:84:62:c9:8c:18:76:00:a6:f8:c1:b7:e6:ba:
c0:dd:79:a8:f8:0a:c8:ca:3a:91:69:77:84:32:e3:4a:2d:18:
a4:ea:3d:54:38:cb:3d:e6:dc:7d:ef:68:1e:5e:8e:cf:22:d5:
e1:54:58:89:5e:ac:ba:1b:2c:38:72:d5:b0:b0:51:99:4e:78:
a8:9c:d1:8a:ec:ec:4e:e9:b3:78:1b:25:b5:8f:63:c4:ad:ac:
cd:68:4b:5b:20:6a:ed:f2:50:dc:00:4c:bd:6f:1f:74:34:3d:
f6:fe:99:14:0a:66:b4:85:21:c7:61:d9:1f:a6:15:74:5b:de:
21:db:1b:05:de:9b:3d:08:4b:b3:52:15:f5:59:9c:af:ca:cd:
55:a0:35:db:bc:10:80:ff:9d:76:d4:54:87:08:e3:64:59:71:
d7:37:a5:23
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed May 14 15:56:17 2025 by rpki-client