Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/5a/642eb2-3fb9-4f0e-baf4-8cd79527e530/1/uJUchRS33SGzM6uzPKyjxNrp1wk.mft
File: uJUchRS33SGzM6uzPKyjxNrp1wk.mft (raw, json)
Hash identifier: 1nDzV1bePsSSVtYFMVBUriQ4KEIjVZvfy3ZOWaWpxH4=
Subject key identifier: 9A:24:E6:8D:99:11:69:2F:B1:75:FE:A4:CE:F3:D6:FF:F8:D4:F2:45
Authority key identifier: B8:95:1C:85:14:B7:DD:21:B3:33:AB:B3:3C:AC:A3:C4:DA:E9:D7:09
Certificate issuer: /CN=b8951c8514b7dd21b333abb33caca3c4dae9d709
Certificate serial: 0196C42759B259EF1AD60380120CD015909F
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/uJUchRS33SGzM6uzPKyjxNrp1wk.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/5a/642eb2-3fb9-4f0e-baf4-8cd79527e530/1/uJUchRS33SGzM6uzPKyjxNrp1wk.mft
Manifest number: 0483
Signing time: Mon 12 May 2025 11:00:35 +0000
Manifest this update: Mon 12 May 2025 11:00:35 +0000
Manifest next update: Tue 13 May 2025 11:00:35 +0000
Files and hashes: 1: MDEQKKHcZHICf9dDkngIkD98fk8.roa (hash: CUH9BOH8gaG7TDcSsdo+6SQK/kWQmIxzzf2UKdhj3Tg=)
2: NNWMEZj2KM2iS4Og9a2q_2M6GAU.roa (hash: YcQpsVuDkJbcr6546iTtN2WNSx3d2cPDYivVNT/w7bs=)
3: uJUchRS33SGzM6uzPKyjxNrp1wk.crl (hash: Tx73ZkDG7YVwRA04SUWfvlnYwNDgu3IcjI1JYnmWQmo=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/5a/642eb2-3fb9-4f0e-baf4-8cd79527e530/1/uJUchRS33SGzM6uzPKyjxNrp1wk.crl
rsync://rpki.ripe.net/repository/DEFAULT/5a/642eb2-3fb9-4f0e-baf4-8cd79527e530/1/uJUchRS33SGzM6uzPKyjxNrp1wk.mft
rsync://rpki.ripe.net/repository/DEFAULT/uJUchRS33SGzM6uzPKyjxNrp1wk.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 13 May 2025 11:00:35 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:c4:27:59:b2:59:ef:1a:d6:03:80:12:0c:d0:15:90:9f
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=b8951c8514b7dd21b333abb33caca3c4dae9d709
Validity
Not Before: May 12 11:00:35 2025 GMT
Not After : May 13 11:00:35 2025 GMT
Subject: CN=9a24e68d9911692fb175fea4cef3d6fff8d4f245
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e0:53:6b:fd:be:8b:38:4d:af:2c:f1:37:97:b8:
9b:78:fc:46:11:aa:99:b8:4a:dd:cc:3b:44:d8:2d:
cb:26:76:8e:7b:49:fd:f7:51:91:8a:13:ff:7c:72:
f8:2b:3e:c8:ee:95:bc:20:9a:be:b6:76:0e:07:e3:
60:57:86:3c:c8:5b:28:3b:16:d7:9e:cc:8d:e1:74:
39:b9:a2:5f:5e:20:67:09:b1:66:a1:f6:70:47:30:
b5:0e:66:37:17:8e:c9:22:fb:ae:d0:b8:77:fc:aa:
a2:5c:14:8e:9f:3f:c6:d5:f3:b9:dd:d3:93:2d:36:
e6:98:21:35:63:70:d7:7e:3f:df:15:98:4e:71:3a:
51:a1:80:d9:2e:16:b6:a8:af:29:e5:6a:b9:38:d8:
a7:fe:10:9d:a2:ac:d5:7f:32:f1:aa:12:ea:e3:2f:
ea:a7:83:10:a9:eb:4f:86:0a:68:71:38:9d:91:7f:
14:e0:28:a5:da:e4:b1:68:58:1a:d5:4c:6e:12:18:
df:f7:59:26:de:a0:57:71:c9:30:0f:16:6c:d0:fd:
7a:6b:8d:b1:7d:6d:a9:ae:fb:80:7c:27:26:08:78:
bd:5c:5d:d0:23:d0:b8:26:46:92:ad:7c:13:16:f5:
f0:59:c1:b7:35:51:6d:7f:98:c0:3d:18:5c:3d:ef:
44:71
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
9A:24:E6:8D:99:11:69:2F:B1:75:FE:A4:CE:F3:D6:FF:F8:D4:F2:45
X509v3 Authority Key Identifier:
keyid:B8:95:1C:85:14:B7:DD:21:B3:33:AB:B3:3C:AC:A3:C4:DA:E9:D7:09
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/uJUchRS33SGzM6uzPKyjxNrp1wk.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5a/642eb2-3fb9-4f0e-baf4-8cd79527e530/1/uJUchRS33SGzM6uzPKyjxNrp1wk.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/5a/642eb2-3fb9-4f0e-baf4-8cd79527e530/1/uJUchRS33SGzM6uzPKyjxNrp1wk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
1b:42:76:88:13:4d:8e:33:97:a3:29:a1:5a:6f:76:c1:f4:fb:
14:2e:c6:51:1c:5f:80:a5:bd:c7:36:4f:c5:48:d9:ec:a8:95:
b3:5e:da:bd:03:4a:2c:d2:11:08:df:dc:d5:e1:8b:e0:d3:5b:
b5:32:4e:c2:88:38:f7:6f:c4:2d:54:0c:b1:ff:11:d6:a7:0f:
37:7a:a6:04:4a:4e:2d:ad:31:6e:d2:79:9b:8a:27:9d:c0:7c:
3b:2a:c8:c8:0c:a2:04:f5:7f:97:e8:eb:94:a4:85:04:51:c4:
d1:d4:d1:ce:a5:76:b9:5f:d8:b5:76:a2:e2:eb:71:fd:6e:8a:
31:8e:51:d3:0c:8d:68:bc:82:83:e3:d1:4e:18:86:d1:7c:8b:
94:41:d7:a7:fc:95:a3:c8:ae:73:cd:45:99:6a:a3:22:8e:0a:
85:7e:b0:94:b6:42:6f:d7:39:28:01:01:e7:09:ec:af:5d:c5:
36:aa:65:83:b2:8e:86:e7:60:93:e6:4d:10:c3:ec:4b:56:0a:
6f:d0:35:7e:19:62:88:8f:39:70:65:5c:8a:f7:83:54:70:9e:
ea:4a:f5:77:30:5d:72:4e:23:02:f4:68:49:70:29:e6:5c:6f:
14:3c:8e:74:7f:06:25:57:9d:d4:9a:cc:d0:04:aa:1c:ab:53:
ca:58:68:88
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon May 12 16:11:08 2025 by rpki-client