Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/5b/7eb7c3-e34a-4fbc-9272-4c1c57a81ffd/1/uFnbfywuOzq9i_QV8M4f_zNDKew.mft
File: uFnbfywuOzq9i_QV8M4f_zNDKew.mft (raw, json)
Hash identifier: 25pDqhDa3OYBKYY0EbBisQSb3+OBwqwVj4xZIZv+N5E=
Subject key identifier: 3A:43:9B:72:A6:CC:77:CE:D8:F7:AB:A3:B7:69:CB:E7:30:33:81:68
Authority key identifier: B8:59:DB:7F:2C:2E:3B:3A:BD:8B:F4:15:F0:CE:1F:FF:33:43:29:EC
Certificate issuer: /CN=b859db7f2c2e3b3abd8bf415f0ce1fff334329ec
Certificate serial: 0196BDB782B672E5B503C859A598D634BED8
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/uFnbfywuOzq9i_QV8M4f_zNDKew.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/5b/7eb7c3-e34a-4fbc-9272-4c1c57a81ffd/1/uFnbfywuOzq9i_QV8M4f_zNDKew.mft
Manifest number: 0C8F
Signing time: Sun 11 May 2025 05:00:42 +0000
Manifest this update: Sun 11 May 2025 05:00:42 +0000
Manifest next update: Mon 12 May 2025 05:00:42 +0000
Files and hashes: 1: KrWaj3PmGUr__R-XWPo-LvjSSzE.roa (hash: D32/8FWqAF1z0NVQywtDopSVNiH+dneRDeaovNlaE+U=)
2: uFnbfywuOzq9i_QV8M4f_zNDKew.crl (hash: 0rvxUg6H2AB9b062Pjm7VkSKlXz+Hf83QBftRgz+8Jc=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/5b/7eb7c3-e34a-4fbc-9272-4c1c57a81ffd/1/uFnbfywuOzq9i_QV8M4f_zNDKew.crl
rsync://rpki.ripe.net/repository/DEFAULT/5b/7eb7c3-e34a-4fbc-9272-4c1c57a81ffd/1/uFnbfywuOzq9i_QV8M4f_zNDKew.mft
rsync://rpki.ripe.net/repository/DEFAULT/uFnbfywuOzq9i_QV8M4f_zNDKew.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 11 May 2025 23:00:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:bd:b7:82:b6:72:e5:b5:03:c8:59:a5:98:d6:34:be:d8
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=b859db7f2c2e3b3abd8bf415f0ce1fff334329ec
Validity
Not Before: May 11 05:00:42 2025 GMT
Not After : May 12 05:00:42 2025 GMT
Subject: CN=3a439b72a6cc77ced8f7aba3b769cbe730338168
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:eb:b3:eb:b5:0c:28:fa:51:a4:d3:3a:1f:93:5e:
77:e6:b6:19:89:00:3f:4f:1d:91:18:97:5e:e6:12:
bc:d2:e1:a5:57:cd:67:6c:8b:d7:eb:8a:25:32:47:
2b:4f:36:28:ac:af:5f:36:13:77:ac:4e:5f:62:ea:
fa:f7:2c:9f:34:f5:cf:5e:7f:92:4f:9b:e8:b1:d6:
fa:75:ff:7c:4c:7e:13:e1:8a:e0:d8:5c:4f:24:39:
d1:ba:ae:f3:c0:53:98:d4:4c:70:68:b9:78:2e:45:
1c:ef:ea:e4:5e:c8:2b:1f:bb:32:35:97:80:6d:fc:
26:cd:d6:77:bd:a6:10:6f:1d:c6:42:fa:d9:cf:f9:
d2:7e:ed:ca:08:28:e1:4c:48:ad:eb:75:ac:f0:76:
45:f8:26:60:1a:c9:cf:18:ff:5b:62:fd:69:7b:4d:
fe:05:83:4f:6c:71:59:a9:7f:68:64:11:1f:86:de:
81:38:e0:22:4c:88:75:21:a3:ba:23:3a:97:69:30:
81:86:7b:f0:df:ce:33:e0:99:d1:fd:45:a4:e1:db:
b5:c3:90:1e:46:b2:64:2b:7c:58:bd:74:d5:26:fa:
02:e9:19:40:06:c9:8d:c5:4a:e8:bf:8b:ea:79:c5:
1f:38:fc:b6:d4:00:80:16:04:f5:f5:28:6a:6c:c7:
07:87
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
3A:43:9B:72:A6:CC:77:CE:D8:F7:AB:A3:B7:69:CB:E7:30:33:81:68
X509v3 Authority Key Identifier:
keyid:B8:59:DB:7F:2C:2E:3B:3A:BD:8B:F4:15:F0:CE:1F:FF:33:43:29:EC
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/uFnbfywuOzq9i_QV8M4f_zNDKew.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5b/7eb7c3-e34a-4fbc-9272-4c1c57a81ffd/1/uFnbfywuOzq9i_QV8M4f_zNDKew.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/5b/7eb7c3-e34a-4fbc-9272-4c1c57a81ffd/1/uFnbfywuOzq9i_QV8M4f_zNDKew.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
b3:00:d3:de:80:f2:62:ca:cd:bb:aa:53:b5:83:42:30:c0:61:
f0:b1:fa:62:c8:9b:66:8f:9f:ed:b9:3a:52:76:d8:a9:7b:e1:
74:04:77:89:e2:b3:c6:02:b0:f3:d3:5d:16:07:be:16:f5:ce:
ed:7d:33:3a:7c:2d:11:ac:06:e7:83:d0:a4:e7:87:fc:9e:fc:
6a:87:8c:42:56:84:b6:19:bb:e5:d5:af:98:56:a9:80:b0:b0:
34:57:69:c9:70:6a:c4:e2:9b:f1:20:63:2d:ad:9f:44:fe:6b:
f8:b3:0f:74:83:bf:5f:5e:b4:fd:55:4c:61:68:ba:f7:26:6e:
57:44:d9:e9:45:a3:5f:a4:24:42:f2:c0:5f:22:22:70:ac:9f:
7d:7a:4c:70:49:17:37:80:e4:37:d0:f0:62:82:a6:cd:48:83:
cf:82:56:2e:70:39:c3:e0:d4:3c:d7:6f:08:e1:f7:22:c9:7f:
4f:8b:4f:74:6d:e8:4e:af:62:44:e8:79:bf:b2:99:e2:9f:5b:
4e:ba:78:97:10:0b:05:75:72:a3:ed:34:c1:59:7c:98:82:b5:
b5:f8:4f:d3:33:d0:4e:0b:eb:e8:a4:98:6c:cb:d9:38:e9:30:
10:80:65:af:9b:b7:63:c2:8c:44:69:df:0a:ce:66:11:ae:05:
df:e9:d2:77
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun May 11 09:38:46 2025 by rpki-client