Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/5e/ccaf34-3dee-4fe2-b2fc-8dd453ab423d/1/uakIi7QgHORtjrg9yfOMeLjzvhs.mft
File: uakIi7QgHORtjrg9yfOMeLjzvhs.mft (raw, json)
Hash identifier: MY4i6DS+BEq41zmxshph6kmVajoca54baPtakkA4VQA=
Subject key identifier: BE:87:28:42:BD:E1:B2:DD:B0:B4:54:29:76:E5:CB:DB:EF:E4:33:BB
Authority key identifier: B9:A9:08:8B:B4:20:1C:E4:6D:8E:B8:3D:C9:F3:8C:78:B8:F3:BE:1B
Certificate issuer: /CN=b9a9088bb4201ce46d8eb83dc9f38c78b8f3be1b
Certificate serial: 0196CEAAF531804685D675EEF43291D9EA37
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/uakIi7QgHORtjrg9yfOMeLjzvhs.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/5e/ccaf34-3dee-4fe2-b2fc-8dd453ab423d/1/uakIi7QgHORtjrg9yfOMeLjzvhs.mft
Manifest number: 0C73
Signing time: Wed 14 May 2025 12:00:32 +0000
Manifest this update: Wed 14 May 2025 12:00:32 +0000
Manifest next update: Thu 15 May 2025 12:00:32 +0000
Files and hashes: 1: rgvtyID9p-DqMnjSKCFn-cGMrm8.roa (hash: KZX9vOyc4u5urfjnyI1iRG4cI0C7NijDH3Acv+79gvU=)
2: uakIi7QgHORtjrg9yfOMeLjzvhs.crl (hash: HmsbfH188XyX+CAe3mpfm5gNM0TsXLs78horKsKkRpU=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/5e/ccaf34-3dee-4fe2-b2fc-8dd453ab423d/1/uakIi7QgHORtjrg9yfOMeLjzvhs.crl
rsync://rpki.ripe.net/repository/DEFAULT/5e/ccaf34-3dee-4fe2-b2fc-8dd453ab423d/1/uakIi7QgHORtjrg9yfOMeLjzvhs.mft
rsync://rpki.ripe.net/repository/DEFAULT/uakIi7QgHORtjrg9yfOMeLjzvhs.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 15 May 2025 12:00:32 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:ce:aa:f5:31:80:46:85:d6:75:ee:f4:32:91:d9:ea:37
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=b9a9088bb4201ce46d8eb83dc9f38c78b8f3be1b
Validity
Not Before: May 14 12:00:32 2025 GMT
Not After : May 15 12:00:32 2025 GMT
Subject: CN=be872842bde1b2ddb0b4542976e5cbdbefe433bb
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b3:53:4b:e3:51:af:f6:ed:4a:ea:e8:23:8d:55:
48:5f:e6:4e:19:12:3b:16:09:0c:33:e5:dd:a0:1d:
c8:ce:09:78:5a:05:d1:a6:aa:cb:5e:5e:44:9c:56:
c0:f7:94:f3:ab:03:ad:4e:f2:36:b5:a7:12:a3:90:
7d:30:82:75:cd:ee:25:9f:08:be:ac:d5:30:3b:42:
06:ae:e7:7d:82:cd:49:aa:89:23:bb:0c:99:1c:42:
f7:ed:1e:2f:2c:c7:f5:71:b8:7a:c3:a8:8d:69:6b:
9a:35:5a:d5:6a:1a:e1:a2:f9:62:ff:d7:f6:2a:b2:
22:d9:23:3a:e6:8c:47:39:5a:bf:4e:33:02:29:9f:
4c:63:d2:85:be:9b:78:d2:30:6a:42:5c:ed:68:58:
96:0f:da:cb:fa:5e:55:44:b7:19:08:a1:10:f7:8d:
b4:bb:94:96:c2:d3:ca:48:ea:63:2a:20:66:c1:53:
36:44:8d:11:33:f7:53:6f:0d:f7:8a:ca:37:fb:19:
4f:9f:15:71:21:bb:5c:f4:17:3d:b7:55:11:9d:63:
69:93:e2:ce:07:15:a7:5c:70:cb:e3:e4:84:ee:6a:
99:f0:5d:d1:7a:2c:5c:02:c6:c5:d5:6f:34:dc:ad:
9e:b4:c3:84:bd:fe:f5:47:7c:3e:79:34:10:74:4e:
c2:0f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
BE:87:28:42:BD:E1:B2:DD:B0:B4:54:29:76:E5:CB:DB:EF:E4:33:BB
X509v3 Authority Key Identifier:
keyid:B9:A9:08:8B:B4:20:1C:E4:6D:8E:B8:3D:C9:F3:8C:78:B8:F3:BE:1B
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/uakIi7QgHORtjrg9yfOMeLjzvhs.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5e/ccaf34-3dee-4fe2-b2fc-8dd453ab423d/1/uakIi7QgHORtjrg9yfOMeLjzvhs.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/5e/ccaf34-3dee-4fe2-b2fc-8dd453ab423d/1/uakIi7QgHORtjrg9yfOMeLjzvhs.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
17:4e:20:9d:36:a8:40:25:78:41:ab:2c:84:4c:69:32:d4:5a:
d1:95:d3:76:38:1b:57:00:0c:cc:1d:bf:89:5f:29:2a:02:82:
66:e3:25:92:77:8f:6f:fb:28:2c:67:3a:11:7a:ce:05:a7:4e:
0a:17:d7:35:c1:cc:00:b8:12:18:85:42:24:8e:2a:c8:0a:8b:
75:e6:ee:92:cb:4a:f2:d5:82:33:ef:98:22:3c:fd:8b:53:82:
49:4f:05:fc:40:30:ae:f8:07:49:92:c7:6c:0d:b7:51:1a:86:
c8:c8:f3:3a:d5:62:e7:60:e6:18:31:f7:e2:2f:c2:aa:e8:8a:
36:59:3f:c2:08:ee:91:5c:80:52:71:99:c4:5a:77:59:51:80:
be:67:ba:44:62:ac:6b:69:46:df:79:c3:b1:4d:42:4f:56:06:
9e:39:c3:6a:d9:81:05:26:cf:1c:6d:ed:5c:16:d8:a0:54:ae:
53:bb:10:05:3d:ca:9e:9b:de:f5:94:0c:e0:a2:08:33:6f:40:
56:c0:3d:47:cd:3f:53:84:e7:95:b1:23:08:38:e9:0d:07:30:
6f:ff:98:d3:c7:a9:5e:ca:ee:fa:0a:07:d7:73:5b:4a:e0:2d:
b1:c6:c9:68:55:a9:fd:82:94:c2:cf:d3:97:54:d1:76:13:86:
44:56:95:4e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed May 14 15:59:28 2025 by rpki-client