Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/61/42ac3c-c583-4b82-bcb7-04739402e27b/1/uIazyxP9IWfYnRIYXpNQbdRcmvk.mft
File: uIazyxP9IWfYnRIYXpNQbdRcmvk.mft (raw, json)
Hash identifier: LgRhKVLpEG5edx4DNpIlq7mtjx8X81+Hk5lCrnAEvzo=
Subject key identifier: 99:28:68:39:DF:38:3B:8E:A7:08:19:28:35:52:96:B6:F4:D2:41:D5
Authority key identifier: B8:86:B3:CB:13:FD:21:67:D8:9D:12:18:5E:93:50:6D:D4:5C:9A:F9
Certificate issuer: /CN=b886b3cb13fd2167d89d12185e93506dd45c9af9
Certificate serial: 0196CA60B9A5E88FA03DD445D43E3F77BB45
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/uIazyxP9IWfYnRIYXpNQbdRcmvk.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/61/42ac3c-c583-4b82-bcb7-04739402e27b/1/uIazyxP9IWfYnRIYXpNQbdRcmvk.mft
Manifest number: 0A5B
Signing time: Tue 13 May 2025 16:00:58 +0000
Manifest this update: Tue 13 May 2025 16:00:58 +0000
Manifest next update: Wed 14 May 2025 16:00:58 +0000
Files and hashes: 1: uIazyxP9IWfYnRIYXpNQbdRcmvk.crl (hash: Y6cdWnN0B9EsHN/A82vPiY7s1HnwmYhwA6yTT+9PfMM=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/61/42ac3c-c583-4b82-bcb7-04739402e27b/1/uIazyxP9IWfYnRIYXpNQbdRcmvk.crl
rsync://rpki.ripe.net/repository/DEFAULT/61/42ac3c-c583-4b82-bcb7-04739402e27b/1/uIazyxP9IWfYnRIYXpNQbdRcmvk.mft
rsync://rpki.ripe.net/repository/DEFAULT/uIazyxP9IWfYnRIYXpNQbdRcmvk.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 14 May 2025 14:31:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:ca:60:b9:a5:e8:8f:a0:3d:d4:45:d4:3e:3f:77:bb:45
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=b886b3cb13fd2167d89d12185e93506dd45c9af9
Validity
Not Before: May 13 16:00:58 2025 GMT
Not After : May 14 16:00:58 2025 GMT
Subject: CN=99286839df383b8ea7081928355296b6f4d241d5
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bf:8f:a4:24:4e:d8:9c:30:a7:d1:14:d2:e8:f8:
02:39:44:9b:f2:65:27:d6:16:c2:57:e0:da:40:7a:
b0:8d:24:42:ed:0a:ce:f2:bb:b8:14:60:80:67:ae:
e4:b0:7d:c2:7b:2c:2b:95:c7:d9:22:aa:73:48:65:
e7:1d:8c:d6:34:02:36:60:c1:62:3b:01:fb:fa:f4:
f1:6c:64:3b:be:8e:ee:da:6c:67:52:ba:d9:c4:d2:
05:59:e7:73:c0:63:d4:f5:96:ae:69:0c:9f:22:84:
a4:72:fd:55:83:26:80:af:d5:84:d7:fd:11:5b:98:
54:f6:7e:dd:1f:7b:8d:94:ca:76:8e:e9:59:09:cf:
82:ca:e6:c7:ee:91:1f:42:c4:f2:92:f7:ba:80:3e:
11:03:79:ea:5e:e6:a8:66:9c:9e:27:75:cf:98:fc:
7d:c8:29:ab:3f:a9:47:ea:68:02:e3:11:a9:e8:b2:
95:20:23:9f:77:84:04:93:1d:05:86:fb:97:02:59:
79:43:1f:7e:40:87:2b:e2:3a:7d:e6:e5:ce:f5:f9:
40:d3:d9:11:59:44:b7:83:eb:0a:99:f2:14:c2:60:
37:a9:e9:15:52:52:53:6f:ca:17:2b:cd:b2:0f:16:
07:e9:05:b5:5b:30:04:6f:1f:00:ee:ea:bc:12:9f:
e7:2d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
99:28:68:39:DF:38:3B:8E:A7:08:19:28:35:52:96:B6:F4:D2:41:D5
X509v3 Authority Key Identifier:
keyid:B8:86:B3:CB:13:FD:21:67:D8:9D:12:18:5E:93:50:6D:D4:5C:9A:F9
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/uIazyxP9IWfYnRIYXpNQbdRcmvk.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/61/42ac3c-c583-4b82-bcb7-04739402e27b/1/uIazyxP9IWfYnRIYXpNQbdRcmvk.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/61/42ac3c-c583-4b82-bcb7-04739402e27b/1/uIazyxP9IWfYnRIYXpNQbdRcmvk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
0b:22:0c:1a:44:e9:26:67:e3:61:04:f3:e1:bd:b5:91:f1:8d:
53:56:6c:ae:78:8f:42:8f:79:bc:34:46:ec:f3:62:a3:e7:92:
ce:a0:65:14:17:4f:a0:6d:ee:99:b8:3b:5e:54:20:fa:92:ed:
cc:20:82:ef:31:82:1f:0e:ab:f7:ba:c3:02:7e:c9:4e:e0:1c:
25:a0:02:3f:11:cb:c5:f2:79:85:ba:f7:66:71:57:59:f0:36:
90:d8:d6:8d:80:71:cd:52:ca:e0:d5:28:e3:6e:56:20:a1:36:
4a:8a:1e:19:0b:f8:62:f3:fd:5f:2a:97:9b:43:ed:e1:00:10:
df:a3:5e:70:fa:5e:60:02:b7:6d:6d:4d:48:c6:ad:fc:db:04:
b6:fa:34:4b:19:2c:e9:34:17:5c:54:06:cf:2e:76:98:9f:7e:
0b:97:74:92:a1:ab:5a:61:04:c2:ac:52:1f:14:5f:33:d9:22:
0e:49:49:60:00:d9:a3:fc:41:ff:48:5c:14:e5:50:9b:07:4f:
bb:ef:07:cf:d0:4d:0c:78:7e:4d:8c:ef:4a:80:04:81:56:dc:
34:d2:3a:b8:12:19:21:8a:c0:37:d0:74:a2:0b:1b:46:ae:d4:
e8:8f:52:a3:d6:03:9e:e8:2e:6c:41:b4:70:6f:f8:d8:90:53:
6f:94:58:68
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed May 14 00:14:52 2025 by rpki-client