Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/64/104bae-2c9a-4beb-9035-b2d79ae49646/1/uNaZAUpVUnPtOrsXCGquPwL_mg8.mft
File: uNaZAUpVUnPtOrsXCGquPwL_mg8.mft (raw, json)
Hash identifier: LAmzMUhdGaxCxPxoE76c+tgks3Ap5tXqXFSUPBFC1dA=
Subject key identifier: BF:97:1D:E7:B4:F3:66:44:6F:CB:84:6D:80:74:3D:87:1F:60:33:DC
Authority key identifier: B8:D6:99:01:4A:55:52:73:ED:3A:BB:17:08:6A:AE:3F:02:FF:9A:0F
Certificate issuer: /CN=b8d699014a555273ed3abb17086aae3f02ff9a0f
Certificate serial: 0196C1CAD64DE31D08C988381B36B14B5563
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/uNaZAUpVUnPtOrsXCGquPwL_mg8.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/64/104bae-2c9a-4beb-9035-b2d79ae49646/1/uNaZAUpVUnPtOrsXCGquPwL_mg8.mft
Manifest number: 0A80
Signing time: Mon 12 May 2025 00:00:17 +0000
Manifest this update: Mon 12 May 2025 00:00:17 +0000
Manifest next update: Tue 13 May 2025 00:00:17 +0000
Files and hashes: 1: grkiyNrBsZFvA41Z_BZuZwQjbk0.roa (hash: orWqkkbt375i6JBo+FAAzLtCgy2y10AY9MRPYxvZKZE=)
2: uNaZAUpVUnPtOrsXCGquPwL_mg8.crl (hash: +q+Z+u04500HVdXSa7ug2wm9dZYg4hXwYrlf798KcIQ=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/64/104bae-2c9a-4beb-9035-b2d79ae49646/1/uNaZAUpVUnPtOrsXCGquPwL_mg8.crl
rsync://rpki.ripe.net/repository/DEFAULT/64/104bae-2c9a-4beb-9035-b2d79ae49646/1/uNaZAUpVUnPtOrsXCGquPwL_mg8.mft
rsync://rpki.ripe.net/repository/DEFAULT/uNaZAUpVUnPtOrsXCGquPwL_mg8.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 13 May 2025 00:00:17 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:c1:ca:d6:4d:e3:1d:08:c9:88:38:1b:36:b1:4b:55:63
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=b8d699014a555273ed3abb17086aae3f02ff9a0f
Validity
Not Before: May 12 00:00:17 2025 GMT
Not After : May 13 00:00:17 2025 GMT
Subject: CN=bf971de7b4f366446fcb846d80743d871f6033dc
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e3:00:25:7f:ff:ae:9a:c2:8c:0e:94:eb:85:35:
cb:10:14:a7:26:80:d6:40:7b:ca:bb:09:c9:ee:f3:
ea:3a:3b:3b:37:54:0e:49:d6:b7:f4:b6:12:a1:c8:
9b:33:13:f5:99:02:70:fc:a7:c1:30:5e:01:d6:3a:
8b:61:fe:59:90:4d:c3:81:c8:8e:12:4f:6d:74:62:
7e:d6:e7:c0:5f:22:b0:47:12:e2:7c:99:c3:1d:5c:
3e:f4:40:ba:33:c4:af:ee:47:54:9f:3c:d1:a6:79:
58:99:07:91:a1:b3:4f:4e:0a:b1:38:71:c5:c7:8a:
4c:3c:ec:48:e0:a4:96:35:1c:88:fa:4d:f7:be:b1:
57:78:4e:9c:78:fc:12:a7:db:78:28:39:d8:a4:8c:
49:63:f6:c7:57:0e:ca:77:95:bf:db:0e:e4:bb:74:
4a:34:fb:b3:a0:08:e9:ba:b2:18:0d:ce:7c:9e:33:
c7:54:79:bc:4e:98:c2:47:b6:24:12:d8:9f:03:df:
9b:0e:f9:00:f8:48:35:ff:d4:e1:30:9b:57:67:34:
14:e5:1f:9f:c2:f2:21:67:66:75:d2:50:b7:44:75:
38:26:c4:b5:0d:98:62:6b:fc:05:0c:e2:5f:90:ad:
58:34:b7:0a:8d:bc:52:33:d2:3f:fe:2a:c3:db:91:
0b:5b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
BF:97:1D:E7:B4:F3:66:44:6F:CB:84:6D:80:74:3D:87:1F:60:33:DC
X509v3 Authority Key Identifier:
keyid:B8:D6:99:01:4A:55:52:73:ED:3A:BB:17:08:6A:AE:3F:02:FF:9A:0F
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/uNaZAUpVUnPtOrsXCGquPwL_mg8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/64/104bae-2c9a-4beb-9035-b2d79ae49646/1/uNaZAUpVUnPtOrsXCGquPwL_mg8.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/64/104bae-2c9a-4beb-9035-b2d79ae49646/1/uNaZAUpVUnPtOrsXCGquPwL_mg8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
17:12:e1:aa:b1:87:d2:5e:6f:ba:77:26:bf:3f:06:2a:e7:de:
7a:b7:9f:d5:53:bb:c0:66:2b:c8:1a:f2:d8:5f:db:92:43:f5:
42:d2:01:04:02:09:63:86:31:30:25:20:2f:e9:a9:a5:ef:30:
d5:f6:d8:37:da:b7:1d:14:2c:1c:42:5b:fa:1a:37:53:df:e4:
10:8b:ce:94:6b:87:ff:ff:5a:bf:71:51:10:50:0f:c2:b7:b9:
8b:a7:b3:1f:b3:63:9a:fa:b0:dc:20:75:13:7b:d8:ac:13:b1:
68:44:6c:0f:e0:46:a0:e8:e7:c1:95:cf:af:1f:57:be:e9:5b:
33:58:3f:0a:ba:3b:a1:a8:45:30:91:1b:02:9d:e8:6e:93:94:
e8:b9:00:67:3e:a6:5b:ee:c3:04:62:7f:ea:ac:b0:fe:f6:27:
c5:8a:c9:fe:15:df:d1:79:04:64:fe:b8:05:a0:7c:96:9f:4b:
9a:5a:bb:37:f8:08:ee:e2:63:7f:82:27:75:64:42:06:2c:75:
64:fc:b8:b4:0e:e9:b7:5f:02:30:25:22:6c:c8:45:1e:dc:de:
c2:c4:9b:37:d1:3f:c5:c9:f8:7d:b0:f2:ce:21:a0:3f:c3:c1:
92:05:7a:19:6d:c2:fa:49:5b:f3:61:44:c5:36:00:a2:e7:de:
4e:18:8e:18
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon May 12 07:16:10 2025 by rpki-client