Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/68/c7f05d-35f5-4115-9f7f-fcaaf2ef3601/1/uZndWsAyJYRLa0kPkvA0fM8JZwg.mft
File: uZndWsAyJYRLa0kPkvA0fM8JZwg.mft (raw, json)
Hash identifier: pEbRWvA+rGozJw3CFKh5pfOu6sd8VMjaNzH5wgYa6Ms=
Subject key identifier: 92:C9:5A:A0:2E:71:22:76:D0:8A:A5:5F:21:37:33:76:0D:E8:60:5A
Authority key identifier: B9:99:DD:5A:C0:32:25:84:4B:6B:49:0F:92:F0:34:7C:CF:09:67:08
Certificate issuer: /CN=b999dd5ac03225844b6b490f92f0347ccf096708
Certificate serial: 0196BE25687A1CBFE43E200A4607AA3CEBC7
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/uZndWsAyJYRLa0kPkvA0fM8JZwg.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/68/c7f05d-35f5-4115-9f7f-fcaaf2ef3601/1/uZndWsAyJYRLa0kPkvA0fM8JZwg.mft
Manifest number: 133F
Signing time: Sun 11 May 2025 07:00:44 +0000
Manifest this update: Sun 11 May 2025 07:00:44 +0000
Manifest next update: Mon 12 May 2025 07:00:44 +0000
Files and hashes: 1: gDuCjO0DIgLxN7C48R4JfGoQRVc.roa (hash: lP/yR1n5GIu8r34Q5gSsLb2yf1Tw72xt4gkUVUOEXik=)
2: uZndWsAyJYRLa0kPkvA0fM8JZwg.crl (hash: K9KtfKw/wGR1ocNXsoOrY3tH2rZ6ZZcpHzh1H/EcHnM=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/68/c7f05d-35f5-4115-9f7f-fcaaf2ef3601/1/uZndWsAyJYRLa0kPkvA0fM8JZwg.crl
rsync://rpki.ripe.net/repository/DEFAULT/68/c7f05d-35f5-4115-9f7f-fcaaf2ef3601/1/uZndWsAyJYRLa0kPkvA0fM8JZwg.mft
rsync://rpki.ripe.net/repository/DEFAULT/uZndWsAyJYRLa0kPkvA0fM8JZwg.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 12 May 2025 07:00:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:be:25:68:7a:1c:bf:e4:3e:20:0a:46:07:aa:3c:eb:c7
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=b999dd5ac03225844b6b490f92f0347ccf096708
Validity
Not Before: May 11 07:00:44 2025 GMT
Not After : May 12 07:00:44 2025 GMT
Subject: CN=92c95aa02e712276d08aa55f213733760de8605a
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c0:c3:79:35:5c:f0:f1:47:f3:e1:d5:4f:0e:6b:
e8:7b:9e:0a:2c:63:23:a1:c1:96:68:c4:76:bc:da:
24:ec:47:12:b8:f6:0a:4c:01:b1:69:32:23:5f:77:
6a:12:09:d1:4c:db:95:a9:72:93:f4:09:58:04:47:
31:88:4c:c0:a1:87:e5:66:50:31:9b:14:58:ed:b6:
58:60:6b:70:84:bc:b8:d5:6d:62:94:2f:5b:b5:1d:
5e:c8:98:f1:51:09:ec:67:ed:f1:da:e2:25:1d:62:
03:28:7b:38:83:ed:89:63:4b:a0:b4:64:9e:18:c6:
bf:ee:a7:2a:ff:b7:95:2f:b8:92:18:7d:c7:39:08:
b7:db:c3:d3:30:74:6c:45:52:46:42:27:76:e8:cf:
e0:98:3e:2f:d1:2b:54:f7:20:db:49:a5:91:40:95:
16:b0:88:80:d8:a9:b5:a1:a3:ae:7d:8e:cd:e6:c6:
f0:f2:f4:23:17:17:a6:a1:06:d0:d3:2d:91:a5:72:
e4:c6:e8:d6:f1:a9:28:9b:97:89:10:58:6a:80:4c:
21:23:46:9b:a7:07:4e:db:11:0c:c8:6f:17:e4:87:
54:e4:34:12:f6:6b:1e:15:a4:d7:e6:db:40:cf:87:
a0:e8:b0:cf:28:48:95:4e:b8:6b:3a:87:11:e5:c3:
dd:61
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
92:C9:5A:A0:2E:71:22:76:D0:8A:A5:5F:21:37:33:76:0D:E8:60:5A
X509v3 Authority Key Identifier:
keyid:B9:99:DD:5A:C0:32:25:84:4B:6B:49:0F:92:F0:34:7C:CF:09:67:08
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/uZndWsAyJYRLa0kPkvA0fM8JZwg.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/68/c7f05d-35f5-4115-9f7f-fcaaf2ef3601/1/uZndWsAyJYRLa0kPkvA0fM8JZwg.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/68/c7f05d-35f5-4115-9f7f-fcaaf2ef3601/1/uZndWsAyJYRLa0kPkvA0fM8JZwg.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
6d:3c:09:7e:02:58:2d:25:0e:18:3c:0c:64:20:41:de:d2:32:
dc:69:bd:9a:25:fd:28:15:7f:5b:57:a3:91:bd:c9:f8:5e:9e:
b4:ae:3a:b3:69:f8:ac:a2:63:99:57:50:83:db:fd:d3:f8:f2:
39:70:f1:cd:1d:ca:68:5f:0f:c6:0a:8a:92:7b:6f:2a:dd:2a:
5d:98:6a:55:59:6a:32:06:1f:95:05:3a:61:e9:ee:85:bb:64:
61:77:3c:c1:c2:8a:73:d5:34:fd:d2:20:d9:56:d8:17:d8:49:
4b:57:20:53:b4:b4:5d:cc:0a:48:9a:4b:3c:b3:df:23:86:43:
03:42:a8:04:76:51:f4:05:14:12:83:1c:b4:9b:bc:95:a1:50:
78:d5:18:3f:ce:f1:74:90:76:42:c2:79:ff:9b:79:40:5a:91:
5a:9e:37:13:32:e3:b1:ae:1e:f1:3f:ff:6a:41:58:fc:60:3f:
5f:35:21:e4:b7:58:70:44:f0:3e:e0:19:05:8c:ed:14:bd:b6:
7f:6f:75:5d:89:a8:a3:d8:6a:6e:6e:31:90:6a:67:13:db:38:
c6:4d:4e:4a:18:06:e6:b6:a8:6c:c7:fe:08:15:10:0b:85:ef:
77:d9:60:26:05:a1:31:61:38:c8:4d:eb:92:f2:99:03:0d:25:
2a:a5:60:13
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun May 11 12:31:16 2025 by rpki-client