Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/6d/057a69-e68e-4004-8625-9177b14ee633/1/uUUIWZXzy3x9vQXkF3TaYksa8uk.mft
File: uUUIWZXzy3x9vQXkF3TaYksa8uk.mft (raw, json)
Hash identifier: 9yfj2Hnj2sjabKWk9uUKrtx2/yGOS9kVll5X2nx0uII=
Subject key identifier: A6:5C:E1:B5:BA:69:5D:B2:82:EC:E7:8B:8F:9B:87:28:72:5D:3B:5B
Authority key identifier: B9:45:08:59:95:F3:CB:7C:7D:BD:05:E4:17:74:DA:62:4B:1A:F2:E9
Certificate issuer: /CN=b945085995f3cb7c7dbd05e41774da624b1af2e9
Certificate serial: 0196BB929C12B3D549A9A7ACC069DD78A2CF
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/uUUIWZXzy3x9vQXkF3TaYksa8uk.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/6d/057a69-e68e-4004-8625-9177b14ee633/1/uUUIWZXzy3x9vQXkF3TaYksa8uk.mft
Manifest number: 14E0
Signing time: Sat 10 May 2025 19:01:09 +0000
Manifest this update: Sat 10 May 2025 19:01:09 +0000
Manifest next update: Sun 11 May 2025 19:01:09 +0000
Files and hashes: 1: EsduMUwM_I8I9QBhuMSlNVS-Wi4.roa (hash: RsxXFAy4vLF5L/pTYoeAN6hWsbZx1lCA8MFJDhAYUDI=)
2: uUUIWZXzy3x9vQXkF3TaYksa8uk.crl (hash: n1EPMy8a9t+VXbPjgPgcsIMdb1eCFmN+DBKXMKZVftw=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/6d/057a69-e68e-4004-8625-9177b14ee633/1/uUUIWZXzy3x9vQXkF3TaYksa8uk.crl
rsync://rpki.ripe.net/repository/DEFAULT/6d/057a69-e68e-4004-8625-9177b14ee633/1/uUUIWZXzy3x9vQXkF3TaYksa8uk.mft
rsync://rpki.ripe.net/repository/DEFAULT/uUUIWZXzy3x9vQXkF3TaYksa8uk.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 11 May 2025 19:01:09 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:bb:92:9c:12:b3:d5:49:a9:a7:ac:c0:69:dd:78:a2:cf
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=b945085995f3cb7c7dbd05e41774da624b1af2e9
Validity
Not Before: May 10 19:01:09 2025 GMT
Not After : May 11 19:01:09 2025 GMT
Subject: CN=a65ce1b5ba695db282ece78b8f9b8728725d3b5b
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a5:49:53:ab:40:c1:8f:29:82:00:37:34:00:6f:
f0:00:64:77:4b:d6:fa:2a:f3:81:38:05:3f:d8:7d:
29:bb:48:f2:1f:7d:98:89:d1:61:d7:17:41:9a:81:
9b:3b:97:54:0e:a0:e8:a6:76:da:26:13:0d:8d:f7:
d5:f8:e7:eb:3d:f6:63:d8:51:dd:4e:0d:a3:09:77:
02:c1:4f:f2:1f:94:84:fa:67:1d:df:da:70:96:82:
62:51:6f:7f:b1:ab:1c:30:54:23:2f:2e:47:4f:59:
b2:4e:24:08:5f:ff:55:1b:70:43:3c:fb:e8:79:31:
0a:1e:5d:3a:f9:73:4d:f1:37:b0:ca:96:11:40:18:
2c:15:0b:08:b1:2f:b0:be:72:2a:06:08:f4:12:f3:
d8:a0:81:20:59:cc:2e:46:e9:be:f2:ea:4f:07:be:
6f:e9:eb:f1:7a:60:4a:2e:51:d9:bc:ea:bd:ab:e2:
dc:a2:25:1a:5c:db:0b:b3:8f:70:3f:31:93:f1:1d:
90:bf:05:ce:70:2c:f5:03:30:8a:9f:16:9b:fa:1f:
ce:74:76:7e:8f:93:a1:60:2a:6f:22:b6:75:cc:8d:
1f:99:2a:45:64:be:12:0f:0a:58:f2:9c:66:44:0c:
f4:2f:6b:e2:4d:ac:7f:93:45:46:74:68:50:db:a5:
c0:8f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A6:5C:E1:B5:BA:69:5D:B2:82:EC:E7:8B:8F:9B:87:28:72:5D:3B:5B
X509v3 Authority Key Identifier:
keyid:B9:45:08:59:95:F3:CB:7C:7D:BD:05:E4:17:74:DA:62:4B:1A:F2:E9
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/uUUIWZXzy3x9vQXkF3TaYksa8uk.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/6d/057a69-e68e-4004-8625-9177b14ee633/1/uUUIWZXzy3x9vQXkF3TaYksa8uk.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/6d/057a69-e68e-4004-8625-9177b14ee633/1/uUUIWZXzy3x9vQXkF3TaYksa8uk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
46:5d:5b:3a:a3:e1:8e:69:7b:9e:e3:fb:6a:b8:7f:56:77:5f:
7f:38:db:3c:a4:ce:60:0f:ad:30:7d:fe:61:b6:19:9b:d8:67:
c1:15:0a:bd:6d:8e:69:13:bf:ac:f5:d2:c2:af:df:77:44:af:
a4:cb:da:50:e1:11:06:bb:eb:36:0a:d7:ef:d7:b8:1c:68:28:
16:36:14:23:33:94:09:17:17:9b:8b:1f:72:eb:db:89:ac:8a:
f0:15:b7:12:77:b7:74:39:ad:fd:75:17:f4:f3:ed:2f:d8:0e:
c5:a4:85:51:8a:ef:2c:79:c2:f3:1b:60:0e:7e:6e:9e:dd:4d:
1b:20:d8:65:04:5e:e0:de:1d:b8:f7:7e:52:6c:49:d2:e2:9c:
94:e7:98:f7:96:5a:c6:7f:51:36:c5:ae:99:25:c1:15:1b:95:
89:a3:65:73:c1:36:00:ea:e7:5e:63:b2:f1:12:0f:f7:6f:15:
36:e5:e9:ed:84:53:49:74:0b:bc:9a:35:93:fe:fe:a2:9e:e4:
e1:46:13:32:c5:a3:6e:d2:8e:8d:5a:eb:b6:28:87:83:86:49:
4e:4b:5b:c7:6a:d5:ce:c5:c7:b1:29:8a:ee:b6:54:a3:48:96:
60:88:36:2f:18:b4:78:7c:72:40:68:96:12:fe:54:03:7d:d1:
1e:15:75:46
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun May 11 00:46:42 2025 by rpki-client