Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/6d/169a21-f3c1-43b9-ade5-8696a96044f2/1/uv15tt2FKQ_vYWmkTkJhB9J0ZRo.mft
File: uv15tt2FKQ_vYWmkTkJhB9J0ZRo.mft (raw, json)
Hash identifier: tX5C3o1dDv6bLEy9FeUKScxM14dmXhuEiltz/tDe/oo=
Subject key identifier: 3D:17:0E:73:5C:8C:8E:F0:81:3B:CC:B5:0A:AD:D3:5F:8A:47:13:E7
Authority key identifier: BA:FD:79:B6:DD:85:29:0F:EF:61:69:A4:4E:42:61:07:D2:74:65:1A
Certificate issuer: /CN=bafd79b6dd85290fef6169a44e426107d274651a
Certificate serial: 0196AC1F1A3E2BCFA64AF3B255739D357AB7
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/uv15tt2FKQ_vYWmkTkJhB9J0ZRo.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/6d/169a21-f3c1-43b9-ade5-8696a96044f2/1/uv15tt2FKQ_vYWmkTkJhB9J0ZRo.mft
Manifest number: 041B
Signing time: Wed 07 May 2025 19:00:41 +0000
Manifest this update: Wed 07 May 2025 19:00:41 +0000
Manifest next update: Thu 08 May 2025 19:00:41 +0000
Files and hashes: 1: 6CYEFdNOzyIbBisD1D5M9NGwi4c.roa (hash: TPBGKST5Y+J6z2fr0kA62OOn3rCc61+iQygU8zg4rmY=)
2: RfapQx5kz-KcEUJBDhqlf36XGPk.roa (hash: 5esPSUrHtO9ZpdIa9TheJp5LPtvTGdoUIoS8FI2YC2U=)
3: uv15tt2FKQ_vYWmkTkJhB9J0ZRo.crl (hash: N7OiQzWd42h0ektrOC9WOxZRJm5zSALTQC1yrKZObIk=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/6d/169a21-f3c1-43b9-ade5-8696a96044f2/1/uv15tt2FKQ_vYWmkTkJhB9J0ZRo.crl
rsync://rpki.ripe.net/repository/DEFAULT/6d/169a21-f3c1-43b9-ade5-8696a96044f2/1/uv15tt2FKQ_vYWmkTkJhB9J0ZRo.mft
rsync://rpki.ripe.net/repository/DEFAULT/uv15tt2FKQ_vYWmkTkJhB9J0ZRo.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 08 May 2025 13:31:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:ac:1f:1a:3e:2b:cf:a6:4a:f3:b2:55:73:9d:35:7a:b7
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=bafd79b6dd85290fef6169a44e426107d274651a
Validity
Not Before: May 7 19:00:41 2025 GMT
Not After : May 8 19:00:41 2025 GMT
Subject: CN=3d170e735c8c8ef0813bccb50aadd35f8a4713e7
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c6:91:b2:32:a5:ff:8c:fe:61:86:69:ba:79:b4:
3a:13:ad:b4:a6:21:f1:38:6f:5a:b3:7f:7e:67:60:
92:ac:0a:b9:29:03:b3:1a:6a:ba:04:02:68:fe:1b:
80:40:3a:bf:a0:40:2e:72:bc:ad:84:e8:76:70:3f:
e2:f8:c7:32:71:2a:07:09:ed:c9:f8:39:71:6b:3e:
7f:44:7e:c9:1c:f4:fe:99:18:2a:2d:b4:8e:5b:27:
aa:55:0e:6a:b0:41:b5:a4:53:12:f6:9b:c3:22:8b:
45:54:e1:df:f3:aa:eb:29:35:a4:8a:aa:aa:81:e1:
f5:fe:45:70:b1:b7:a8:89:12:ff:e7:22:13:71:96:
71:90:33:ad:c4:46:4f:bb:33:6e:91:3c:5c:bb:2f:
79:5e:36:bc:84:77:d7:fa:e9:fd:ad:ed:bd:52:7f:
07:eb:65:e8:06:19:64:4c:d6:dd:7d:33:58:2e:26:
02:66:ec:8e:2d:3a:4a:13:67:45:d1:24:ea:a2:e3:
6d:2d:d5:af:6e:dc:b2:59:6a:86:cf:eb:a0:03:93:
4d:f4:a3:f4:56:ea:d4:64:6c:8e:d2:38:41:69:d6:
71:e2:b3:8c:0c:61:22:4d:3c:9b:a4:b9:81:a6:88:
14:d5:f3:54:1e:fe:72:c4:db:e2:1d:e4:59:04:d2:
6e:53
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
3D:17:0E:73:5C:8C:8E:F0:81:3B:CC:B5:0A:AD:D3:5F:8A:47:13:E7
X509v3 Authority Key Identifier:
keyid:BA:FD:79:B6:DD:85:29:0F:EF:61:69:A4:4E:42:61:07:D2:74:65:1A
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/uv15tt2FKQ_vYWmkTkJhB9J0ZRo.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/6d/169a21-f3c1-43b9-ade5-8696a96044f2/1/uv15tt2FKQ_vYWmkTkJhB9J0ZRo.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/6d/169a21-f3c1-43b9-ade5-8696a96044f2/1/uv15tt2FKQ_vYWmkTkJhB9J0ZRo.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
a2:af:8b:ca:ed:fd:ad:15:62:4a:b3:51:ec:97:ab:08:bb:92:
bc:1b:80:a6:b2:c2:e8:10:f9:0d:0d:51:a0:60:e2:60:5f:c6:
61:48:7b:19:80:d9:91:ae:4b:52:70:bc:58:d7:fa:7b:11:87:
d8:bb:66:d0:07:3d:fb:b6:ec:82:5d:f0:1f:41:49:45:93:38:
c7:81:71:39:ff:57:0a:ad:76:bd:79:80:c5:62:0d:ad:33:e7:
3e:09:75:71:9d:89:a2:10:08:90:f3:15:27:01:62:d3:41:92:
8d:f7:fd:ac:d0:7d:09:58:29:42:fa:1c:01:fb:d7:2b:df:d1:
0c:9a:59:ec:84:d3:e3:69:45:f2:7e:29:0c:a5:03:b1:cb:cf:
bd:f3:b8:09:17:27:2b:1f:56:e3:92:e2:c4:25:8b:11:48:7c:
d4:66:84:d1:58:da:a5:2b:5e:52:f4:42:ca:fb:44:ee:5f:eb:
49:b8:ff:40:ef:00:9d:00:25:c5:b6:02:21:d8:c1:9a:ce:91:
36:72:1c:da:41:60:b3:1b:31:b5:cc:79:75:e0:42:c8:43:04:
7e:5b:c0:3f:cd:d8:39:59:2c:b3:3c:87:bd:24:c6:64:ab:fe:
b1:c4:a9:33:12:dc:20:93:33:be:53:ed:0d:6a:c9:6e:af:a9:
30:07:ca:fc
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed May 7 23:29:02 2025 by rpki-client