Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/72/76a7f1-748d-406c-a51f-1ba343f17ec2/1/ujG8-SPF8lyvvavf3UblEfld8NE.mft
File: ujG8-SPF8lyvvavf3UblEfld8NE.mft (raw, json)
Hash identifier: EcOisIRGIahIFgnAMOdAlfEzFN9axfYOzdSDuqLTYfw=
Subject key identifier: EF:1F:D3:5B:33:31:80:BB:7E:2D:AD:EC:C9:48:AE:8A:66:30:E9:42
Authority key identifier: BA:31:BC:F9:23:C5:F2:5C:AF:BD:AB:DF:DD:46:E5:11:F9:5D:F0:D1
Certificate issuer: /CN=ba31bcf923c5f25cafbdabdfdd46e511f95df0d1
Certificate serial: 0196B220D1B612AE62F918A0B84B3EE223F4
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/ujG8-SPF8lyvvavf3UblEfld8NE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/72/76a7f1-748d-406c-a51f-1ba343f17ec2/1/ujG8-SPF8lyvvavf3UblEfld8NE.mft
Manifest number: 153A
Signing time: Thu 08 May 2025 23:00:17 +0000
Manifest this update: Thu 08 May 2025 23:00:17 +0000
Manifest next update: Fri 09 May 2025 23:00:17 +0000
Files and hashes: 1: 1-F-lRo8Hv4MMErxkMI8nf-QWOn0.roa (hash: 7Ak7QRZESqRwXP4kX1/tNAiv86us+4hOvNSyL+b0r48=)
2: Q4WmwtX1-yGfMV_as6mRHe0HLuE.roa (hash: lXJnylFGx+vUF6zQkDGWs8PitK2htiJr+yqpDV9ObmE=)
3: pG1KZHc4pymXEXUvmeM4GHLYNlA.roa (hash: 5KHE9uzvNu4RIDxwOSdN7PmOQXacqTWtDjsMZfOaj8Y=)
4: ujG8-SPF8lyvvavf3UblEfld8NE.crl (hash: UcHSY6KNLUckD9F+w3X+5Gr6ZXUADCkd/QOtahDn1sg=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/72/76a7f1-748d-406c-a51f-1ba343f17ec2/1/ujG8-SPF8lyvvavf3UblEfld8NE.crl
rsync://rpki.ripe.net/repository/DEFAULT/72/76a7f1-748d-406c-a51f-1ba343f17ec2/1/ujG8-SPF8lyvvavf3UblEfld8NE.mft
rsync://rpki.ripe.net/repository/DEFAULT/ujG8-SPF8lyvvavf3UblEfld8NE.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 09 May 2025 23:00:17 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:b2:20:d1:b6:12:ae:62:f9:18:a0:b8:4b:3e:e2:23:f4
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=ba31bcf923c5f25cafbdabdfdd46e511f95df0d1
Validity
Not Before: May 8 23:00:17 2025 GMT
Not After : May 9 23:00:17 2025 GMT
Subject: CN=ef1fd35b333180bb7e2dadecc948ae8a6630e942
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d4:cf:b9:3b:a4:75:a8:1d:5a:23:e6:d5:aa:b3:
76:c4:5e:e4:68:80:4e:a7:1e:fb:0a:d4:20:c5:d8:
e3:8c:37:6a:99:fc:a4:0e:a9:25:0b:d5:a0:b2:da:
ef:89:06:2b:7b:55:c9:7b:4f:d4:b7:85:30:8e:05:
69:66:ca:37:d6:e4:4c:fd:21:9f:b0:37:a6:41:68:
f0:b4:be:4e:cc:b8:4e:f9:5e:a6:ad:7c:c3:34:c8:
56:33:f2:fd:08:c8:8c:1f:6b:1d:d9:d8:be:0f:58:
9b:49:db:29:9e:fc:a4:3f:2b:58:b0:b5:f1:90:e0:
1d:de:91:6f:d8:c3:fe:cd:a2:fe:e9:02:09:92:ab:
89:e1:73:bd:86:77:c3:53:fa:f9:58:7c:1e:1b:bf:
a4:8d:77:28:fb:64:94:1e:70:d0:9a:33:9e:f0:e3:
77:4b:b7:ff:1b:47:b3:56:13:43:32:ed:7d:da:e4:
31:be:8b:02:ca:bd:7a:41:6a:12:15:01:d6:72:a5:
11:70:00:c7:81:61:5c:04:9b:b8:24:23:16:86:de:
6b:6f:9c:16:1d:15:f7:e7:01:0b:29:d7:52:76:74:
42:aa:09:18:98:6e:1d:5b:ce:a9:5b:c9:5b:87:8d:
06:b8:4b:72:fd:e9:70:8d:b2:90:17:e4:1a:b3:7e:
85:fd
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
EF:1F:D3:5B:33:31:80:BB:7E:2D:AD:EC:C9:48:AE:8A:66:30:E9:42
X509v3 Authority Key Identifier:
keyid:BA:31:BC:F9:23:C5:F2:5C:AF:BD:AB:DF:DD:46:E5:11:F9:5D:F0:D1
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ujG8-SPF8lyvvavf3UblEfld8NE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/72/76a7f1-748d-406c-a51f-1ba343f17ec2/1/ujG8-SPF8lyvvavf3UblEfld8NE.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/72/76a7f1-748d-406c-a51f-1ba343f17ec2/1/ujG8-SPF8lyvvavf3UblEfld8NE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
14:b3:a6:54:93:75:aa:ea:ca:91:82:68:61:d3:2d:1f:26:6a:
41:78:b3:93:10:34:2e:02:a8:73:1f:ce:0d:e3:28:e4:ba:8c:
33:bc:23:a5:af:0e:c3:e4:50:f4:a8:23:f1:9b:00:73:7c:8c:
96:05:84:c2:e3:2a:10:88:d6:a2:fc:e0:92:37:95:43:75:b1:
d6:21:ef:45:37:09:fa:cd:f8:f9:f6:ea:6c:34:3c:fc:b9:c6:
56:64:30:c5:1a:5a:48:c0:8c:4a:64:17:21:58:4e:b5:2b:77:
27:2a:e5:e1:00:45:ce:3f:ea:7a:04:83:01:ab:bd:2a:ca:5f:
2a:65:7d:34:c9:7e:0e:b5:7e:0c:90:64:e0:18:29:87:f0:1a:
2a:6c:e1:66:9f:42:28:04:56:94:4e:cb:95:31:92:6e:01:6a:
de:f8:95:dd:31:f9:bf:4c:02:1d:d4:e6:0f:b1:65:0f:f9:7b:
b5:9d:6b:de:ea:ee:b8:a8:61:dc:cd:a9:4c:04:78:33:48:61:
9b:8a:75:e8:64:7b:5b:c8:2b:ce:60:e5:38:40:f2:cf:ec:e2:
23:27:94:c5:b5:b6:1f:c2:51:08:d1:dd:84:ae:39:9b:20:7c:
6c:65:04:be:e2:62:0c:80:3b:6b:f8:13:93:7e:28:2b:73:c3:
e9:4e:1f:12
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri May 9 03:23:20 2025 by rpki-client