Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/73/170ecd-e577-4058-9358-473f15ec0d52/1/uZDIXPoM7VKDY0mX56SqjOeDbbY.mft
File: uZDIXPoM7VKDY0mX56SqjOeDbbY.mft (raw, json)
Hash identifier: 0ceTJZZ+m08/ov6bJYDR4E9G3SHcTZlOzxfKvW7ZI7I=
Subject key identifier: E2:98:44:47:98:A9:CB:95:C8:D8:BA:A2:06:C7:CE:C0:62:B8:FA:DD
Authority key identifier: B9:90:C8:5C:FA:0C:ED:52:83:63:49:97:E7:A4:AA:8C:E7:83:6D:B6
Certificate issuer: /CN=b990c85cfa0ced5283634997e7a4aa8ce7836db6
Certificate serial: 0196D0997B1916B4F8CB004559FF8953FBA5
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/uZDIXPoM7VKDY0mX56SqjOeDbbY.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/73/170ecd-e577-4058-9358-473f15ec0d52/1/uZDIXPoM7VKDY0mX56SqjOeDbbY.mft
Manifest number: 153E
Signing time: Wed 14 May 2025 21:00:41 +0000
Manifest this update: Wed 14 May 2025 21:00:41 +0000
Manifest next update: Thu 15 May 2025 21:00:41 +0000
Files and hashes: 1: fhezsDFSO4Gg3v-2EzPO1VJN5k4.roa (hash: Hb04qv2mCfUH3swl1KX6h239vXc62PCAwsB9N2VdCD0=)
2: uZDIXPoM7VKDY0mX56SqjOeDbbY.crl (hash: D41kB8Z8dbBh50bfs/oAks7D8p4hOXYJ/HeFu8ne2NI=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/73/170ecd-e577-4058-9358-473f15ec0d52/1/uZDIXPoM7VKDY0mX56SqjOeDbbY.crl
rsync://rpki.ripe.net/repository/DEFAULT/73/170ecd-e577-4058-9358-473f15ec0d52/1/uZDIXPoM7VKDY0mX56SqjOeDbbY.mft
rsync://rpki.ripe.net/repository/DEFAULT/uZDIXPoM7VKDY0mX56SqjOeDbbY.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 15 May 2025 21:00:41 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:d0:99:7b:19:16:b4:f8:cb:00:45:59:ff:89:53:fb:a5
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=b990c85cfa0ced5283634997e7a4aa8ce7836db6
Validity
Not Before: May 14 21:00:41 2025 GMT
Not After : May 15 21:00:41 2025 GMT
Subject: CN=e298444798a9cb95c8d8baa206c7cec062b8fadd
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c5:1a:e8:d4:97:3b:77:3e:0a:26:8c:38:64:20:
ef:85:51:fa:89:9c:7b:2c:af:aa:9f:cb:ba:bc:6b:
f1:f0:2f:86:38:54:bb:b6:ab:d9:95:fd:b0:eb:f7:
02:2d:ac:c1:e7:a2:eb:3e:dc:0c:71:50:0d:bf:b1:
39:66:e5:ad:0d:62:4f:27:ee:33:3c:29:57:7f:76:
26:ef:5f:ab:31:17:13:d7:5a:b6:dc:4f:62:6d:36:
10:2f:d5:3c:a1:b5:6d:26:ab:6b:9c:db:c6:9f:8e:
9c:f5:80:87:81:ac:3d:1e:c7:3f:9b:1e:3e:e7:81:
0e:90:59:b5:b5:b7:50:03:78:4e:d1:97:9f:48:ae:
9c:3d:44:6b:bb:ed:95:f1:2a:27:92:3d:79:55:00:
7c:98:7b:b2:97:03:bc:70:9f:51:45:a0:52:1b:bd:
0b:ff:46:07:10:11:5e:21:d6:a1:26:0c:dd:a8:57:
47:8b:0a:c5:64:f1:92:d5:86:78:d8:dc:12:17:3f:
b4:a8:93:57:9f:55:99:9d:11:4d:45:b3:ae:79:fe:
49:2b:de:c0:7b:ea:1b:ce:6a:c6:58:cd:b5:1d:46:
e6:00:74:dc:e0:b7:0f:b1:e1:7b:ca:c2:8a:ce:e0:
db:b8:62:c9:21:ff:00:39:33:94:78:d9:22:ce:1e:
a1:8f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E2:98:44:47:98:A9:CB:95:C8:D8:BA:A2:06:C7:CE:C0:62:B8:FA:DD
X509v3 Authority Key Identifier:
keyid:B9:90:C8:5C:FA:0C:ED:52:83:63:49:97:E7:A4:AA:8C:E7:83:6D:B6
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/uZDIXPoM7VKDY0mX56SqjOeDbbY.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/73/170ecd-e577-4058-9358-473f15ec0d52/1/uZDIXPoM7VKDY0mX56SqjOeDbbY.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/73/170ecd-e577-4058-9358-473f15ec0d52/1/uZDIXPoM7VKDY0mX56SqjOeDbbY.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
33:c1:70:61:1f:70:04:e6:73:cd:30:04:34:e4:16:bb:e4:29:
74:80:5c:b0:3c:39:67:5f:af:c5:28:78:c4:1f:50:2a:14:ed:
68:d8:05:43:30:da:f7:f9:6d:71:09:0b:f4:d1:4a:b4:4d:3c:
dc:43:31:b4:a0:1d:80:05:9a:11:14:9e:0f:28:5e:30:52:e3:
11:bb:b6:e5:fd:e5:12:79:fe:7b:9e:d7:f2:53:53:68:67:93:
37:03:e6:04:12:03:84:d0:8f:28:77:a5:b0:3d:de:f4:94:b3:
0e:32:de:bc:98:7e:66:4a:6b:42:02:60:32:d0:41:3f:c3:03:
5e:70:cc:90:6b:bd:8b:e8:02:e3:77:5d:da:5d:bf:9a:e3:69:
a2:00:b0:a3:2e:45:9c:ca:7b:37:7e:4a:48:67:18:73:90:66:
b6:1d:8c:81:47:a3:c6:7c:29:c1:18:be:22:ce:89:c8:1b:6f:
cc:66:ae:48:f7:f2:de:20:32:3b:d5:57:a2:a5:83:47:07:1a:
23:f9:82:20:d2:b9:6b:7b:55:5d:eb:89:74:16:2d:02:b8:a4:
6c:38:ed:a7:6d:80:3c:fd:3e:7b:40:6b:9d:d1:11:dd:0c:a2:
30:ad:bd:2d:2c:f7:f2:90:a8:1f:a1:70:3b:1c:af:dc:f5:35:
a6:f3:93:bc
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu May 15 06:46:26 2025 by rpki-client