Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/73/bcb03d-1c11-4516-a88f-fe846f75d170/1/uQMr2xKMhuALIcd5WagBHEDQZQw.mft
File: uQMr2xKMhuALIcd5WagBHEDQZQw.mft (raw, json)
Hash identifier: Hq5xu4Gen8RqzdwG6QK5zy2Uk6mTsB0X5bV+7qsHlPM=
Subject key identifier: F7:B8:2F:98:AE:8D:83:96:CD:67:91:C9:85:BA:A5:B4:C2:9D:95:E9
Authority key identifier: B9:03:2B:DB:12:8C:86:E0:0B:21:C7:79:59:A8:01:1C:40:D0:65:0C
Certificate issuer: /CN=b9032bdb128c86e00b21c77959a8011c40d0650c
Certificate serial: 0196CB04D3C053BA434EF406FCDFDDAFBF91
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/uQMr2xKMhuALIcd5WagBHEDQZQw.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/73/bcb03d-1c11-4516-a88f-fe846f75d170/1/uQMr2xKMhuALIcd5WagBHEDQZQw.mft
Manifest number: 153B
Signing time: Tue 13 May 2025 19:00:13 +0000
Manifest this update: Tue 13 May 2025 19:00:13 +0000
Manifest next update: Wed 14 May 2025 19:00:13 +0000
Files and hashes: 1: 20jWiNa9lpRbt6Z9H39OkMSzDj0.roa (hash: ycgKPEXuVp6S/jba9lnIlg52vzn3ozObwHjih623JU0=)
2: Z6HFahWFFQZoRakyttCStfHboiI.roa (hash: Zw2JYkod1FG2LmToml/rEnl9fqbRcjF21ljWrCU4l0U=)
3: uQMr2xKMhuALIcd5WagBHEDQZQw.crl (hash: EwL0TMoluahZ2wEijlTL9AKcjA+LVv4DljeefSBnpX4=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/73/bcb03d-1c11-4516-a88f-fe846f75d170/1/uQMr2xKMhuALIcd5WagBHEDQZQw.crl
rsync://rpki.ripe.net/repository/DEFAULT/73/bcb03d-1c11-4516-a88f-fe846f75d170/1/uQMr2xKMhuALIcd5WagBHEDQZQw.mft
rsync://rpki.ripe.net/repository/DEFAULT/uQMr2xKMhuALIcd5WagBHEDQZQw.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 14 May 2025 14:31:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:cb:04:d3:c0:53:ba:43:4e:f4:06:fc:df:dd:af:bf:91
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=b9032bdb128c86e00b21c77959a8011c40d0650c
Validity
Not Before: May 13 19:00:13 2025 GMT
Not After : May 14 19:00:13 2025 GMT
Subject: CN=f7b82f98ae8d8396cd6791c985baa5b4c29d95e9
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d9:32:00:72:3f:ed:ef:63:47:8f:78:f6:9f:53:
bd:bb:e5:b3:4f:61:e8:f3:40:fc:ef:28:80:1a:d9:
10:fe:b1:bd:60:b3:c5:05:1c:6b:ce:19:9a:13:0a:
51:75:fa:43:42:3c:5a:6f:0a:76:d5:87:2e:39:c9:
ac:8a:1b:e9:52:bc:a2:bb:9a:0c:f3:bb:47:5e:f5:
cf:25:a4:ac:03:64:ec:e0:46:dd:28:58:85:3d:02:
94:29:35:d6:08:a0:90:27:1d:d2:ef:15:47:77:36:
38:21:c3:81:12:1d:62:40:57:12:65:af:e7:ea:2a:
c7:67:c0:44:1d:79:35:c0:6b:a8:d3:bf:00:ad:cf:
89:60:41:82:ea:9f:75:75:78:1a:9c:3e:4b:63:f4:
19:2e:3e:26:2a:42:37:25:57:59:2c:5c:c0:a9:55:
f0:e4:9e:da:42:79:82:1b:61:92:4e:76:55:5b:0e:
b4:a0:e7:82:ad:9f:f8:8b:68:04:a5:3e:de:9e:81:
6b:43:75:a1:b1:0c:d2:46:fa:d0:d3:cc:78:57:0c:
0a:c1:aa:37:f9:5d:f2:3f:40:ec:70:f4:10:fd:a6:
04:5e:e7:fd:bc:5e:b5:cd:b0:9a:f6:36:83:40:88:
6c:c4:8d:dd:ea:57:91:0b:87:06:9d:79:b7:6e:2d:
ca:bd
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F7:B8:2F:98:AE:8D:83:96:CD:67:91:C9:85:BA:A5:B4:C2:9D:95:E9
X509v3 Authority Key Identifier:
keyid:B9:03:2B:DB:12:8C:86:E0:0B:21:C7:79:59:A8:01:1C:40:D0:65:0C
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/uQMr2xKMhuALIcd5WagBHEDQZQw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/73/bcb03d-1c11-4516-a88f-fe846f75d170/1/uQMr2xKMhuALIcd5WagBHEDQZQw.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/73/bcb03d-1c11-4516-a88f-fe846f75d170/1/uQMr2xKMhuALIcd5WagBHEDQZQw.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
3b:dd:c7:56:8e:6a:d5:12:8c:b5:29:cd:ae:ab:97:e5:62:4c:
24:90:0d:d1:31:c9:dc:60:de:97:4e:09:56:32:1f:07:26:14:
9c:57:dc:89:05:84:8e:75:1c:f0:84:07:90:d2:f7:1f:6e:86:
8c:28:0f:4e:dd:33:16:bf:47:7c:db:51:af:a9:8a:59:6f:5c:
53:96:2e:53:39:72:67:f9:68:85:44:5a:0b:eb:04:06:e6:3f:
0f:50:af:d7:1c:35:c1:04:d6:d9:83:5a:1b:04:e2:01:d2:12:
15:d3:0b:29:16:55:93:d9:47:14:b7:d0:92:4c:56:4d:c6:15:
28:18:88:f6:61:87:16:e9:6b:f0:f1:c1:fe:59:f3:a5:cb:50:
cb:2c:50:34:e9:86:3b:70:5e:4e:59:3b:86:64:2c:fe:c0:0d:
fd:70:4c:48:a2:a9:76:87:2e:48:cd:ee:6a:21:e3:27:54:55:
5f:3e:b1:73:60:7b:78:a9:87:d2:56:5c:ec:46:5c:7a:74:c5:
94:1c:16:58:1e:54:15:d5:42:f4:28:6e:e9:b3:1a:48:02:3f:
ab:d9:a9:24:f8:dd:74:4c:ab:6b:5a:05:8f:73:f8:16:af:cd:
9e:f7:49:22:12:55:8f:d7:1f:4e:be:1a:21:1d:3a:fa:24:70:
f8:d3:df:16
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed May 14 00:05:41 2025 by rpki-client