Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/8a/69c880-23ef-49c0-adbf-3d113d39f77b/1/uMxZ2ZSshg5bJeCVddmflDcOkcs.mft
File: uMxZ2ZSshg5bJeCVddmflDcOkcs.mft (raw, json)
Hash identifier: VjDDMS/lTsRt8jxaBcamlTKQanVHNPxkhMuT2U0alK0=
Subject key identifier: 0A:BD:06:A4:C2:37:B1:41:1D:55:F3:AC:F6:C6:DD:05:F2:A0:22:29
Authority key identifier: B8:CC:59:D9:94:AC:86:0E:5B:25:E0:95:75:D9:9F:94:37:0E:91:CB
Certificate issuer: /CN=b8cc59d994ac860e5b25e09575d99f94370e91cb
Certificate serial: 0196BB924AAC141F3CEE5825309D5472255A
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/uMxZ2ZSshg5bJeCVddmflDcOkcs.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/8a/69c880-23ef-49c0-adbf-3d113d39f77b/1/uMxZ2ZSshg5bJeCVddmflDcOkcs.mft
Manifest number: 08DC
Signing time: Sat 10 May 2025 19:00:48 +0000
Manifest this update: Sat 10 May 2025 19:00:48 +0000
Manifest next update: Sun 11 May 2025 19:00:48 +0000
Files and hashes: 1: LqqgWlluL1jyuXsBRZw9RUpy_xU.roa (hash: QQZFs0dWDvcdU2w068AQi10DYXURIlBm26Llbc6SIDU=)
2: uMxZ2ZSshg5bJeCVddmflDcOkcs.crl (hash: SQEHR3rX8ER06cX5f9qRoFmdo6RC3CSV6uDdAmVb65k=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/8a/69c880-23ef-49c0-adbf-3d113d39f77b/1/uMxZ2ZSshg5bJeCVddmflDcOkcs.crl
rsync://rpki.ripe.net/repository/DEFAULT/8a/69c880-23ef-49c0-adbf-3d113d39f77b/1/uMxZ2ZSshg5bJeCVddmflDcOkcs.mft
rsync://rpki.ripe.net/repository/DEFAULT/uMxZ2ZSshg5bJeCVddmflDcOkcs.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 11 May 2025 13:00:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:bb:92:4a:ac:14:1f:3c:ee:58:25:30:9d:54:72:25:5a
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=b8cc59d994ac860e5b25e09575d99f94370e91cb
Validity
Not Before: May 10 19:00:48 2025 GMT
Not After : May 11 19:00:48 2025 GMT
Subject: CN=0abd06a4c237b1411d55f3acf6c6dd05f2a02229
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ba:45:0a:d9:79:9d:d5:a2:e3:0d:24:87:89:b9:
b1:a0:4a:74:8d:ea:77:2a:35:c7:17:8f:a4:e0:81:
23:e2:0f:58:fd:31:95:6a:fa:8c:10:c0:4c:60:1a:
9e:e1:27:45:84:cb:29:7f:6d:1a:cc:d5:84:06:63:
46:d7:62:7c:5a:62:be:54:c0:bc:f9:a5:be:80:e0:
38:6f:d0:d2:7f:f6:d6:b4:b1:c7:a0:2b:b2:59:7f:
64:0d:42:c0:7c:ff:e6:43:7a:bf:63:19:2b:f4:8b:
77:4a:1c:49:b7:60:99:ca:db:43:2a:de:d3:e4:fa:
94:f6:8e:ef:d4:d6:3f:1e:ba:7a:23:8a:dc:47:85:
84:bd:48:96:d5:87:24:78:9e:53:96:be:f0:de:97:
d3:ff:fb:e7:a5:d1:10:5f:9e:ef:6a:04:8d:b3:d2:
0d:93:cb:2f:5d:13:6f:aa:c5:3e:21:a6:eb:38:e2:
6e:b2:7e:0e:99:08:9a:97:40:c6:d6:2d:8c:70:4c:
f8:04:53:a5:4e:9e:7e:9a:bb:69:2b:b1:f7:d2:0b:
e5:33:21:07:1a:df:e3:15:77:25:53:0c:c1:45:ec:
01:ae:2e:06:27:59:ba:d0:58:30:bc:e8:85:d4:f3:
05:17:6c:fa:ff:74:f3:d4:19:30:06:ed:f8:9f:1f:
6b:f1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
0A:BD:06:A4:C2:37:B1:41:1D:55:F3:AC:F6:C6:DD:05:F2:A0:22:29
X509v3 Authority Key Identifier:
keyid:B8:CC:59:D9:94:AC:86:0E:5B:25:E0:95:75:D9:9F:94:37:0E:91:CB
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/uMxZ2ZSshg5bJeCVddmflDcOkcs.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/8a/69c880-23ef-49c0-adbf-3d113d39f77b/1/uMxZ2ZSshg5bJeCVddmflDcOkcs.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/8a/69c880-23ef-49c0-adbf-3d113d39f77b/1/uMxZ2ZSshg5bJeCVddmflDcOkcs.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
90:ca:e7:27:4b:79:27:d6:d7:9e:3b:69:e1:76:7a:99:41:93:
42:18:fa:50:cd:e9:76:8b:82:1b:17:0b:99:dd:fc:8f:14:2f:
6a:8e:71:37:5a:1d:3a:b0:7b:37:03:56:e5:85:6e:33:65:fa:
dc:17:0c:b9:90:3b:f7:32:e0:e1:76:3e:f8:c0:96:e2:dc:cc:
eb:71:5a:86:51:46:cd:88:23:b5:34:ac:93:21:85:d5:be:49:
05:57:2f:29:54:ca:c5:ba:17:9a:9b:0e:7e:b8:36:83:44:de:
06:74:10:e4:43:04:e0:aa:e6:c4:61:4f:93:e1:68:93:b2:f5:
3d:2e:b4:84:de:b4:e3:5a:d5:1c:58:5f:c4:33:ae:7f:25:1d:
a8:c1:89:f6:1e:b9:a6:89:ed:51:fd:c7:29:91:2e:ad:2f:27:
d0:c8:06:03:87:57:89:7e:84:a9:f1:44:20:a3:2e:1a:e1:b0:
04:0c:ac:35:0a:42:e2:27:7d:4a:a2:23:a2:de:ce:81:2f:64:
c6:d1:c8:f2:fd:56:71:a3:f8:58:94:77:ba:38:0d:4f:7d:dd:
f1:6d:91:fc:dc:09:a1:ac:f0:bd:47:82:6b:6e:6e:5d:ae:e5:
f3:f8:c0:ac:bb:bf:f6:06:5e:20:a8:e6:6d:56:e0:2d:78:7b:
72:ec:87:31
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat May 10 20:32:31 2025 by rpki-client