Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/8d/652c88-abe6-4794-b7ae-39bf751e310d/1/uUZ8BbpC7h85pkpT4dA0Azbl48M.mft
File: uUZ8BbpC7h85pkpT4dA0Azbl48M.mft (raw, json)
Hash identifier: OF8xnzu0f0t1Jr0Ngd7bzsMOaoftZpXqnI0gyJFSGhk=
Subject key identifier: 6F:45:B7:43:09:96:46:FA:07:A5:0B:72:D2:D3:06:6A:6E:18:DB:36
Authority key identifier: B9:46:7C:05:BA:42:EE:1F:39:A6:4A:53:E1:D0:34:03:36:E5:E3:C3
Certificate issuer: /CN=b9467c05ba42ee1f39a64a53e1d0340336e5e3c3
Certificate serial: 0196BAED9462AE039D78B26000E5B9057EFB
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/uUZ8BbpC7h85pkpT4dA0Azbl48M.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/8d/652c88-abe6-4794-b7ae-39bf751e310d/1/uUZ8BbpC7h85pkpT4dA0Azbl48M.mft
Manifest number: 1530
Signing time: Sat 10 May 2025 16:00:54 +0000
Manifest this update: Sat 10 May 2025 16:00:54 +0000
Manifest next update: Sun 11 May 2025 16:00:54 +0000
Files and hashes: 1: uUZ8BbpC7h85pkpT4dA0Azbl48M.crl (hash: 0Njm/wQQuykxfn6hAD/XtBKmT/1Rdv5sFgA5gP5mZxs=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/8d/652c88-abe6-4794-b7ae-39bf751e310d/1/uUZ8BbpC7h85pkpT4dA0Azbl48M.crl
rsync://rpki.ripe.net/repository/DEFAULT/8d/652c88-abe6-4794-b7ae-39bf751e310d/1/uUZ8BbpC7h85pkpT4dA0Azbl48M.mft
rsync://rpki.ripe.net/repository/DEFAULT/uUZ8BbpC7h85pkpT4dA0Azbl48M.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 11 May 2025 16:00:54 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:ba:ed:94:62:ae:03:9d:78:b2:60:00:e5:b9:05:7e:fb
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=b9467c05ba42ee1f39a64a53e1d0340336e5e3c3
Validity
Not Before: May 10 16:00:54 2025 GMT
Not After : May 11 16:00:54 2025 GMT
Subject: CN=6f45b743099646fa07a50b72d2d3066a6e18db36
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9a:05:13:ea:a0:d4:b2:3a:42:be:75:5d:58:fc:
66:6b:66:2d:59:3d:3a:77:7d:37:0b:55:de:ba:5e:
a2:30:f7:be:bf:d1:35:5d:91:47:8f:f7:82:a4:9d:
41:95:b6:77:8c:ad:d3:91:51:fc:50:6f:c3:61:d2:
6f:c2:b9:0d:a4:34:cf:a7:42:51:58:40:ed:08:2d:
82:e5:49:ac:f5:41:21:47:8d:bf:04:00:72:a9:d6:
19:60:95:6a:a4:b7:df:7b:12:fa:90:63:de:2f:11:
d6:af:f7:ef:50:c1:e0:a0:5a:af:c4:f8:b5:c1:7e:
30:cd:7c:cb:c0:3b:53:53:bb:50:7e:8a:e0:47:f5:
61:c8:14:be:f2:c0:c3:fb:6a:c6:17:eb:11:b8:ea:
e1:16:09:9c:5b:5c:f1:44:be:5e:36:a7:17:ee:c9:
53:1d:47:f4:78:21:f4:41:20:2b:53:fc:6a:bd:3f:
aa:9b:c0:47:cf:8b:9d:35:12:db:c7:ca:79:e5:ca:
67:37:dd:37:6d:ff:87:6c:00:e6:3e:ca:db:af:b1:
54:4f:b4:0e:59:ba:51:fa:10:3f:10:27:1c:e2:f4:
d0:01:9a:22:9c:79:61:15:b1:b4:4d:48:2a:8c:48:
e4:3f:0f:18:4b:cf:8c:fc:08:7f:37:85:3f:c1:95:
9c:bf
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
6F:45:B7:43:09:96:46:FA:07:A5:0B:72:D2:D3:06:6A:6E:18:DB:36
X509v3 Authority Key Identifier:
keyid:B9:46:7C:05:BA:42:EE:1F:39:A6:4A:53:E1:D0:34:03:36:E5:E3:C3
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/uUZ8BbpC7h85pkpT4dA0Azbl48M.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/8d/652c88-abe6-4794-b7ae-39bf751e310d/1/uUZ8BbpC7h85pkpT4dA0Azbl48M.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/8d/652c88-abe6-4794-b7ae-39bf751e310d/1/uUZ8BbpC7h85pkpT4dA0Azbl48M.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
ac:20:60:a6:7d:ef:2f:29:b0:18:c1:d3:b8:17:1b:6e:a7:c6:
6e:ad:7e:95:65:9c:2e:54:13:d0:e3:e1:7c:82:98:f7:56:68:
19:6d:a6:9f:5d:15:4e:ac:b5:51:5b:e6:fe:de:20:14:c9:89:
7d:32:8d:fd:b7:04:ff:00:b7:bd:ec:a5:82:02:a1:76:0e:28:
02:6d:97:a8:c2:e0:f5:f7:84:2b:86:50:9a:d2:40:fc:5b:66:
72:4a:3c:fc:42:c4:45:29:09:ac:de:b2:b5:5a:43:23:46:06:
e8:49:a7:75:d8:2d:ab:67:04:aa:06:85:90:b9:a0:18:e1:e0:
92:5a:51:d9:aa:1e:95:52:9c:05:d3:df:0d:98:5a:c9:79:c1:
fe:71:af:6c:ac:c2:1b:11:78:20:f2:81:1a:b0:44:b8:6b:30:
1c:c1:d7:c8:10:9e:dd:af:67:73:96:a8:74:17:c4:e3:2f:75:
29:59:6f:0e:74:45:79:e4:7c:72:8e:76:a8:22:95:43:e5:13:
e6:71:c8:c9:21:2c:72:2f:ea:59:bf:60:73:9e:a8:36:63:c4:
af:5c:fb:da:4e:73:b2:17:78:dc:53:20:b2:d3:18:dd:c2:a5:
49:b8:c5:3b:9a:00:a1:35:d4:64:eb:88:95:71:08:03:52:30:
1c:fb:eb:6b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun May 11 00:51:46 2025 by rpki-client