Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/8e/c5612d-e81b-43be-ae7c-577faf855399/1/g-uiXEochs51okt254VYyS-KA3I.mft
File: g-uiXEochs51okt254VYyS-KA3I.mft (raw, json)
Hash identifier: 08OYQTGy/1bJnF3CjgS22fBejyDevEn08soZ+ATqUXc=
Subject key identifier: BB:E9:0B:3E:1A:36:2E:1A:AE:ED:24:97:03:25:53:93:5D:94:46:E8
Authority key identifier: 83:EB:A2:5C:4A:1C:86:CE:75:A2:4B:76:E7:85:58:C9:2F:8A:03:72
Certificate issuer: /CN=83eba25c4a1c86ce75a24b76e78558c92f8a0372
Certificate serial: 0196A1648BFA23706AD22677E23FB222B057
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/g-uiXEochs51okt254VYyS-KA3I.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/8e/c5612d-e81b-43be-ae7c-577faf855399/1/g-uiXEochs51okt254VYyS-KA3I.mft
Manifest number: 083F
Signing time: Mon 05 May 2025 17:00:43 +0000
Manifest this update: Mon 05 May 2025 17:00:43 +0000
Manifest next update: Tue 06 May 2025 17:00:43 +0000
Files and hashes: 1: aQM2rPZRgKrN-7qAHXUxMvpLO9s.roa (hash: 4EzmrUgObdb+dIaJZNcvbs9ezqSEEasVfq7N+SyDkGw=)
2: g-uiXEochs51okt254VYyS-KA3I.crl (hash: n8MR9RVmAEhfHGWH1tafV3G1ZFix3tM/fP4+BSUWpxc=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/8e/c5612d-e81b-43be-ae7c-577faf855399/1/g-uiXEochs51okt254VYyS-KA3I.crl
rsync://rpki.ripe.net/repository/DEFAULT/8e/c5612d-e81b-43be-ae7c-577faf855399/1/g-uiXEochs51okt254VYyS-KA3I.mft
rsync://rpki.ripe.net/repository/DEFAULT/g-uiXEochs51okt254VYyS-KA3I.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 06 May 2025 17:00:43 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:a1:64:8b:fa:23:70:6a:d2:26:77:e2:3f:b2:22:b0:57
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=83eba25c4a1c86ce75a24b76e78558c92f8a0372
Validity
Not Before: May 5 17:00:43 2025 GMT
Not After : May 6 17:00:43 2025 GMT
Subject: CN=bbe90b3e1a362e1aaeed2497032553935d9446e8
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b6:a9:13:70:09:32:db:f5:97:58:44:ff:4c:d1:
87:db:8d:27:1f:13:6e:28:75:c7:4c:ec:32:24:74:
f8:ad:9d:f2:cb:78:e8:d0:cc:c5:ca:b2:b3:d8:af:
ec:cf:17:f5:dd:99:27:be:48:8c:51:65:b6:ca:df:
0a:d3:48:69:d8:84:4b:5b:b4:13:62:9c:7b:29:d4:
7b:3d:0a:87:38:25:95:6b:be:1a:82:01:d7:c4:41:
4c:f3:cd:9f:bf:ec:b7:ca:12:f2:1d:c1:0e:ac:e2:
09:ee:ab:d0:53:c7:a5:28:32:78:1e:f6:09:db:de:
f4:19:11:34:fa:49:de:80:3a:23:4f:31:54:df:b9:
9f:52:01:5d:3f:92:88:4f:a3:41:a4:7a:29:62:01:
f1:c9:99:82:9b:ee:15:2b:ea:70:8d:97:8b:cc:9c:
31:59:a3:51:cd:70:ec:6c:6d:6f:5a:5c:c2:eb:d6:
c5:42:66:4b:b4:d0:c3:b2:21:db:8c:13:f9:7b:74:
7e:42:4a:4e:3f:03:f1:18:4f:c5:03:b5:81:fa:6f:
90:62:82:ea:f5:7b:18:70:fc:ed:f2:57:2e:a5:ba:
41:70:21:8b:d5:92:ad:19:3f:dd:ef:ce:0f:08:44:
da:9b:84:39:96:e3:8d:f9:63:e1:42:a1:8c:19:16:
a2:cb
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
BB:E9:0B:3E:1A:36:2E:1A:AE:ED:24:97:03:25:53:93:5D:94:46:E8
X509v3 Authority Key Identifier:
keyid:83:EB:A2:5C:4A:1C:86:CE:75:A2:4B:76:E7:85:58:C9:2F:8A:03:72
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/g-uiXEochs51okt254VYyS-KA3I.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/8e/c5612d-e81b-43be-ae7c-577faf855399/1/g-uiXEochs51okt254VYyS-KA3I.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/8e/c5612d-e81b-43be-ae7c-577faf855399/1/g-uiXEochs51okt254VYyS-KA3I.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
57:31:e5:9b:db:8b:ec:cb:da:99:8b:76:16:36:70:56:6b:47:
64:39:94:ac:ad:68:35:d5:e1:14:14:fc:5c:bb:51:b0:61:a6:
15:c9:15:aa:46:5a:f3:be:70:ac:1d:72:86:bb:ea:19:70:a7:
dd:83:d0:61:c0:01:7b:03:aa:8c:df:48:74:86:85:39:49:83:
ce:9b:ec:91:0d:81:dd:5a:d3:4b:44:98:e1:ac:0b:a1:80:18:
f8:0e:ae:97:e1:85:7d:a1:38:83:c8:79:44:03:cc:79:45:19:
47:7a:b5:77:e0:45:52:3a:19:34:61:2e:2c:e3:4a:6f:7d:ac:
ac:8d:a8:f2:3d:25:47:d2:02:0d:04:e7:43:f9:44:c1:de:f3:
fa:a3:5d:71:2e:b1:5b:d3:b8:27:da:4c:fb:09:3a:7e:13:f5:
0d:1a:85:6b:06:01:55:31:c3:f5:86:fc:dc:13:f8:30:37:61:
86:a1:ea:fe:87:5f:05:e9:cf:34:43:8d:de:ae:5d:39:0b:81:
10:8b:71:95:e1:7a:1a:f0:83:47:09:22:24:da:03:b1:34:d3:
28:cf:55:e9:a0:1a:7d:8d:86:6b:6c:f2:73:d7:12:05:34:84:
ea:a9:36:f8:db:0c:22:14:ed:9b:65:b5:b6:04:e7:b5:6f:02:
e6:bc:a8:e6
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue May 6 03:04:26 2025 by rpki-client