Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/92/48f1c6-1134-4969-af60-d017c1759639/1/Uz7q1BOhcF-_yyrb6Qxp8FXiddo.mft
File: Uz7q1BOhcF-_yyrb6Qxp8FXiddo.mft (raw, json)
Hash identifier: x6EyPafcXfr1Fo0eBJ9Z64ViNlcKnf1u+y/nmvO8aSc=
Subject key identifier: 65:AE:A8:94:EA:D2:BF:49:37:F0:38:FB:1C:D8:1E:E8:69:18:51:C9
Authority key identifier: 53:3E:EA:D4:13:A1:70:5F:BF:CB:2A:DB:E9:0C:69:F0:55:E2:75:DA
Certificate issuer: /CN=533eead413a1705fbfcb2adbe90c69f055e275da
Certificate serial: 0196B10E4545116F1C8024A490217626EA80
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Uz7q1BOhcF-_yyrb6Qxp8FXiddo.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/92/48f1c6-1134-4969-af60-d017c1759639/1/Uz7q1BOhcF-_yyrb6Qxp8FXiddo.mft
Manifest number: 152D
Signing time: Thu 08 May 2025 18:00:24 +0000
Manifest this update: Thu 08 May 2025 18:00:24 +0000
Manifest next update: Fri 09 May 2025 18:00:24 +0000
Files and hashes: 1: LhDegbR4xFlO6pz_ANDkPzTlFGk.roa (hash: xMGN0Z+cCcbH3arqVxwuW4j6b8JSM83DRHp4H/CfXzQ=)
2: Uz7q1BOhcF-_yyrb6Qxp8FXiddo.crl (hash: NUBgBstUEIAaMCvNkT7XMl1HjC1i8Mgzpu8FXYBV0CE=)
3: gaUIc9nIeEp8xPqvEDvbc3kFaYc.roa (hash: I+Q74aVwTRhCOoIOc0mC1nzVIDH725yoh6FbQfy6th4=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/92/48f1c6-1134-4969-af60-d017c1759639/1/Uz7q1BOhcF-_yyrb6Qxp8FXiddo.crl
rsync://rpki.ripe.net/repository/DEFAULT/92/48f1c6-1134-4969-af60-d017c1759639/1/Uz7q1BOhcF-_yyrb6Qxp8FXiddo.mft
rsync://rpki.ripe.net/repository/DEFAULT/Uz7q1BOhcF-_yyrb6Qxp8FXiddo.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 09 May 2025 16:00:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:b1:0e:45:45:11:6f:1c:80:24:a4:90:21:76:26:ea:80
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=533eead413a1705fbfcb2adbe90c69f055e275da
Validity
Not Before: May 8 18:00:24 2025 GMT
Not After : May 9 18:00:24 2025 GMT
Subject: CN=65aea894ead2bf4937f038fb1cd81ee8691851c9
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c1:00:d0:06:f5:18:da:04:a5:db:7e:41:9a:04:
01:56:80:37:62:87:d8:ab:e3:f7:8d:42:ed:de:6f:
83:76:c4:41:38:62:f6:3b:9e:4e:51:ec:47:c6:e5:
6c:0f:49:f1:05:35:1d:9b:e2:f5:97:35:a0:38:3e:
9b:ee:a3:09:7e:4f:12:c7:20:1f:cf:5a:e2:56:d6:
3f:47:b5:7c:36:3f:9b:6a:0c:7e:4d:e7:6b:75:52:
b5:16:b7:d8:e6:02:00:fe:23:2d:5e:7a:37:2f:55:
5a:64:e3:4c:6c:03:6e:b7:22:c7:fd:75:86:87:d0:
96:cf:ad:c2:be:1c:1a:2c:0d:32:b5:c1:02:c3:65:
5a:e7:b1:77:ca:43:c6:fb:dc:c9:3e:11:5d:88:b4:
4b:71:62:11:64:c4:8a:69:c3:d1:df:4b:97:d5:45:
09:61:59:19:0c:f6:78:22:d3:ca:f8:f2:81:1a:3a:
a7:3f:50:56:70:72:18:ff:f1:35:2a:81:33:45:7e:
07:12:ed:a3:07:93:ce:2e:d2:64:9f:a8:6d:74:20:
9d:00:63:20:01:6e:e7:4c:d6:64:d2:eb:98:d5:37:
19:b8:d3:ca:1a:e2:30:b8:c4:c9:e0:54:a7:6b:d4:
6f:33:b7:60:32:c3:32:e1:33:9c:85:13:dc:c4:e2:
81:47
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
65:AE:A8:94:EA:D2:BF:49:37:F0:38:FB:1C:D8:1E:E8:69:18:51:C9
X509v3 Authority Key Identifier:
keyid:53:3E:EA:D4:13:A1:70:5F:BF:CB:2A:DB:E9:0C:69:F0:55:E2:75:DA
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Uz7q1BOhcF-_yyrb6Qxp8FXiddo.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/92/48f1c6-1134-4969-af60-d017c1759639/1/Uz7q1BOhcF-_yyrb6Qxp8FXiddo.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/92/48f1c6-1134-4969-af60-d017c1759639/1/Uz7q1BOhcF-_yyrb6Qxp8FXiddo.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
12:0e:b6:fd:55:de:81:dc:d4:ff:95:81:fb:f2:e4:43:bc:02:
a2:c1:4b:0f:98:a0:19:e5:6c:d5:df:a0:18:94:09:56:a8:22:
18:b7:2b:28:49:c8:a2:7b:c1:ee:9d:fe:a3:f5:61:2d:af:6e:
a6:00:3f:50:bb:0f:67:e4:d9:cc:c2:93:4a:4b:39:47:75:98:
7f:4d:9b:99:54:be:09:9e:60:44:fb:0e:1a:af:45:a9:53:1f:
a8:3d:08:7c:6c:a3:de:3c:8e:43:cf:5e:e1:fa:7d:41:12:56:
a2:70:d5:61:ac:97:b6:05:59:51:e0:77:93:7b:dd:db:d4:1b:
f0:dd:db:e5:48:9c:ec:9d:4a:9f:7f:5b:02:98:d6:93:dd:a4:
2a:e0:bc:ba:78:81:d4:77:1e:7f:14:7c:18:5c:ae:e3:81:b4:
5a:48:c3:78:f2:6b:1b:b5:ef:e4:c9:eb:3b:cb:f2:b0:ad:5d:
64:ad:8f:f8:34:36:15:47:b7:0c:37:56:ec:0d:6a:e6:4b:34:
e5:92:d8:2e:62:64:2b:f3:07:25:f7:f0:97:99:35:cc:5e:7b:
86:4a:29:1c:66:33:e3:a5:03:58:c6:06:f9:1b:ba:73:ff:0f:
67:1a:a2:8c:81:af:e4:4b:54:b4:f4:98:98:71:63:02:ca:f0:
c8:f0:e3:5d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri May 9 02:44:57 2025 by rpki-client