Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/a0/4498aa-cc27-4316-ae87-d472d9afe134/1/uRWvWdJPWaYNl8HIirl5oUxYD_Q.mft
File: uRWvWdJPWaYNl8HIirl5oUxYD_Q.mft (raw, json)
Hash identifier: xd7XbNkiMg8ppILUOlBhvuplE5ysFE5EcP0TBmM+Dhg=
Subject key identifier: 0A:26:C5:64:5B:79:23:AC:C4:C5:03:1A:1F:23:7F:4A:63:2D:52:7D
Authority key identifier: B9:15:AF:59:D2:4F:59:A6:0D:97:C1:C8:8A:B9:79:A1:4C:58:0F:F4
Certificate issuer: /CN=b915af59d24f59a60d97c1c88ab979a14c580ff4
Certificate serial: 0196CE742F9EEBC271328D2086558E23DB0C
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/uRWvWdJPWaYNl8HIirl5oUxYD_Q.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/a0/4498aa-cc27-4316-ae87-d472d9afe134/1/uRWvWdJPWaYNl8HIirl5oUxYD_Q.mft
Manifest number: 153D
Signing time: Wed 14 May 2025 11:00:42 +0000
Manifest this update: Wed 14 May 2025 11:00:42 +0000
Manifest next update: Thu 15 May 2025 11:00:42 +0000
Files and hashes: 1: hbB_a3Y8U324LaNC-0q5xvctY3o.roa (hash: nXIgFtsgC878hqr3xc7aa+lfCX4icrBjNT+2kWgSc+Q=)
2: uRWvWdJPWaYNl8HIirl5oUxYD_Q.crl (hash: ++ffVllVAltxI+208EupHA76CuMFOKlkUrn/KmftzP8=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/a0/4498aa-cc27-4316-ae87-d472d9afe134/1/uRWvWdJPWaYNl8HIirl5oUxYD_Q.crl
rsync://rpki.ripe.net/repository/DEFAULT/a0/4498aa-cc27-4316-ae87-d472d9afe134/1/uRWvWdJPWaYNl8HIirl5oUxYD_Q.mft
rsync://rpki.ripe.net/repository/DEFAULT/uRWvWdJPWaYNl8HIirl5oUxYD_Q.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 15 May 2025 11:00:42 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:ce:74:2f:9e:eb:c2:71:32:8d:20:86:55:8e:23:db:0c
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=b915af59d24f59a60d97c1c88ab979a14c580ff4
Validity
Not Before: May 14 11:00:42 2025 GMT
Not After : May 15 11:00:42 2025 GMT
Subject: CN=0a26c5645b7923acc4c5031a1f237f4a632d527d
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9e:db:bd:3d:72:46:e6:58:3f:ed:99:a1:66:45:
d6:54:ad:8b:ea:d8:bf:06:ee:dc:02:9c:2a:97:0f:
4d:02:a8:40:76:d4:44:e0:22:4f:17:7e:c1:ff:0c:
10:07:23:b1:84:a2:36:71:b5:a4:33:00:a7:e4:46:
0b:04:82:d6:82:80:bd:d1:2e:8b:c7:f7:d3:e4:05:
16:2b:1c:25:f4:c7:2e:1d:14:08:e2:4e:d0:47:7e:
d6:b4:f9:95:fd:7d:31:d1:96:53:79:c9:a4:29:f2:
80:e3:92:47:a6:44:9f:55:80:c2:46:dc:0b:26:9a:
48:a0:60:07:28:b8:b8:de:52:21:8d:7b:46:ab:c7:
87:4e:9c:f1:b5:06:01:9f:47:1a:c2:1b:26:7f:60:
ae:bf:12:95:d9:51:79:e6:3e:15:32:bf:2d:8e:91:
1a:a7:f4:82:a8:d5:11:07:6c:a0:c8:31:dc:5a:f9:
63:19:03:75:59:f8:d5:e1:c9:1f:a1:44:36:07:cf:
36:d4:4e:3b:d5:02:af:c1:9c:a7:a3:3c:b5:ce:b2:
c3:28:37:58:49:30:17:b8:9f:8e:f9:18:62:b5:b6:
7f:a4:a7:0f:03:2c:25:ab:fe:f3:b3:81:4e:0e:44:
ce:74:b3:b6:e1:d5:5e:fe:35:0d:b4:d4:a3:e0:8b:
28:6d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
0A:26:C5:64:5B:79:23:AC:C4:C5:03:1A:1F:23:7F:4A:63:2D:52:7D
X509v3 Authority Key Identifier:
keyid:B9:15:AF:59:D2:4F:59:A6:0D:97:C1:C8:8A:B9:79:A1:4C:58:0F:F4
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/uRWvWdJPWaYNl8HIirl5oUxYD_Q.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a0/4498aa-cc27-4316-ae87-d472d9afe134/1/uRWvWdJPWaYNl8HIirl5oUxYD_Q.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/a0/4498aa-cc27-4316-ae87-d472d9afe134/1/uRWvWdJPWaYNl8HIirl5oUxYD_Q.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
15:fb:89:e9:b2:a9:d0:46:57:c5:6b:52:6b:be:58:9a:3c:b4:
b9:89:cc:8c:75:15:2a:48:f1:ba:45:5a:70:ac:85:25:88:79:
c3:c2:4f:4f:ce:18:b7:78:85:f3:36:b3:ed:31:68:b9:79:34:
6a:c2:7d:e4:d3:fb:95:43:a2:e1:a5:33:d6:9a:dd:9c:a7:27:
f7:6d:c9:19:32:65:70:3e:d7:15:c9:05:9f:24:40:b3:36:01:
37:8d:94:30:b0:55:6d:55:d3:af:67:5a:05:57:a0:b8:10:0b:
2a:4a:da:ea:fb:5a:34:34:68:90:d1:7f:57:54:95:0f:b8:da:
c0:8b:75:c1:46:2e:f6:b8:03:b1:be:43:8e:15:d4:85:b4:b0:
af:bd:1b:99:15:78:3b:e3:bf:52:31:5b:b1:d0:54:ca:69:4c:
62:6e:1c:f6:89:f3:5b:e0:ce:2a:5d:fa:9a:05:fb:a7:ae:36:
57:b9:28:97:65:0f:b2:52:2c:c3:37:30:4d:68:9b:6a:56:78:
40:43:bc:b5:b2:6e:b6:33:85:04:17:de:90:ce:4f:a9:f5:c3:
27:7e:21:b1:03:47:ef:73:c6:a1:b4:8b:f5:67:72:15:75:9a:
83:5f:e6:e4:99:e5:f3:47:d4:25:09:44:51:4c:ff:88:ef:c1:
be:64:bb:88
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed May 14 19:41:22 2025 by rpki-client