Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/a0/54faaa-37e6-4ad0-9ef5-6870684566e2/1/uLjaVnSS3L9Z-Ypr8dGXSrQrx9A.mft
File: uLjaVnSS3L9Z-Ypr8dGXSrQrx9A.mft (raw, json)
Hash identifier: cgJuHPPNzEx5784tCXEy59l5gBfEPfNHFCYA0ckE8GI=
Subject key identifier: 5A:12:65:72:3E:89:43:F5:D5:75:D3:4A:78:D4:A7:95:74:64:6E:0E
Authority key identifier: B8:B8:DA:56:74:92:DC:BF:59:F9:8A:6B:F1:D1:97:4A:B4:2B:C7:D0
Certificate issuer: /CN=b8b8da567492dcbf59f98a6bf1d1974ab42bc7d0
Certificate serial: 0196A051B4EA215A1AC4CB6267E03F6148E0
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/uLjaVnSS3L9Z-Ypr8dGXSrQrx9A.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/a0/54faaa-37e6-4ad0-9ef5-6870684566e2/1/uLjaVnSS3L9Z-Ypr8dGXSrQrx9A.mft
Manifest number: 0FFF
Signing time: Mon 05 May 2025 12:00:31 +0000
Manifest this update: Mon 05 May 2025 12:00:31 +0000
Manifest next update: Tue 06 May 2025 12:00:31 +0000
Files and hashes: 1: eUTTBluUxLpLmBVSiYINYc1D8TA.roa (hash: 2/Wbsq0QnuET3HB81P0My3qX/yo8/LKbxfDvP3jYmcI=)
2: uLjaVnSS3L9Z-Ypr8dGXSrQrx9A.crl (hash: dGv/detR7qAPHa9MWaBJRPz9n3Y6geNHdVZPrLCI7Rg=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/a0/54faaa-37e6-4ad0-9ef5-6870684566e2/1/uLjaVnSS3L9Z-Ypr8dGXSrQrx9A.crl
rsync://rpki.ripe.net/repository/DEFAULT/a0/54faaa-37e6-4ad0-9ef5-6870684566e2/1/uLjaVnSS3L9Z-Ypr8dGXSrQrx9A.mft
rsync://rpki.ripe.net/repository/DEFAULT/uLjaVnSS3L9Z-Ypr8dGXSrQrx9A.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 06 May 2025 10:00:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:a0:51:b4:ea:21:5a:1a:c4:cb:62:67:e0:3f:61:48:e0
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=b8b8da567492dcbf59f98a6bf1d1974ab42bc7d0
Validity
Not Before: May 5 12:00:31 2025 GMT
Not After : May 6 12:00:31 2025 GMT
Subject: CN=5a1265723e8943f5d575d34a78d4a79574646e0e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:98:ba:b0:ad:e4:ef:04:83:64:43:36:0e:0d:e0:
e4:c3:f5:3e:a7:9c:35:61:99:fb:26:2e:fd:1c:b2:
29:04:19:12:17:b7:bd:7b:28:1b:4c:1a:d8:34:db:
2b:4b:b6:99:1f:c5:65:ad:95:82:da:bf:43:da:ec:
6a:78:8b:8c:85:c2:05:40:a6:a2:3f:a5:bd:8c:73:
2a:f6:62:11:b6:76:dd:fc:5c:4a:5a:7f:14:6a:29:
50:75:a1:e8:32:e1:e7:c6:a1:c3:89:d7:81:7b:71:
6c:29:78:a5:98:84:23:c9:69:5a:21:9f:70:03:82:
95:08:b3:66:3c:5e:49:f1:eb:ac:37:44:a5:3c:b4:
7f:ca:13:31:b5:49:5d:3f:dd:73:3f:bd:45:ba:4e:
13:07:61:d7:9e:43:83:39:0d:69:35:91:fd:93:4a:
1f:0e:5c:86:ca:f5:63:1e:4a:e2:5c:b3:5b:9b:d9:
4c:67:98:82:67:cb:89:7d:e3:8f:8b:25:80:8e:31:
02:79:b7:27:f0:75:6b:93:60:c6:ad:76:22:e5:c8:
4d:c0:11:28:77:5e:c9:91:c3:7f:1e:42:4b:9d:af:
78:d5:5a:c2:9f:09:4d:19:54:b3:35:e6:ad:1e:6e:
05:60:30:a4:32:84:f9:58:c7:7f:fa:ca:47:76:0c:
66:ab
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
5A:12:65:72:3E:89:43:F5:D5:75:D3:4A:78:D4:A7:95:74:64:6E:0E
X509v3 Authority Key Identifier:
keyid:B8:B8:DA:56:74:92:DC:BF:59:F9:8A:6B:F1:D1:97:4A:B4:2B:C7:D0
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/uLjaVnSS3L9Z-Ypr8dGXSrQrx9A.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a0/54faaa-37e6-4ad0-9ef5-6870684566e2/1/uLjaVnSS3L9Z-Ypr8dGXSrQrx9A.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/a0/54faaa-37e6-4ad0-9ef5-6870684566e2/1/uLjaVnSS3L9Z-Ypr8dGXSrQrx9A.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
af:ff:f8:56:e3:9f:3f:7e:93:6d:7d:8d:5b:0a:e6:30:d4:a0:
8d:1c:20:9c:f9:16:b3:d3:32:38:ef:1a:2e:61:e4:33:83:0f:
e9:f3:a8:b4:1e:f0:1d:90:09:11:09:fd:72:79:36:7b:6b:6d:
c9:58:e6:39:a2:af:b7:fa:25:f0:e9:c2:52:4c:a3:d1:39:15:
66:af:c6:2a:f2:2e:2f:8a:e7:bf:08:58:1a:02:54:5a:17:69:
ed:ba:b7:a9:de:92:61:46:4e:66:05:ab:1f:4b:b1:ee:9b:5c:
cf:20:48:74:7e:76:6d:07:a6:79:19:19:4b:1d:e4:77:40:c2:
22:3d:d2:37:cd:86:b6:b5:53:ab:7e:54:26:46:b3:02:a6:54:
b8:f7:49:48:02:d7:c6:1d:10:f2:6e:11:1b:7e:e1:67:59:e7:
7a:15:1a:dc:fe:8a:7e:4d:33:d0:53:c2:0f:d2:0d:f6:01:17:
07:2b:3c:8b:e8:dd:eb:f9:18:6d:f4:46:32:04:0b:28:e2:d0:
6f:d9:26:59:93:a5:b8:92:79:30:b8:89:fa:58:30:1a:78:5d:
ed:54:c5:c7:a7:d1:61:a7:e4:94:e3:ec:0b:3b:9d:fe:c3:b8:
6f:e4:12:42:71:08:fd:5f:b4:c2:8d:34:77:55:a3:5d:25:ef:
3f:ac:05:e3
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon May 5 15:33:05 2025 by rpki-client