Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/a5/f10922-9954-453f-b1c6-820d5fc44e35/1/ucxtc0SS5BBmCKJPoble-qh5xFo.mft
File: ucxtc0SS5BBmCKJPoble-qh5xFo.mft (raw, json)
Hash identifier: H1mgXUitR753MSRiyr3VV/gS6z+9uqlClKnMq6q/ejQ=
Subject key identifier: FD:25:DE:65:83:6C:24:04:C2:FB:A2:5B:59:B2:A7:4B:4A:14:CC:F5
Authority key identifier: B9:CC:6D:73:44:92:E4:10:66:08:A2:4F:A1:B9:5E:FA:A8:79:C4:5A
Certificate issuer: /CN=b9cc6d734492e4106608a24fa1b95efaa879c45a
Certificate serial: 0196BDB706CABBF6A46F3A3D9A72A32EFE1F
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/ucxtc0SS5BBmCKJPoble-qh5xFo.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/a5/f10922-9954-453f-b1c6-820d5fc44e35/1/ucxtc0SS5BBmCKJPoble-qh5xFo.mft
Manifest number: 1533
Signing time: Sun 11 May 2025 05:00:10 +0000
Manifest this update: Sun 11 May 2025 05:00:10 +0000
Manifest next update: Mon 12 May 2025 05:00:10 +0000
Files and hashes: 1: 9U8A1KCT8rlJoIi8RO4fIEudUPM.roa (hash: 06pwZ9byNjemxUaq18ITW8U3Jpcvif9Eha+WU/EFPjM=)
2: ucxtc0SS5BBmCKJPoble-qh5xFo.crl (hash: wfEnhLxJwdJuztQpsCm+gvMI30n26d0Y8j8ZsB1m52U=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/a5/f10922-9954-453f-b1c6-820d5fc44e35/1/ucxtc0SS5BBmCKJPoble-qh5xFo.crl
rsync://rpki.ripe.net/repository/DEFAULT/a5/f10922-9954-453f-b1c6-820d5fc44e35/1/ucxtc0SS5BBmCKJPoble-qh5xFo.mft
rsync://rpki.ripe.net/repository/DEFAULT/ucxtc0SS5BBmCKJPoble-qh5xFo.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 12 May 2025 05:00:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:bd:b7:06:ca:bb:f6:a4:6f:3a:3d:9a:72:a3:2e:fe:1f
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=b9cc6d734492e4106608a24fa1b95efaa879c45a
Validity
Not Before: May 11 05:00:10 2025 GMT
Not After : May 12 05:00:10 2025 GMT
Subject: CN=fd25de65836c2404c2fba25b59b2a74b4a14ccf5
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d3:1e:e7:a7:09:3c:29:ba:7f:d9:6d:dc:e9:8c:
ac:1a:e4:ea:af:c9:d3:d6:a5:fe:69:b3:50:d9:4b:
2f:fb:4f:8d:93:a7:70:de:b8:d6:0a:a4:0e:f5:a9:
f4:cb:c8:e2:db:52:6c:3e:25:41:8d:d5:40:93:08:
ea:4f:e6:a9:b8:5c:30:c7:ea:a8:a8:91:5b:17:0b:
47:42:f7:a2:2f:3b:b7:5d:38:0d:4f:4b:78:68:3a:
4f:03:ed:9e:e8:49:43:bd:11:23:d7:dc:e9:f8:fb:
8b:92:7c:32:38:79:46:c4:16:a0:25:92:99:4c:d1:
c1:d2:f7:35:c4:b0:06:c0:8c:5b:ee:ef:ea:19:b2:
6c:71:05:ef:00:d9:06:fb:d8:6e:17:14:9f:6f:64:
65:00:53:d1:15:bb:9e:58:b2:29:01:4f:79:86:8f:
db:26:9d:94:a9:75:fa:6e:08:fe:22:02:ad:02:c4:
66:46:19:74:91:a7:7f:e7:58:bb:cb:2f:ad:1c:1c:
0b:a5:c1:fb:4c:47:96:b1:cf:c2:0c:1c:5b:c6:42:
8d:43:a0:ef:d4:4c:ed:ea:fc:27:90:37:10:a6:62:
16:01:22:07:1e:a9:37:ab:3a:e3:43:51:1a:91:43:
1a:03:c4:37:a7:76:6d:3b:9a:ad:8f:1a:3e:19:41:
4d:e9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
FD:25:DE:65:83:6C:24:04:C2:FB:A2:5B:59:B2:A7:4B:4A:14:CC:F5
X509v3 Authority Key Identifier:
keyid:B9:CC:6D:73:44:92:E4:10:66:08:A2:4F:A1:B9:5E:FA:A8:79:C4:5A
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ucxtc0SS5BBmCKJPoble-qh5xFo.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a5/f10922-9954-453f-b1c6-820d5fc44e35/1/ucxtc0SS5BBmCKJPoble-qh5xFo.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/a5/f10922-9954-453f-b1c6-820d5fc44e35/1/ucxtc0SS5BBmCKJPoble-qh5xFo.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
6e:39:c7:39:a6:d9:94:7d:44:1c:37:b2:aa:b8:81:3b:b3:bb:
1b:37:b4:99:79:68:f2:cc:1c:e1:6a:c8:02:a2:58:38:ee:8f:
a6:13:40:cd:73:c5:66:f1:21:48:3b:70:e9:38:39:14:15:30:
ad:bf:65:9c:c2:61:84:b4:d2:4d:66:a3:ca:88:66:fc:77:f1:
da:f2:d7:97:34:c9:db:10:6b:ba:05:c1:36:54:36:90:cb:e5:
f9:0b:79:e3:c6:89:84:b2:87:1d:db:81:29:d1:35:37:7a:48:
70:c4:a0:35:ec:08:dd:ed:43:8a:af:9d:40:63:71:39:fa:e9:
2c:fd:d7:d2:88:0b:6f:e6:25:c9:ab:0c:a2:38:de:55:9d:0c:
55:00:41:62:11:78:35:69:83:f9:95:b9:1c:54:98:c9:dc:c0:
e0:bf:12:00:52:30:0b:19:e1:88:cf:4a:2b:d5:52:5c:54:29:
9a:1e:cf:46:fa:47:63:cc:be:50:56:50:e0:5f:02:a6:de:5b:
42:69:76:8a:7f:a4:0f:88:bb:ff:b3:77:f5:b4:65:a4:a9:56:
3c:15:8e:e8:78:44:87:c4:00:c1:1d:6c:a6:8a:79:05:d9:ef:
42:d3:20:85:be:7b:88:91:09:04:0e:a6:38:44:04:cd:ac:17:
9a:23:04:4b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun May 11 10:47:28 2025 by rpki-client