Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/a7/fbd382-10d0-4684-8836-eed1d0967078/1/0uuxFmwGDbJd-U8CvS-PnabE3Us.mft
File: 0uuxFmwGDbJd-U8CvS-PnabE3Us.mft (raw, json)
Hash identifier: VWGf45OomtRebPzrb3Lh9nGitrRqtvLynWBLk02sMP4=
Subject key identifier: 8E:D7:A3:E5:21:2C:F2:65:37:D1:AA:EF:1D:0B:A5:0F:6F:8C:76:49
Authority key identifier: D2:EB:B1:16:6C:06:0D:B2:5D:F9:4F:02:BD:2F:8F:9D:A6:C4:DD:4B
Certificate issuer: /CN=d2ebb1166c060db25df94f02bd2f8f9da6c4dd4b
Certificate serial: 0196BA1157A7F81C4F97CE258A693AD0BD01
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/0uuxFmwGDbJd-U8CvS-PnabE3Us.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/a7/fbd382-10d0-4684-8836-eed1d0967078/1/0uuxFmwGDbJd-U8CvS-PnabE3Us.mft
Manifest number: 10ED
Signing time: Sat 10 May 2025 12:00:20 +0000
Manifest this update: Sat 10 May 2025 12:00:20 +0000
Manifest next update: Sun 11 May 2025 12:00:20 +0000
Files and hashes: 1: 0uuxFmwGDbJd-U8CvS-PnabE3Us.crl (hash: BoS9h/3wUA+n/4ZxSewWhpC2ed/aQvw1rUI90wSoeto=)
2: LdFx4O_axkyLwKBn8hayXhVuuTY.roa (hash: +qJwhkRCeLKYqE6tG+1RNrXKKNfgmZMWphTwQtobs60=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/a7/fbd382-10d0-4684-8836-eed1d0967078/1/0uuxFmwGDbJd-U8CvS-PnabE3Us.crl
rsync://rpki.ripe.net/repository/DEFAULT/a7/fbd382-10d0-4684-8836-eed1d0967078/1/0uuxFmwGDbJd-U8CvS-PnabE3Us.mft
rsync://rpki.ripe.net/repository/DEFAULT/0uuxFmwGDbJd-U8CvS-PnabE3Us.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 11 May 2025 12:00:20 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:ba:11:57:a7:f8:1c:4f:97:ce:25:8a:69:3a:d0:bd:01
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=d2ebb1166c060db25df94f02bd2f8f9da6c4dd4b
Validity
Not Before: May 10 12:00:20 2025 GMT
Not After : May 11 12:00:20 2025 GMT
Subject: CN=8ed7a3e5212cf26537d1aaef1d0ba50f6f8c7649
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a3:f3:89:0f:79:42:58:37:39:7d:33:99:05:8a:
82:14:54:c2:cb:80:8f:a1:6e:f7:08:8b:2a:05:57:
b7:6b:13:5a:29:5f:62:3e:b8:5d:6f:f2:ff:9c:04:
4c:e6:51:88:7f:7b:d6:b3:53:71:6c:ba:d1:7f:7c:
1c:27:92:6f:c4:7c:55:7c:42:32:fc:c4:58:7d:12:
9f:b4:07:9f:e3:8f:b0:b6:bc:5b:8d:d3:d8:44:37:
d1:6b:2c:fc:02:68:ef:b5:59:36:b5:17:1f:c4:dc:
3c:90:30:28:66:f5:5a:76:97:82:23:b8:9a:56:05:
ef:4d:be:23:f4:aa:7b:60:2d:7f:b0:da:a4:b4:41:
0c:32:05:b5:cf:1e:ae:b6:82:c6:73:fb:1e:f9:9a:
b6:1c:b0:66:90:ea:70:ff:54:f2:39:c0:b8:66:b8:
e2:7b:b3:0b:81:83:42:e6:f1:c6:c8:56:55:b5:9d:
c4:14:13:b6:12:df:8f:94:62:22:76:d5:27:88:93:
32:47:e6:d0:53:b1:81:ef:5f:e6:52:b7:1e:0e:86:
3c:43:be:95:0c:d4:63:ba:a7:9c:9e:46:04:0d:20:
44:b3:dd:c7:cd:e2:48:9f:72:18:89:c9:b1:7b:e3:
77:62:7c:0a:ae:79:eb:31:21:f1:43:e6:fd:2e:3f:
eb:cf
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
8E:D7:A3:E5:21:2C:F2:65:37:D1:AA:EF:1D:0B:A5:0F:6F:8C:76:49
X509v3 Authority Key Identifier:
keyid:D2:EB:B1:16:6C:06:0D:B2:5D:F9:4F:02:BD:2F:8F:9D:A6:C4:DD:4B
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/0uuxFmwGDbJd-U8CvS-PnabE3Us.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a7/fbd382-10d0-4684-8836-eed1d0967078/1/0uuxFmwGDbJd-U8CvS-PnabE3Us.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/a7/fbd382-10d0-4684-8836-eed1d0967078/1/0uuxFmwGDbJd-U8CvS-PnabE3Us.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
60:89:38:a4:61:3f:00:22:62:ef:20:86:65:0a:38:11:1a:e4:
e1:4d:c1:65:ad:50:18:cc:9f:50:62:2e:c4:b6:dd:d0:2e:be:
fd:9d:da:98:d9:25:be:59:04:e8:cf:72:86:90:2c:9c:42:1f:
10:78:f2:4b:1e:0f:e0:65:77:e6:75:12:28:6d:c1:21:8f:2b:
fe:44:ec:99:cc:4a:79:dc:06:a0:33:1c:49:54:45:49:5f:fc:
e9:7a:95:0d:a9:aa:62:d9:c2:c7:1f:26:7b:83:e4:a7:23:dc:
8c:90:56:dc:dd:e5:2d:a3:e2:39:d7:08:91:44:68:33:06:19:
a1:36:16:3e:ce:13:16:0c:2c:d2:9b:4e:4e:67:7d:ba:8f:53:
12:7f:a4:d0:52:89:b0:3c:2d:e7:52:80:92:87:ac:0c:67:7f:
0a:0f:2f:1e:55:c6:27:d2:9f:df:c6:81:d0:a9:ad:6c:8c:df:
12:88:49:a3:ec:08:34:f7:18:69:79:eb:a0:d1:02:ab:d9:7d:
88:f8:ae:66:45:c6:fb:19:23:c8:a8:02:82:76:58:bb:70:b6:
ad:dc:ea:dd:37:48:bb:78:84:ac:6c:a6:5a:76:65:d8:af:1f:
0e:db:82:d1:ba:d7:ab:56:60:51:ea:23:93:5f:0d:cb:8a:87:
1a:2e:c8:b1
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat May 10 15:11:11 2025 by rpki-client