Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ad/3c293a-1591-4685-8769-a8f90d45ea67/1/uRil9IFVJuHpJRDTZI69oM27wqw.mft
File: uRil9IFVJuHpJRDTZI69oM27wqw.mft (raw, json)
Hash identifier: h3PkrHdWKaxBuYi30iEsWeoMVfurCLsgvypp/03XLIQ=
Subject key identifier: 48:24:A4:4E:60:A5:7F:54:A3:DA:B9:FE:57:BC:F5:2F:8B:DD:5D:BE
Authority key identifier: B9:18:A5:F4:81:55:26:E1:E9:25:10:D3:64:8E:BD:A0:CD:BB:C2:AC
Certificate issuer: /CN=b918a5f4815526e1e92510d3648ebda0cdbbc2ac
Certificate serial: 0196B935C6017CE11E206A2DCFBCF4356B4B
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/uRil9IFVJuHpJRDTZI69oM27wqw.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ad/3c293a-1591-4685-8769-a8f90d45ea67/1/uRil9IFVJuHpJRDTZI69oM27wqw.mft
Manifest number: 073D
Signing time: Sat 10 May 2025 08:00:31 +0000
Manifest this update: Sat 10 May 2025 08:00:31 +0000
Manifest next update: Sun 11 May 2025 08:00:31 +0000
Files and hashes: 1: NQ1K-9XIHqQJwtN4074dlf3XMz8.roa (hash: vM/pIxk1nyw8ZAVigG02xXVdjyCX5kUlIgX1S1etmX8=)
2: uRil9IFVJuHpJRDTZI69oM27wqw.crl (hash: gTIGagRA8qtiBOasM++JyrSYNlkf+tUnpMVgNz+jky4=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/ad/3c293a-1591-4685-8769-a8f90d45ea67/1/uRil9IFVJuHpJRDTZI69oM27wqw.crl
rsync://rpki.ripe.net/repository/DEFAULT/ad/3c293a-1591-4685-8769-a8f90d45ea67/1/uRil9IFVJuHpJRDTZI69oM27wqw.mft
rsync://rpki.ripe.net/repository/DEFAULT/uRil9IFVJuHpJRDTZI69oM27wqw.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 11 May 2025 04:00:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:b9:35:c6:01:7c:e1:1e:20:6a:2d:cf:bc:f4:35:6b:4b
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=b918a5f4815526e1e92510d3648ebda0cdbbc2ac
Validity
Not Before: May 10 08:00:31 2025 GMT
Not After : May 11 08:00:31 2025 GMT
Subject: CN=4824a44e60a57f54a3dab9fe57bcf52f8bdd5dbe
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b3:4e:9c:e3:39:55:fa:ae:f1:10:d6:4d:c4:2b:
c4:33:b0:72:0c:43:d6:66:b1:90:a4:9d:d9:7d:ff:
87:84:4f:34:95:bd:26:4c:14:c3:53:33:fb:4a:b8:
1f:f6:23:4a:c0:b3:6b:ea:03:ac:3a:e1:73:e4:8d:
d2:84:32:38:4a:1b:11:1e:5c:01:01:0a:b6:fd:31:
68:75:1d:c1:c7:62:7b:2e:c1:3b:b2:8b:e9:b2:f1:
59:f8:1c:05:b5:5c:25:a6:be:11:49:f9:78:50:8a:
19:e2:99:50:2c:0f:68:4a:35:50:99:ce:06:90:c2:
6c:1b:fa:78:d3:5a:5e:c9:50:93:98:fb:07:f3:94:
72:7b:aa:18:d0:57:42:db:7f:1e:42:2c:b8:a0:35:
7b:6a:36:b3:8c:dd:52:b4:89:a0:40:5a:b8:de:f3:
64:c2:c3:fb:04:e5:de:1e:3e:33:ef:62:93:2e:78:
07:82:47:c6:a7:ca:02:76:2c:26:e0:52:13:81:b8:
b0:b2:3c:25:f6:bc:9f:29:e2:1f:35:af:b2:55:30:
80:40:17:5e:ce:ea:25:37:3a:22:6e:0d:56:95:ea:
bb:4a:9e:df:df:29:79:21:af:89:ee:e6:04:c4:5d:
57:c5:d4:e4:4b:a2:34:a2:c5:bb:fc:b8:f7:74:90:
f7:fd
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
48:24:A4:4E:60:A5:7F:54:A3:DA:B9:FE:57:BC:F5:2F:8B:DD:5D:BE
X509v3 Authority Key Identifier:
keyid:B9:18:A5:F4:81:55:26:E1:E9:25:10:D3:64:8E:BD:A0:CD:BB:C2:AC
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/uRil9IFVJuHpJRDTZI69oM27wqw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ad/3c293a-1591-4685-8769-a8f90d45ea67/1/uRil9IFVJuHpJRDTZI69oM27wqw.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/ad/3c293a-1591-4685-8769-a8f90d45ea67/1/uRil9IFVJuHpJRDTZI69oM27wqw.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
56:0b:cc:97:2a:0a:03:41:e4:2d:cc:d2:f0:b0:69:50:48:5a:
c7:e0:2b:bd:ff:02:bf:ef:2e:23:24:b5:a2:bd:48:c8:5f:c5:
78:d7:41:bd:09:05:6d:e1:a3:a8:e7:12:ea:71:10:88:81:e7:
44:27:fc:f5:66:d8:88:e5:2a:41:61:7e:93:83:a0:06:13:9f:
8d:17:b8:0d:a2:30:5c:4d:32:0e:02:98:d7:34:4e:e8:0e:b3:
54:8c:ea:b7:2f:5d:69:53:93:eb:48:15:18:2e:b0:b5:20:16:
ad:69:89:4e:17:02:f6:00:58:4b:11:cc:a5:a6:57:ef:2e:bb:
8e:42:56:9e:13:83:de:0a:55:c9:6f:68:7b:87:5e:2c:10:07:
44:3a:8f:25:2c:9c:35:93:3a:b2:72:97:4f:fd:e1:df:53:35:
ff:50:c3:95:1e:fd:82:74:b4:c8:25:b8:58:32:9c:f7:7b:b8:
21:f6:57:ff:85:e3:16:df:3a:97:db:b6:7f:15:71:b2:62:47:
bc:24:9b:e4:d6:72:b6:66:52:bb:40:f8:be:86:99:c5:32:84:
22:04:79:a1:15:56:59:cd:d2:e4:17:38:d8:28:b6:83:44:85:
c0:97:91:8b:86:88:8d:a0:9f:7a:5f:8b:5d:4c:e6:ac:aa:6d:
63:57:67:1d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat May 10 14:51:33 2025 by rpki-client