Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b1/024143-042c-4222-be0b-a12b3c3ae88f/1/uTpR2iBTBE-WJi9jfQycwF1zAEE.mft
File: uTpR2iBTBE-WJi9jfQycwF1zAEE.mft (raw, json)
Hash identifier: yg6xX5d6jN1Dv3+2O1xmNmuuVPAfSsqn+G4MkeSF9QE=
Subject key identifier: 46:E3:0E:0D:92:23:D0:0D:2B:AF:CC:2D:C1:87:B8:49:CC:34:09:3B
Authority key identifier: B9:3A:51:DA:20:53:04:4F:96:26:2F:63:7D:0C:9C:C0:5D:73:00:41
Certificate issuer: /CN=b93a51da2053044f96262f637d0c9cc05d730041
Certificate serial: 0196B40F1DB1F1DA46DBDA355D522A8998A1
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/uTpR2iBTBE-WJi9jfQycwF1zAEE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/b1/024143-042c-4222-be0b-a12b3c3ae88f/1/uTpR2iBTBE-WJi9jfQycwF1zAEE.mft
Manifest number: 08F8
Signing time: Fri 09 May 2025 08:00:11 +0000
Manifest this update: Fri 09 May 2025 08:00:11 +0000
Manifest next update: Sat 10 May 2025 08:00:11 +0000
Files and hashes: 1: DGAxfx8mgb3LVWMl2Ev8bbPDe8Q.roa (hash: zaZvD4mJLqp4MOJwB3Nt68nBCMNeBWDlV/d1fzv2XeU=)
2: qGqGFDo3f1YxXSO8NSZP4OIb8Yk.roa (hash: e3ELr1b/OayM2a4sUXudO8Dt/N78b5+UPIuDWK6RcgY=)
3: uTpR2iBTBE-WJi9jfQycwF1zAEE.crl (hash: lFv3wbLBlZbJKq291pbXRZ3fN2eAmmeOJMGsw3mVYPI=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/b1/024143-042c-4222-be0b-a12b3c3ae88f/1/uTpR2iBTBE-WJi9jfQycwF1zAEE.crl
rsync://rpki.ripe.net/repository/DEFAULT/b1/024143-042c-4222-be0b-a12b3c3ae88f/1/uTpR2iBTBE-WJi9jfQycwF1zAEE.mft
rsync://rpki.ripe.net/repository/DEFAULT/uTpR2iBTBE-WJi9jfQycwF1zAEE.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 10 May 2025 08:00:11 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:b4:0f:1d:b1:f1:da:46:db:da:35:5d:52:2a:89:98:a1
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=b93a51da2053044f96262f637d0c9cc05d730041
Validity
Not Before: May 9 08:00:11 2025 GMT
Not After : May 10 08:00:11 2025 GMT
Subject: CN=46e30e0d9223d00d2bafcc2dc187b849cc34093b
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:92:a5:28:e0:93:23:71:05:38:12:e1:80:65:0e:
e9:bf:c4:91:44:2d:ec:5a:2a:1c:89:36:1c:17:6b:
9b:4d:c3:3f:2f:fc:2f:44:a9:c5:95:1e:8c:da:c0:
fe:db:27:8f:a8:36:93:60:f0:93:b0:82:ee:2b:1e:
1d:75:bf:de:15:dc:1b:b4:9c:56:0d:5c:06:b4:61:
c2:c0:98:33:a7:a5:a1:6c:02:b3:eb:d4:86:95:72:
9b:e3:e5:a8:8e:ab:3e:3b:74:7c:9e:40:94:58:e5:
9b:ec:e9:3b:c6:4c:57:d4:2f:15:9b:0d:f8:11:9b:
36:6e:ee:be:50:e0:f1:44:3b:64:df:1e:cb:df:0f:
75:b5:17:5a:5b:2c:da:ec:43:82:9a:95:d6:7a:65:
b4:fa:82:68:1e:de:82:ab:07:d0:63:5a:37:4b:a5:
37:5a:9d:dc:7b:c9:2f:a4:5b:d3:83:f8:01:01:91:
22:dd:7b:8a:ba:70:4c:a6:03:e0:5e:a7:1c:a5:b2:
bc:8f:7d:44:34:59:2c:2f:06:30:9d:43:d6:42:49:
71:f9:ca:67:ff:f9:d3:7c:a3:a1:b1:62:4b:6a:f8:
0b:2d:08:c7:a2:34:65:e1:b3:f2:94:f5:6b:0a:a6:
73:a6:22:97:78:05:68:f3:68:c6:f0:71:17:52:4b:
22:f7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
46:E3:0E:0D:92:23:D0:0D:2B:AF:CC:2D:C1:87:B8:49:CC:34:09:3B
X509v3 Authority Key Identifier:
keyid:B9:3A:51:DA:20:53:04:4F:96:26:2F:63:7D:0C:9C:C0:5D:73:00:41
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/uTpR2iBTBE-WJi9jfQycwF1zAEE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b1/024143-042c-4222-be0b-a12b3c3ae88f/1/uTpR2iBTBE-WJi9jfQycwF1zAEE.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/b1/024143-042c-4222-be0b-a12b3c3ae88f/1/uTpR2iBTBE-WJi9jfQycwF1zAEE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
cb:bc:d3:90:3d:2b:91:23:6f:23:01:08:ae:4a:f5:8e:27:ef:
af:e2:be:88:59:ed:d7:62:5f:b6:23:5c:83:67:0d:ce:0f:f9:
2f:15:f9:2a:b8:97:b3:22:2d:f5:00:31:7a:b4:a3:6e:e0:b6:
41:98:72:a9:76:b7:15:6f:04:07:e4:a8:75:6b:88:1e:f0:7c:
da:14:8f:13:3e:15:ac:81:0c:14:36:c4:b8:b1:80:5a:1b:7c:
fc:80:3d:c3:fd:4d:f4:34:12:1c:59:6c:fb:43:f8:ae:d1:9f:
a1:ef:8e:e6:84:38:91:4e:5f:38:80:62:ec:77:c0:f8:b0:b9:
d8:5b:26:36:87:1e:e7:0f:71:68:5b:74:23:b2:d4:9f:0b:8e:
3e:92:cc:2a:d8:1b:14:7f:57:de:e9:3a:e5:5f:fc:46:33:43:
1b:29:ea:c9:8c:80:dc:16:5c:b5:cb:80:05:eb:68:c0:f0:c8:
b3:2b:33:52:4c:95:fb:5c:f1:b2:fe:33:0a:48:24:b9:93:bc:
d1:9b:27:83:01:e6:01:ac:9c:31:ec:0b:2a:c6:92:16:97:6b:
6a:d5:71:a9:77:da:22:3a:fd:6d:cc:5c:42:02:ff:a9:5d:68:
27:10:a1:3a:f9:a4:8d:cd:d8:9e:52:d9:5c:ba:a6:e2:f5:95:
30:91:9e:59
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri May 9 14:52:46 2025 by rpki-client