Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b2/0cd2f3-0f6a-4eaa-9845-99eca5651023/1/ucNjOsv2PC7LECBbm5JYCrtOuH4.mft
File: ucNjOsv2PC7LECBbm5JYCrtOuH4.mft (raw, json)
Hash identifier: S7SZs0u0IZvyEoPdQGuILwChbKbQFBgG58gbRLCUBck=
Subject key identifier: B6:36:92:D0:7A:CD:8A:C1:55:42:BB:CB:9B:3B:00:F4:0A:16:11:1C
Authority key identifier: B9:C3:63:3A:CB:F6:3C:2E:CB:10:20:5B:9B:92:58:0A:BB:4E:B8:7E
Certificate issuer: /CN=b9c3633acbf63c2ecb10205b9b92580abb4eb87e
Certificate serial: 0196C3823293CE08128D8DBB9700868B4CA8
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/ucNjOsv2PC7LECBbm5JYCrtOuH4.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/b2/0cd2f3-0f6a-4eaa-9845-99eca5651023/1/ucNjOsv2PC7LECBbm5JYCrtOuH4.mft
Manifest number: 0DAC
Signing time: Mon 12 May 2025 08:00:11 +0000
Manifest this update: Mon 12 May 2025 08:00:11 +0000
Manifest next update: Tue 13 May 2025 08:00:11 +0000
Files and hashes: 1: SVqYet6gqafuP93fvR-cXcD_lZE.roa (hash: W9VR4dYgi4TiBeDzcyIekcyHyO1LO5e+JjlzGp7Zlac=)
2: jJL_UCt1xKDnehMaxOeWEPnn1w4.roa (hash: OUjyb/sGoJvyBaOSinwB5CR/YZjUj96cHrntVj6IrpM=)
3: ucNjOsv2PC7LECBbm5JYCrtOuH4.crl (hash: FX8y5qi6OW/C4JsqDahp3MOJHqaUuPO6qwPyXdv3bZ0=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/b2/0cd2f3-0f6a-4eaa-9845-99eca5651023/1/ucNjOsv2PC7LECBbm5JYCrtOuH4.crl
rsync://rpki.ripe.net/repository/DEFAULT/b2/0cd2f3-0f6a-4eaa-9845-99eca5651023/1/ucNjOsv2PC7LECBbm5JYCrtOuH4.mft
rsync://rpki.ripe.net/repository/DEFAULT/ucNjOsv2PC7LECBbm5JYCrtOuH4.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 13 May 2025 08:00:11 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:c3:82:32:93:ce:08:12:8d:8d:bb:97:00:86:8b:4c:a8
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=b9c3633acbf63c2ecb10205b9b92580abb4eb87e
Validity
Not Before: May 12 08:00:11 2025 GMT
Not After : May 13 08:00:11 2025 GMT
Subject: CN=b63692d07acd8ac15542bbcb9b3b00f40a16111c
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a7:9b:4b:c0:b0:fc:fa:03:bd:81:25:11:4d:fd:
ae:7d:10:4f:20:8b:b5:a8:83:8d:fe:ef:bd:c8:bb:
95:c5:9c:32:d9:15:72:fb:04:cf:5a:3d:0b:8a:5b:
50:74:26:a5:fe:26:fc:c5:07:b6:d4:79:a6:bb:d5:
71:b6:63:6b:93:cb:2e:f1:03:37:62:d7:79:00:73:
fb:b1:92:66:d0:a4:ef:af:df:22:16:06:cf:7e:99:
99:f7:48:77:5f:9b:fe:f9:14:fd:5b:85:c5:36:a0:
2b:a4:1d:81:74:b7:25:89:00:f0:92:22:38:8d:47:
b9:99:46:a4:1f:30:e5:56:f7:f7:b8:32:21:c2:b8:
d6:2f:31:22:f9:b3:9e:02:e7:4c:02:b0:4f:f7:60:
13:52:13:ce:4c:97:50:51:e0:0d:c3:3d:97:75:49:
87:6b:38:b6:dc:80:d4:f6:dc:db:fa:2e:b2:c9:d5:
8b:11:aa:42:a2:87:a6:c6:77:b8:39:26:3e:c8:3b:
a1:71:67:6f:87:f4:87:74:d7:35:96:f7:da:82:47:
6d:86:4f:5d:46:a1:05:d2:52:7f:53:b3:bb:f3:0d:
07:22:6e:4f:92:e9:09:f8:2b:53:ef:d8:1a:ff:f7:
a1:91:ae:e8:15:67:ca:89:27:74:7e:34:ae:b4:2a:
5e:fd
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B6:36:92:D0:7A:CD:8A:C1:55:42:BB:CB:9B:3B:00:F4:0A:16:11:1C
X509v3 Authority Key Identifier:
keyid:B9:C3:63:3A:CB:F6:3C:2E:CB:10:20:5B:9B:92:58:0A:BB:4E:B8:7E
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ucNjOsv2PC7LECBbm5JYCrtOuH4.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b2/0cd2f3-0f6a-4eaa-9845-99eca5651023/1/ucNjOsv2PC7LECBbm5JYCrtOuH4.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/b2/0cd2f3-0f6a-4eaa-9845-99eca5651023/1/ucNjOsv2PC7LECBbm5JYCrtOuH4.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
63:d6:05:53:2b:e2:18:00:3e:4d:07:45:e1:a3:f4:fb:cc:51:
6d:b9:50:88:35:93:da:f3:44:47:f7:73:a4:48:23:b1:9c:58:
80:b9:e5:33:51:c5:fd:30:fa:ac:54:a8:75:c8:d0:22:02:96:
94:d5:7b:27:6b:61:75:96:bc:8c:85:31:af:e5:80:ab:c0:fc:
9b:6a:7d:d4:a9:69:d7:94:60:ef:92:c2:19:28:fc:c5:92:69:
1b:dd:0f:6c:62:55:2c:b7:9b:9b:78:70:cc:d7:44:5e:89:78:
09:2b:f1:bc:68:2b:06:bc:90:c4:74:83:86:31:f8:b9:32:7f:
e4:da:b0:2d:f0:ae:55:9a:89:2c:c0:be:70:33:f5:18:5e:42:
61:3e:8a:62:a7:e1:c0:25:28:7d:07:6e:06:84:f2:d0:f2:cf:
6c:c3:2e:36:0e:f9:47:82:eb:69:ce:37:00:53:3e:f3:73:39:
2d:7d:3a:65:d4:ed:e2:aa:df:ac:e1:8b:b5:ad:b0:d2:fd:0c:
2c:a7:b3:9f:c0:ed:ce:da:1c:c7:cf:23:b8:31:e4:fa:5d:56:
cb:ed:a4:a1:d5:21:7f:cc:06:a3:10:61:f8:77:eb:1d:c6:66:
87:e3:3e:d7:65:8b:3b:dc:46:8a:c5:49:1a:8d:11:2c:e5:5f:
90:d6:0d:fd
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon May 12 17:19:08 2025 by rpki-client