Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b8/b34a33-062b-4b70-ba51-02a12b86180d/1/uUTKLZktd4WAC91VJNPhE4PZ8d4.mft
File: uUTKLZktd4WAC91VJNPhE4PZ8d4.mft (raw, json)
Hash identifier: 4AJFSzv5M4ccA8wR0yAI+8PJ3x1qIr87UE24aevf2Gk=
Subject key identifier: 3D:8F:7A:32:0D:BB:48:4F:C5:87:29:0A:5A:FC:1F:BE:8C:E1:6A:CB
Authority key identifier: B9:44:CA:2D:99:2D:77:85:80:0B:DD:55:24:D3:E1:13:83:D9:F1:DE
Certificate issuer: /CN=b944ca2d992d7785800bdd5524d3e11383d9f1de
Certificate serial: 01969DBEACB911B7C1CF91C011DAA8A5CF8B
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/uUTKLZktd4WAC91VJNPhE4PZ8d4.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/b8/b34a33-062b-4b70-ba51-02a12b86180d/1/uUTKLZktd4WAC91VJNPhE4PZ8d4.mft
Manifest number: 1158
Signing time: Mon 05 May 2025 00:00:40 +0000
Manifest this update: Mon 05 May 2025 00:00:40 +0000
Manifest next update: Tue 06 May 2025 00:00:40 +0000
Files and hashes: 1: FWSXCF4qgT0faY_P6PSKnBV7G2M.roa (hash: tFzm3MTdpBb4fBz33ckdkrZ9Nss77FL8hdTAaxqUFls=)
2: uUTKLZktd4WAC91VJNPhE4PZ8d4.crl (hash: ZGPkBOsN2d6YOuD3eMqjdh7B4eS2jMtlSeYYwuXnAEI=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/b8/b34a33-062b-4b70-ba51-02a12b86180d/1/uUTKLZktd4WAC91VJNPhE4PZ8d4.crl
rsync://rpki.ripe.net/repository/DEFAULT/b8/b34a33-062b-4b70-ba51-02a12b86180d/1/uUTKLZktd4WAC91VJNPhE4PZ8d4.mft
rsync://rpki.ripe.net/repository/DEFAULT/uUTKLZktd4WAC91VJNPhE4PZ8d4.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 05 May 2025 22:00:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:9d:be:ac:b9:11:b7:c1:cf:91:c0:11:da:a8:a5:cf:8b
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=b944ca2d992d7785800bdd5524d3e11383d9f1de
Validity
Not Before: May 5 00:00:40 2025 GMT
Not After : May 6 00:00:40 2025 GMT
Subject: CN=3d8f7a320dbb484fc587290a5afc1fbe8ce16acb
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ed:2b:e6:b5:7a:94:2a:22:22:83:52:a5:03:ee:
9e:29:44:1e:de:a1:db:08:c4:f3:b9:a7:80:a3:99:
bb:d5:09:42:7c:17:5c:2e:a9:29:0a:89:cb:b2:f5:
2f:ec:d0:de:6b:37:1d:d1:5b:d9:12:b2:ce:ad:4e:
73:c6:85:73:db:2f:d6:c8:a2:9a:d8:7a:cc:64:bd:
af:b7:9e:8e:e6:0a:e7:70:75:e8:87:a0:87:10:53:
3f:b6:27:f4:20:81:6c:1f:47:9e:b1:6c:ef:52:70:
98:10:28:1b:6d:4c:d0:92:41:e7:ee:54:2c:ed:74:
88:31:28:76:be:02:60:16:99:c3:72:36:4e:42:3a:
6c:f8:c0:f8:8a:2b:a5:4c:66:6d:1f:36:a8:90:b2:
cd:4c:d4:69:53:d4:6d:37:68:83:27:42:7c:5c:8c:
6c:8d:23:26:ac:d2:87:38:e4:30:4d:be:b5:cf:63:
6a:b8:47:b9:3e:c7:c5:ac:ea:c0:71:8b:94:89:84:
11:00:6c:54:0e:b9:d4:23:2c:3c:d4:81:ee:b9:7f:
77:fd:54:63:e7:8c:fb:ef:b8:19:31:29:65:7d:ec:
3a:ca:80:cd:7b:9d:26:4c:85:93:0a:c0:aa:41:a9:
69:78:79:d1:f3:09:68:a0:30:10:63:db:17:b5:79:
e2:8f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
3D:8F:7A:32:0D:BB:48:4F:C5:87:29:0A:5A:FC:1F:BE:8C:E1:6A:CB
X509v3 Authority Key Identifier:
keyid:B9:44:CA:2D:99:2D:77:85:80:0B:DD:55:24:D3:E1:13:83:D9:F1:DE
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/uUTKLZktd4WAC91VJNPhE4PZ8d4.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b8/b34a33-062b-4b70-ba51-02a12b86180d/1/uUTKLZktd4WAC91VJNPhE4PZ8d4.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/b8/b34a33-062b-4b70-ba51-02a12b86180d/1/uUTKLZktd4WAC91VJNPhE4PZ8d4.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
83:24:19:ab:95:8b:e9:e3:e1:3c:49:80:70:75:25:09:b6:7e:
95:50:e5:11:1a:4e:82:65:78:e5:04:fc:8c:99:06:72:bd:ca:
4a:a4:b4:a3:e1:97:2e:bb:78:55:31:7f:02:16:51:79:f9:c5:
3d:8f:67:c9:34:c4:04:0e:26:41:dc:95:ee:6c:1c:a0:23:bd:
9d:19:b0:71:e0:9b:64:e4:bf:82:0c:76:f4:b7:69:d6:64:34:
6f:21:5c:1e:6a:c0:7b:ce:ef:a5:6e:59:a2:9c:32:7d:ff:e4:
1d:9b:c0:61:4d:e0:83:c6:be:96:3d:6a:ff:54:2c:a2:ff:77:
7b:68:a2:2b:89:ef:0a:2a:b1:e6:02:46:66:dd:8f:ed:a6:dd:
ba:d5:1a:db:22:cc:7a:36:1a:5e:93:24:86:f3:43:07:9c:78:
03:01:4c:81:d0:c8:ba:94:de:9b:7a:da:d5:ac:08:e4:23:0d:
d1:81:20:fb:78:d6:e1:9c:56:c7:fb:cd:dc:22:a3:75:85:2b:
26:55:dd:2f:f2:2b:bb:25:38:d9:2b:4a:72:a9:73:f7:13:71:
2b:7b:26:36:fd:02:c9:29:fd:d9:21:c7:0d:38:93:43:ac:a7:
f5:52:fa:f4:5e:31:7f:ab:a7:8f:ff:0d:43:04:8c:1f:01:24:
aa:ad:5f:f5
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon May 5 05:29:03 2025 by rpki-client