Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c4/21d663-6874-489c-ab9e-d9ca03e66ffb/1/uhzvb56e3EXjzSjvQCUZeVLUYOk.mft
File: uhzvb56e3EXjzSjvQCUZeVLUYOk.mft (raw, json)
Hash identifier: IIoaI+UOtPTIpL8xeFUR3y3MWtG5zdMzrPdrYtQQ9TE=
Subject key identifier: 9A:41:A6:A1:28:81:73:9B:FB:43:85:DA:9A:61:46:01:EA:C8:0A:A4
Authority key identifier: BA:1C:EF:6F:9E:9E:DC:45:E3:CD:28:EF:40:25:19:79:52:D4:60:E9
Certificate issuer: /CN=ba1cef6f9e9edc45e3cd28ef4025197952d460e9
Certificate serial: 0196AA30DF322AB44D499249841C485BAF43
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/uhzvb56e3EXjzSjvQCUZeVLUYOk.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c4/21d663-6874-489c-ab9e-d9ca03e66ffb/1/uhzvb56e3EXjzSjvQCUZeVLUYOk.mft
Manifest number: 0B5B
Signing time: Wed 07 May 2025 10:00:51 +0000
Manifest this update: Wed 07 May 2025 10:00:51 +0000
Manifest next update: Thu 08 May 2025 10:00:51 +0000
Files and hashes: 1: uhzvb56e3EXjzSjvQCUZeVLUYOk.crl (hash: zurdDgNEtYwjYQCK8mKM0IFn/9J+27k1c26UfQkAOrQ=)
2: yBgRtAUy9SDMB2oNfVg6DWBcxdo.roa (hash: th+et5jSmKPB56Gge2PfFSgmFKaHL/juuWVdT7KzSfo=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/c4/21d663-6874-489c-ab9e-d9ca03e66ffb/1/uhzvb56e3EXjzSjvQCUZeVLUYOk.crl
rsync://rpki.ripe.net/repository/DEFAULT/c4/21d663-6874-489c-ab9e-d9ca03e66ffb/1/uhzvb56e3EXjzSjvQCUZeVLUYOk.mft
rsync://rpki.ripe.net/repository/DEFAULT/uhzvb56e3EXjzSjvQCUZeVLUYOk.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 08 May 2025 10:00:51 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:aa:30:df:32:2a:b4:4d:49:92:49:84:1c:48:5b:af:43
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=ba1cef6f9e9edc45e3cd28ef4025197952d460e9
Validity
Not Before: May 7 10:00:51 2025 GMT
Not After : May 8 10:00:51 2025 GMT
Subject: CN=9a41a6a12881739bfb4385da9a614601eac80aa4
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ce:6a:a5:3f:8e:31:49:60:32:cc:d2:2d:79:97:
fb:5a:4a:99:97:4d:84:a3:64:bb:73:01:f4:28:e6:
f6:7d:66:c1:aa:a0:9c:26:d2:8e:f2:ca:7f:4f:9e:
e0:ea:45:60:85:d5:fc:25:f0:40:79:b4:73:99:39:
73:07:3a:be:73:7d:43:75:b3:70:2c:b5:12:8f:5f:
8d:b6:bc:2b:14:d0:97:f1:3d:45:4e:0f:3a:8b:0d:
3b:3a:ad:ac:69:f5:79:a6:6e:ed:d9:24:d5:9a:89:
6c:c6:4e:66:7e:f8:d4:ab:0b:42:ba:81:08:59:54:
cb:26:99:51:f9:b7:b8:7d:41:8b:eb:42:92:9e:23:
56:80:b6:2d:27:25:f8:71:b3:07:0e:9f:bb:dd:50:
ea:fa:0f:06:37:e4:d3:91:8d:82:c4:66:3c:57:d4:
5a:65:ba:6a:b8:aa:64:3c:97:65:35:2f:32:49:1c:
05:f1:68:3a:c1:ae:e7:b9:23:4b:85:24:3a:1a:17:
9a:46:7f:e9:d6:d5:e9:ee:a8:1f:a4:12:55:1a:9b:
c6:d4:35:78:15:3c:bb:4e:7d:d4:19:83:4e:4d:e4:
21:2c:65:cc:e8:e5:77:b5:bb:c5:da:7d:9b:c2:25:
6c:c7:86:40:dd:9b:e0:86:75:13:cd:b7:e9:52:09:
29:49
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
9A:41:A6:A1:28:81:73:9B:FB:43:85:DA:9A:61:46:01:EA:C8:0A:A4
X509v3 Authority Key Identifier:
keyid:BA:1C:EF:6F:9E:9E:DC:45:E3:CD:28:EF:40:25:19:79:52:D4:60:E9
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/uhzvb56e3EXjzSjvQCUZeVLUYOk.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c4/21d663-6874-489c-ab9e-d9ca03e66ffb/1/uhzvb56e3EXjzSjvQCUZeVLUYOk.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/c4/21d663-6874-489c-ab9e-d9ca03e66ffb/1/uhzvb56e3EXjzSjvQCUZeVLUYOk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
8c:8b:9a:9d:30:36:08:99:7d:d4:06:79:6f:01:79:37:50:87:
17:fe:00:93:69:1c:3a:ac:bf:a7:a7:7e:b6:89:df:3c:8c:8c:
3d:35:a7:a5:4b:83:c2:fe:4e:11:76:fd:99:19:bf:6d:25:33:
88:91:d8:79:08:ee:2d:bf:f7:4b:d2:ec:5e:5d:56:f4:4a:90:
45:f2:18:e0:69:86:75:6f:62:79:c6:11:3b:62:74:ae:e6:ab:
ec:f2:b4:63:15:12:69:4a:15:c2:21:77:db:7c:b5:c4:f7:21:
47:16:5f:76:53:01:e2:a1:87:f7:3e:8c:e1:a8:25:af:52:d2:
78:7c:3d:6f:35:46:4d:2b:e0:bf:be:22:81:24:4e:32:d3:b4:
0c:6c:e4:8b:3e:c1:48:f5:fd:1a:82:b6:ba:d7:bb:7a:c8:98:
f8:e0:f3:85:f8:86:bd:c4:1e:ff:24:8f:ef:ec:d8:af:19:49:
fb:71:69:49:92:a7:44:69:15:e6:40:c5:86:63:91:6c:99:cf:
d2:8f:2a:82:b0:52:bd:26:93:19:5c:46:20:fc:eb:58:7f:e1:
a6:70:8c:9a:b0:d0:77:29:8c:f9:71:e6:89:e2:d1:ec:c4:82:
a9:c2:8d:e6:bc:74:bf:93:f6:e6:b1:bd:c2:fa:4e:b8:6c:90:
ca:9a:02:c7
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed May 7 17:23:27 2025 by rpki-client