Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c8/d74b80-40ea-4e34-b50d-114face1a571/1/uNFCJ0c-S3XIdydM9sBQ8lxXch8.mft
File: uNFCJ0c-S3XIdydM9sBQ8lxXch8.mft (raw, json)
Hash identifier: fsoRlXOktbzYLLU5vXlBcIKwnMIUhzvCTQn94fljcWQ=
Subject key identifier: 95:23:AF:A7:A9:E1:9D:4A:B3:F8:83:6E:58:5B:DA:9D:42:54:B7:A2
Authority key identifier: B8:D1:42:27:47:3E:4B:75:C8:77:27:4C:F6:C0:50:F2:5C:57:72:1F
Certificate issuer: /CN=b8d14227473e4b75c877274cf6c050f25c57721f
Certificate serial: 0196A208E7E2AC02FF40FD5E8940287F9C76
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/uNFCJ0c-S3XIdydM9sBQ8lxXch8.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c8/d74b80-40ea-4e34-b50d-114face1a571/1/uNFCJ0c-S3XIdydM9sBQ8lxXch8.mft
Manifest number: 1527
Signing time: Mon 05 May 2025 20:00:14 +0000
Manifest this update: Mon 05 May 2025 20:00:14 +0000
Manifest next update: Tue 06 May 2025 20:00:14 +0000
Files and hashes: 1: H6IzZrx8byO3caIkcY49jLe8s6I.roa (hash: aD1h/fBmUnkEqmwINWb3tP7Y404DXB5JUPfFMk9OdX0=)
2: uNFCJ0c-S3XIdydM9sBQ8lxXch8.crl (hash: pNTARk4IRJjYY7AeFCKf2+sGtoN/fX2RDDG9aSgCW1Y=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/c8/d74b80-40ea-4e34-b50d-114face1a571/1/uNFCJ0c-S3XIdydM9sBQ8lxXch8.crl
rsync://rpki.ripe.net/repository/DEFAULT/c8/d74b80-40ea-4e34-b50d-114face1a571/1/uNFCJ0c-S3XIdydM9sBQ8lxXch8.mft
rsync://rpki.ripe.net/repository/DEFAULT/uNFCJ0c-S3XIdydM9sBQ8lxXch8.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 06 May 2025 18:19:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:a2:08:e7:e2:ac:02:ff:40:fd:5e:89:40:28:7f:9c:76
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=b8d14227473e4b75c877274cf6c050f25c57721f
Validity
Not Before: May 5 20:00:14 2025 GMT
Not After : May 6 20:00:14 2025 GMT
Subject: CN=9523afa7a9e19d4ab3f8836e585bda9d4254b7a2
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:91:b8:e8:27:69:10:71:eb:6f:d7:ea:b5:8a:ba:
f0:fc:f5:f6:c7:53:12:70:b0:c0:a5:cc:6c:d1:a9:
d3:03:36:f4:52:76:11:d3:2b:36:5b:7e:ef:0e:34:
74:19:95:fe:bc:da:2e:70:6c:78:b6:7c:0e:f0:5b:
2c:07:f2:9d:6a:94:d2:13:6c:71:62:bf:80:65:c9:
32:53:6d:68:b2:b6:a1:fa:00:47:64:bf:63:94:a7:
d0:07:49:87:8d:3f:87:64:58:9b:fe:e0:84:b8:80:
77:d0:44:fe:c6:35:b4:9e:b9:57:ab:41:80:d7:ce:
20:6a:bf:4f:1a:8a:88:7f:e3:cc:12:33:06:29:15:
7b:56:06:f1:b0:5b:00:8a:63:cb:be:2d:d3:54:d2:
2b:df:b2:a9:04:8e:e1:01:fa:e4:b1:0b:68:16:36:
5e:cd:d0:71:46:8f:93:e2:72:82:87:62:2b:d8:c1:
d2:fe:5f:7f:7b:4d:cd:3f:16:93:48:90:83:c4:6d:
71:cc:3a:3d:09:86:2a:4d:3b:da:ae:26:4d:7a:f5:
ef:b5:71:12:68:85:a6:87:99:f9:5d:81:2c:96:06:
34:fd:56:69:b7:5e:05:f4:40:36:c1:df:bf:94:71:
93:45:32:61:6b:b1:e9:f0:6d:87:d8:9b:85:a9:49:
b1:8d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
95:23:AF:A7:A9:E1:9D:4A:B3:F8:83:6E:58:5B:DA:9D:42:54:B7:A2
X509v3 Authority Key Identifier:
keyid:B8:D1:42:27:47:3E:4B:75:C8:77:27:4C:F6:C0:50:F2:5C:57:72:1F
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/uNFCJ0c-S3XIdydM9sBQ8lxXch8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c8/d74b80-40ea-4e34-b50d-114face1a571/1/uNFCJ0c-S3XIdydM9sBQ8lxXch8.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/c8/d74b80-40ea-4e34-b50d-114face1a571/1/uNFCJ0c-S3XIdydM9sBQ8lxXch8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
51:b8:a5:ae:89:c9:1c:37:f8:5d:04:08:85:43:58:68:84:4b:
2e:74:b6:e9:56:bf:4b:f6:41:e4:f3:a2:99:c0:f1:60:4e:7a:
dd:2b:45:39:1a:75:37:03:b9:56:a7:da:0f:4a:cd:d9:b1:62:
6f:69:46:23:5b:ce:53:44:c1:aa:c4:d3:ed:c6:21:2d:27:9a:
33:b2:b8:9f:7a:47:f4:44:14:1d:13:25:c0:a8:be:5f:9e:f3:
25:04:85:b2:bf:fb:f4:4e:9d:06:f2:27:89:27:1a:2a:f3:05:
02:d4:5e:a7:8e:52:e4:d8:31:9d:e2:e4:60:ac:96:11:74:c8:
bd:97:95:6a:23:60:fa:e2:c6:98:56:a8:29:26:ba:ef:cc:2b:
24:ce:9e:26:b5:52:ce:7d:e6:0b:6f:5a:97:55:b2:69:52:5f:
3e:c5:7f:85:4b:9d:f3:66:fb:11:c0:85:86:64:72:b5:b8:30:
ae:5d:a8:48:91:11:e2:3c:c4:30:da:03:1a:b3:ff:e7:20:54:
39:ce:ee:5e:15:c5:90:3e:d7:ab:8c:8a:4b:1e:a8:f8:f4:b5:
b8:c6:34:03:c0:f4:eb:cf:67:02:b7:44:5a:00:f4:1f:e1:b1:
8b:a5:36:e0:75:b0:cd:46:2b:ab:37:0f:4a:44:f7:4c:ed:e4:
6b:3b:03:25
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue May 6 03:04:23 2025 by rpki-client