Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c9/dd672d-e980-4dca-9195-859dbca38714/1/rUQr3aKjUyCpbYBr8WjVuEp21CY.mft
File: rUQr3aKjUyCpbYBr8WjVuEp21CY.mft (raw, json)
Hash identifier: Zk0qj9DBogydx6lGmDdgYlAhUJxl4FNOh+xIj67U+ZY=
Subject key identifier: D2:B8:B5:3C:17:82:7C:01:FE:26:F2:95:37:B9:3B:00:8B:AE:12:DA
Authority key identifier: AD:44:2B:DD:A2:A3:53:20:A9:6D:80:6B:F1:68:D5:B8:4A:76:D4:26
Certificate issuer: /CN=ad442bdda2a35320a96d806bf168d5b84a76d426
Certificate serial: 0196BF0129D6B14EAC4A68C4CFF27F4DB39D
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/rUQr3aKjUyCpbYBr8WjVuEp21CY.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c9/dd672d-e980-4dca-9195-859dbca38714/1/rUQr3aKjUyCpbYBr8WjVuEp21CY.mft
Manifest number: 140E
Signing time: Sun 11 May 2025 11:00:46 +0000
Manifest this update: Sun 11 May 2025 11:00:46 +0000
Manifest next update: Mon 12 May 2025 11:00:46 +0000
Files and hashes: 1: Yi8LhGXH_nRs0tEcTr_lCHwmcpA.roa (hash: oMJi8GS/Dld+gizK0j1juoqyLq72TaRv/Im2Ftty3+c=)
2: hT840T8mica095PLsmh6UJWn1xw.roa (hash: BtlUar+Qm61Tys6a6+qj8yTMdU/uS3Pp3uWg+aNGVWY=)
3: rUQr3aKjUyCpbYBr8WjVuEp21CY.crl (hash: Grjus4lBO2L1ItHAhli3xRO5/7kJKYjzEXhnH/Ai+0Q=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/c9/dd672d-e980-4dca-9195-859dbca38714/1/rUQr3aKjUyCpbYBr8WjVuEp21CY.crl
rsync://rpki.ripe.net/repository/DEFAULT/c9/dd672d-e980-4dca-9195-859dbca38714/1/rUQr3aKjUyCpbYBr8WjVuEp21CY.mft
rsync://rpki.ripe.net/repository/DEFAULT/rUQr3aKjUyCpbYBr8WjVuEp21CY.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 12 May 2025 07:00:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:bf:01:29:d6:b1:4e:ac:4a:68:c4:cf:f2:7f:4d:b3:9d
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=ad442bdda2a35320a96d806bf168d5b84a76d426
Validity
Not Before: May 11 11:00:46 2025 GMT
Not After : May 12 11:00:46 2025 GMT
Subject: CN=d2b8b53c17827c01fe26f29537b93b008bae12da
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d8:01:ee:d6:9f:07:85:69:03:d7:cb:a1:be:38:
6d:fe:d0:68:18:11:6b:0f:d7:1b:9b:a1:fb:23:1d:
1f:29:6d:5a:7f:5f:82:27:b5:ad:be:cb:39:a1:ec:
4a:35:c1:5e:ff:c6:c0:55:96:de:a1:3b:ac:6b:af:
03:3a:9d:96:0b:0b:b6:b0:cc:98:e0:b0:2e:29:8b:
97:87:e3:dd:3d:0d:e2:a0:e9:06:26:22:ce:fb:b8:
a5:47:94:af:25:31:9a:49:00:ed:93:28:ef:cf:ca:
5b:51:d3:a5:90:f3:83:f9:db:d4:cf:19:05:32:a0:
8e:38:92:50:88:40:1c:6b:14:a0:a6:d9:20:9d:3c:
ca:31:1f:f7:5b:dc:f0:35:bc:85:c4:78:ed:93:30:
9f:05:8e:71:24:b6:70:0d:e0:ac:6d:52:60:77:7c:
d9:78:f1:99:b7:98:f8:35:d6:25:a5:5d:d1:18:2a:
54:cd:f6:67:2d:0b:2f:f7:6c:8c:a9:1d:96:1b:79:
d0:4d:6e:17:49:a8:7c:22:2a:9a:f8:01:88:ef:b4:
c1:21:09:eb:f8:70:4d:52:45:c1:30:41:eb:8d:38:
83:f2:b3:9f:78:66:af:a7:2d:1a:5e:81:4e:f1:5b:
d3:53:e7:f7:88:6e:df:24:2e:2d:46:56:18:9c:ab:
c3:7d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D2:B8:B5:3C:17:82:7C:01:FE:26:F2:95:37:B9:3B:00:8B:AE:12:DA
X509v3 Authority Key Identifier:
keyid:AD:44:2B:DD:A2:A3:53:20:A9:6D:80:6B:F1:68:D5:B8:4A:76:D4:26
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/rUQr3aKjUyCpbYBr8WjVuEp21CY.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c9/dd672d-e980-4dca-9195-859dbca38714/1/rUQr3aKjUyCpbYBr8WjVuEp21CY.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/c9/dd672d-e980-4dca-9195-859dbca38714/1/rUQr3aKjUyCpbYBr8WjVuEp21CY.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
45:63:78:bb:84:ba:c3:11:b7:70:d1:9f:83:30:d8:f8:6e:b9:
cc:50:12:f8:fb:e0:86:cd:26:4f:f6:d6:b7:49:83:64:58:fc:
eb:ec:e3:f7:9b:1e:02:48:6b:86:9b:62:44:6d:0c:ad:92:0a:
40:ac:6a:2b:37:3c:80:c3:67:9b:75:f7:00:75:2d:24:ac:31:
bc:34:d5:36:64:2a:ca:0a:5f:fd:ca:24:e3:b9:8c:82:cf:8b:
25:48:31:cf:1f:ff:0f:e2:70:a1:b4:1a:5e:ec:f7:b3:91:48:
e1:48:cb:79:c8:17:bb:5d:d0:6c:fd:0c:f0:21:8d:63:80:fa:
97:54:34:8b:f0:90:fc:3e:e1:29:3c:8b:8a:54:d0:ba:49:b2:
a7:3d:33:f7:10:b9:a4:93:d2:ff:07:54:0b:2f:8e:85:83:ad:
f8:72:68:17:a5:d5:80:ea:b0:5f:d0:dd:d0:25:28:00:37:87:
5d:0d:eb:e9:cc:be:df:7c:67:6a:74:07:f1:b6:13:d9:5e:1e:
5f:36:9e:a3:16:d0:2a:2c:fa:b8:9a:e6:60:5f:ab:ff:5d:b0:
3c:17:fa:44:28:a8:8c:cd:b3:1b:fa:57:33:45:c7:05:eb:4d:
4d:b1:f4:4e:e6:26:af:31:ce:87:81:de:76:31:57:73:f0:ac:
a7:74:ce:08
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun May 11 15:25:41 2025 by rpki-client