Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/cf/b74aa2-25e0-4ad5-8cc3-69061ef2c499/1/uNI7HmwH5iry0ufrbeCJOwkRmrs.mft
File: uNI7HmwH5iry0ufrbeCJOwkRmrs.mft (raw, json)
Hash identifier: lU/bKfC/B1WEigtEJGysWnIg+7vy+7hvBZ4wxsAubWs=
Subject key identifier: 2D:62:D7:3A:E7:B7:F1:A5:F1:3B:87:59:37:B0:D6:21:95:13:30:01
Authority key identifier: B8:D2:3B:1E:6C:07:E6:2A:F2:D2:E7:EB:6D:E0:89:3B:09:11:9A:BB
Certificate issuer: /CN=b8d23b1e6c07e62af2d2e7eb6de0893b09119abb
Certificate serial: 0196A1D231DBBECA59F2FAFC831BEAED1766
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/uNI7HmwH5iry0ufrbeCJOwkRmrs.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/cf/b74aa2-25e0-4ad5-8cc3-69061ef2c499/1/uNI7HmwH5iry0ufrbeCJOwkRmrs.mft
Manifest number: 14EB
Signing time: Mon 05 May 2025 19:00:29 +0000
Manifest this update: Mon 05 May 2025 19:00:29 +0000
Manifest next update: Tue 06 May 2025 19:00:29 +0000
Files and hashes: 1: i2eJrEfelYQqyMxjfIMrwo3xZoE.roa (hash: bJaj1yoLKIUnxfE/GQdxLjgX2i4lI/zxxe1rr7T/GTo=)
2: uNI7HmwH5iry0ufrbeCJOwkRmrs.crl (hash: WMTRygf+r4576gmMHwp8RHlLYCIjlEfHt2ffNYhBCxM=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/cf/b74aa2-25e0-4ad5-8cc3-69061ef2c499/1/uNI7HmwH5iry0ufrbeCJOwkRmrs.crl
rsync://rpki.ripe.net/repository/DEFAULT/cf/b74aa2-25e0-4ad5-8cc3-69061ef2c499/1/uNI7HmwH5iry0ufrbeCJOwkRmrs.mft
rsync://rpki.ripe.net/repository/DEFAULT/uNI7HmwH5iry0ufrbeCJOwkRmrs.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 06 May 2025 18:19:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:a1:d2:31:db:be:ca:59:f2:fa:fc:83:1b:ea:ed:17:66
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=b8d23b1e6c07e62af2d2e7eb6de0893b09119abb
Validity
Not Before: May 5 19:00:29 2025 GMT
Not After : May 6 19:00:29 2025 GMT
Subject: CN=2d62d73ae7b7f1a5f13b875937b0d62195133001
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c6:e5:bb:33:9b:01:e5:56:cc:fd:a2:4c:81:cc:
9c:de:e2:a5:48:a0:28:b4:e9:32:d4:46:26:5d:82:
63:3d:95:ce:80:d4:24:7f:7b:e3:2b:c0:e6:59:5d:
99:2a:e1:6c:17:98:21:f7:d6:3d:ce:1f:9c:9f:03:
51:29:d4:f5:5f:48:f1:9e:e3:af:2b:3e:64:04:1d:
7d:f6:6f:ff:6c:7d:a2:0a:75:4e:3f:d1:aa:10:e5:
dc:fb:18:45:c3:99:82:36:b7:23:06:62:ce:80:4a:
1e:30:4c:0f:f7:7f:43:17:2b:2b:63:38:2b:c0:86:
73:f7:01:42:aa:99:fd:9b:2c:fd:25:0d:1d:fd:b1:
1d:b0:d1:6b:1d:06:79:d6:c7:4d:21:6f:4a:fd:55:
d4:b6:c6:01:b2:2b:04:53:2d:1d:17:7f:92:53:95:
c7:1d:32:c2:1e:76:be:f4:1f:dc:67:43:1f:03:f7:
22:24:99:a7:18:cd:e2:16:d1:89:89:c4:e3:f0:a2:
04:a3:db:40:df:36:5c:93:1a:e5:27:d0:78:ce:48:
5b:60:20:54:8e:2f:ba:21:2d:e3:d6:6a:82:f1:1c:
e9:5d:93:51:4e:ca:11:c5:39:36:0f:87:87:c7:07:
07:3d:7a:1c:aa:8e:4c:6c:df:55:bb:c8:bb:16:3c:
b8:5b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
2D:62:D7:3A:E7:B7:F1:A5:F1:3B:87:59:37:B0:D6:21:95:13:30:01
X509v3 Authority Key Identifier:
keyid:B8:D2:3B:1E:6C:07:E6:2A:F2:D2:E7:EB:6D:E0:89:3B:09:11:9A:BB
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/uNI7HmwH5iry0ufrbeCJOwkRmrs.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/cf/b74aa2-25e0-4ad5-8cc3-69061ef2c499/1/uNI7HmwH5iry0ufrbeCJOwkRmrs.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/cf/b74aa2-25e0-4ad5-8cc3-69061ef2c499/1/uNI7HmwH5iry0ufrbeCJOwkRmrs.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
8e:70:4d:64:6a:b4:1a:a8:2c:b2:bb:a5:3a:af:73:c0:4e:82:
3f:da:ab:d7:3f:73:d3:4f:26:8b:88:ae:8e:48:a0:fc:f1:d2:
b0:8e:5e:1b:e3:8a:de:36:5c:dd:d9:62:e4:eb:fa:11:ab:75:
f6:5b:8b:77:93:9e:b7:60:6f:88:dc:57:8c:3b:9b:84:74:e3:
4a:2c:3d:82:4d:e0:e5:17:74:cb:b9:0e:b9:fa:c6:85:41:99:
ff:0e:2d:ae:2f:79:18:31:cb:72:04:a9:18:0d:a6:d8:dc:ee:
e5:80:6b:8d:05:b8:40:ee:df:59:ba:23:5a:3d:0f:03:7b:f3:
31:42:f9:ba:1d:c1:07:c9:84:98:af:d5:b1:f6:f8:12:53:e1:
43:9e:36:b8:17:03:30:7d:01:1f:14:56:b0:83:db:cc:1f:81:
c2:71:d5:8d:38:32:cb:a8:b0:5a:5c:52:22:a1:81:91:a7:7b:
47:07:bf:e3:3d:dc:44:4c:d0:25:d9:e4:e2:2f:9f:5c:a7:0e:
c6:c3:e8:f6:72:5b:94:4b:76:30:df:78:a4:75:e7:0d:78:c6:
10:78:b1:7b:6e:5f:17:9b:79:08:ab:ac:d9:f1:3d:1a:a9:61:
09:30:79:64:6c:e1:80:84:83:46:36:bb:8e:ab:a1:35:4a:db:
ac:e4:85:fa
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue May 6 00:32:08 2025 by rpki-client