
Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/df/77774a-fc07-4002-94f9-12dc94ddedcd/1/uuf6d_cku0ZzJa1Z19v8Yzmcbnk.mft
File: uuf6d_cku0ZzJa1Z19v8Yzmcbnk.mft (raw, json)
Hash identifier: HQLC2wHdx4MrPFmsmW9PvIwwnRtq3nyv4fPx7U/kuic=
Subject key identifier: 04:97:A0:91:79:8F:36:18:1A:EB:DE:B0:10:AA:C0:B4:E4:07:6D:29
Authority key identifier: BA:E7:FA:77:F7:24:BB:46:73:25:AD:59:D7:DB:FC:63:39:9C:6E:79
Certificate issuer: /CN=bae7fa77f724bb467325ad59d7dbfc63399c6e79
Certificate serial: 0196C4278E39FA99EE3B2DEB257F4BD6F5BE
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/uuf6d_cku0ZzJa1Z19v8Yzmcbnk.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/df/77774a-fc07-4002-94f9-12dc94ddedcd/1/uuf6d_cku0ZzJa1Z19v8Yzmcbnk.mft
Manifest number: 14E2
Signing time: Mon 12 May 2025 11:00:48 +0000
Manifest this update: Mon 12 May 2025 11:00:48 +0000
Manifest next update: Tue 13 May 2025 11:00:48 +0000
Files and hashes: 1: QPgFHQDlm_0exUYvdkepCU73o64.roa (hash: GOemFo+2yNdKq5tLB7uX1AqqukrqHbLBiUTqn2bm5uU=)
2: uuf6d_cku0ZzJa1Z19v8Yzmcbnk.crl (hash: TTbk1dz4g6O6AyP2NU9cLobIDMGPs1Nel+GnjBVl2Jg=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/df/77774a-fc07-4002-94f9-12dc94ddedcd/1/uuf6d_cku0ZzJa1Z19v8Yzmcbnk.crl
rsync://rpki.ripe.net/repository/DEFAULT/df/77774a-fc07-4002-94f9-12dc94ddedcd/1/uuf6d_cku0ZzJa1Z19v8Yzmcbnk.mft
rsync://rpki.ripe.net/repository/DEFAULT/uuf6d_cku0ZzJa1Z19v8Yzmcbnk.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 13 May 2025 11:00:48 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:c4:27:8e:39:fa:99:ee:3b:2d:eb:25:7f:4b:d6:f5:be
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=bae7fa77f724bb467325ad59d7dbfc63399c6e79
Validity
Not Before: May 12 11:00:48 2025 GMT
Not After : May 13 11:00:48 2025 GMT
Subject: CN=0497a091798f36181aebdeb010aac0b4e4076d29
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:86:da:e1:af:07:9b:f9:1e:c5:55:72:4d:7e:8d:
91:e4:ab:10:60:45:68:39:4b:e0:df:6f:29:df:29:
1c:67:d6:d2:20:94:d1:1a:4d:cd:4d:f1:30:46:86:
89:b4:28:53:93:6b:2f:66:30:b3:f7:54:a8:65:b5:
6c:57:b6:7d:17:39:e6:a4:dd:5b:40:f9:d8:83:c9:
ae:f0:f4:11:2b:bb:8d:6d:7b:5e:99:b8:3c:2f:4c:
1e:6d:76:bf:28:4b:13:b4:bc:58:8b:f5:59:bf:e1:
b5:2c:dc:1d:0d:ef:b2:ac:27:9b:1f:86:f4:6c:f9:
39:47:8f:09:e8:55:6d:06:e8:24:5f:2a:4b:0a:d5:
bb:15:cd:5c:67:fd:35:d7:94:14:0b:7d:eb:69:c2:
b3:ea:56:da:90:7f:15:a6:2c:11:1c:58:b7:ac:08:
34:ba:df:a8:b8:e7:ff:12:0e:53:21:08:82:bf:ba:
6c:02:0a:15:1c:ce:d9:c9:d0:2f:a1:e6:31:b3:b9:
c8:b0:a9:5b:62:dd:c9:48:c8:51:b3:d5:77:5f:df:
7e:cc:7f:da:b4:f6:ae:07:97:48:f2:3a:b8:39:24:
0d:28:4f:e0:36:1d:6a:dd:7c:8f:67:07:19:d2:e6:
71:3a:2e:db:87:d0:1f:63:7a:f8:72:57:26:48:db:
e7:7b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
04:97:A0:91:79:8F:36:18:1A:EB:DE:B0:10:AA:C0:B4:E4:07:6D:29
X509v3 Authority Key Identifier:
keyid:BA:E7:FA:77:F7:24:BB:46:73:25:AD:59:D7:DB:FC:63:39:9C:6E:79
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/uuf6d_cku0ZzJa1Z19v8Yzmcbnk.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/df/77774a-fc07-4002-94f9-12dc94ddedcd/1/uuf6d_cku0ZzJa1Z19v8Yzmcbnk.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/df/77774a-fc07-4002-94f9-12dc94ddedcd/1/uuf6d_cku0ZzJa1Z19v8Yzmcbnk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
4a:22:8b:44:8c:97:7c:a7:f4:4a:d0:11:9a:01:bb:38:b5:22:
d4:b7:1d:65:10:c7:f2:97:02:ee:2f:25:43:75:96:76:26:ef:
e7:45:ae:79:9f:65:b2:9c:13:63:e0:0f:29:42:ba:91:7c:46:
af:57:52:a9:cb:1b:c9:33:c9:48:c9:6f:63:74:11:18:0e:d0:
be:7a:5a:81:07:a4:e3:01:46:42:ce:8c:ac:41:10:db:ef:d7:
35:8a:78:86:6f:52:13:4c:dc:71:b5:44:4b:a2:ff:2c:1c:d7:
bb:8e:2e:2b:b1:ff:35:24:46:ff:b3:04:9f:64:16:8d:92:8b:
af:11:28:b9:0f:83:10:f4:15:81:8b:28:ed:99:93:21:0b:c5:
17:68:8c:f1:a0:e5:7e:cd:da:f1:c8:d9:a9:49:9c:2f:7f:3e:
c9:5a:47:59:05:00:11:dd:c2:21:14:a9:6e:82:57:ff:1e:4e:
a0:bf:5d:8b:95:58:79:97:43:7a:38:08:a9:61:6d:6f:87:4b:
86:2d:70:8a:4f:29:02:cf:9c:5d:51:e3:58:86:99:2c:76:02:
c0:0b:a4:80:56:c9:43:39:e6:df:6e:e2:76:e9:4e:37:2f:65:
a1:e6:c0:0b:c1:3c:b8:c8:26:35:12:56:1c:06:d6:2d:ff:53:
5a:94:93:f8
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon May 12 18:18:56 2025 by rpki-client