Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e0/c69eef-5ac2-4768-83b7-ecdf2a906b4c/1/uidBVRBOQzKMO_oq1qxnGXZvEyU.mft
File: uidBVRBOQzKMO_oq1qxnGXZvEyU.mft (raw, json)
Hash identifier: uqr4I3psXXXi4qTLs31dGnkr5VqKad6ubJXobwREUS8=
Subject key identifier: 6B:57:33:20:13:BA:B8:32:98:CC:E5:66:08:0D:72:B2:30:58:2C:3C
Authority key identifier: BA:27:41:55:10:4E:43:32:8C:3B:FA:2A:D6:AC:67:19:76:6F:13:25
Certificate issuer: /CN=ba274155104e43328c3bfa2ad6ac6719766f1325
Certificate serial: 0196A0F6E13F63BC306D5E2CB16AE9CBAC63
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/uidBVRBOQzKMO_oq1qxnGXZvEyU.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/e0/c69eef-5ac2-4768-83b7-ecdf2a906b4c/1/uidBVRBOQzKMO_oq1qxnGXZvEyU.mft
Manifest number: 0368
Signing time: Mon 05 May 2025 15:00:56 +0000
Manifest this update: Mon 05 May 2025 15:00:56 +0000
Manifest next update: Tue 06 May 2025 15:00:56 +0000
Files and hashes: 1: H4KA0sxWbQn0TsS16gkHA_XLpks.roa (hash: aXldWw/SJurvCLdfL24USIy9/ELw56XWGz7XXExpHyU=)
2: uidBVRBOQzKMO_oq1qxnGXZvEyU.crl (hash: YNoYYqmnVQ5FNogZeS8EpiNx6x5obH8FZkCl363bT38=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/e0/c69eef-5ac2-4768-83b7-ecdf2a906b4c/1/uidBVRBOQzKMO_oq1qxnGXZvEyU.crl
rsync://rpki.ripe.net/repository/DEFAULT/e0/c69eef-5ac2-4768-83b7-ecdf2a906b4c/1/uidBVRBOQzKMO_oq1qxnGXZvEyU.mft
rsync://rpki.ripe.net/repository/DEFAULT/uidBVRBOQzKMO_oq1qxnGXZvEyU.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 06 May 2025 15:00:56 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:a0:f6:e1:3f:63:bc:30:6d:5e:2c:b1:6a:e9:cb:ac:63
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=ba274155104e43328c3bfa2ad6ac6719766f1325
Validity
Not Before: May 5 15:00:56 2025 GMT
Not After : May 6 15:00:56 2025 GMT
Subject: CN=6b57332013bab83298cce566080d72b230582c3c
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a4:f6:15:fa:e8:50:44:76:a4:f6:b5:a5:12:cc:
b3:c8:6b:a3:53:e2:14:cb:0a:70:99:48:28:5e:40:
fb:22:42:87:cc:d0:ab:c2:40:2e:ad:37:18:51:33:
10:18:ae:a0:6b:06:87:6b:04:9e:b0:b4:1d:63:6a:
6f:58:5f:58:62:4f:79:79:24:ca:6f:34:7d:d8:dc:
89:5b:66:77:33:14:fe:1f:77:98:a2:bf:c7:ee:2f:
27:e3:b0:14:fe:84:3f:4c:c2:db:d0:6b:d2:bd:0b:
ca:4c:75:55:5a:c1:19:62:35:a8:5d:28:68:65:3a:
6b:52:6a:f1:03:2e:28:cc:dd:ba:4a:1c:1d:f3:07:
1a:61:96:fd:23:98:31:1b:ae:93:2f:41:58:1f:24:
1b:38:2f:e4:d9:44:8c:cb:c3:07:47:45:1b:a2:3b:
4b:91:6b:ad:71:2e:e5:ab:28:fc:4c:33:54:3d:53:
a0:2c:76:5f:8b:30:4d:df:5f:d8:ad:5b:b2:c5:24:
e7:8a:b4:39:d8:58:9c:80:ab:97:ee:5a:78:ac:d7:
13:d8:f2:ff:a9:05:c1:27:28:c7:d3:fd:b2:5e:fd:
a9:1f:d3:04:29:94:47:c0:7d:5f:66:4e:07:d2:74:
6b:2f:0e:fe:90:99:52:97:5a:ba:a9:88:6c:55:f1:
17:cd
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
6B:57:33:20:13:BA:B8:32:98:CC:E5:66:08:0D:72:B2:30:58:2C:3C
X509v3 Authority Key Identifier:
keyid:BA:27:41:55:10:4E:43:32:8C:3B:FA:2A:D6:AC:67:19:76:6F:13:25
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/uidBVRBOQzKMO_oq1qxnGXZvEyU.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e0/c69eef-5ac2-4768-83b7-ecdf2a906b4c/1/uidBVRBOQzKMO_oq1qxnGXZvEyU.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/e0/c69eef-5ac2-4768-83b7-ecdf2a906b4c/1/uidBVRBOQzKMO_oq1qxnGXZvEyU.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
1b:7e:a0:91:ec:59:84:3a:ab:b1:a3:b1:0b:74:9f:cb:05:9d:
2a:e8:f7:de:66:ae:a5:b7:37:32:d5:89:23:74:74:bd:9a:37:
91:0e:32:65:35:f9:ec:27:e0:40:45:5d:8b:74:3b:a5:ff:be:
e9:73:ac:26:9a:cb:ad:fd:ce:cc:ae:94:44:e7:59:36:eb:60:
ab:04:d5:1a:99:f6:02:94:7c:39:08:8b:e6:f7:3a:e5:76:fb:
4a:94:b9:78:b2:82:d5:eb:ba:1e:71:52:1a:e1:32:f3:ae:30:
4d:ed:57:0e:fc:de:71:cf:80:c6:86:5f:07:aa:cf:e9:37:8d:
29:50:59:29:fd:44:a4:39:0e:70:9d:57:51:d1:63:95:bc:cd:
0f:cc:44:6b:60:e1:47:a0:82:e8:5f:76:3d:71:3f:19:bd:02:
8f:d5:bb:7a:b7:29:f1:c4:29:5b:b6:0d:67:cc:04:e3:9d:a1:
88:07:3b:ab:53:40:b0:56:ec:77:7f:7b:23:19:52:6b:ab:07:
36:16:10:d3:09:d3:25:a4:a7:ee:6f:86:0b:41:de:ad:08:84:
d8:2e:c5:b7:a2:ed:81:63:fb:0a:df:2f:0d:ff:84:48:62:43:
b8:14:cc:00:6f:b9:eb:07:67:c8:f2:29:35:cd:3b:ac:46:90:
17:18:e2:db
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon May 5 23:48:21 2025 by rpki-client