Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e3/5aa303-59f7-4f99-907d-83a25a94c77f/1/uUhRCuQauFZ3msGG8EcJkfWipQ8.mft
File: uUhRCuQauFZ3msGG8EcJkfWipQ8.mft (raw, json)
Hash identifier: aymHDY4dNgdY8nobj/xcHSPM0dtLhDvWZRq1U3fQMRY=
Subject key identifier: D9:BA:40:F2:D3:F5:C9:72:BC:B8:14:1D:4D:6A:36:CA:9D:8D:7E:B1
Authority key identifier: B9:48:51:0A:E4:1A:B8:56:77:9A:C1:86:F0:47:09:91:F5:A2:A5:0F
Certificate issuer: /CN=b948510ae41ab856779ac186f0470991f5a2a50f
Certificate serial: 0196A01B0974AC265F4D50386F4B6BEF8B71
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/uUhRCuQauFZ3msGG8EcJkfWipQ8.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/e3/5aa303-59f7-4f99-907d-83a25a94c77f/1/uUhRCuQauFZ3msGG8EcJkfWipQ8.mft
Manifest number: 0B66
Signing time: Mon 05 May 2025 11:00:48 +0000
Manifest this update: Mon 05 May 2025 11:00:48 +0000
Manifest next update: Tue 06 May 2025 11:00:48 +0000
Files and hashes: 1: ZyJpNgXETgUAoMGW4Tc1fNHY6Xc.roa (hash: d0r/X5GHVSm+6B+uw9WbyoANujmYXCe7JpWPWgRCmfA=)
2: uUhRCuQauFZ3msGG8EcJkfWipQ8.crl (hash: IBhAbzzRssh0OOq0uQXl+ntTNELfb3Sv+Pw7KQ720+Y=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/e3/5aa303-59f7-4f99-907d-83a25a94c77f/1/uUhRCuQauFZ3msGG8EcJkfWipQ8.crl
rsync://rpki.ripe.net/repository/DEFAULT/e3/5aa303-59f7-4f99-907d-83a25a94c77f/1/uUhRCuQauFZ3msGG8EcJkfWipQ8.mft
rsync://rpki.ripe.net/repository/DEFAULT/uUhRCuQauFZ3msGG8EcJkfWipQ8.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 06 May 2025 10:00:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:a0:1b:09:74:ac:26:5f:4d:50:38:6f:4b:6b:ef:8b:71
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=b948510ae41ab856779ac186f0470991f5a2a50f
Validity
Not Before: May 5 11:00:48 2025 GMT
Not After : May 6 11:00:48 2025 GMT
Subject: CN=d9ba40f2d3f5c972bcb8141d4d6a36ca9d8d7eb1
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b6:3f:a0:7a:fa:da:ed:19:e2:5f:29:50:78:d5:
ac:06:f1:f4:06:cb:50:5f:ea:ca:b0:88:6d:6d:8a:
55:40:fd:a2:4c:be:db:92:6b:11:37:a6:f9:4d:7e:
82:cb:77:39:dd:33:28:08:1f:15:b8:7d:61:27:54:
ed:75:cb:55:f8:88:14:70:43:11:c5:cc:d3:c0:3c:
00:c4:8a:2a:d9:0c:a4:dc:d8:94:57:ab:50:d9:46:
cb:aa:c5:82:80:35:da:d8:b3:c0:72:80:93:f5:81:
8d:95:a1:0a:0a:37:12:3e:5e:d4:4d:98:f5:10:73:
ed:52:7f:89:08:af:7c:d4:17:94:55:49:5e:15:0f:
15:3d:d1:92:9e:af:88:df:f5:fc:97:52:7f:69:1f:
6d:46:fe:6b:26:2e:ff:49:71:83:d2:03:ae:64:a5:
4e:2f:91:d1:90:22:f7:d8:4e:d0:27:bb:23:41:2b:
a9:da:24:88:e2:c1:2f:94:c9:ae:e5:2c:ae:fb:11:
a7:04:f5:b5:93:c0:ca:af:d3:97:66:33:26:69:0b:
1c:84:0f:60:66:2a:49:5b:f3:b2:49:ad:f7:79:62:
ea:bc:ac:6e:23:91:c1:3a:80:ca:57:ee:50:d5:25:
b8:26:31:a7:2c:2e:02:43:e0:bc:64:e5:5a:df:12:
1c:ad
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D9:BA:40:F2:D3:F5:C9:72:BC:B8:14:1D:4D:6A:36:CA:9D:8D:7E:B1
X509v3 Authority Key Identifier:
keyid:B9:48:51:0A:E4:1A:B8:56:77:9A:C1:86:F0:47:09:91:F5:A2:A5:0F
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/uUhRCuQauFZ3msGG8EcJkfWipQ8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e3/5aa303-59f7-4f99-907d-83a25a94c77f/1/uUhRCuQauFZ3msGG8EcJkfWipQ8.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/e3/5aa303-59f7-4f99-907d-83a25a94c77f/1/uUhRCuQauFZ3msGG8EcJkfWipQ8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
83:16:52:2c:e8:43:17:22:6d:f0:d7:d1:cc:6e:8c:c2:54:d7:
2c:9c:a5:93:ac:70:6f:89:95:62:f5:e8:9b:70:c5:63:23:68:
9c:5d:71:0c:3a:c2:65:a1:13:7f:d3:d5:0b:9f:91:df:b9:0c:
62:b4:24:43:ab:c2:27:5d:f1:68:35:4b:c8:d1:71:66:5f:d7:
6d:dc:9b:a7:45:47:7f:b2:fa:1d:09:9a:f6:20:ce:b8:ca:08:
cd:d4:02:e7:c9:92:1b:7c:75:e3:80:c2:f1:24:fa:fe:99:4f:
71:ef:76:03:7c:89:f1:b3:f7:aa:41:e3:e6:91:40:b6:82:6f:
b3:8a:5c:b5:8d:c5:58:bb:56:95:2a:9a:f0:bf:82:9f:e2:e1:
2d:77:60:e2:96:17:da:f8:28:05:18:43:c1:9e:5a:23:b5:21:
fe:93:ed:95:4c:48:57:83:6f:91:ba:a1:78:13:7f:b9:da:d6:
16:9a:73:d7:2f:0c:eb:58:44:da:1c:bb:63:2c:8e:c4:a7:46:
e9:34:c5:4c:a7:b4:51:b6:93:55:b1:2e:0b:b8:8d:88:ac:e8:
b7:d5:ca:c3:a5:45:83:44:f5:85:00:12:d4:93:4c:47:3a:37:
ae:d6:53:4f:28:03:e3:63:81:7c:72:ae:ef:26:20:a6:2c:c5:
a2:cb:fa:22
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon May 5 17:11:32 2025 by rpki-client