Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e4/48ebf4-9722-45d6-ac75-553cb7769ca9/1/uUVnTwH-xWWXHJUPNRIWXEP_37Y.mft
File: uUVnTwH-xWWXHJUPNRIWXEP_37Y.mft (raw, json)
Hash identifier: PnQitWDm3AHXmHbXBx3OtSi/LK7Zmf01yJG9DaKdatA=
Subject key identifier: 43:6B:F5:EF:7B:12:3D:59:CE:B7:96:29:AF:B5:23:D3:B0:9B:76:CB
Authority key identifier: B9:45:67:4F:01:FE:C5:65:97:1C:95:0F:35:12:16:5C:43:FF:DF:B6
Certificate issuer: /CN=b945674f01fec565971c950f3512165c43ffdfb6
Certificate serial: 0196C3146C28745C74A6D5C613973BAE6A7A
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/uUVnTwH-xWWXHJUPNRIWXEP_37Y.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/e4/48ebf4-9722-45d6-ac75-553cb7769ca9/1/uUVnTwH-xWWXHJUPNRIWXEP_37Y.mft
Manifest number: 05C5
Signing time: Mon 12 May 2025 06:00:17 +0000
Manifest this update: Mon 12 May 2025 06:00:17 +0000
Manifest next update: Tue 13 May 2025 06:00:17 +0000
Files and hashes: 1: 2k6jA-zFKrnl3ANKucWtX3-DA-Y.roa (hash: +pS/y3RWSR6TxKFf5ZhZuo/zIgUD0Lt0+Wg4CPqr+Zg=)
2: uUVnTwH-xWWXHJUPNRIWXEP_37Y.crl (hash: NRV0Mi2YwkMb7ize7HYyS0FRLVJFjjg++Q6uGFkoj9U=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/e4/48ebf4-9722-45d6-ac75-553cb7769ca9/1/uUVnTwH-xWWXHJUPNRIWXEP_37Y.crl
rsync://rpki.ripe.net/repository/DEFAULT/e4/48ebf4-9722-45d6-ac75-553cb7769ca9/1/uUVnTwH-xWWXHJUPNRIWXEP_37Y.mft
rsync://rpki.ripe.net/repository/DEFAULT/uUVnTwH-xWWXHJUPNRIWXEP_37Y.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 13 May 2025 06:00:17 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:c3:14:6c:28:74:5c:74:a6:d5:c6:13:97:3b:ae:6a:7a
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=b945674f01fec565971c950f3512165c43ffdfb6
Validity
Not Before: May 12 06:00:17 2025 GMT
Not After : May 13 06:00:17 2025 GMT
Subject: CN=436bf5ef7b123d59ceb79629afb523d3b09b76cb
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ad:e7:cc:5a:8c:bd:3f:4b:fb:00:82:90:51:16:
f8:1f:0b:5f:4d:24:d3:d8:88:a9:4d:c3:62:4d:87:
35:1d:81:2e:72:c4:3c:52:2c:e5:5f:db:57:e4:31:
a1:ab:ff:c7:8b:22:a5:9b:b3:b8:f3:bb:32:82:a6:
33:3b:8f:1e:1a:96:36:37:be:46:6c:6c:d6:d0:1b:
66:ae:e0:2b:48:29:5b:a7:83:2e:82:95:d2:24:3f:
cd:30:18:c1:d4:b5:78:03:ba:3d:f9:13:72:47:fa:
56:16:07:98:01:53:c4:cb:11:2e:68:9d:fa:c8:bf:
29:91:25:71:95:64:70:58:ab:1e:bf:62:f7:f3:a3:
3b:55:fa:0a:93:6d:f1:c1:0e:49:87:9e:f9:88:30:
2c:4b:b3:28:1c:4c:50:97:a6:8a:25:f6:ab:3a:15:
95:0a:51:0a:1d:71:10:00:30:c0:31:98:a4:08:9d:
32:7b:a2:82:a8:84:94:2e:06:7f:c2:82:5e:44:71:
95:6d:bf:f6:48:07:13:f5:31:f3:9e:05:eb:22:b4:
40:69:07:05:4d:fb:d2:5e:7b:a8:0c:ac:07:2f:23:
ae:e1:f3:6b:e6:e4:10:fb:d1:aa:e0:da:b8:f6:ba:
50:6f:fe:36:05:39:91:4f:40:40:36:84:75:9e:db:
bf:6b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
43:6B:F5:EF:7B:12:3D:59:CE:B7:96:29:AF:B5:23:D3:B0:9B:76:CB
X509v3 Authority Key Identifier:
keyid:B9:45:67:4F:01:FE:C5:65:97:1C:95:0F:35:12:16:5C:43:FF:DF:B6
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/uUVnTwH-xWWXHJUPNRIWXEP_37Y.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e4/48ebf4-9722-45d6-ac75-553cb7769ca9/1/uUVnTwH-xWWXHJUPNRIWXEP_37Y.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/e4/48ebf4-9722-45d6-ac75-553cb7769ca9/1/uUVnTwH-xWWXHJUPNRIWXEP_37Y.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
0c:aa:af:3f:07:f5:22:67:59:d7:17:d8:a9:ec:e9:c8:59:e8:
94:11:3c:7a:cc:af:52:89:ab:4a:57:bf:2c:53:5f:97:10:2b:
04:29:0b:07:bd:73:f5:67:72:ed:87:4a:84:8d:2b:30:02:55:
b2:b9:60:b0:fa:58:80:88:74:8f:38:6e:2a:75:f2:0c:18:f5:
1d:c4:a7:21:01:0a:71:11:39:d7:a3:2c:bf:14:bd:3a:36:f1:
1e:98:5d:6b:09:a1:81:41:13:2c:55:c2:62:1a:a5:eb:e1:e0:
f6:be:6f:3a:a6:52:8c:3d:49:46:06:4e:07:c9:12:74:3e:1d:
a7:3a:e5:d7:26:f3:12:a4:7a:e7:23:d8:be:52:b6:08:b9:2d:
00:df:1a:45:5f:4d:57:19:39:26:f9:33:c3:a0:e8:b8:77:72:
89:a2:23:ce:b3:70:78:9a:97:18:a9:af:da:08:44:73:69:93:
8d:3f:5f:54:c1:47:25:92:3f:73:ed:bc:e7:f2:71:c2:99:cd:
b1:0c:26:5d:72:a9:31:d5:dd:a5:99:f1:bd:0d:32:1a:3f:86:
61:fb:cc:34:76:c8:53:c2:98:18:6b:f0:93:21:50:e3:f4:5f:
96:d5:d4:d4:4d:29:42:cc:34:87:82:97:9f:2d:da:58:5c:2b:
d1:4f:9f:4b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon May 12 14:41:43 2025 by rpki-client