Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f2/bd6f18-ea7d-43c4-9c85-87a3f3b31150/1/UTJvq7Elb6Aid-XuA0t5kf8xhaU.mft
File: UTJvq7Elb6Aid-XuA0t5kf8xhaU.mft (raw, json)
Hash identifier: Ma8B6qtdfiKOOyHPMWabB5PMHdF3e2gxYELSlKgdm+c=
Subject key identifier: BB:B4:85:31:1A:63:60:F0:75:A7:B3:C6:1D:65:5D:D5:09:EF:73:D9
Authority key identifier: 51:32:6F:AB:B1:25:6F:A0:22:77:E5:EE:03:4B:79:91:FF:31:85:A5
Certificate issuer: /CN=51326fabb1256fa02277e5ee034b7991ff3185a5
Certificate serial: 0196A878DD97F83C53BFEC03DD67877D657B
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/UTJvq7Elb6Aid-XuA0t5kf8xhaU.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/f2/bd6f18-ea7d-43c4-9c85-87a3f3b31150/1/UTJvq7Elb6Aid-XuA0t5kf8xhaU.mft
Manifest number: 0C8F
Signing time: Wed 07 May 2025 02:00:15 +0000
Manifest this update: Wed 07 May 2025 02:00:15 +0000
Manifest next update: Thu 08 May 2025 02:00:15 +0000
Files and hashes: 1: SQfm3QwC2tHmk2VBtPYJeKQFTeY.roa (hash: frBtQ30uw1pKksB5hSNObJ1YjWSC5Q2+axgbgM633UM=)
2: UTJvq7Elb6Aid-XuA0t5kf8xhaU.crl (hash: t/EV4eNf54h7a+lbcG6dRiEgFryZ9JQMGSzeKEq8AbY=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/f2/bd6f18-ea7d-43c4-9c85-87a3f3b31150/1/UTJvq7Elb6Aid-XuA0t5kf8xhaU.crl
rsync://rpki.ripe.net/repository/DEFAULT/f2/bd6f18-ea7d-43c4-9c85-87a3f3b31150/1/UTJvq7Elb6Aid-XuA0t5kf8xhaU.mft
rsync://rpki.ripe.net/repository/DEFAULT/UTJvq7Elb6Aid-XuA0t5kf8xhaU.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 07 May 2025 23:00:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:a8:78:dd:97:f8:3c:53:bf:ec:03:dd:67:87:7d:65:7b
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=51326fabb1256fa02277e5ee034b7991ff3185a5
Validity
Not Before: May 7 02:00:15 2025 GMT
Not After : May 8 02:00:15 2025 GMT
Subject: CN=bbb485311a6360f075a7b3c61d655dd509ef73d9
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9b:fb:00:2f:df:40:50:47:30:44:de:ff:c4:00:
11:74:b6:7c:fb:45:4c:7f:af:19:ba:11:70:58:b6:
2e:d7:50:c9:9a:a1:91:b5:0d:5f:3b:fb:74:c1:8f:
94:87:c7:87:d9:b4:30:12:d1:13:49:74:45:a8:fa:
d8:51:95:17:ea:9c:97:b9:26:d7:ac:35:d2:67:57:
4b:07:09:bf:99:c2:0b:de:ca:fd:cc:34:62:c5:0f:
60:9e:7a:4e:be:f2:83:9f:01:eb:86:5a:8d:8e:75:
c9:e9:c1:52:50:16:f9:18:dd:51:cb:3d:41:8d:7a:
77:4f:65:e6:0d:55:ed:b4:85:6a:3e:05:0e:e7:e5:
30:1e:35:f7:f4:02:d9:fa:0d:9c:5c:56:6d:2e:22:
51:26:19:3c:4f:2a:73:d7:e2:1b:94:72:88:a8:94:
65:be:11:9b:7a:f5:13:3d:1a:1d:93:6c:df:a9:6f:
b3:e5:84:e0:cf:18:58:8c:28:52:d7:1a:26:b3:ea:
f4:95:02:b1:69:b5:e0:44:8f:4b:93:ba:8f:c8:27:
2b:c8:20:6c:d8:9d:ef:0f:53:1f:54:e8:10:c0:34:
e7:7b:e0:ef:95:b4:b2:2c:6b:5b:bf:9c:c9:f6:0a:
18:a2:8b:a2:77:a9:09:8a:66:a4:75:22:e8:c9:b0:
55:21
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
BB:B4:85:31:1A:63:60:F0:75:A7:B3:C6:1D:65:5D:D5:09:EF:73:D9
X509v3 Authority Key Identifier:
keyid:51:32:6F:AB:B1:25:6F:A0:22:77:E5:EE:03:4B:79:91:FF:31:85:A5
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/UTJvq7Elb6Aid-XuA0t5kf8xhaU.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f2/bd6f18-ea7d-43c4-9c85-87a3f3b31150/1/UTJvq7Elb6Aid-XuA0t5kf8xhaU.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/f2/bd6f18-ea7d-43c4-9c85-87a3f3b31150/1/UTJvq7Elb6Aid-XuA0t5kf8xhaU.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
49:10:2b:b7:a2:b1:57:aa:90:5e:ed:50:2b:eb:7a:ec:b4:d4:
c2:7c:37:49:89:07:45:26:75:1c:ea:76:fc:4e:71:e7:47:4c:
ca:c5:2c:0f:65:40:06:dd:23:b0:e5:d8:9d:0f:b4:84:73:19:
80:bc:b1:6b:98:fb:cd:ac:1c:ef:f8:b3:35:88:6a:da:74:17:
26:1e:ff:e1:71:39:bd:ab:24:b9:2e:ff:c7:11:a1:3e:5c:3f:
8f:9d:ef:7f:63:e1:d3:10:a6:d2:13:01:6e:0b:55:cf:de:68:
a6:77:78:d9:79:9e:13:c8:64:54:41:40:0d:f9:c9:78:39:9e:
ad:30:60:fd:8a:53:fa:b7:15:90:f6:09:5a:f9:8d:b0:6e:00:
c6:0b:13:88:70:66:0c:07:3e:c5:8b:a0:99:59:47:e6:44:81:
9c:5b:a6:d9:75:77:b6:e8:b6:4e:3d:64:73:e4:87:cf:15:e2:
0a:7b:6c:db:64:c8:e7:d2:b5:a7:4b:94:f9:60:cd:46:d6:48:
53:30:c5:eb:59:54:0c:38:e7:52:09:14:a8:6e:d6:e8:ce:44:
61:9e:fc:e1:61:86:c9:86:91:98:a0:22:1c:b1:2e:02:f1:d3:
95:0d:55:99:54:82:f9:75:d7:6d:4d:dc:7b:ea:f7:ad:43:97:
a3:5a:27:e1
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed May 7 09:32:54 2025 by rpki-client