Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f4/55a277-036e-4737-9af1-d3bec06ac8e1/1/ueqpmxtVtOULXZ7M3uzfOJJHNTk.mft
File: ueqpmxtVtOULXZ7M3uzfOJJHNTk.mft (raw, json)
Hash identifier: DPbRNOi6lm5Qd1IPtUPbRjyyqa3X9ZulxhM/GCTTZUI=
Subject key identifier: 70:26:36:DD:5D:3B:99:81:66:DD:8B:F5:AE:C2:DE:56:8F:04:38:0C
Authority key identifier: B9:EA:A9:9B:1B:55:B4:E5:0B:5D:9E:CC:DE:EC:DF:38:92:47:35:39
Certificate issuer: /CN=b9eaa99b1b55b4e50b5d9eccdeecdf3892473539
Certificate serial: 0196BCA4FB09A1BF8C06C25F863969E31396
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/ueqpmxtVtOULXZ7M3uzfOJJHNTk.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/f4/55a277-036e-4737-9af1-d3bec06ac8e1/1/ueqpmxtVtOULXZ7M3uzfOJJHNTk.mft
Manifest number: 1536
Signing time: Sun 11 May 2025 00:00:50 +0000
Manifest this update: Sun 11 May 2025 00:00:50 +0000
Manifest next update: Mon 12 May 2025 00:00:50 +0000
Files and hashes: 1: LLY-3_fqqLwuU8xUzGv0VRuhlCE.roa (hash: 4AsxSz12Bf5YH8H2MmV75bbJxBPmSJ6rFj3b/HihsTo=)
2: ueqpmxtVtOULXZ7M3uzfOJJHNTk.crl (hash: NC5PYDZMCGT8Rub15TuPndta8DcfjJq02JbEQvsj4kA=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/f4/55a277-036e-4737-9af1-d3bec06ac8e1/1/ueqpmxtVtOULXZ7M3uzfOJJHNTk.crl
rsync://rpki.ripe.net/repository/DEFAULT/f4/55a277-036e-4737-9af1-d3bec06ac8e1/1/ueqpmxtVtOULXZ7M3uzfOJJHNTk.mft
rsync://rpki.ripe.net/repository/DEFAULT/ueqpmxtVtOULXZ7M3uzfOJJHNTk.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 11 May 2025 22:00:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:bc:a4:fb:09:a1:bf:8c:06:c2:5f:86:39:69:e3:13:96
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=b9eaa99b1b55b4e50b5d9eccdeecdf3892473539
Validity
Not Before: May 11 00:00:50 2025 GMT
Not After : May 12 00:00:50 2025 GMT
Subject: CN=702636dd5d3b998166dd8bf5aec2de568f04380c
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ea:8d:76:3d:b7:af:94:2a:89:fa:0e:21:8b:9e:
f7:95:4e:03:f9:0b:88:93:58:7c:dc:b6:39:41:ae:
27:43:f9:25:46:3d:90:b9:fa:35:3b:20:b0:73:4c:
b4:d0:9d:a6:a9:fd:29:f5:58:4b:a0:00:31:3c:03:
b1:ac:dc:02:83:af:5b:82:a9:ea:fa:c3:27:08:5f:
6e:72:30:37:3b:c1:31:01:7a:2c:cc:ca:f5:09:d5:
9b:49:68:81:65:a5:77:b7:35:f5:59:96:2a:c0:42:
c8:7f:5b:bf:74:56:bf:b6:30:ac:44:2b:ca:db:20:
17:41:41:f4:1d:f7:c0:57:da:17:d7:bd:61:8d:81:
be:0a:51:83:f9:db:07:53:c2:2c:80:9e:d6:8c:c8:
33:4a:de:c3:af:50:d5:54:2f:f2:b5:bd:eb:4a:b2:
3d:5f:20:43:b6:04:0e:c9:ec:ed:4f:bf:b5:e1:a3:
45:c6:50:31:0f:29:68:05:2e:f2:85:14:58:f3:0e:
83:f0:e2:14:d6:95:01:bd:67:03:9a:61:c8:e3:04:
bc:fa:d5:d4:ab:a1:39:93:14:e4:e9:93:56:65:e6:
14:2a:ca:13:11:47:f4:c5:0a:44:28:d1:e6:60:cd:
53:d2:f9:15:c2:1a:9f:04:3a:7a:1c:6a:73:ab:40:
7e:ab
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
70:26:36:DD:5D:3B:99:81:66:DD:8B:F5:AE:C2:DE:56:8F:04:38:0C
X509v3 Authority Key Identifier:
keyid:B9:EA:A9:9B:1B:55:B4:E5:0B:5D:9E:CC:DE:EC:DF:38:92:47:35:39
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ueqpmxtVtOULXZ7M3uzfOJJHNTk.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f4/55a277-036e-4737-9af1-d3bec06ac8e1/1/ueqpmxtVtOULXZ7M3uzfOJJHNTk.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/f4/55a277-036e-4737-9af1-d3bec06ac8e1/1/ueqpmxtVtOULXZ7M3uzfOJJHNTk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
25:b2:0b:32:7f:46:49:42:70:33:86:35:61:69:32:d8:e1:ae:
d6:f2:56:fd:bd:c7:0f:46:c2:f3:c1:9a:04:74:a4:e5:50:fb:
41:4d:b5:9a:29:32:7f:16:16:5c:1d:83:0a:0e:3d:79:1e:53:
67:b8:ef:45:98:2e:8e:b9:78:cb:0e:b6:05:98:80:4f:c6:7e:
38:59:e9:7c:21:68:cb:c2:0e:2b:f2:02:40:7e:d0:70:a0:4b:
a9:8f:3d:ed:58:ce:8c:0d:60:8d:55:76:a1:89:07:65:c8:7c:
8b:55:29:c4:82:a3:10:23:fc:63:05:52:83:54:f4:4e:1b:67:
6b:a8:b8:60:ff:c3:ab:61:33:c0:bf:51:e0:2d:9e:b5:87:f4:
fa:78:ec:56:22:08:4e:76:ee:98:ef:bf:f1:b1:c0:84:64:3e:
d4:e3:8a:42:a9:33:d3:c3:ee:cb:7c:44:45:7f:30:0a:dd:39:
7f:b8:39:52:73:b6:7d:00:1e:64:79:48:cc:59:3b:3c:d4:09:
c6:8f:cb:40:eb:7a:a6:cd:5b:ad:da:c5:a8:21:21:32:11:3a:
3e:c8:5c:42:af:27:82:45:32:91:14:3f:5b:64:ea:98:1f:c0:
0b:1e:92:6b:df:e4:01:ac:94:66:f6:3b:03:a3:20:4d:14:d9:
90:a8:c8:fe
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun May 11 06:11:48 2025 by rpki-client