Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/fc/14f46c-0a36-4cc3-b091-7425b13d5cf8/1/ua8Z9KYNrxXvt-xB_Fn12mVZcuY.mft
File: ua8Z9KYNrxXvt-xB_Fn12mVZcuY.mft (raw, json)
Hash identifier: XQlPfrqDO0dbv0zi9RAz98Qw6DrAHzFOQwJVRoNxiIE=
Subject key identifier: 69:60:DF:E6:82:B7:12:33:97:28:55:2F:CE:47:F5:DF:CA:3E:02:9F
Authority key identifier: B9:AF:19:F4:A6:0D:AF:15:EF:B7:EC:41:FC:59:F5:DA:65:59:72:E6
Certificate issuer: /CN=b9af19f4a60daf15efb7ec41fc59f5da655972e6
Certificate serial: 0196BE5C4B937AC4298AE111F79FE5CCFBD1
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/ua8Z9KYNrxXvt-xB_Fn12mVZcuY.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/fc/14f46c-0a36-4cc3-b091-7425b13d5cf8/1/ua8Z9KYNrxXvt-xB_Fn12mVZcuY.mft
Manifest number: 090C
Signing time: Sun 11 May 2025 08:00:41 +0000
Manifest this update: Sun 11 May 2025 08:00:41 +0000
Manifest next update: Mon 12 May 2025 08:00:41 +0000
Files and hashes: 1: 2s76caLde7v2dsIuooS45-OE_SY.roa (hash: SfMU8ADtIuJJDH8Zngm2/B9pvSJn1Jkcdcg5vCFct6s=)
2: hAOrJ7n2bun5jkQeVJ9u3pREyw0.roa (hash: J5fmwTFLbZB76uCMtlFvn6lgAqKVEV1D5qVFE1f0+94=)
3: ua8Z9KYNrxXvt-xB_Fn12mVZcuY.crl (hash: 0/aIqwI4KmzvCD9ERrCxHYGWV2ctKn3eomXLsxZemWg=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/fc/14f46c-0a36-4cc3-b091-7425b13d5cf8/1/ua8Z9KYNrxXvt-xB_Fn12mVZcuY.crl
rsync://rpki.ripe.net/repository/DEFAULT/fc/14f46c-0a36-4cc3-b091-7425b13d5cf8/1/ua8Z9KYNrxXvt-xB_Fn12mVZcuY.mft
rsync://rpki.ripe.net/repository/DEFAULT/ua8Z9KYNrxXvt-xB_Fn12mVZcuY.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 12 May 2025 07:00:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:be:5c:4b:93:7a:c4:29:8a:e1:11:f7:9f:e5:cc:fb:d1
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=b9af19f4a60daf15efb7ec41fc59f5da655972e6
Validity
Not Before: May 11 08:00:41 2025 GMT
Not After : May 12 08:00:41 2025 GMT
Subject: CN=6960dfe682b712339728552fce47f5dfca3e029f
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cf:5b:f1:e2:6f:b7:ff:0d:8d:42:29:79:ee:25:
a5:36:33:e8:25:93:b7:5a:b9:f1:74:75:be:97:c1:
17:b5:2b:89:f8:a2:20:42:17:0f:8a:b6:fd:bc:7b:
cf:b6:8d:9c:33:02:e3:c3:8b:c3:3f:fd:eb:25:26:
f0:d3:a5:b3:a6:72:0b:70:47:66:37:0d:b0:80:86:
01:71:86:ab:2d:6b:0d:ee:d2:1c:fa:5b:0e:ba:71:
1c:61:04:ac:2e:b6:89:aa:f1:d3:c0:79:0a:3d:82:
7f:07:00:5f:09:d2:3a:7e:ae:97:8f:f1:d8:d1:ff:
93:fe:45:49:4e:73:2d:28:95:48:39:40:35:26:47:
33:43:19:d6:d8:12:2d:af:08:d4:3e:90:01:98:fe:
b2:da:bb:c7:45:ff:a2:6b:4a:59:d1:88:79:4a:4f:
25:c5:d4:4b:a5:19:65:b2:eb:ed:ae:95:f4:ac:af:
3f:fe:6b:a4:40:95:07:40:3d:88:f2:db:4f:60:72:
a2:67:eb:21:fc:11:72:13:ee:76:83:9a:e8:5c:70:
10:7f:2b:74:82:b0:ec:f3:2c:51:5e:44:20:7c:8b:
8f:d8:a3:5d:ec:a9:f5:18:a5:5e:ed:84:96:f4:3f:
6c:06:27:ac:e5:55:77:df:78:14:df:ee:27:fc:3c:
20:59
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
69:60:DF:E6:82:B7:12:33:97:28:55:2F:CE:47:F5:DF:CA:3E:02:9F
X509v3 Authority Key Identifier:
keyid:B9:AF:19:F4:A6:0D:AF:15:EF:B7:EC:41:FC:59:F5:DA:65:59:72:E6
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ua8Z9KYNrxXvt-xB_Fn12mVZcuY.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/fc/14f46c-0a36-4cc3-b091-7425b13d5cf8/1/ua8Z9KYNrxXvt-xB_Fn12mVZcuY.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/fc/14f46c-0a36-4cc3-b091-7425b13d5cf8/1/ua8Z9KYNrxXvt-xB_Fn12mVZcuY.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
b1:bc:28:d6:24:71:34:9d:53:a5:f1:18:a2:f0:ab:bf:3c:03:
5e:a3:d8:0d:ff:96:ad:1d:07:40:77:f5:c5:b8:fd:c6:4a:91:
b5:9f:ea:c7:4c:bc:65:7d:9b:a2:27:e2:98:ab:e2:56:86:bf:
c4:ed:13:77:99:ab:77:ef:f5:4b:1d:5b:7d:06:7a:04:7d:c7:
06:be:6e:f5:39:d8:4b:f8:15:62:92:b6:45:d4:45:c8:ac:84:
db:f9:d4:11:92:4b:22:14:6a:d9:8f:9d:37:fb:72:c0:0c:0d:
0d:b4:65:1b:8b:40:a9:f8:71:bf:8f:ae:17:12:f1:9d:5b:a3:
74:ab:4f:c2:84:c6:51:fa:8c:b3:ea:bd:ba:33:3a:1b:c8:8a:
85:91:58:9e:ef:8b:19:24:80:e7:1a:a6:50:e4:7f:36:03:64:
01:cd:99:75:b4:3d:8b:ed:e8:f4:3c:64:2f:77:59:6f:d4:79:
40:f3:dc:6c:10:c5:9c:f3:3a:4f:ff:6d:c3:92:48:64:bd:d7:
c7:a8:0d:88:89:36:88:45:49:ec:1f:71:14:c3:b3:3d:2e:44:
cf:f3:d7:89:ed:b9:70:72:0d:85:7f:15:20:86:25:26:b8:28:
ea:38:44:83:73:54:3e:eb:3b:b2:73:2e:44:f5:ec:5f:6a:a6:
23:70:a8:4a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun May 11 15:55:56 2025 by rpki-client