Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/fc/a56b2d-f795-495d-9c48-6f67b647722d/1/uPrah6dvKfguJaMXnno4zwxrAwA.mft
File: uPrah6dvKfguJaMXnno4zwxrAwA.mft (raw, json)
Hash identifier: YvbmRrPmrRJn2O7ICC0BCXZ1c8CcOYa6aNqAyIVeaQM=
Subject key identifier: 10:C3:13:F3:42:D2:AB:E5:92:4C:92:94:D0:B6:9C:68:3C:10:E3:CB
Authority key identifier: B8:FA:DA:87:A7:6F:29:F8:2E:25:A3:17:9E:7A:38:CF:0C:6B:03:00
Certificate issuer: /CN=b8fada87a76f29f82e25a3179e7a38cf0c6b0300
Certificate serial: 0196BA7F638ADAE614A5EB8DBB62D9A364B2
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/uPrah6dvKfguJaMXnno4zwxrAwA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/fc/a56b2d-f795-495d-9c48-6f67b647722d/1/uPrah6dvKfguJaMXnno4zwxrAwA.mft
Manifest number: 1501
Signing time: Sat 10 May 2025 14:00:32 +0000
Manifest this update: Sat 10 May 2025 14:00:32 +0000
Manifest next update: Sun 11 May 2025 14:00:32 +0000
Files and hashes: 1: qMZm8Udrq7vD5T2yYBAeB18Ev8A.roa (hash: z2089CzZPnbakpAVa3XOh5ZgRIHqWKGPuJw64Jno6FU=)
2: uPrah6dvKfguJaMXnno4zwxrAwA.crl (hash: kThBeQwB/q9EIZrFqLQ6WvY+qpEnAgZyIfjd25FZm7Q=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/fc/a56b2d-f795-495d-9c48-6f67b647722d/1/uPrah6dvKfguJaMXnno4zwxrAwA.crl
rsync://rpki.ripe.net/repository/DEFAULT/fc/a56b2d-f795-495d-9c48-6f67b647722d/1/uPrah6dvKfguJaMXnno4zwxrAwA.mft
rsync://rpki.ripe.net/repository/DEFAULT/uPrah6dvKfguJaMXnno4zwxrAwA.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 11 May 2025 13:00:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:ba:7f:63:8a:da:e6:14:a5:eb:8d:bb:62:d9:a3:64:b2
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=b8fada87a76f29f82e25a3179e7a38cf0c6b0300
Validity
Not Before: May 10 14:00:32 2025 GMT
Not After : May 11 14:00:32 2025 GMT
Subject: CN=10c313f342d2abe5924c9294d0b69c683c10e3cb
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:f3:7b:0e:44:be:8a:db:13:af:bc:fc:b5:f6:09:
14:6e:70:3c:18:8f:f9:89:c5:63:fa:cd:79:e7:21:
58:ea:99:72:cc:2c:69:1e:a6:07:41:15:8d:db:d8:
43:62:df:98:d3:a4:2e:01:ba:65:15:cc:7f:a6:f0:
80:c8:47:46:74:72:7a:64:a2:28:b9:f0:f0:b3:16:
07:8d:c2:2a:d0:f3:a1:7b:2b:46:fb:59:4a:73:09:
df:72:e8:ec:d5:41:d7:80:f4:93:a2:ae:ec:0b:3c:
a4:27:9b:ce:3d:b1:e5:36:38:58:f1:12:81:3f:86:
f1:92:89:d7:f2:60:88:0c:7e:7f:8e:63:f7:be:67:
1f:77:92:6b:8e:e5:87:b7:b8:70:cf:2d:8c:49:64:
e9:03:bc:32:87:9f:1d:03:a4:3e:10:97:62:5c:67:
52:5b:97:25:22:cb:89:b4:69:d5:a4:ed:0d:63:40:
f6:a5:74:74:ad:65:c8:d1:cd:f6:f3:dc:d3:f0:1c:
be:18:85:41:22:c6:e0:d0:5c:be:79:84:f1:aa:d5:
2e:2b:d0:25:1c:83:17:30:44:db:2d:6c:e8:65:c6:
fd:7f:b8:60:ec:73:4c:75:9e:be:95:38:cd:32:97:
f3:80:04:50:48:69:54:36:57:7b:aa:cd:c6:89:3f:
20:db
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
10:C3:13:F3:42:D2:AB:E5:92:4C:92:94:D0:B6:9C:68:3C:10:E3:CB
X509v3 Authority Key Identifier:
keyid:B8:FA:DA:87:A7:6F:29:F8:2E:25:A3:17:9E:7A:38:CF:0C:6B:03:00
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/uPrah6dvKfguJaMXnno4zwxrAwA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/fc/a56b2d-f795-495d-9c48-6f67b647722d/1/uPrah6dvKfguJaMXnno4zwxrAwA.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/fc/a56b2d-f795-495d-9c48-6f67b647722d/1/uPrah6dvKfguJaMXnno4zwxrAwA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
91:4a:42:a6:f7:f1:ca:e4:94:0f:80:bd:d0:2a:43:24:ad:7b:
ee:1f:f6:16:2f:de:b7:62:a0:0a:76:a2:f1:7a:f0:41:1f:19:
98:4d:74:ae:31:6e:da:17:bb:28:a3:cc:f8:47:84:57:00:71:
d6:c7:b8:45:a3:9e:5b:75:82:c2:c3:16:85:7e:b2:44:fe:0a:
b4:6d:21:1e:6e:a4:a4:14:70:46:4d:c0:18:06:fd:ad:9a:3e:
b7:53:65:47:fb:ae:56:5a:ca:b2:5b:d5:43:48:9e:63:26:09:
31:ef:8b:5d:b9:a5:a8:f6:b0:20:f5:7d:a1:70:f8:51:55:8c:
cd:65:f5:da:44:62:95:96:6f:7f:94:00:40:12:b9:a7:ff:54:
25:48:c0:82:a8:35:5e:f0:2c:87:a1:06:e9:d6:04:8f:9e:00:
f1:44:86:5c:c7:78:d8:89:b9:b0:bb:a7:19:1c:cc:5d:75:2c:
d8:77:29:19:cd:a2:71:d3:55:40:c9:64:26:3a:ff:75:e7:1c:
0a:f3:3e:c0:74:12:d1:b8:1b:06:24:e1:c8:26:37:c2:6e:fc:
5e:44:a9:16:e3:4d:4e:0f:94:18:bd:86:ed:47:4d:e9:ea:ea:
51:74:a1:bd:c9:95:e9:98:40:c7:39:4e:bc:08:0f:8b:45:5f:
73:05:70:d4
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat May 10 19:58:49 2025 by rpki-client