Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/16/b79871-b1dd-4e6e-95e7-de025e6f8589/1/uzAVV2TLLuD17u_N9Sp7EtNy7d0.mft
File: uzAVV2TLLuD17u_N9Sp7EtNy7d0.mft (raw, json)
Hash identifier: r+Mq42mqYvCWfGHXKViy42s0yB7U+SQslfkcRiY0IBM=
Subject key identifier: 3B:0C:57:00:4A:69:1C:6A:B3:04:69:49:55:C8:1B:4B:77:F8:2D:EE
Authority key identifier: BB:30:15:57:64:CB:2E:E0:F5:EE:EF:CD:F5:2A:7B:12:D3:72:ED:DD
Certificate issuer: /CN=bb30155764cb2ee0f5eeefcdf52a7b12d372eddd
Certificate serial: 01967A8DB8A63CF8740E1E3EEA39E549BAB3
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/uzAVV2TLLuD17u_N9Sp7EtNy7d0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/16/b79871-b1dd-4e6e-95e7-de025e6f8589/1/uzAVV2TLLuD17u_N9Sp7EtNy7d0.mft
Manifest number: 0D94
Signing time: Mon 28 Apr 2025 04:00:30 +0000
Manifest this update: Mon 28 Apr 2025 04:00:30 +0000
Manifest next update: Tue 29 Apr 2025 04:00:30 +0000
Files and hashes: 1: LUeFE-e9M56hGD7W3dr7iEaRzQc.roa (hash: +d9SvNclOTnQ6lkDZgYeQTKUTYMS6VbA7XWWCAaY2o8=)
2: uzAVV2TLLuD17u_N9Sp7EtNy7d0.crl (hash: C6B45RLOGgoaHXVCb1SoC+H1csbe5OD4RuyA1Zq6lA8=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/16/b79871-b1dd-4e6e-95e7-de025e6f8589/1/uzAVV2TLLuD17u_N9Sp7EtNy7d0.crl
rsync://rpki.ripe.net/repository/DEFAULT/16/b79871-b1dd-4e6e-95e7-de025e6f8589/1/uzAVV2TLLuD17u_N9Sp7EtNy7d0.mft
rsync://rpki.ripe.net/repository/DEFAULT/uzAVV2TLLuD17u_N9Sp7EtNy7d0.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 29 Apr 2025 04:00:30 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:7a:8d:b8:a6:3c:f8:74:0e:1e:3e:ea:39:e5:49:ba:b3
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=bb30155764cb2ee0f5eeefcdf52a7b12d372eddd
Validity
Not Before: Apr 28 04:00:30 2025 GMT
Not After : Apr 29 04:00:30 2025 GMT
Subject: CN=3b0c57004a691c6ab304694955c81b4b77f82dee
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a6:42:7f:b9:d0:36:94:26:56:06:58:24:68:70:
e7:5a:18:77:6d:53:d8:3d:d9:7d:a8:ce:32:df:b8:
76:00:9d:57:0c:da:2b:39:d9:e8:40:76:3c:cc:18:
8e:f3:d2:8e:66:51:49:e0:2d:41:7b:1a:29:47:75:
3f:42:5f:0a:4f:2a:a4:e6:f0:be:5d:ee:1d:e5:37:
04:3c:e3:b5:47:b4:78:33:1a:71:a2:62:8c:22:69:
ce:3c:d0:e3:93:cc:c7:87:9f:14:dc:21:e7:ea:2e:
37:e1:c4:c3:bc:d1:70:59:3a:b6:1c:fe:40:15:12:
be:1e:91:dd:6d:13:e7:38:a6:e2:28:3c:80:df:10:
c7:a6:e4:b6:5d:62:7e:fc:1f:03:64:8e:97:f8:6b:
d8:55:e9:ea:23:b8:78:c0:66:63:fd:e4:f0:39:29:
a9:12:25:76:09:88:07:e9:1e:bd:81:29:c6:10:b2:
49:6f:e9:0a:3e:19:0f:99:9f:ce:af:15:7d:0f:05:
ce:e7:5f:e9:89:26:e8:ae:95:65:34:f4:eb:c9:92:
5e:3d:9c:c8:1d:5b:ba:c2:92:6b:bb:1d:a6:d1:d4:
ea:8f:a6:50:ec:ee:8a:6e:17:62:47:05:de:76:45:
ed:48:f4:b2:41:be:42:05:89:1a:9e:92:cb:48:d0:
9d:5f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
3B:0C:57:00:4A:69:1C:6A:B3:04:69:49:55:C8:1B:4B:77:F8:2D:EE
X509v3 Authority Key Identifier:
keyid:BB:30:15:57:64:CB:2E:E0:F5:EE:EF:CD:F5:2A:7B:12:D3:72:ED:DD
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/uzAVV2TLLuD17u_N9Sp7EtNy7d0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/16/b79871-b1dd-4e6e-95e7-de025e6f8589/1/uzAVV2TLLuD17u_N9Sp7EtNy7d0.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/16/b79871-b1dd-4e6e-95e7-de025e6f8589/1/uzAVV2TLLuD17u_N9Sp7EtNy7d0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
3c:dc:5a:de:cd:66:bd:dd:4a:36:63:01:eb:dc:c9:a1:c3:8f:
24:c8:93:2a:9a:22:56:7d:e3:3b:da:fd:b1:1b:03:e0:55:6c:
d6:98:30:ac:34:fc:47:e3:70:08:e7:41:b1:90:4e:fd:ce:05:
e2:53:4c:38:2d:f0:87:c5:f1:8d:b0:03:65:70:7d:49:9d:cb:
69:d3:84:ac:08:b7:9a:05:ca:35:20:be:e6:b7:d4:1b:bc:22:
49:be:bf:1d:31:99:10:97:2f:55:5c:7e:c7:9e:06:a9:7d:3d:
39:01:62:e6:17:48:3f:42:9b:24:b4:c6:3a:b7:46:4e:97:56:
8d:e1:90:d7:d2:ae:a3:5e:27:cc:11:6b:24:80:ad:4a:18:e6:
18:c2:b6:bf:7e:b2:ba:29:aa:22:13:07:1f:81:93:ca:5f:eb:
d9:3b:80:36:e6:b3:78:11:62:7a:52:78:f9:ad:35:7f:d2:72:
13:9d:7b:75:78:cf:02:25:73:50:cc:ee:f4:59:3b:17:d9:bc:
7b:14:e8:9e:45:2d:a2:42:f7:bc:94:47:44:65:2a:ea:35:29:
9f:cd:57:bd:09:7d:9c:44:c5:39:11:ce:0e:db:f4:93:fd:72:
7b:55:ae:67:20:31:a8:0f:a1:17:80:a8:9c:67:de:27:33:43:
9e:7b:74:db
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 28 14:28:11 2025 by rpki-client