Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/18/c46d1e-987d-4f65-b11b-2e2cd6435106/1/upfBVFbrYAQD7PuxbCDggWCUT48.mft
File: upfBVFbrYAQD7PuxbCDggWCUT48.mft (raw, json)
Hash identifier: RiKKH4m2n97rsT1KTwDpCA4kMwwO/Ajyhk3T0jvyxvg=
Subject key identifier: B4:E9:26:AD:00:39:B4:DB:92:38:F2:C4:72:D6:15:C8:90:C3:56:55
Authority key identifier: BA:97:C1:54:56:EB:60:04:03:EC:FB:B1:6C:20:E0:81:60:94:4F:8F
Certificate issuer: /CN=ba97c15456eb600403ecfbb16c20e08160944f8f
Certificate serial: 0196783199FE9AEEEF1F982A6F2C82417355
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/upfBVFbrYAQD7PuxbCDggWCUT48.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/18/c46d1e-987d-4f65-b11b-2e2cd6435106/1/upfBVFbrYAQD7PuxbCDggWCUT48.mft
Manifest number: 1199
Signing time: Sun 27 Apr 2025 17:00:38 +0000
Manifest this update: Sun 27 Apr 2025 17:00:38 +0000
Manifest next update: Mon 28 Apr 2025 17:00:38 +0000
Files and hashes: 1: SIndVbkKUXy4BUQozeoniwpZDAY.roa (hash: w+S8wcJNHWfC84514ZDYZ2EFFwmdH9ulSWKDE7QHbmQ=)
2: upfBVFbrYAQD7PuxbCDggWCUT48.crl (hash: 6OZ1DeKoqPAiMlZV40+FsjOS9ieQTlMZzPJyPm3WnIw=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/18/c46d1e-987d-4f65-b11b-2e2cd6435106/1/upfBVFbrYAQD7PuxbCDggWCUT48.crl
rsync://rpki.ripe.net/repository/DEFAULT/18/c46d1e-987d-4f65-b11b-2e2cd6435106/1/upfBVFbrYAQD7PuxbCDggWCUT48.mft
rsync://rpki.ripe.net/repository/DEFAULT/upfBVFbrYAQD7PuxbCDggWCUT48.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 28 Apr 2025 16:00:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:78:31:99:fe:9a:ee:ef:1f:98:2a:6f:2c:82:41:73:55
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=ba97c15456eb600403ecfbb16c20e08160944f8f
Validity
Not Before: Apr 27 17:00:38 2025 GMT
Not After : Apr 28 17:00:38 2025 GMT
Subject: CN=b4e926ad0039b4db9238f2c472d615c890c35655
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e7:5a:45:c9:44:b5:df:f1:07:d6:9c:9f:43:5c:
8d:de:4c:0b:52:4d:15:77:7f:4b:ca:1d:12:83:f0:
7b:ad:a6:43:55:f6:f3:22:a6:7d:75:68:48:ac:06:
e4:7a:3d:e9:ca:e9:e9:65:f5:06:aa:31:20:13:9c:
89:dc:26:d8:60:86:33:47:44:6c:d1:84:59:d0:06:
bb:eb:12:bf:8f:b9:f1:f8:fc:70:05:f6:2c:41:2f:
89:17:56:e1:11:52:29:5a:e4:d7:ca:34:88:d4:6b:
54:fe:7c:b8:81:0b:39:7e:d1:bc:b0:0b:ce:28:25:
fa:ff:dd:65:4d:c9:ce:b3:37:94:43:4e:02:e1:84:
58:18:13:50:fd:21:35:21:d4:8c:2b:78:a6:13:39:
06:37:69:94:57:0c:ab:3b:eb:f9:62:4c:17:45:71:
22:d7:53:23:b7:55:45:21:70:8b:f1:6d:4a:52:b6:
20:06:55:65:35:b2:c0:68:11:92:a3:26:63:4f:31:
fc:e5:f1:e4:6e:59:79:03:05:80:36:2f:e9:11:15:
bb:3c:ed:56:38:4d:62:c6:8c:6b:7e:88:f1:6c:15:
ef:73:01:14:58:c8:ae:64:a2:0b:92:e7:8f:3e:3b:
0f:45:13:12:07:2d:b6:fd:aa:ed:19:3f:1a:bd:53:
f2:a5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B4:E9:26:AD:00:39:B4:DB:92:38:F2:C4:72:D6:15:C8:90:C3:56:55
X509v3 Authority Key Identifier:
keyid:BA:97:C1:54:56:EB:60:04:03:EC:FB:B1:6C:20:E0:81:60:94:4F:8F
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/upfBVFbrYAQD7PuxbCDggWCUT48.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/18/c46d1e-987d-4f65-b11b-2e2cd6435106/1/upfBVFbrYAQD7PuxbCDggWCUT48.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/18/c46d1e-987d-4f65-b11b-2e2cd6435106/1/upfBVFbrYAQD7PuxbCDggWCUT48.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
8f:9c:3c:2b:b8:9b:0a:8e:75:db:d3:a6:0d:a0:aa:66:4f:24:
3f:3b:c6:82:29:91:b6:e9:e1:95:26:80:df:5b:3a:a0:f0:80:
4f:8c:02:49:fd:11:e5:10:8d:12:b9:3c:35:10:ab:77:c1:cf:
39:84:39:a3:37:82:43:6f:21:ab:e6:25:1c:19:90:f7:08:f9:
a8:9d:c1:b2:39:03:d7:49:1f:18:7d:2e:2c:67:ce:ae:f5:3c:
3d:ea:52:e5:40:a1:9c:9b:9f:b0:b8:0a:0c:5c:b2:16:a6:8c:
93:d7:cb:fe:6d:16:73:43:93:c3:e6:7a:fc:cc:34:8d:c0:13:
e6:2e:b3:f3:79:dd:2b:0a:55:68:6a:fb:ef:ff:13:5f:0c:e0:
50:ee:0d:a7:c9:ea:b4:e0:37:13:91:02:5c:af:f2:10:dd:8e:
2a:cc:05:cc:84:a2:25:3e:7f:68:89:cf:31:7e:9b:64:37:8d:
59:60:9c:71:c5:e6:0a:c3:86:e9:6b:ab:1c:29:15:b9:4a:ef:
2d:2d:d7:ee:b1:f8:2e:9d:d2:70:2e:f0:cd:e8:88:f5:53:f5:
e3:17:7e:4b:32:c9:70:a1:8b:24:7d:39:4e:ca:70:42:0a:31:
6b:25:dd:57:0d:33:11:0b:4a:b4:25:66:9d:90:31:59:c5:01:
c0:4b:a8:8b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 28 02:13:01 2025 by rpki-client