Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/39/a3ede6-bc31-4d00-925c-3d612f324996/1/uHt2aWhxYpblu6C86DhWrnFluLg.mft
File: uHt2aWhxYpblu6C86DhWrnFluLg.mft (raw, json)
Hash identifier: LJQnYJNVFL0Sdh78Z/GvTkW7Puy5U/U4rvQE0AOOJ7M=
Subject key identifier: 64:7B:4C:96:EE:16:79:FC:6D:D4:95:9B:C3:8B:C6:86:C3:09:5A:FF
Authority key identifier: B8:7B:76:69:68:71:62:96:E5:BB:A0:BC:E8:38:56:AE:71:65:B8:B8
Certificate issuer: /CN=b87b766968716296e5bba0bce83856ae7165b8b8
Certificate serial: 0196722F4E2A43DE3DF7C47753DB33DDF83D
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/uHt2aWhxYpblu6C86DhWrnFluLg.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/39/a3ede6-bc31-4d00-925c-3d612f324996/1/uHt2aWhxYpblu6C86DhWrnFluLg.mft
Manifest number: 1512
Signing time: Sat 26 Apr 2025 13:00:24 +0000
Manifest this update: Sat 26 Apr 2025 13:00:24 +0000
Manifest next update: Sun 27 Apr 2025 13:00:24 +0000
Files and hashes: 1: EMnxCwOEWhhPugjrcZ3jtYAbiJc.roa (hash: ioXKgGTre/pDJJ5LrVdx9gIh66mx4jxeELCjJSUVqnM=)
2: fEaK7ErCTm7Fivri0S-qqcMkyMU.roa (hash: IfCVzZn66SOIRBGzYSq04PtQc+Pau+GA8F1M7N7TehY=)
3: uHt2aWhxYpblu6C86DhWrnFluLg.crl (hash: cAhVaatWHIALFnNTFKiltNFpe+q4Rw4BWjkE9AyfgMg=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/39/a3ede6-bc31-4d00-925c-3d612f324996/1/uHt2aWhxYpblu6C86DhWrnFluLg.crl
rsync://rpki.ripe.net/repository/DEFAULT/39/a3ede6-bc31-4d00-925c-3d612f324996/1/uHt2aWhxYpblu6C86DhWrnFluLg.mft
rsync://rpki.ripe.net/repository/DEFAULT/uHt2aWhxYpblu6C86DhWrnFluLg.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 27 Apr 2025 13:00:24 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:72:2f:4e:2a:43:de:3d:f7:c4:77:53:db:33:dd:f8:3d
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=b87b766968716296e5bba0bce83856ae7165b8b8
Validity
Not Before: Apr 26 13:00:24 2025 GMT
Not After : Apr 27 13:00:24 2025 GMT
Subject: CN=647b4c96ee1679fc6dd4959bc38bc686c3095aff
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c2:91:fb:ef:12:9e:65:01:c2:05:16:39:23:5b:
52:89:e0:82:7a:ce:14:af:16:f6:04:68:c7:2e:f2:
08:fa:83:5b:af:c7:0b:4f:52:7f:a6:39:29:f3:e1:
ba:17:ce:6a:f7:f9:1c:20:c1:b4:3b:48:82:39:af:
95:e8:00:9e:dc:7b:fe:bb:75:ec:a9:c2:e4:15:15:
1c:40:32:86:d5:38:9f:38:c0:77:92:67:82:df:63:
41:ec:66:c1:a0:ce:b4:4c:c6:b7:d0:60:31:39:ed:
98:c7:1a:7e:b2:48:40:44:a7:07:9e:aa:c0:35:d7:
00:cd:8f:a8:46:30:0f:45:47:a4:65:10:74:16:59:
aa:d0:f3:6a:2f:4a:b1:b8:03:35:0e:3b:5a:9f:ec:
07:2e:71:0a:89:2f:2d:23:7d:18:79:94:89:6a:c1:
2f:c6:20:bf:73:b9:8b:72:35:7f:f4:9d:ec:f5:27:
28:53:b5:f4:3a:25:19:72:5c:03:aa:b4:2e:b2:92:
a7:c2:f3:2d:31:13:e2:57:54:da:5a:cb:10:e6:d2:
94:af:de:4d:19:ed:90:df:4e:1b:3d:b5:44:fe:18:
9d:9b:6d:98:4b:fa:66:51:7c:09:cf:a1:59:30:8b:
36:20:07:0d:51:b3:34:2d:63:c0:9e:2e:77:91:e4:
b8:7d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
64:7B:4C:96:EE:16:79:FC:6D:D4:95:9B:C3:8B:C6:86:C3:09:5A:FF
X509v3 Authority Key Identifier:
keyid:B8:7B:76:69:68:71:62:96:E5:BB:A0:BC:E8:38:56:AE:71:65:B8:B8
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/uHt2aWhxYpblu6C86DhWrnFluLg.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/39/a3ede6-bc31-4d00-925c-3d612f324996/1/uHt2aWhxYpblu6C86DhWrnFluLg.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/39/a3ede6-bc31-4d00-925c-3d612f324996/1/uHt2aWhxYpblu6C86DhWrnFluLg.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
74:ff:fd:01:6f:95:fc:ea:35:2e:74:61:b4:43:b4:b8:4f:c7:
9c:b6:a0:09:76:e5:46:e3:bc:10:85:57:87:b0:a1:59:9e:2a:
5e:00:df:6b:63:a0:b2:90:4a:74:f0:f6:04:67:ff:95:a1:ac:
be:17:0b:11:07:03:b0:c1:4f:b1:e0:bd:c1:96:e3:b0:8e:da:
05:b0:ea:17:10:6a:9c:6a:75:03:c4:64:2b:cc:7a:91:dc:f4:
42:e5:6e:60:d1:ef:b0:21:32:4c:64:fa:72:48:2d:72:09:2b:
5d:a4:07:92:1c:db:5b:13:81:26:45:aa:13:8e:f7:95:43:5a:
50:bc:cf:0b:15:62:02:2e:62:52:08:76:d5:05:00:9c:94:5a:
ef:71:8a:75:22:61:d0:33:f3:67:18:0a:8e:38:a7:db:16:06:
83:9a:37:0e:ad:a4:e8:58:00:34:6b:f1:08:a1:ba:eb:65:34:
64:2b:d2:2d:58:ab:e5:86:17:18:8b:3b:49:b9:81:ba:cb:3a:
cc:86:4f:2c:09:51:d5:39:ca:a9:76:25:70:e4:54:40:d3:65:
f3:84:34:d9:88:ce:ec:68:c2:4a:b2:a1:10:3d:0c:f6:d5:69:
c5:66:6a:1a:82:23:c5:16:8f:29:0c:e9:78:67:1c:dd:56:80:
6a:74:77:02
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 26 22:45:22 2025 by rpki-client