Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/57/b92cc3-ddf1-43cb-b4b1-4154da5ceb9b/1/uQ9AvbnmZHaekXWQ942253GT11E.mft
File: uQ9AvbnmZHaekXWQ942253GT11E.mft (raw, json)
Hash identifier: 4uMoD8Z1/nLIO0DBOlnwL3KmT+EZ2PCN71EhZ14cM0o=
Subject key identifier: 8A:7C:F2:29:79:86:0B:16:DA:14:C2:4E:40:C4:8C:AF:79:EA:D7:6A
Authority key identifier: B9:0F:40:BD:B9:E6:64:76:9E:91:75:90:F7:8D:B6:E7:71:93:D7:51
Certificate issuer: /CN=b90f40bdb9e664769e917590f78db6e77193d751
Certificate serial: 01968E8296EEC6C9A045B414094667DA2B03
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/uQ9AvbnmZHaekXWQ942253GT11E.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/57/b92cc3-ddf1-43cb-b4b1-4154da5ceb9b/1/uQ9AvbnmZHaekXWQ942253GT11E.mft
Manifest number: 07D8
Signing time: Fri 02 May 2025 01:00:44 +0000
Manifest this update: Fri 02 May 2025 01:00:44 +0000
Manifest next update: Sat 03 May 2025 01:00:44 +0000
Files and hashes: 1: IVNizmINzGKtS16vA6MUtf-GXl0.roa (hash: G8i6jSbmxzUZcDObDJ5m5iiPjmE+XboSGsF4lQOtdC8=)
2: uQ9AvbnmZHaekXWQ942253GT11E.crl (hash: jLGAm6/F/bdu6x2hLiF1Z9kipxpDPqZaeedC7PJWKF4=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/57/b92cc3-ddf1-43cb-b4b1-4154da5ceb9b/1/uQ9AvbnmZHaekXWQ942253GT11E.crl
rsync://rpki.ripe.net/repository/DEFAULT/57/b92cc3-ddf1-43cb-b4b1-4154da5ceb9b/1/uQ9AvbnmZHaekXWQ942253GT11E.mft
rsync://rpki.ripe.net/repository/DEFAULT/uQ9AvbnmZHaekXWQ942253GT11E.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 03 May 2025 01:00:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:8e:82:96:ee:c6:c9:a0:45:b4:14:09:46:67:da:2b:03
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=b90f40bdb9e664769e917590f78db6e77193d751
Validity
Not Before: May 2 01:00:44 2025 GMT
Not After : May 3 01:00:44 2025 GMT
Subject: CN=8a7cf22979860b16da14c24e40c48caf79ead76a
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c7:24:f3:4c:58:06:28:25:bf:d6:fe:4e:aa:12:
90:8d:c4:e5:1b:86:eb:ea:57:51:05:da:ed:f3:9b:
cd:ff:69:fa:42:e4:21:94:fb:da:fc:ca:06:78:46:
47:2c:2c:82:f2:d8:5e:3f:22:ee:ba:78:c3:6d:64:
c8:e4:64:c3:97:d9:e4:78:5d:97:08:42:b1:b3:80:
83:9c:65:cf:e7:ec:b8:1b:2a:73:37:73:04:54:42:
2b:13:e4:0e:88:96:94:2e:ca:8a:1d:d1:83:d4:15:
0e:67:c7:7b:37:2b:c0:9f:75:e1:fd:fa:b4:c4:f4:
9f:f4:eb:bf:0d:2b:68:59:db:09:a1:3d:46:c6:29:
fb:8e:72:4a:a2:36:89:29:ac:f9:f2:22:53:0e:67:
c3:83:d1:79:9e:dd:a6:e9:64:45:dd:3c:58:7c:86:
0c:a0:8e:49:e8:79:74:71:2c:84:69:02:11:a1:47:
61:f6:7c:18:4c:8e:f2:88:e7:a1:a8:10:22:0b:41:
66:29:57:43:1d:2d:32:e6:d7:97:d4:41:ab:e9:16:
f6:91:ee:9a:cd:c4:48:97:e2:ee:b4:93:df:51:d2:
bb:f6:c7:dc:20:25:df:b2:26:07:ed:c9:02:44:70:
7f:92:ec:dd:a9:81:29:7b:0b:4d:bd:d4:30:34:7f:
88:17
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
8A:7C:F2:29:79:86:0B:16:DA:14:C2:4E:40:C4:8C:AF:79:EA:D7:6A
X509v3 Authority Key Identifier:
keyid:B9:0F:40:BD:B9:E6:64:76:9E:91:75:90:F7:8D:B6:E7:71:93:D7:51
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/uQ9AvbnmZHaekXWQ942253GT11E.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/57/b92cc3-ddf1-43cb-b4b1-4154da5ceb9b/1/uQ9AvbnmZHaekXWQ942253GT11E.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/57/b92cc3-ddf1-43cb-b4b1-4154da5ceb9b/1/uQ9AvbnmZHaekXWQ942253GT11E.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
32:f1:8a:5f:52:5e:b4:3b:37:cf:74:ef:64:cf:7a:a5:f1:63:
0f:7f:04:ab:4d:40:46:3c:97:b6:74:8f:15:01:fa:cd:28:fa:
e0:08:77:53:f7:ff:46:84:98:54:46:8d:8d:48:d8:37:a4:21:
20:60:63:5d:37:97:bc:fe:12:d7:c1:0e:86:d7:bb:07:e2:c8:
e7:53:4b:fb:e3:4e:e1:02:15:ff:60:18:02:4f:f8:10:b5:cc:
bc:c8:23:59:b9:8c:a5:dd:15:45:83:ac:b1:1a:04:5e:18:b4:
dc:2d:09:1a:5b:99:8d:87:0a:50:7b:56:5d:be:f1:c7:7f:c6:
79:e7:05:3d:48:9e:f7:3f:7e:c9:5f:8a:ae:9c:3e:e6:f5:8b:
28:ae:08:cc:e4:9d:54:54:0b:55:87:84:04:41:f0:07:2e:86:
f6:d3:ee:71:95:90:7e:00:da:60:a9:2f:ca:ce:6b:94:48:1b:
3c:79:6b:7c:ee:54:d2:87:69:5a:ad:c6:5c:84:3e:8b:d8:58:
3c:8d:3a:b8:de:98:65:b6:d7:35:0e:e3:53:8a:89:1e:7b:4b:
22:ef:68:48:b4:4f:d2:23:9b:18:42:37:58:3b:09:af:25:9e:
4d:64:a2:ab:c6:28:3d:74:dc:61:e1:4f:80:cc:2e:12:3b:61:
80:dd:d0:4e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri May 2 07:57:49 2025 by rpki-client