Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/5a/23b148-e0dd-4fa6-af44-613017886e8b/1/uRHH7b8dPMT7B1OBo392JWuHKF0.mft
File: uRHH7b8dPMT7B1OBo392JWuHKF0.mft (raw, json)
Hash identifier: uF65VyzmFYYIjz9T5ImwXGV8nMgDWOdvVIMIFeGg92I=
Subject key identifier: 4D:1B:91:32:49:31:0C:18:72:CF:35:DC:D2:22:95:33:52:C9:16:8A
Authority key identifier: B9:11:C7:ED:BF:1D:3C:C4:FB:07:53:81:A3:7F:76:25:6B:87:28:5D
Certificate issuer: /CN=b911c7edbf1d3cc4fb075381a37f76256b87285d
Certificate serial: 0196759E46A0228488C2495E84482A6EB5F2
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/uRHH7b8dPMT7B1OBo392JWuHKF0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/5a/23b148-e0dd-4fa6-af44-613017886e8b/1/uRHH7b8dPMT7B1OBo392JWuHKF0.mft
Manifest number: 150D
Signing time: Sun 27 Apr 2025 05:00:29 +0000
Manifest this update: Sun 27 Apr 2025 05:00:29 +0000
Manifest next update: Mon 28 Apr 2025 05:00:29 +0000
Files and hashes: 1: OqSdyDZh6NqO8-7N9t70Rdg7P_c.roa (hash: x00OtA3aq4wEzTMJMk5pH/UOCzQUUaU7IjKw5glYcJU=)
2: RpnGjFmcT56C89eB4k7yZQkJFTU.roa (hash: 1K/n2yLPZy3QlKzwTHvqK3jkvNSKTZzceS8co3Qu1JU=)
3: uRHH7b8dPMT7B1OBo392JWuHKF0.crl (hash: ImLR9wdmq5VJPaULme4uqKUUY40NiSZk6npFS6NBWIA=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/5a/23b148-e0dd-4fa6-af44-613017886e8b/1/uRHH7b8dPMT7B1OBo392JWuHKF0.crl
rsync://rpki.ripe.net/repository/DEFAULT/5a/23b148-e0dd-4fa6-af44-613017886e8b/1/uRHH7b8dPMT7B1OBo392JWuHKF0.mft
rsync://rpki.ripe.net/repository/DEFAULT/uRHH7b8dPMT7B1OBo392JWuHKF0.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 28 Apr 2025 05:00:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:75:9e:46:a0:22:84:88:c2:49:5e:84:48:2a:6e:b5:f2
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=b911c7edbf1d3cc4fb075381a37f76256b87285d
Validity
Not Before: Apr 27 05:00:29 2025 GMT
Not After : Apr 28 05:00:29 2025 GMT
Subject: CN=4d1b913249310c1872cf35dcd222953352c9168a
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ec:e6:ac:ed:d0:48:cf:b6:c6:8f:ec:1d:1d:5c:
31:fb:6c:2a:88:e9:a7:32:51:0d:b9:55:b4:f0:db:
30:dd:cf:79:d1:13:13:fc:33:78:fe:9b:f9:13:ed:
5d:aa:40:89:a2:65:86:8d:5a:6c:a2:8f:11:42:31:
67:90:96:9d:f4:0e:54:94:7f:b5:8a:d7:bb:cd:22:
ef:93:de:f2:d9:6e:58:64:73:e5:27:f4:11:9b:2e:
19:66:41:d7:ef:33:27:40:50:ad:e6:de:bb:09:52:
e7:27:a5:73:10:ee:be:66:9c:2c:a6:6d:18:5b:f0:
23:b4:39:03:cb:de:90:42:e4:b8:e2:ce:c1:62:b0:
a2:9d:3a:6f:70:dc:2a:a7:c4:23:2c:88:9e:26:09:
ba:64:11:26:a8:b0:96:25:c4:31:db:85:71:5d:9d:
93:d9:8f:cd:c7:3b:35:b2:76:ef:35:fa:9c:b7:b6:
81:08:1a:46:fb:08:e3:5b:b3:3a:fb:7d:65:41:c0:
9c:1b:27:3c:eb:df:9c:34:10:2c:8c:30:f6:97:b3:
23:a1:f5:ff:3c:b2:a3:36:e3:1b:7f:5e:8b:a5:56:
9e:36:11:c1:2f:53:85:52:db:32:0b:55:18:78:4a:
45:32:07:90:dd:bc:ac:ee:f1:58:d4:03:56:7e:bc:
d5:c1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
4D:1B:91:32:49:31:0C:18:72:CF:35:DC:D2:22:95:33:52:C9:16:8A
X509v3 Authority Key Identifier:
keyid:B9:11:C7:ED:BF:1D:3C:C4:FB:07:53:81:A3:7F:76:25:6B:87:28:5D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/uRHH7b8dPMT7B1OBo392JWuHKF0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5a/23b148-e0dd-4fa6-af44-613017886e8b/1/uRHH7b8dPMT7B1OBo392JWuHKF0.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/5a/23b148-e0dd-4fa6-af44-613017886e8b/1/uRHH7b8dPMT7B1OBo392JWuHKF0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
3c:61:4e:3e:fa:6a:50:77:80:93:66:98:b0:c1:d7:95:30:93:
89:25:09:da:b1:46:82:31:15:63:50:eb:54:d6:c7:9a:79:07:
13:fe:1e:eb:b1:5e:88:60:49:89:63:02:a0:02:b8:ea:5a:9b:
af:73:a8:f4:1e:7e:1d:a1:6d:bd:70:8d:01:16:7a:ec:f3:31:
f2:5e:2a:00:56:3e:73:1a:a6:80:38:e5:01:44:75:96:8a:c5:
2f:23:0e:9c:65:bf:56:b6:be:58:a3:f2:17:3c:9d:7f:b4:9c:
cb:86:dc:b4:e5:27:0e:f5:6c:6e:f0:09:5d:ef:65:aa:8a:00:
81:ab:23:6c:25:84:f5:3f:ab:dc:14:5a:75:93:8e:4c:1a:20:
e9:ee:7f:cf:d5:eb:cd:bd:cc:bb:9f:7f:31:b4:e6:81:d9:ab:
92:7a:e8:2f:7c:c6:d7:a9:3e:b5:16:13:51:81:39:b7:eb:76:
8b:55:f1:26:47:4c:40:b5:45:7f:b2:07:63:ab:f6:57:ba:d2:
73:d4:e8:bc:e9:ed:05:10:ae:82:85:f1:82:22:1c:9f:c6:06:
84:20:e0:1a:f3:38:0e:c2:b1:4e:0d:20:f1:1e:c1:a5:76:b3:
8f:c7:6e:29:95:f9:84:fc:74:ac:5e:87:6a:27:6c:20:38:4d:
dd:0b:b4:c5
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Apr 27 13:30:02 2025 by rpki-client