Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/5a/df5670-96ab-4eee-b0d2-85d332604aaf/1/uUiJEgxOC_9Ozpoqu4YtTAzYox8.mft
File: uUiJEgxOC_9Ozpoqu4YtTAzYox8.mft (raw, json)
Hash identifier: L1OFtV6gf+ltRamC/D45Gbb7PNZ1JRRZIkalx19rwU0=
Subject key identifier: A7:26:47:C7:77:86:82:90:35:0C:E5:DF:1E:5C:BC:8F:5F:42:90:30
Authority key identifier: B9:48:89:12:0C:4E:0B:FF:4E:CE:9A:2A:BB:86:2D:4C:0C:D8:A3:1F
Certificate issuer: /CN=b94889120c4e0bff4ece9a2abb862d4c0cd8a31f
Certificate serial: 01967F45FF9333C1A0B443D47286E0D5C7D3
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/uUiJEgxOC_9Ozpoqu4YtTAzYox8.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/5a/df5670-96ab-4eee-b0d2-85d332604aaf/1/uUiJEgxOC_9Ozpoqu4YtTAzYox8.mft
Manifest number: 0E81
Signing time: Tue 29 Apr 2025 02:00:15 +0000
Manifest this update: Tue 29 Apr 2025 02:00:15 +0000
Manifest next update: Wed 30 Apr 2025 02:00:15 +0000
Files and hashes: 1: Ez8s9qEUUht2JDDEnDzdcLhPgtI.roa (hash: JIMzy59RHLraK6rhor2VUFRVzGxoje0mc5nW26VOt9E=)
2: uUiJEgxOC_9Ozpoqu4YtTAzYox8.crl (hash: kxmbD5kyGTdabm7ey4qTixTMHH+wj7cqkoTioNDiVA0=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/5a/df5670-96ab-4eee-b0d2-85d332604aaf/1/uUiJEgxOC_9Ozpoqu4YtTAzYox8.crl
rsync://rpki.ripe.net/repository/DEFAULT/5a/df5670-96ab-4eee-b0d2-85d332604aaf/1/uUiJEgxOC_9Ozpoqu4YtTAzYox8.mft
rsync://rpki.ripe.net/repository/DEFAULT/uUiJEgxOC_9Ozpoqu4YtTAzYox8.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 30 Apr 2025 02:00:15 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:7f:45:ff:93:33:c1:a0:b4:43:d4:72:86:e0:d5:c7:d3
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=b94889120c4e0bff4ece9a2abb862d4c0cd8a31f
Validity
Not Before: Apr 29 02:00:15 2025 GMT
Not After : Apr 30 02:00:15 2025 GMT
Subject: CN=a72647c777868290350ce5df1e5cbc8f5f429030
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b8:35:13:32:2a:4e:31:68:e6:0e:5d:8f:f9:83:
c2:68:c3:92:68:44:d9:e9:4e:ae:e3:69:f8:c0:e1:
ce:45:65:8e:c2:98:1e:8f:41:30:0c:b3:99:2b:31:
d9:5c:8c:d7:c0:5c:df:39:d3:9b:d5:5a:1d:4b:f2:
ce:69:fc:d9:40:66:bd:f7:33:72:e4:40:b7:89:c3:
4a:34:4a:37:e2:0e:87:8d:c1:71:8a:e3:fb:b9:14:
ab:a6:3d:d6:84:51:d6:de:23:ba:32:0d:d6:a0:1c:
68:56:6b:a6:d1:51:6b:4b:26:ce:4c:cf:f1:f6:7d:
af:ed:11:c1:75:97:a0:18:b2:16:a0:5d:d6:8a:b8:
c8:36:42:c2:a9:52:a4:12:05:c6:2e:50:ce:5b:1a:
af:49:78:6b:7c:a4:1d:c7:c8:98:d9:a9:40:02:20:
13:92:97:f4:1c:48:22:44:38:62:2a:1c:d0:25:fe:
8e:f1:37:a5:28:bd:0a:26:0a:73:71:08:6b:3f:13:
f9:2c:16:d1:a3:90:49:cf:75:7d:05:98:60:6f:2b:
92:75:56:bc:4e:65:d3:a0:e1:03:bb:ad:bf:91:8e:
d8:9b:c7:ca:ef:44:da:d1:8e:82:b9:8d:38:97:89:
e4:dc:65:c6:f0:ed:3a:98:d9:a9:8f:d6:02:4b:04:
3d:65
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A7:26:47:C7:77:86:82:90:35:0C:E5:DF:1E:5C:BC:8F:5F:42:90:30
X509v3 Authority Key Identifier:
keyid:B9:48:89:12:0C:4E:0B:FF:4E:CE:9A:2A:BB:86:2D:4C:0C:D8:A3:1F
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/uUiJEgxOC_9Ozpoqu4YtTAzYox8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5a/df5670-96ab-4eee-b0d2-85d332604aaf/1/uUiJEgxOC_9Ozpoqu4YtTAzYox8.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/5a/df5670-96ab-4eee-b0d2-85d332604aaf/1/uUiJEgxOC_9Ozpoqu4YtTAzYox8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
4a:b3:83:99:08:5f:f9:11:8e:41:19:9d:a3:8c:e0:ab:c2:f7:
c9:b4:89:b0:a5:2e:aa:51:2b:17:e6:3f:42:f3:07:00:d9:68:
9b:44:93:66:15:fe:04:63:b5:3f:f4:fc:58:46:a0:8d:e3:26:
f8:e0:bd:47:5d:66:a3:87:4e:a3:1b:ce:22:41:48:84:7f:e9:
a7:fb:c8:f1:18:e9:f3:05:e9:2a:e9:15:6b:34:61:6b:ef:e3:
9d:6c:8f:1b:19:42:dd:8d:03:7a:c7:fb:63:6b:ad:00:56:da:
db:78:47:7e:32:73:b6:7a:cf:9a:48:8c:0e:eb:ab:85:56:e8:
f2:a3:6e:1f:58:4f:b3:6f:2a:cb:cb:25:9e:08:7f:bb:03:41:
d0:3a:e4:bf:fc:7b:05:e2:ee:dd:3d:5d:7d:23:40:0f:8b:bc:
e5:34:81:6f:d9:a6:c1:f8:9c:22:d3:b1:0e:ea:54:6c:51:78:
ae:50:b0:49:09:57:f8:bb:59:5a:a2:17:ce:22:1a:bf:d1:5d:
14:6a:53:d1:87:3e:a5:5e:84:fc:f8:ac:61:b9:f8:b0:33:22:
75:20:ab:79:e1:ce:54:61:90:ba:12:e1:07:03:83:6a:a7:5d:
cd:f0:6b:6b:76:4c:5a:d3:85:80:50:88:e0:49:c5:02:70:a7:
db:9d:93:cd
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Apr 29 12:33:49 2025 by rpki-client