Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/5b/e8c264-be46-46f1-928e-48c10a978bd0/1/ukQ9hkNVeFdrQjFVWg7SE_UivvM.mft
File: ukQ9hkNVeFdrQjFVWg7SE_UivvM.mft (raw, json)
Hash identifier: tyeoryL5fiCFPLzWqwBx8DNMR6EArxCJuoKL4tWRPBU=
Subject key identifier: 0B:48:BD:5A:E6:82:2D:F8:8B:EA:49:C7:40:56:BD:F2:D8:DE:20:9A
Authority key identifier: BA:44:3D:86:43:55:78:57:6B:42:31:55:5A:0E:D2:13:F5:22:BE:F3
Certificate issuer: /CN=ba443d86435578576b4231555a0ed213f522bef3
Certificate serial: 019680FDB40D6A7BF07E68C3E77418E6D8F1
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/ukQ9hkNVeFdrQjFVWg7SE_UivvM.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/5b/e8c264-be46-46f1-928e-48c10a978bd0/1/ukQ9hkNVeFdrQjFVWg7SE_UivvM.mft
Manifest number: 07D0
Signing time: Tue 29 Apr 2025 10:00:32 +0000
Manifest this update: Tue 29 Apr 2025 10:00:32 +0000
Manifest next update: Wed 30 Apr 2025 10:00:32 +0000
Files and hashes: 1: pJcYXodpDPmMRbZLo0Tatq1ioSM.roa (hash: reA4i3iUw1X1kJD9p6sG3wX62hmlDQuF+yso9k92RQ4=)
2: ukQ9hkNVeFdrQjFVWg7SE_UivvM.crl (hash: ITB51lxkfWP3+Cknss7B+yh9niSlb8tFNzuKN8W3rLE=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/5b/e8c264-be46-46f1-928e-48c10a978bd0/1/ukQ9hkNVeFdrQjFVWg7SE_UivvM.crl
rsync://rpki.ripe.net/repository/DEFAULT/5b/e8c264-be46-46f1-928e-48c10a978bd0/1/ukQ9hkNVeFdrQjFVWg7SE_UivvM.mft
rsync://rpki.ripe.net/repository/DEFAULT/ukQ9hkNVeFdrQjFVWg7SE_UivvM.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 30 Apr 2025 09:00:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:80:fd:b4:0d:6a:7b:f0:7e:68:c3:e7:74:18:e6:d8:f1
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=ba443d86435578576b4231555a0ed213f522bef3
Validity
Not Before: Apr 29 10:00:32 2025 GMT
Not After : Apr 30 10:00:32 2025 GMT
Subject: CN=0b48bd5ae6822df88bea49c74056bdf2d8de209a
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:98:cb:8c:42:e5:fe:d1:fa:c7:e4:67:fb:3d:53:
1b:b6:9a:53:51:01:0a:2e:ee:f1:42:1b:e9:16:83:
86:cb:72:7a:fa:d2:16:c7:d0:3e:75:62:de:05:2d:
82:4f:4c:71:fb:07:57:37:c4:2e:c0:87:e0:ee:59:
c6:24:1f:b3:f0:ab:d2:21:1b:b7:a3:a6:c8:6a:b7:
11:e5:1e:1f:d6:16:b7:ef:a2:49:c6:09:92:31:69:
45:89:6b:39:08:6a:ba:54:de:8d:e5:8b:9e:9a:e2:
64:3a:bb:b6:7a:db:30:5f:1e:f6:a5:b8:67:96:10:
8c:1c:6c:53:b1:8d:9c:a7:e1:f9:08:38:36:ff:ef:
00:d4:97:c1:70:7e:e8:cb:46:99:0d:8a:72:96:14:
fc:4b:23:4c:1f:40:98:6b:28:9a:7a:ab:6f:d0:94:
6d:df:85:f6:ab:5b:16:86:f2:e4:ca:d3:a3:90:e2:
b0:2a:cb:21:a6:cc:ed:2d:ba:be:e1:5c:11:6c:02:
5f:17:72:81:df:1f:66:ad:77:6e:a9:40:92:ba:13:
e8:97:e8:57:7f:ea:32:dc:86:d2:fe:ac:7d:40:43:
4f:46:5f:6c:58:7a:13:08:80:a4:f1:8b:40:3c:a4:
32:b1:c0:7e:bd:0e:3d:b8:31:1d:9a:cc:a9:84:23:
67:69
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
0B:48:BD:5A:E6:82:2D:F8:8B:EA:49:C7:40:56:BD:F2:D8:DE:20:9A
X509v3 Authority Key Identifier:
keyid:BA:44:3D:86:43:55:78:57:6B:42:31:55:5A:0E:D2:13:F5:22:BE:F3
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ukQ9hkNVeFdrQjFVWg7SE_UivvM.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5b/e8c264-be46-46f1-928e-48c10a978bd0/1/ukQ9hkNVeFdrQjFVWg7SE_UivvM.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/5b/e8c264-be46-46f1-928e-48c10a978bd0/1/ukQ9hkNVeFdrQjFVWg7SE_UivvM.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
b1:c2:59:ae:a8:40:44:89:94:59:79:27:ec:4c:59:ee:21:19:
c9:2c:d4:73:cf:2d:65:82:46:0c:ee:24:e4:15:40:45:c9:c6:
da:c3:fe:67:1b:fc:76:c8:9a:b4:fb:87:e5:a3:ac:49:9d:c3:
45:52:e2:84:bd:57:49:1a:bc:1c:59:d2:01:77:13:ac:2e:2d:
cb:ef:32:47:6a:fe:72:50:7f:01:fe:33:02:23:bc:6d:fd:17:
c4:28:ef:14:db:08:1f:e5:d7:36:6d:88:26:fe:ac:a1:47:62:
f0:ea:3b:da:2c:77:2f:e2:6e:34:6f:9e:e9:f6:82:77:25:db:
33:30:fb:b2:2b:7b:ce:ab:63:44:d4:6b:30:69:7a:45:95:b1:
a4:53:c6:f9:b3:d2:64:87:90:be:bd:43:55:ea:87:86:9f:bc:
4d:22:74:9c:7a:12:88:28:09:e8:19:de:0d:b0:a4:a1:e6:4d:
c7:ce:e0:63:ad:ec:a9:8a:e0:db:3b:67:d8:a6:87:1d:ef:f5:
ce:8a:80:13:8d:a8:3d:9e:cc:21:e3:e4:53:6e:42:ed:04:69:
ab:fd:c8:28:61:73:e0:a2:a1:54:1d:09:29:94:01:40:fb:f5:
0d:33:9d:ed:f0:72:f2:da:bb:7f:ba:ac:ac:57:21:a3:a2:30:
fb:45:73:d7
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Apr 29 13:58:25 2025 by rpki-client