Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/64/104bae-2c9a-4beb-9035-b2d79ae49646/1/uNaZAUpVUnPtOrsXCGquPwL_mg8.mft
File: uNaZAUpVUnPtOrsXCGquPwL_mg8.mft (raw, json)
Hash identifier: VM/XQtdR4aJqyAU5/ycoNbqPCFxqvaSxRjobSDdxzdU=
Subject key identifier: 76:B5:8A:3F:C3:D3:C6:AA:A8:F0:52:9E:26:E6:08:3C:93:68:F5:C9
Authority key identifier: B8:D6:99:01:4A:55:52:73:ED:3A:BB:17:08:6A:AE:3F:02:FF:9A:0F
Certificate issuer: /CN=b8d699014a555273ed3abb17086aae3f02ff9a0f
Certificate serial: 019685ED39EF6750C6A79CAC1D11C233F24D
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/uNaZAUpVUnPtOrsXCGquPwL_mg8.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/64/104bae-2c9a-4beb-9035-b2d79ae49646/1/uNaZAUpVUnPtOrsXCGquPwL_mg8.mft
Manifest number: 0A61
Signing time: Wed 30 Apr 2025 09:00:38 +0000
Manifest this update: Wed 30 Apr 2025 09:00:38 +0000
Manifest next update: Thu 01 May 2025 09:00:38 +0000
Files and hashes: 1: grkiyNrBsZFvA41Z_BZuZwQjbk0.roa (hash: orWqkkbt375i6JBo+FAAzLtCgy2y10AY9MRPYxvZKZE=)
2: uNaZAUpVUnPtOrsXCGquPwL_mg8.crl (hash: kBWmaF1KHdgjavdikSeiKW9caVJwCK8NvBHxsC2eBcc=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/64/104bae-2c9a-4beb-9035-b2d79ae49646/1/uNaZAUpVUnPtOrsXCGquPwL_mg8.crl
rsync://rpki.ripe.net/repository/DEFAULT/64/104bae-2c9a-4beb-9035-b2d79ae49646/1/uNaZAUpVUnPtOrsXCGquPwL_mg8.mft
rsync://rpki.ripe.net/repository/DEFAULT/uNaZAUpVUnPtOrsXCGquPwL_mg8.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 01 May 2025 09:00:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:85:ed:39:ef:67:50:c6:a7:9c:ac:1d:11:c2:33:f2:4d
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=b8d699014a555273ed3abb17086aae3f02ff9a0f
Validity
Not Before: Apr 30 09:00:38 2025 GMT
Not After : May 1 09:00:38 2025 GMT
Subject: CN=76b58a3fc3d3c6aaa8f0529e26e6083c9368f5c9
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ca:1b:51:75:d0:a6:87:42:17:48:af:6b:9f:e1:
6b:78:82:e8:6d:72:c1:85:91:e3:dd:a5:eb:d0:8b:
6a:41:a3:ef:c5:dd:b3:64:d2:fa:78:e2:7f:c3:8d:
4f:31:33:08:52:28:24:86:4b:db:cf:bb:ff:33:e0:
91:76:f8:68:4e:c0:5b:56:2a:ba:b0:fe:a6:e7:cb:
42:db:6e:cc:05:3d:26:58:0d:0a:27:f0:fb:0f:53:
bb:8d:6a:03:83:f9:ce:ed:63:f5:5e:5a:21:5e:f1:
34:9f:42:e5:df:75:02:31:0f:0f:e4:c5:54:df:1c:
7c:bb:0b:9a:c1:3a:7c:12:32:30:22:94:43:33:e8:
99:34:ad:f9:3c:df:fb:b0:09:15:d9:52:ea:bc:30:
f3:a2:59:41:e3:ca:62:38:88:b9:d6:89:45:56:e8:
a2:08:19:3d:fc:23:08:84:3d:98:c7:d2:59:e4:f2:
72:a8:ce:59:71:93:e7:19:5e:05:5c:0b:33:bd:b7:
71:fd:c7:c4:92:3a:ec:29:34:47:de:32:b1:2c:29:
59:7d:07:8c:06:00:33:46:25:91:7c:cb:85:75:ea:
f3:60:38:1d:51:52:cf:c7:ff:83:bb:7f:d6:66:0e:
30:26:12:ba:fc:47:76:be:fc:3b:aa:62:6b:2e:6b:
68:c9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
76:B5:8A:3F:C3:D3:C6:AA:A8:F0:52:9E:26:E6:08:3C:93:68:F5:C9
X509v3 Authority Key Identifier:
keyid:B8:D6:99:01:4A:55:52:73:ED:3A:BB:17:08:6A:AE:3F:02:FF:9A:0F
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/uNaZAUpVUnPtOrsXCGquPwL_mg8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/64/104bae-2c9a-4beb-9035-b2d79ae49646/1/uNaZAUpVUnPtOrsXCGquPwL_mg8.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/64/104bae-2c9a-4beb-9035-b2d79ae49646/1/uNaZAUpVUnPtOrsXCGquPwL_mg8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
4f:d9:7d:85:d8:4b:d5:1e:2a:f4:2f:db:fc:31:ab:0d:10:f7:
92:8d:6f:a4:55:84:c6:3f:66:aa:b4:6d:0b:d2:de:ef:db:08:
29:5e:62:4b:c6:d9:4d:d4:e0:33:f0:8b:d8:79:70:d3:90:6e:
05:a2:1a:92:27:98:24:aa:e5:63:a1:c6:fc:1c:48:57:05:37:
a7:fb:29:8c:21:a0:12:89:7a:7d:2b:fd:41:7f:83:10:04:05:
d2:c7:03:e0:e5:c2:1e:7e:c7:61:61:f4:a7:57:20:a8:96:78:
ad:b0:bc:42:12:cb:2b:a9:93:c9:4e:ba:e8:e8:7c:03:6f:5d:
3a:f3:14:8e:f2:db:85:75:92:f0:a5:2d:ac:ee:76:6c:4b:28:
48:ab:f8:6d:dc:2a:4d:38:c8:51:c6:45:ce:cd:0b:45:28:53:
0a:36:63:96:2f:05:10:49:ce:20:71:7b:29:25:13:a7:ec:b8:
6c:f5:dc:e0:68:82:42:22:b6:b1:a2:63:f5:b4:59:74:1e:0a:
4c:4c:5e:40:9a:17:15:99:ae:fa:80:a5:3e:0d:a7:46:2c:bb:
fb:9d:a3:a9:cb:61:46:10:3f:f4:a7:af:0d:e5:95:db:e6:05:
ad:1d:bb:d9:c3:c9:ac:fc:fa:ff:80:5e:2e:2d:88:df:63:7b:
90:3d:48:17
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Apr 30 11:23:02 2025 by rpki-client