Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/67/beac09-c49f-4c70-9818-431c39bb7b38/1/Uo1YFMcVZCDew6P35SbvD4Mz7vY.mft
File: Uo1YFMcVZCDew6P35SbvD4Mz7vY.mft (raw, json)
Hash identifier: LguyBHTNfQL5i4HSuociOImB8WfI6MjjXutaAQZuWts=
Subject key identifier: 9B:AF:61:A6:A3:66:C6:0C:81:1E:CD:DD:F0:69:62:AB:28:6D:73:A9
Authority key identifier: 52:8D:58:14:C7:15:64:20:DE:C3:A3:F7:E5:26:EF:0F:83:33:EE:F6
Certificate issuer: /CN=528d5814c7156420dec3a3f7e526ef0f8333eef6
Certificate serial: 01968058F3C107AAAFE50F37CE435A57A7C5
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Uo1YFMcVZCDew6P35SbvD4Mz7vY.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/67/beac09-c49f-4c70-9818-431c39bb7b38/1/Uo1YFMcVZCDew6P35SbvD4Mz7vY.mft
Manifest number: 13B5
Signing time: Tue 29 Apr 2025 07:00:35 +0000
Manifest this update: Tue 29 Apr 2025 07:00:35 +0000
Manifest next update: Wed 30 Apr 2025 07:00:35 +0000
Files and hashes: 1: MmFJokVO4QRlDiGRue7krePTmWQ.roa (hash: 2NjaoaYGPQ9nJqZ5MUASprFLlvmc6uqFQzLhkJlBENc=)
2: Uo1YFMcVZCDew6P35SbvD4Mz7vY.crl (hash: LrWGnsCYsly9g/ze9j4nC+yaxG5jXzVJYlK76unInQw=)
3: a9ojZnfz0fm0UVD2fXdjv-28qnw.roa (hash: s9wsqrb6KjabBhTORHQp4WAcdtQIFP8TAj4IRPzQjYo=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/67/beac09-c49f-4c70-9818-431c39bb7b38/1/Uo1YFMcVZCDew6P35SbvD4Mz7vY.crl
rsync://rpki.ripe.net/repository/DEFAULT/67/beac09-c49f-4c70-9818-431c39bb7b38/1/Uo1YFMcVZCDew6P35SbvD4Mz7vY.mft
rsync://rpki.ripe.net/repository/DEFAULT/Uo1YFMcVZCDew6P35SbvD4Mz7vY.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 30 Apr 2025 07:00:35 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:80:58:f3:c1:07:aa:af:e5:0f:37:ce:43:5a:57:a7:c5
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=528d5814c7156420dec3a3f7e526ef0f8333eef6
Validity
Not Before: Apr 29 07:00:35 2025 GMT
Not After : Apr 30 07:00:35 2025 GMT
Subject: CN=9baf61a6a366c60c811ecdddf06962ab286d73a9
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cf:02:c0:6a:73:7a:e2:9a:cc:32:77:38:c1:9c:
b0:ad:6c:08:1d:eb:56:bd:b5:4e:ba:bd:fd:c0:9f:
28:89:64:b6:71:83:79:94:6c:86:82:d9:e1:7d:40:
00:98:c2:9e:ea:18:c5:b8:2d:d0:ea:bd:cc:b3:dd:
fd:d2:26:dc:c7:2b:a0:1d:9a:37:ff:44:ab:b8:65:
1c:5d:39:a4:3b:de:87:5e:c7:df:e4:8a:86:0d:74:
db:ec:23:d3:ae:63:d9:72:f8:3b:ab:30:4f:e7:f9:
63:f0:b9:23:5b:d6:1c:6b:e3:48:8b:c1:df:2e:1e:
a9:97:a1:a7:ed:05:26:19:ab:14:b6:4f:ef:e3:89:
6a:79:dc:39:62:fe:8a:ef:d3:73:71:9e:89:e1:f6:
c5:66:dc:c9:53:f2:dc:5c:2c:15:2e:c3:80:24:ae:
10:19:8a:a9:7b:ae:57:4c:58:43:73:e6:23:67:42:
f8:d6:5c:78:6b:8c:93:c0:20:29:60:c3:fd:81:06:
50:87:39:17:e7:a4:dd:59:1f:9c:65:cc:fd:c0:e2:
02:80:c5:90:4a:66:e8:04:a0:4d:3c:b0:65:99:1f:
47:3d:9c:c7:19:7e:62:f0:da:2b:82:6b:90:b8:e6:
2e:fe:f5:d0:03:76:cc:5c:16:93:f6:74:a8:96:6c:
1e:e7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
9B:AF:61:A6:A3:66:C6:0C:81:1E:CD:DD:F0:69:62:AB:28:6D:73:A9
X509v3 Authority Key Identifier:
keyid:52:8D:58:14:C7:15:64:20:DE:C3:A3:F7:E5:26:EF:0F:83:33:EE:F6
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Uo1YFMcVZCDew6P35SbvD4Mz7vY.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/67/beac09-c49f-4c70-9818-431c39bb7b38/1/Uo1YFMcVZCDew6P35SbvD4Mz7vY.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/67/beac09-c49f-4c70-9818-431c39bb7b38/1/Uo1YFMcVZCDew6P35SbvD4Mz7vY.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
00:b5:af:14:af:dd:af:c5:25:f5:21:f6:d5:7f:13:33:98:33:
83:05:20:ff:bb:d1:52:b3:1c:c8:3a:b1:91:f5:b0:3a:c9:3a:
71:af:e5:56:74:7b:ba:c5:98:fa:f5:05:8d:fd:c1:a5:47:90:
f1:ea:e3:9d:91:98:8c:a5:d4:e1:95:a5:4a:ee:b1:af:47:8c:
11:4f:18:40:36:81:cb:77:54:65:c2:54:53:e0:15:2b:ad:99:
4f:2a:22:e0:a4:9e:99:3d:32:76:82:5d:60:32:1d:47:da:94:
d4:8e:4c:62:c1:c9:5f:d1:8a:65:a6:a9:1b:f9:0d:0f:ad:9e:
d9:74:f5:dd:48:fd:de:7a:52:bb:fc:e6:43:1f:c1:51:8d:fa:
f9:e1:75:87:30:6d:df:b3:2f:15:67:6d:15:a6:1d:8b:10:54:
fd:39:4d:46:d0:db:0e:c1:30:5b:2c:af:ba:a2:94:75:4e:16:
00:19:65:ae:6a:01:0c:df:4d:c2:42:6a:2f:63:18:a8:15:99:
e7:92:d7:8d:0d:d4:e9:83:23:58:d2:e7:b9:44:f7:69:ce:68:
46:76:fb:23:9e:b8:55:40:8d:c2:1a:30:ca:c4:67:e6:0d:d8:
a4:cf:1f:fb:75:61:77:f9:77:fa:1d:3f:b8:2a:cd:7c:b0:13:
b9:59:c2:57
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Apr 29 12:06:04 2025 by rpki-client