Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/6d/057a69-e68e-4004-8625-9177b14ee633/1/uUUIWZXzy3x9vQXkF3TaYksa8uk.mft
File: uUUIWZXzy3x9vQXkF3TaYksa8uk.mft (raw, json)
Hash identifier: T4VqCD29y+qmiKjGcPnolhYqM8DXM/2zF2Lj8KerCmQ=
Subject key identifier: 76:07:15:9E:5E:B9:84:49:E0:19:70:87:47:D1:57:AF:61:44:73:36
Authority key identifier: B9:45:08:59:95:F3:CB:7C:7D:BD:05:E4:17:74:DA:62:4B:1A:F2:E9
Certificate issuer: /CN=b945085995f3cb7c7dbd05e41774da624b1af2e9
Certificate serial: 019677FB51D8516151B910597295E82A670D
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/uUUIWZXzy3x9vQXkF3TaYksa8uk.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/6d/057a69-e68e-4004-8625-9177b14ee633/1/uUUIWZXzy3x9vQXkF3TaYksa8uk.mft
Manifest number: 14BD
Signing time: Sun 27 Apr 2025 16:01:21 +0000
Manifest this update: Sun 27 Apr 2025 16:01:21 +0000
Manifest next update: Mon 28 Apr 2025 16:01:21 +0000
Files and hashes: 1: EsduMUwM_I8I9QBhuMSlNVS-Wi4.roa (hash: RsxXFAy4vLF5L/pTYoeAN6hWsbZx1lCA8MFJDhAYUDI=)
2: uUUIWZXzy3x9vQXkF3TaYksa8uk.crl (hash: dCOVcAscpJn/PL3C6Ig/GHcqWBIaXDxqmivw5y3dSjc=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/6d/057a69-e68e-4004-8625-9177b14ee633/1/uUUIWZXzy3x9vQXkF3TaYksa8uk.crl
rsync://rpki.ripe.net/repository/DEFAULT/6d/057a69-e68e-4004-8625-9177b14ee633/1/uUUIWZXzy3x9vQXkF3TaYksa8uk.mft
rsync://rpki.ripe.net/repository/DEFAULT/uUUIWZXzy3x9vQXkF3TaYksa8uk.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 28 Apr 2025 14:00:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:77:fb:51:d8:51:61:51:b9:10:59:72:95:e8:2a:67:0d
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=b945085995f3cb7c7dbd05e41774da624b1af2e9
Validity
Not Before: Apr 27 16:01:21 2025 GMT
Not After : Apr 28 16:01:21 2025 GMT
Subject: CN=7607159e5eb98449e019708747d157af61447336
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:84:60:d8:07:f1:93:91:d5:e4:93:72:a5:0c:37:
a7:bf:dc:41:30:d6:c1:8a:26:dd:cc:01:87:61:17:
ee:40:65:10:ff:4a:83:af:38:e0:f7:57:38:09:c2:
90:0e:a7:83:35:79:14:83:96:d9:0a:0b:75:8e:73:
c7:9c:ac:b8:5d:87:ce:08:db:3c:2c:02:b9:41:5f:
5a:1d:5f:63:27:9d:6d:3a:6c:54:d8:00:2a:bb:be:
d6:c7:12:45:95:cd:e9:58:3c:63:a2:3b:0e:31:63:
22:67:a3:b3:96:f8:7b:ed:34:ea:b2:be:00:0f:96:
02:60:db:68:fd:ec:bb:2a:bd:e6:11:e3:16:06:de:
59:fe:58:4e:67:b1:1f:5d:df:97:5b:cf:2a:44:3a:
23:cf:b9:11:5d:19:02:e6:ed:61:67:4e:38:87:d7:
17:98:c8:62:3f:14:16:ed:d0:7f:6b:70:64:d3:63:
65:67:92:24:08:df:9c:52:2c:31:ce:47:8c:7e:3c:
04:4f:f2:2f:e6:82:34:b7:12:69:16:7b:f9:7f:6f:
80:f6:a0:89:10:9e:c9:ee:ad:fb:7b:75:b1:d6:20:
ae:d6:a1:d6:54:b1:dc:4a:05:c9:eb:d5:3c:89:f4:
58:55:a1:5c:ef:21:c3:70:b9:c8:35:9a:b8:87:e3:
21:17
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
76:07:15:9E:5E:B9:84:49:E0:19:70:87:47:D1:57:AF:61:44:73:36
X509v3 Authority Key Identifier:
keyid:B9:45:08:59:95:F3:CB:7C:7D:BD:05:E4:17:74:DA:62:4B:1A:F2:E9
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/uUUIWZXzy3x9vQXkF3TaYksa8uk.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/6d/057a69-e68e-4004-8625-9177b14ee633/1/uUUIWZXzy3x9vQXkF3TaYksa8uk.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/6d/057a69-e68e-4004-8625-9177b14ee633/1/uUUIWZXzy3x9vQXkF3TaYksa8uk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
54:fe:c3:c9:3d:09:ca:f4:f3:bd:a2:4c:b6:f1:5e:e8:a2:17:
77:4b:7b:33:50:61:94:9e:8d:ce:90:26:e1:3e:76:9b:78:72:
30:38:83:c5:52:cf:76:7a:df:8b:ef:bf:83:ff:3f:74:d7:23:
ef:ef:e6:b8:02:38:d7:53:fa:c7:6e:8b:71:76:f9:2a:f8:b5:
e5:57:c5:87:65:d0:e4:cc:72:41:42:f2:5c:1c:90:27:57:07:
f2:fc:8a:ee:7d:55:5a:ac:43:a1:1b:40:fd:35:75:45:09:0e:
27:5e:70:74:82:e6:2c:fe:8d:9f:47:1e:60:25:ee:d0:11:26:
ae:fc:14:ca:7c:f7:6b:b7:96:d6:64:64:87:1e:03:18:cf:81:
1c:97:0d:35:80:d8:28:89:bd:4a:5d:87:5e:d5:cb:c2:40:9c:
f7:61:37:22:53:a1:2a:e1:76:60:7e:ea:83:a4:1f:41:66:ca:
ab:29:23:98:3a:ee:56:2e:d3:0e:65:70:e2:b7:ed:61:49:d9:
c1:10:39:4c:0d:ff:74:48:44:79:7b:c2:c7:59:aa:bc:54:1f:
1a:5b:8b:75:3c:79:ee:1e:62:91:33:77:85:3a:c6:3c:4d:fd:
85:fc:18:2c:03:97:61:15:4c:23:ee:19:eb:3b:fc:6e:08:51:
8c:04:4b:1e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Apr 27 20:18:06 2025 by rpki-client