Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/6d/303a43-a185-4973-86ab-7a3720d3cffc/1/Uo017K6KUozuxk3jvWO3P6QtX0o.mft
File: Uo017K6KUozuxk3jvWO3P6QtX0o.mft (raw, json)
Hash identifier: ScI1bjrH6QMhrw9zsbKUBYRI3FCrupGRzX0hj378xzs=
Subject key identifier: 13:9D:C4:05:DA:A8:1D:6D:F9:32:31:93:B8:E4:A9:53:F4:34:99:F1
Authority key identifier: 52:8D:35:EC:AE:8A:52:8C:EE:C6:4D:E3:BD:63:B7:3F:A4:2D:5F:4A
Certificate issuer: /CN=528d35ecae8a528ceec64de3bd63b73fa42d5f4a
Certificate serial: 01967E33C7757473B1363D6EC073035AECAB
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Uo017K6KUozuxk3jvWO3P6QtX0o.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/6d/303a43-a185-4973-86ab-7a3720d3cffc/1/Uo017K6KUozuxk3jvWO3P6QtX0o.mft
Manifest number: 093F
Signing time: Mon 28 Apr 2025 21:00:44 +0000
Manifest this update: Mon 28 Apr 2025 21:00:44 +0000
Manifest next update: Tue 29 Apr 2025 21:00:44 +0000
Files and hashes: 1: R2wMoqdkLDHB1BCsXc7koujD71w.roa (hash: FmALC+nsf+pUttlOP2g4qVc5yZKYgI7dAbntzXZ0Nqk=)
2: Uo017K6KUozuxk3jvWO3P6QtX0o.crl (hash: r37mjRlE2FsJTnvpMujkWAKrE2CebxUud7uprOAejHE=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/6d/303a43-a185-4973-86ab-7a3720d3cffc/1/Uo017K6KUozuxk3jvWO3P6QtX0o.crl
rsync://rpki.ripe.net/repository/DEFAULT/6d/303a43-a185-4973-86ab-7a3720d3cffc/1/Uo017K6KUozuxk3jvWO3P6QtX0o.mft
rsync://rpki.ripe.net/repository/DEFAULT/Uo017K6KUozuxk3jvWO3P6QtX0o.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 29 Apr 2025 21:00:44 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:7e:33:c7:75:74:73:b1:36:3d:6e:c0:73:03:5a:ec:ab
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=528d35ecae8a528ceec64de3bd63b73fa42d5f4a
Validity
Not Before: Apr 28 21:00:44 2025 GMT
Not After : Apr 29 21:00:44 2025 GMT
Subject: CN=139dc405daa81d6df9323193b8e4a953f43499f1
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e6:50:4f:ec:26:7c:b4:b9:a3:7d:dd:97:02:47:
00:d2:8d:69:64:f3:0a:c9:e4:a0:45:f6:06:07:14:
28:86:16:6a:fe:fa:15:ce:a0:f6:cd:c8:50:53:a4:
a7:5d:ae:31:3c:28:1a:3f:79:61:33:92:27:da:6e:
4d:ad:9f:c5:3c:af:3c:f6:ff:41:21:26:5c:b2:79:
c0:0f:35:be:16:02:39:9f:c7:23:1f:ed:c9:6c:dc:
db:d3:a6:77:a3:77:88:53:2a:b1:11:aa:dc:01:f1:
df:11:b1:87:dd:93:62:cf:94:ec:18:d7:f7:32:70:
a5:fb:61:36:55:bf:ab:b5:b9:b0:69:8e:94:5d:4f:
a0:49:d4:d6:5a:da:4d:84:88:38:2c:3d:d0:f1:28:
d8:21:9d:66:7e:40:ce:36:40:6d:7a:c4:77:bf:71:
2f:39:e5:b6:40:8b:9a:03:26:33:00:aa:3f:2c:7b:
10:0e:e1:4c:8b:42:3f:7b:8a:0c:9c:56:eb:08:ab:
25:cf:59:70:b6:1b:e7:d6:2d:16:d5:a9:5b:a3:01:
64:97:25:a4:8e:34:ce:fb:74:f1:fa:50:9b:bf:2f:
93:aa:67:3e:34:af:69:84:eb:ff:d5:a0:e9:12:c4:
1e:e0:c3:99:e4:90:b6:b1:39:a4:c4:ae:cd:da:01:
fc:f9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
13:9D:C4:05:DA:A8:1D:6D:F9:32:31:93:B8:E4:A9:53:F4:34:99:F1
X509v3 Authority Key Identifier:
keyid:52:8D:35:EC:AE:8A:52:8C:EE:C6:4D:E3:BD:63:B7:3F:A4:2D:5F:4A
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Uo017K6KUozuxk3jvWO3P6QtX0o.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/6d/303a43-a185-4973-86ab-7a3720d3cffc/1/Uo017K6KUozuxk3jvWO3P6QtX0o.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/6d/303a43-a185-4973-86ab-7a3720d3cffc/1/Uo017K6KUozuxk3jvWO3P6QtX0o.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
97:25:1e:a3:a1:b7:27:8d:88:c4:24:c6:c0:9a:33:51:a6:e1:
38:33:d4:09:b2:15:83:88:73:98:ac:74:22:17:dc:c6:4e:22:
92:16:4e:2c:b8:8d:62:2e:79:45:b5:74:a4:7c:4f:0a:6e:c6:
b6:0a:44:ed:c3:f5:4b:34:35:99:e5:e3:79:d4:6b:07:0f:b0:
0d:a1:dc:a2:3f:06:97:70:20:d2:00:ad:46:d1:0e:84:a5:0d:
7c:74:99:e7:fb:21:35:cc:ed:9c:17:b4:11:68:84:1d:f3:80:
be:85:ea:43:9d:35:0f:e8:15:3c:ec:c5:8d:68:ab:8b:b6:ee:
8d:c1:ab:a1:99:23:37:a7:41:b0:23:56:6b:da:27:e0:57:3a:
4d:d3:f0:d6:0d:58:91:6d:e0:ce:d2:b4:3a:27:22:82:3d:fa:
52:56:fa:8a:bd:0e:0f:74:a4:94:c8:f7:bb:43:3e:fa:9d:fb:
6c:06:8d:13:58:4e:c8:30:a6:8d:72:31:b4:09:d7:d3:40:20:
38:b9:e1:f7:dd:85:1d:cb:e7:68:30:66:26:04:eb:bd:f9:b7:
4d:f8:84:d4:d5:a8:e4:6b:24:e7:eb:9f:f1:e8:74:56:b2:fd:
7a:b8:1d:5b:ed:fe:65:00:36:f3:ab:85:6d:10:8a:3e:80:b0:
ff:da:6b:de
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Apr 29 07:20:19 2025 by rpki-client