Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/7a/f96532-d7ff-4538-bccd-2d38e7779348/1/ui8aEd4ZDIHAt3Us9StWlCXcVMs.mft
File: ui8aEd4ZDIHAt3Us9StWlCXcVMs.mft (raw, json)
Hash identifier: wEiH7Slt0TClN4HD+GSY1KEfuzn22hjp1NGJaTmp6HI=
Subject key identifier: D8:B9:66:85:47:E8:A3:29:0C:26:BC:C2:C6:02:42:2F:F8:57:4E:22
Authority key identifier: BA:2F:1A:11:DE:19:0C:81:C0:B7:75:2C:F5:2B:56:94:25:DC:54:CB
Certificate issuer: /CN=ba2f1a11de190c81c0b7752cf52b569425dc54cb
Certificate serial: 019683231567C83C96300A1CFC0E9EBE10DE
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/ui8aEd4ZDIHAt3Us9StWlCXcVMs.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/7a/f96532-d7ff-4538-bccd-2d38e7779348/1/ui8aEd4ZDIHAt3Us9StWlCXcVMs.mft
Manifest number: 0B93
Signing time: Tue 29 Apr 2025 20:00:36 +0000
Manifest this update: Tue 29 Apr 2025 20:00:36 +0000
Manifest next update: Wed 30 Apr 2025 20:00:36 +0000
Files and hashes: 1: JifjCFTHwQfGjK32vaW76jlBuD0.roa (hash: h7HzreIgn1zkAe8+SyKhsfHeNQ03cg69awNyBY5xA1I=)
2: ui8aEd4ZDIHAt3Us9StWlCXcVMs.crl (hash: S/SdUW0b+6vooDG+JvzL8R5NW+eKIjcOCmbMp/Pqpd0=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/7a/f96532-d7ff-4538-bccd-2d38e7779348/1/ui8aEd4ZDIHAt3Us9StWlCXcVMs.crl
rsync://rpki.ripe.net/repository/DEFAULT/7a/f96532-d7ff-4538-bccd-2d38e7779348/1/ui8aEd4ZDIHAt3Us9StWlCXcVMs.mft
rsync://rpki.ripe.net/repository/DEFAULT/ui8aEd4ZDIHAt3Us9StWlCXcVMs.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 30 Apr 2025 15:02:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:83:23:15:67:c8:3c:96:30:0a:1c:fc:0e:9e:be:10:de
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=ba2f1a11de190c81c0b7752cf52b569425dc54cb
Validity
Not Before: Apr 29 20:00:36 2025 GMT
Not After : Apr 30 20:00:36 2025 GMT
Subject: CN=d8b9668547e8a3290c26bcc2c602422ff8574e22
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d8:cd:81:dd:10:c8:89:6c:85:ea:df:72:8a:53:
90:70:ef:de:6d:e4:e1:d3:d9:4a:2f:04:07:59:be:
54:ba:6c:74:0b:5d:4b:60:76:e5:8e:c6:43:68:ef:
83:c0:10:a2:0a:3f:f3:61:c9:34:da:ef:30:38:85:
ec:2d:24:36:5f:0f:d4:8d:97:b8:f5:1e:5b:9d:40:
42:80:75:a2:03:b4:b7:13:43:d6:02:4b:f2:dd:e0:
40:98:75:79:82:90:75:ce:21:af:27:7b:8f:42:a4:
42:51:b8:16:45:6c:73:73:21:f4:ce:1f:bc:5d:79:
bd:5a:b6:9d:0c:8c:4f:46:4c:a8:39:5f:2c:14:9f:
2a:d5:dc:0b:35:16:9d:4d:5b:19:76:df:ac:55:f7:
21:ea:60:ab:67:b7:91:a7:79:d5:c0:ee:b6:a5:0d:
d4:b0:1c:dc:fd:59:fd:6b:47:6c:9d:13:f5:e5:8a:
0c:cf:5e:bf:22:9f:92:36:0f:23:69:02:96:6f:e0:
fa:94:35:25:5a:05:60:38:e0:2f:bf:24:81:95:7f:
3a:d9:ff:d9:5d:b7:16:22:a4:10:86:ce:a0:7a:bb:
f0:f6:1a:2f:25:60:a8:9b:45:c0:08:fc:d3:be:0c:
41:58:7c:1c:c2:16:08:41:bf:94:13:f6:5e:ea:68:
21:0d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D8:B9:66:85:47:E8:A3:29:0C:26:BC:C2:C6:02:42:2F:F8:57:4E:22
X509v3 Authority Key Identifier:
keyid:BA:2F:1A:11:DE:19:0C:81:C0:B7:75:2C:F5:2B:56:94:25:DC:54:CB
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ui8aEd4ZDIHAt3Us9StWlCXcVMs.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/7a/f96532-d7ff-4538-bccd-2d38e7779348/1/ui8aEd4ZDIHAt3Us9StWlCXcVMs.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/7a/f96532-d7ff-4538-bccd-2d38e7779348/1/ui8aEd4ZDIHAt3Us9StWlCXcVMs.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
01:b9:91:88:8b:27:50:31:03:64:20:4e:70:fa:04:ce:45:ec:
69:84:0b:d9:77:b4:4c:e1:f8:2a:aa:4e:f6:c8:8e:f5:26:14:
67:1d:44:c7:63:fa:cb:d9:b0:31:80:c7:54:be:9f:ad:ca:01:
c3:80:40:04:7a:82:10:4f:7a:dc:19:4c:f1:96:e5:88:16:6c:
cc:17:43:49:e5:e8:41:9d:7d:a5:a4:a2:28:11:ca:7f:bf:f4:
de:1b:dc:14:66:66:24:0f:cf:22:db:35:e4:95:e9:6d:40:63:
61:6f:f3:3d:36:c5:09:64:07:1f:dc:33:5e:3c:92:28:99:b2:
eb:8c:0b:2c:6d:d5:06:89:39:b3:7b:b4:91:af:a7:4d:05:50:
6a:64:ff:5a:15:9f:5b:38:7e:63:ea:9e:12:23:7f:16:5d:3a:
62:78:ec:99:4a:e7:9b:9b:25:37:08:d9:99:4e:e6:46:8a:6a:
c0:31:ac:cb:36:d8:e6:11:28:1d:df:e3:f9:ac:05:c2:4a:1f:
15:af:6c:ae:e4:1d:b1:da:86:53:4c:81:2c:26:ed:a4:4c:c7:
f8:df:44:6c:96:db:0e:8f:a3:d0:41:f1:8b:9b:dd:89:79:23:
26:67:6c:c2:17:cd:11:6c:3b:57:c9:97:0c:16:ed:2c:4c:61:
33:5d:5d:dc
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Apr 30 01:12:12 2025 by rpki-client