Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/92/48f1c6-1134-4969-af60-d017c1759639/1/Uz7q1BOhcF-_yyrb6Qxp8FXiddo.mft
File: Uz7q1BOhcF-_yyrb6Qxp8FXiddo.mft (raw, json)
Hash identifier: aotFd7YRIR9F/8yJPlGyF1/BBeNj1X5o/nWnqVriXW0=
Subject key identifier: EA:2B:76:B6:A4:E2:97:3C:04:73:50:BE:A3:2B:0A:80:FC:0B:22:8D
Authority key identifier: 53:3E:EA:D4:13:A1:70:5F:BF:CB:2A:DB:E9:0C:69:F0:55:E2:75:DA
Certificate issuer: /CN=533eead413a1705fbfcb2adbe90c69f055e275da
Certificate serial: 019675303EAFCB01CB39D3CF44F7E4638B15
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Uz7q1BOhcF-_yyrb6Qxp8FXiddo.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/92/48f1c6-1134-4969-af60-d017c1759639/1/Uz7q1BOhcF-_yyrb6Qxp8FXiddo.mft
Manifest number: 150E
Signing time: Sun 27 Apr 2025 03:00:17 +0000
Manifest this update: Sun 27 Apr 2025 03:00:17 +0000
Manifest next update: Mon 28 Apr 2025 03:00:17 +0000
Files and hashes: 1: LhDegbR4xFlO6pz_ANDkPzTlFGk.roa (hash: xMGN0Z+cCcbH3arqVxwuW4j6b8JSM83DRHp4H/CfXzQ=)
2: Uz7q1BOhcF-_yyrb6Qxp8FXiddo.crl (hash: B/Mn3Qmcm92qk9Hm2wgcr57h9mDjA2gXK6egI5kinsU=)
3: gaUIc9nIeEp8xPqvEDvbc3kFaYc.roa (hash: I+Q74aVwTRhCOoIOc0mC1nzVIDH725yoh6FbQfy6th4=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/92/48f1c6-1134-4969-af60-d017c1759639/1/Uz7q1BOhcF-_yyrb6Qxp8FXiddo.crl
rsync://rpki.ripe.net/repository/DEFAULT/92/48f1c6-1134-4969-af60-d017c1759639/1/Uz7q1BOhcF-_yyrb6Qxp8FXiddo.mft
rsync://rpki.ripe.net/repository/DEFAULT/Uz7q1BOhcF-_yyrb6Qxp8FXiddo.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 28 Apr 2025 03:00:17 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:75:30:3e:af:cb:01:cb:39:d3:cf:44:f7:e4:63:8b:15
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=533eead413a1705fbfcb2adbe90c69f055e275da
Validity
Not Before: Apr 27 03:00:17 2025 GMT
Not After : Apr 28 03:00:17 2025 GMT
Subject: CN=ea2b76b6a4e2973c047350bea32b0a80fc0b228d
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:df:bd:35:ba:8b:05:c7:ce:a5:d6:ea:25:b3:63:
c7:13:16:c9:1a:06:fd:70:7e:11:71:e8:0a:f1:0d:
2b:7a:de:a1:09:bc:dd:c0:44:fa:ab:8f:a2:3d:61:
ad:41:43:b9:d8:36:2c:4c:4f:ee:9e:d6:09:c8:3b:
4d:ff:2f:c2:b1:60:40:fc:22:cc:32:4a:d7:7f:b4:
ba:15:5a:cb:ec:2a:71:42:f2:31:ee:a9:a6:a7:52:
2f:23:cc:04:bc:76:3f:4f:63:0f:af:17:2a:11:2f:
91:35:a6:04:64:5d:32:56:84:89:40:fa:1a:02:c8:
35:49:9a:03:a6:ad:45:0b:3a:91:78:56:57:2a:c2:
f7:8e:f5:1a:df:e3:d6:81:4a:ed:c4:60:a5:fc:5f:
4b:90:a9:ef:3a:cb:4b:64:58:80:b7:fd:fe:59:b3:
9b:74:a9:d2:36:3a:8d:75:53:f1:12:0f:69:7e:c2:
b3:02:36:65:47:f9:d2:7d:d2:2c:84:f6:f3:73:2f:
36:74:1d:dc:27:f2:8e:e0:33:d7:10:27:eb:05:68:
31:37:85:1c:37:db:10:10:28:39:bb:9b:e8:1d:ee:
38:71:dc:f3:38:ac:9a:0f:2b:0a:a3:37:5f:24:38:
d2:f2:31:a7:f6:65:a0:2b:4d:34:b6:be:52:a6:4c:
04:c3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
EA:2B:76:B6:A4:E2:97:3C:04:73:50:BE:A3:2B:0A:80:FC:0B:22:8D
X509v3 Authority Key Identifier:
keyid:53:3E:EA:D4:13:A1:70:5F:BF:CB:2A:DB:E9:0C:69:F0:55:E2:75:DA
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Uz7q1BOhcF-_yyrb6Qxp8FXiddo.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/92/48f1c6-1134-4969-af60-d017c1759639/1/Uz7q1BOhcF-_yyrb6Qxp8FXiddo.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/92/48f1c6-1134-4969-af60-d017c1759639/1/Uz7q1BOhcF-_yyrb6Qxp8FXiddo.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
03:c3:13:89:2a:82:ca:fd:6d:df:14:f0:94:f0:8d:b8:59:90:
05:62:f6:5a:3b:d4:ff:9d:3c:60:12:81:88:fb:2d:42:e3:a6:
09:25:09:a3:4f:00:e0:2b:3d:f7:52:ed:97:18:f8:2c:a5:78:
e6:5f:b8:88:54:dc:90:5c:f9:b1:4f:df:ff:b6:c9:3e:67:a3:
58:81:d5:55:04:31:fd:ee:97:aa:ca:03:ad:c2:14:08:9b:b7:
47:b5:c1:ff:cd:5f:1d:61:02:7f:90:d3:e4:a4:82:1b:95:33:
fa:e2:a0:8e:ae:ec:70:c6:cd:bd:c9:d5:7e:3f:0f:3d:eb:1f:
ee:d0:68:84:18:01:6c:df:88:2a:52:57:ee:cb:b3:12:3b:89:
59:c5:05:7e:d5:9e:d1:32:76:d6:92:8f:78:6f:68:b2:a4:c1:
cc:39:2f:19:0b:22:5c:e4:e2:a8:80:b9:43:af:1c:09:54:06:
e1:90:39:dd:d2:eb:41:72:40:54:0f:26:1c:8f:63:86:ee:49:
ec:7b:51:a6:57:d1:9c:e2:3b:43:72:2d:f2:3f:ae:20:81:4f:
2c:dc:d7:b6:18:ec:8b:ec:6d:c5:4c:6d:d2:05:1e:27:de:9b:
b1:5c:4c:90:58:18:94:7e:be:73:3c:05:b5:4b:75:3f:6e:65:
07:c9:14:a7
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Apr 27 13:08:17 2025 by rpki-client