Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/96/3fa718-90c5-426c-b85f-1df09e701434/1/uCMtGd2B1FwlkjrrTZqWhYea76Y.mft
File: uCMtGd2B1FwlkjrrTZqWhYea76Y.mft (raw, json)
Hash identifier: +vQhagLq5ymxLssUaKkdr/7jK+3RLh8I6UiMLeQrPhw=
Subject key identifier: 8A:70:64:81:92:F6:EC:DD:8C:2B:45:B0:DF:D5:21:9A:C7:24:F9:63
Authority key identifier: B8:23:2D:19:DD:81:D4:5C:25:92:3A:EB:4D:9A:96:85:87:9A:EF:A6
Certificate issuer: /CN=b8232d19dd81d45c25923aeb4d9a9685879aefa6
Certificate serial: 0196808F80F32644FC0DC48800EA79BC7190
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/uCMtGd2B1FwlkjrrTZqWhYea76Y.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/96/3fa718-90c5-426c-b85f-1df09e701434/1/uCMtGd2B1FwlkjrrTZqWhYea76Y.mft
Manifest number: 14A6
Signing time: Tue 29 Apr 2025 08:00:10 +0000
Manifest this update: Tue 29 Apr 2025 08:00:10 +0000
Manifest next update: Wed 30 Apr 2025 08:00:10 +0000
Files and hashes: 1: gjQZAjjkQcupDLhTVfFv8GZji_8.roa (hash: S6LI8locxNS7pJHusatxk4CqHDeNJR2oaMoGw7n3cpU=)
2: nkLmWF2X04pEKbldwQ-XhzCzFtI.roa (hash: drZ+SVUdJNv3IZqPJ450+x2T4QY0zqQN6P9TNIS4M4U=)
3: uCMtGd2B1FwlkjrrTZqWhYea76Y.crl (hash: nkN4bI2A6WT2+hGbJ2S3lVyboYhVf/ckXnVVDLPjfS8=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/96/3fa718-90c5-426c-b85f-1df09e701434/1/uCMtGd2B1FwlkjrrTZqWhYea76Y.crl
rsync://rpki.ripe.net/repository/DEFAULT/96/3fa718-90c5-426c-b85f-1df09e701434/1/uCMtGd2B1FwlkjrrTZqWhYea76Y.mft
rsync://rpki.ripe.net/repository/DEFAULT/uCMtGd2B1FwlkjrrTZqWhYea76Y.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 30 Apr 2025 08:00:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:80:8f:80:f3:26:44:fc:0d:c4:88:00:ea:79:bc:71:90
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=b8232d19dd81d45c25923aeb4d9a9685879aefa6
Validity
Not Before: Apr 29 08:00:10 2025 GMT
Not After : Apr 30 08:00:10 2025 GMT
Subject: CN=8a70648192f6ecdd8c2b45b0dfd5219ac724f963
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b1:eb:73:5b:ff:8b:1c:70:fc:a9:f8:ed:55:8b:
e2:47:64:fa:b3:46:91:56:fe:ec:d5:cf:7a:59:5c:
3a:d8:35:ac:4a:15:a2:68:be:04:d9:74:8a:47:75:
cb:10:6b:98:d4:84:2a:e1:fc:fd:92:d2:84:c8:23:
54:35:8d:72:89:d8:96:bc:ed:76:4c:70:e2:08:a3:
b5:32:24:7d:27:c8:15:2b:0c:57:5a:c3:1e:0c:f5:
ce:c5:3b:06:1f:33:e1:9e:44:4b:86:e4:d2:26:c2:
28:5b:4a:cd:46:09:48:8b:1f:de:9f:a7:bb:9e:f1:
a0:74:05:74:d7:ff:fb:c9:26:7a:55:6e:7b:6b:6f:
8b:cc:ff:26:8c:bd:03:a8:56:27:54:9b:2c:c2:7b:
e6:b3:68:ab:8b:f2:66:61:af:64:30:36:d7:5f:28:
f6:11:27:3b:06:9a:78:57:fb:31:02:72:78:8d:c3:
7a:9f:98:be:8a:c2:21:68:51:4b:5a:59:c3:b8:f3:
f4:9a:7a:59:5b:b7:8c:07:ac:85:0b:6b:91:d8:55:
aa:02:31:d6:63:58:e1:d8:61:92:ee:58:44:46:ab:
8b:de:5d:16:d7:c8:66:94:96:0b:b8:41:d5:08:4e:
f0:74:b6:02:30:ed:40:4b:c6:8c:6a:ec:83:d0:6f:
dd:8d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
8A:70:64:81:92:F6:EC:DD:8C:2B:45:B0:DF:D5:21:9A:C7:24:F9:63
X509v3 Authority Key Identifier:
keyid:B8:23:2D:19:DD:81:D4:5C:25:92:3A:EB:4D:9A:96:85:87:9A:EF:A6
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/uCMtGd2B1FwlkjrrTZqWhYea76Y.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/96/3fa718-90c5-426c-b85f-1df09e701434/1/uCMtGd2B1FwlkjrrTZqWhYea76Y.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/96/3fa718-90c5-426c-b85f-1df09e701434/1/uCMtGd2B1FwlkjrrTZqWhYea76Y.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
b5:a9:e4:6a:59:9a:fe:ee:08:55:1c:6b:e8:ea:10:7c:b9:a8:
f1:b6:36:a0:c5:e8:d9:e5:87:76:ee:94:bf:03:3d:70:34:38:
79:dd:6f:9b:17:5f:e4:c7:0e:10:6d:40:f7:1c:a7:42:a9:56:
0f:bb:ac:dc:51:fa:b5:0c:0d:2b:02:01:f5:ee:fb:a2:ca:e3:
e1:f4:0d:2f:ce:94:53:e2:ed:8a:b9:ba:0a:6b:ba:2f:ad:3c:
3e:a6:4a:0d:64:5a:8f:ad:f5:02:3d:cf:c3:2f:aa:f9:a3:c1:
5a:82:33:9a:40:d0:bf:fd:d2:cb:95:78:2d:82:2c:62:55:71:
25:20:d0:71:d7:8a:cd:c4:05:96:9c:ed:6b:98:7d:db:db:f3:
aa:40:10:6d:2e:de:f3:ed:92:14:59:bb:99:d4:18:28:7c:dc:
2a:60:8b:bb:df:64:bd:54:aa:ac:ad:a6:d4:93:8f:26:ff:41:
8c:e3:99:11:2c:e8:07:c3:9a:d7:64:46:ec:99:31:23:07:d9:
f4:10:d6:a0:b1:1b:7b:a9:20:bb:66:c5:c1:c6:3c:26:bf:d8:
bb:83:e8:56:52:cf:f5:f9:0e:2c:7c:04:c8:56:44:01:82:39:
c4:01:9c:85:ea:30:94:08:d1:6e:ee:08:c6:9e:4c:d3:19:50:
87:a2:ad:4c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Apr 29 12:06:01 2025 by rpki-client