Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/a0/4498aa-cc27-4316-ae87-d472d9afe134/1/uRWvWdJPWaYNl8HIirl5oUxYD_Q.mft
File: uRWvWdJPWaYNl8HIirl5oUxYD_Q.mft (raw, json)
Hash identifier: W4tpa+zBdiT2UZqI+YRlmeNV8ynYmfIbWDyrJbfC7YA=
Subject key identifier: AB:59:56:B9:21:93:2D:F9:6A:1C:CF:7B:9C:7C:89:22:E6:38:6F:46
Authority key identifier: B9:15:AF:59:D2:4F:59:A6:0D:97:C1:C8:8A:B9:79:A1:4C:58:0F:F4
Certificate issuer: /CN=b915af59d24f59a60d97c1c88ab979a14c580ff4
Certificate serial: 019690A7E5D7B63545CA04B22C42DCD651E7
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/uRWvWdJPWaYNl8HIirl5oUxYD_Q.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/a0/4498aa-cc27-4316-ae87-d472d9afe134/1/uRWvWdJPWaYNl8HIirl5oUxYD_Q.mft
Manifest number: 151D
Signing time: Fri 02 May 2025 11:00:44 +0000
Manifest this update: Fri 02 May 2025 11:00:44 +0000
Manifest next update: Sat 03 May 2025 11:00:44 +0000
Files and hashes: 1: hbB_a3Y8U324LaNC-0q5xvctY3o.roa (hash: nXIgFtsgC878hqr3xc7aa+lfCX4icrBjNT+2kWgSc+Q=)
2: uRWvWdJPWaYNl8HIirl5oUxYD_Q.crl (hash: EYC4JwWL0IdytMnFSv1odnH4jg9a977RzibZ7fhD+SM=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/a0/4498aa-cc27-4316-ae87-d472d9afe134/1/uRWvWdJPWaYNl8HIirl5oUxYD_Q.crl
rsync://rpki.ripe.net/repository/DEFAULT/a0/4498aa-cc27-4316-ae87-d472d9afe134/1/uRWvWdJPWaYNl8HIirl5oUxYD_Q.mft
rsync://rpki.ripe.net/repository/DEFAULT/uRWvWdJPWaYNl8HIirl5oUxYD_Q.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 03 May 2025 10:00:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:90:a7:e5:d7:b6:35:45:ca:04:b2:2c:42:dc:d6:51:e7
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=b915af59d24f59a60d97c1c88ab979a14c580ff4
Validity
Not Before: May 2 11:00:44 2025 GMT
Not After : May 3 11:00:44 2025 GMT
Subject: CN=ab5956b921932df96a1ccf7b9c7c8922e6386f46
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:aa:de:3b:3b:ff:37:d8:b6:32:ae:14:f6:0b:dd:
c5:ce:8b:88:09:32:5f:b7:88:ec:ab:3e:f0:df:3b:
25:d0:44:b2:5a:af:cc:15:99:f1:4c:72:1d:f4:0a:
76:e1:dd:50:78:d6:d8:dc:c5:0c:80:ca:6c:7b:9c:
f8:8e:19:b6:af:af:e0:54:24:15:8a:99:ed:7e:40:
76:b7:4c:81:f5:95:04:0c:3f:7c:a3:35:c4:60:34:
db:06:30:c9:b1:e1:2b:f1:9f:51:a0:b4:ab:7c:51:
f4:3b:38:27:c7:4f:ff:02:54:79:c2:59:73:13:1e:
fb:ba:4a:b2:3a:34:25:4a:0f:cc:54:3e:9b:10:33:
5c:96:01:4a:ec:f5:ab:c8:aa:fa:5b:f5:e1:c8:3d:
74:c8:5d:ed:01:2d:fc:67:b0:47:a4:e5:b9:94:9a:
15:6b:bd:34:ab:b3:5e:99:e0:37:1b:92:d6:ce:0f:
2e:3e:70:3d:e3:8b:43:bf:3a:84:31:23:86:6c:89:
92:65:14:bd:9e:69:62:b5:50:07:48:c3:8e:14:e6:
ed:29:41:62:92:21:18:7b:b6:57:98:77:b1:f4:7a:
50:65:93:d3:a0:c0:32:f8:2b:b2:63:32:53:e7:89:
c4:bf:fc:b3:0a:5f:cb:65:c0:cd:19:ff:4e:3e:9a:
ab:63
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
AB:59:56:B9:21:93:2D:F9:6A:1C:CF:7B:9C:7C:89:22:E6:38:6F:46
X509v3 Authority Key Identifier:
keyid:B9:15:AF:59:D2:4F:59:A6:0D:97:C1:C8:8A:B9:79:A1:4C:58:0F:F4
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/uRWvWdJPWaYNl8HIirl5oUxYD_Q.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a0/4498aa-cc27-4316-ae87-d472d9afe134/1/uRWvWdJPWaYNl8HIirl5oUxYD_Q.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/a0/4498aa-cc27-4316-ae87-d472d9afe134/1/uRWvWdJPWaYNl8HIirl5oUxYD_Q.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
16:44:d7:39:da:d7:88:aa:0f:e5:95:cf:e9:31:f6:52:f3:17:
c5:63:fa:93:72:0b:76:c4:85:71:31:95:75:ce:e4:ab:c0:00:
a0:7f:db:7c:ff:55:1d:17:49:c9:cf:bd:e0:96:70:ce:da:a1:
c6:81:c3:93:db:8b:ef:7f:3d:c4:60:51:0b:98:34:76:9f:e9:
31:1a:81:06:b1:69:36:9e:8c:53:88:c6:be:f7:42:a3:c8:7c:
22:61:80:62:80:e3:54:31:59:6f:b5:e8:56:ad:04:ef:ee:c4:
0f:8a:c9:dc:bd:27:22:16:f0:59:73:03:13:77:be:67:24:85:
16:54:e2:00:ae:bb:a0:4e:f3:55:c4:5f:3b:05:aa:9e:74:f5:
5e:10:ba:3c:c7:b2:fe:00:bb:29:d9:b1:b9:b6:52:22:5b:69:
af:be:1d:8e:f5:79:a9:81:70:50:0b:c2:16:c5:83:f9:7d:96:
8b:e8:b5:77:ca:f2:a5:89:b1:75:44:b4:fe:24:cd:f3:07:8c:
14:a8:22:30:9d:53:8c:a9:d4:ab:a4:e0:6d:e5:55:57:ea:83:
ee:b0:4e:24:2a:99:c6:95:8d:16:d8:f0:aa:58:4f:72:3a:a9:
65:50:c5:76:fe:77:bd:d9:86:bf:1a:37:89:1f:84:2a:ed:9c:
bd:5b:04:4c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri May 2 17:18:35 2025 by rpki-client