Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/a5/f10922-9954-453f-b1c6-820d5fc44e35/1/ucxtc0SS5BBmCKJPoble-qh5xFo.mft
File: ucxtc0SS5BBmCKJPoble-qh5xFo.mft (raw, json)
Hash identifier: AuclJ/HMlJjujWz1QJtGuMIBTbHqNKG5IuiHnoWc7iw=
Subject key identifier: 1E:7E:EF:8F:63:3A:C1:3B:9C:31:A6:48:7C:A3:F7:8F:94:1C:C1:1E
Authority key identifier: B9:CC:6D:73:44:92:E4:10:66:08:A2:4F:A1:B9:5E:FA:A8:79:C4:5A
Certificate issuer: /CN=b9cc6d734492e4106608a24fa1b95efaa879c45a
Certificate serial: 01967DFC59EE6927743FAC17DE9DAD7548D7
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/ucxtc0SS5BBmCKJPoble-qh5xFo.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/a5/f10922-9954-453f-b1c6-820d5fc44e35/1/ucxtc0SS5BBmCKJPoble-qh5xFo.mft
Manifest number: 1512
Signing time: Mon 28 Apr 2025 20:00:12 +0000
Manifest this update: Mon 28 Apr 2025 20:00:12 +0000
Manifest next update: Tue 29 Apr 2025 20:00:12 +0000
Files and hashes: 1: 9U8A1KCT8rlJoIi8RO4fIEudUPM.roa (hash: 06pwZ9byNjemxUaq18ITW8U3Jpcvif9Eha+WU/EFPjM=)
2: ucxtc0SS5BBmCKJPoble-qh5xFo.crl (hash: 2r3s46EqU2GrCjipYuLlRsTiXjPG46g/j77KTTw/0Go=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/a5/f10922-9954-453f-b1c6-820d5fc44e35/1/ucxtc0SS5BBmCKJPoble-qh5xFo.crl
rsync://rpki.ripe.net/repository/DEFAULT/a5/f10922-9954-453f-b1c6-820d5fc44e35/1/ucxtc0SS5BBmCKJPoble-qh5xFo.mft
rsync://rpki.ripe.net/repository/DEFAULT/ucxtc0SS5BBmCKJPoble-qh5xFo.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 29 Apr 2025 20:00:12 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:7d:fc:59:ee:69:27:74:3f:ac:17:de:9d:ad:75:48:d7
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=b9cc6d734492e4106608a24fa1b95efaa879c45a
Validity
Not Before: Apr 28 20:00:12 2025 GMT
Not After : Apr 29 20:00:12 2025 GMT
Subject: CN=1e7eef8f633ac13b9c31a6487ca3f78f941cc11e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8b:d6:5a:d5:80:4b:03:61:1a:84:45:00:76:8d:
6b:db:d5:d2:13:c0:d5:3d:a0:34:f3:be:7f:4f:ab:
41:7e:08:20:47:33:64:2f:25:d0:c4:34:59:40:16:
e1:85:70:87:fa:28:1b:70:ef:83:de:2c:8c:47:dd:
80:e7:45:65:9f:8d:3b:b2:81:bb:da:a2:38:b5:22:
93:35:7a:80:60:b1:6d:7c:87:51:fd:0d:1d:d0:2b:
f2:85:78:5b:44:14:59:d9:4b:68:ea:16:0d:65:d6:
7c:e2:18:c2:85:b2:ea:1d:27:b4:fa:2f:03:8c:7e:
46:39:6d:ac:a3:d6:c4:09:8f:1e:75:2b:ab:32:14:
91:6e:83:a0:a6:eb:20:b8:77:1b:64:f3:2f:2f:96:
48:1b:7b:69:16:fc:4d:2e:e1:e0:48:31:e5:65:be:
d7:6f:ab:10:b1:e3:c4:9d:9f:40:07:62:a8:c5:c0:
36:2e:3b:68:44:dd:1c:3d:f2:17:4d:a2:5f:1f:bb:
8c:38:6a:e2:43:7d:e1:96:49:e4:f5:b3:cc:a8:d5:
e4:c0:0f:50:5e:42:ad:b1:3a:98:63:e1:a0:84:4e:
f9:e7:c6:0c:01:61:d9:72:c7:bf:25:8b:c4:54:9a:
9f:fb:d8:8e:70:b1:72:68:49:4f:51:df:22:02:82:
18:cb
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
1E:7E:EF:8F:63:3A:C1:3B:9C:31:A6:48:7C:A3:F7:8F:94:1C:C1:1E
X509v3 Authority Key Identifier:
keyid:B9:CC:6D:73:44:92:E4:10:66:08:A2:4F:A1:B9:5E:FA:A8:79:C4:5A
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ucxtc0SS5BBmCKJPoble-qh5xFo.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a5/f10922-9954-453f-b1c6-820d5fc44e35/1/ucxtc0SS5BBmCKJPoble-qh5xFo.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/a5/f10922-9954-453f-b1c6-820d5fc44e35/1/ucxtc0SS5BBmCKJPoble-qh5xFo.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
80:68:b7:17:66:65:0c:95:69:6d:cd:02:26:d9:db:95:5a:5e:
ae:38:f1:a4:1d:de:48:ff:2b:86:80:08:48:50:3f:17:f4:66:
bf:1e:b5:70:4c:75:ac:ed:04:f9:5f:5f:68:ba:64:63:ee:a7:
6a:cb:95:14:2a:8f:40:fb:c3:ec:ac:7b:ed:24:d0:0c:c0:5f:
93:c4:62:e2:d7:71:18:06:d6:27:4c:93:f2:b0:c2:61:70:27:
65:b3:1b:6f:88:75:5a:01:e4:1c:af:7e:c3:b9:b5:af:70:f9:
ec:be:ef:21:e7:52:08:be:9e:30:11:e0:ce:07:7c:93:05:e9:
9e:6e:c9:20:73:a9:11:9e:a7:2e:ac:7e:75:c2:88:6d:2d:b0:
76:ce:bd:cf:2e:62:10:3b:09:63:be:b8:f9:ff:0c:db:a1:4b:
ed:fd:8b:f4:9f:52:7c:02:c5:6f:47:0b:98:c3:70:d5:f7:c2:
4c:02:48:2a:c0:65:24:2b:44:16:ea:5c:29:9b:a4:74:0f:49:
6a:65:e3:4d:3b:25:13:ed:eb:02:5b:6d:65:49:8b:32:f3:0a:
65:05:f9:1b:58:88:50:39:ab:50:ed:0f:90:5c:c2:01:64:55:
88:0c:b4:52:27:bc:5b:ea:16:5f:f8:00:44:c4:f3:37:15:40:
3e:26:bb:8f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Apr 29 03:16:57 2025 by rpki-client