Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/a7/fbd382-10d0-4684-8836-eed1d0967078/1/0uuxFmwGDbJd-U8CvS-PnabE3Us.mft
File: 0uuxFmwGDbJd-U8CvS-PnabE3Us.mft (raw, json)
Hash identifier: CljhalJpF5cnZ5IZWFnXRB/N4EqJbO4e5XBAfJ3KCR4=
Subject key identifier: A2:9C:41:10:6C:0D:6F:A9:7C:39:0E:82:3A:06:91:F4:30:D9:7B:3C
Authority key identifier: D2:EB:B1:16:6C:06:0D:B2:5D:F9:4F:02:BD:2F:8F:9D:A6:C4:DD:4B
Certificate issuer: /CN=d2ebb1166c060db25df94f02bd2f8f9da6c4dd4b
Certificate serial: 0196767A3FAFF00C0B2FC6441D06CFBD4D2F
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/0uuxFmwGDbJd-U8CvS-PnabE3Us.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/a7/fbd382-10d0-4684-8836-eed1d0967078/1/0uuxFmwGDbJd-U8CvS-PnabE3Us.mft
Manifest number: 10CA
Signing time: Sun 27 Apr 2025 09:00:45 +0000
Manifest this update: Sun 27 Apr 2025 09:00:45 +0000
Manifest next update: Mon 28 Apr 2025 09:00:45 +0000
Files and hashes: 1: 0uuxFmwGDbJd-U8CvS-PnabE3Us.crl (hash: OcwLlqdJh8w8+AnT0DzZthKZaAthzeskqg8lOEgq394=)
2: LdFx4O_axkyLwKBn8hayXhVuuTY.roa (hash: +qJwhkRCeLKYqE6tG+1RNrXKKNfgmZMWphTwQtobs60=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/a7/fbd382-10d0-4684-8836-eed1d0967078/1/0uuxFmwGDbJd-U8CvS-PnabE3Us.crl
rsync://rpki.ripe.net/repository/DEFAULT/a7/fbd382-10d0-4684-8836-eed1d0967078/1/0uuxFmwGDbJd-U8CvS-PnabE3Us.mft
rsync://rpki.ripe.net/repository/DEFAULT/0uuxFmwGDbJd-U8CvS-PnabE3Us.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 28 Apr 2025 05:00:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:76:7a:3f:af:f0:0c:0b:2f:c6:44:1d:06:cf:bd:4d:2f
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=d2ebb1166c060db25df94f02bd2f8f9da6c4dd4b
Validity
Not Before: Apr 27 09:00:45 2025 GMT
Not After : Apr 28 09:00:45 2025 GMT
Subject: CN=a29c41106c0d6fa97c390e823a0691f430d97b3c
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b8:9f:e4:49:f3:48:91:57:9b:d8:0d:aa:ea:76:
6e:ef:9e:e8:d9:8f:38:32:d2:0d:a0:86:bd:c7:6f:
f9:75:e3:48:24:36:d3:dc:ac:92:10:23:d4:e0:6f:
a5:76:26:41:8b:f5:6b:96:8f:7a:e5:6a:fb:f7:79:
f0:33:60:6e:ef:0a:57:0a:f8:b3:bd:41:71:c0:9b:
14:f1:e1:c8:4d:d5:39:7a:8d:70:cd:02:f3:b4:b8:
1c:48:83:a6:f2:c6:6e:6a:ed:c4:9d:f0:50:30:10:
76:85:64:83:49:4e:70:be:27:f7:1f:ed:f1:08:79:
da:3a:38:41:3f:66:71:c1:b6:fe:d7:1d:e8:a5:d1:
0f:cc:a3:a5:e0:b4:ce:ab:73:5f:08:a4:8e:e4:1e:
39:61:ee:bc:69:8a:4b:fd:f1:c8:32:fc:2e:80:5a:
81:e9:be:29:94:0d:9d:b0:24:6a:b3:d7:04:54:66:
b5:02:01:b3:b7:81:a8:5f:7b:45:08:65:1b:c9:6f:
c9:bb:0d:82:05:e5:7e:d4:68:be:f0:fd:37:f7:42:
43:65:7e:9e:34:4c:13:97:db:5b:46:b3:21:46:09:
10:e7:7f:08:a3:55:36:ed:c0:89:07:99:7f:d6:58:
d1:01:b6:aa:4b:bb:6c:ee:09:53:65:07:f8:64:2e:
e0:97
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A2:9C:41:10:6C:0D:6F:A9:7C:39:0E:82:3A:06:91:F4:30:D9:7B:3C
X509v3 Authority Key Identifier:
keyid:D2:EB:B1:16:6C:06:0D:B2:5D:F9:4F:02:BD:2F:8F:9D:A6:C4:DD:4B
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/0uuxFmwGDbJd-U8CvS-PnabE3Us.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a7/fbd382-10d0-4684-8836-eed1d0967078/1/0uuxFmwGDbJd-U8CvS-PnabE3Us.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/a7/fbd382-10d0-4684-8836-eed1d0967078/1/0uuxFmwGDbJd-U8CvS-PnabE3Us.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
34:7c:9e:0c:9e:46:80:c2:57:94:5d:5c:8e:f1:c7:24:0a:cb:
17:a8:ac:e0:ab:85:b6:5e:84:50:29:16:14:9f:76:9f:fb:0f:
06:8a:28:95:57:d3:d6:88:fc:b9:36:13:e2:a7:c3:4c:a5:11:
fb:f2:f1:56:5b:bd:ce:b3:99:3c:ff:a3:c3:82:7b:af:87:47:
06:96:87:47:e6:34:87:ca:28:d1:27:22:4f:d2:5c:5b:e9:43:
d2:47:14:67:5c:f4:58:84:04:dd:d4:00:21:1f:f3:88:c1:6f:
6f:d5:1d:e0:e1:a7:fd:79:50:e7:df:ca:b9:7f:03:02:4f:b6:
fa:e7:54:18:b7:4c:b0:98:e8:bb:77:ec:9b:20:75:66:26:b8:
85:d5:20:e3:78:60:d1:5e:00:e3:37:d5:bf:a9:85:c4:92:bb:
a6:e7:55:9d:f5:f3:40:96:37:19:3a:4d:96:bb:f9:2d:e7:c7:
57:a1:95:21:0e:62:6d:65:e3:f3:82:11:d9:31:06:84:ab:d6:
a1:49:af:a6:87:59:d4:a3:1c:42:58:db:06:b1:18:24:e6:2a:
90:a4:63:f6:3d:fb:ea:b7:20:5a:2d:87:e6:a2:4f:ce:25:35:
93:ba:b7:a1:dc:70:89:c9:0f:11:d1:9c:a1:12:a6:ec:46:f3:
b9:a7:13:7b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Apr 27 13:07:20 2025 by rpki-client