Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ad/0dbe56-3daa-4a64-925a-fa71ae05dc3f/1/ueZ_ywvcYAHYz3BzxknrmBn8Xrg.mft
File: ueZ_ywvcYAHYz3BzxknrmBn8Xrg.mft (raw, json)
Hash identifier: cZK9A3fQk187peiTD/jExpvOMeUpEuiyyicoisO/2wc=
Subject key identifier: A3:8C:79:01:5D:AD:01:24:6A:FB:25:9D:DF:B1:E6:80:22:45:0B:3F
Authority key identifier: B9:E6:7F:CB:0B:DC:60:01:D8:CF:70:73:C6:49:EB:98:19:FC:5E:B8
Certificate issuer: /CN=b9e67fcb0bdc6001d8cf7073c649eb9819fc5eb8
Certificate serial: 0196974E82A3EC2B2D4E9AE69528792199B0
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/ueZ_ywvcYAHYz3BzxknrmBn8Xrg.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ad/0dbe56-3daa-4a64-925a-fa71ae05dc3f/1/ueZ_ywvcYAHYz3BzxknrmBn8Xrg.mft
Manifest number: 1530
Signing time: Sat 03 May 2025 18:00:26 +0000
Manifest this update: Sat 03 May 2025 18:00:26 +0000
Manifest next update: Sun 04 May 2025 18:00:26 +0000
Files and hashes: 1: HvGkzNX-LlaIXMSfIk5S1mOC0oY.roa (hash: cwXFNBAD/M2F0MUB/ov5M8039XefOPt3b2kagm/DMzw=)
2: ZqsDRLhiPpia2P-7RyyhANwTVV4.roa (hash: 0rsjP4AuQ2t0LszFPHOckD8EVFICht07+jDEBI6TOgQ=)
3: ueZ_ywvcYAHYz3BzxknrmBn8Xrg.crl (hash: ECi5lzG0AVR9x6Wffff85wwkWJ0VrXbBChyt+eVvIS4=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/ad/0dbe56-3daa-4a64-925a-fa71ae05dc3f/1/ueZ_ywvcYAHYz3BzxknrmBn8Xrg.crl
rsync://rpki.ripe.net/repository/DEFAULT/ad/0dbe56-3daa-4a64-925a-fa71ae05dc3f/1/ueZ_ywvcYAHYz3BzxknrmBn8Xrg.mft
rsync://rpki.ripe.net/repository/DEFAULT/ueZ_ywvcYAHYz3BzxknrmBn8Xrg.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 04 May 2025 18:00:26 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:97:4e:82:a3:ec:2b:2d:4e:9a:e6:95:28:79:21:99:b0
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=b9e67fcb0bdc6001d8cf7073c649eb9819fc5eb8
Validity
Not Before: May 3 18:00:26 2025 GMT
Not After : May 4 18:00:26 2025 GMT
Subject: CN=a38c79015dad01246afb259ddfb1e68022450b3f
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cb:06:f2:8b:de:ea:44:a3:14:2b:a3:c4:f0:c6:
85:d5:63:a0:59:35:79:cb:d7:d5:28:3a:b2:66:41:
6f:5e:0d:5f:06:e9:59:62:49:94:28:8a:f9:d5:2c:
75:2e:18:fe:d0:6f:ef:69:1c:80:6c:f5:6e:6d:03:
85:14:a5:e0:21:7f:94:21:2c:36:63:43:d3:f6:57:
7f:76:4c:c1:0f:9c:76:86:54:1c:36:51:79:6f:22:
c7:4d:74:0f:1e:b9:7a:db:3e:ce:fb:08:1d:8c:5e:
fb:92:d5:2b:24:55:57:19:20:90:f2:57:4a:97:cc:
9b:53:57:e1:61:8b:3b:39:2e:8d:ed:fe:1a:46:58:
11:27:01:d7:62:23:3f:89:9e:57:2a:28:c0:53:42:
7c:ec:53:4f:4a:ac:82:26:64:ad:09:22:a6:90:97:
54:77:60:85:da:da:cf:8a:4f:e5:a0:84:21:b2:08:
c3:20:03:20:05:fd:c3:e4:2e:61:f4:2d:ba:8a:54:
ad:5f:88:0a:a8:88:ad:58:51:a7:43:cf:ce:e6:30:
3c:e3:62:01:00:6e:6c:f3:e6:83:65:e8:72:ba:de:
91:7d:1b:7e:ca:e8:92:5b:68:0f:a7:81:9b:2d:86:
76:ee:cf:7a:fa:18:14:a3:86:61:7b:f6:42:bf:66:
ad:4f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A3:8C:79:01:5D:AD:01:24:6A:FB:25:9D:DF:B1:E6:80:22:45:0B:3F
X509v3 Authority Key Identifier:
keyid:B9:E6:7F:CB:0B:DC:60:01:D8:CF:70:73:C6:49:EB:98:19:FC:5E:B8
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ueZ_ywvcYAHYz3BzxknrmBn8Xrg.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ad/0dbe56-3daa-4a64-925a-fa71ae05dc3f/1/ueZ_ywvcYAHYz3BzxknrmBn8Xrg.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/ad/0dbe56-3daa-4a64-925a-fa71ae05dc3f/1/ueZ_ywvcYAHYz3BzxknrmBn8Xrg.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
8d:e2:a1:85:73:a8:01:d9:b4:ea:3a:1c:f2:6d:62:ab:4a:94:
e5:83:c6:97:96:46:04:4a:0e:b2:fe:32:7f:68:2f:ae:53:7a:
67:0f:3b:e8:a4:01:45:fa:bd:e0:9c:c6:df:2c:80:2c:69:64:
2f:6a:d4:86:fa:b5:d7:0e:6f:a2:15:82:98:24:7d:28:ed:9c:
21:e9:88:70:5b:be:33:81:1e:23:98:31:52:61:2f:3c:57:ba:
2d:e8:85:79:99:9d:bb:80:f0:9d:2b:f5:23:4a:8d:9b:d5:7d:
89:f2:d6:83:a7:8a:9f:58:c6:88:b7:5c:0f:3f:3e:69:85:c6:
f1:fb:e8:b0:03:8d:40:af:94:73:16:8f:fc:1b:7d:71:83:e9:
c7:c7:6f:d1:ca:f4:49:cf:ed:ed:bf:4d:3f:67:b7:fd:e7:1b:
65:fd:72:a1:a6:d6:14:f3:c3:3c:07:da:3f:fc:aa:5f:81:86:
b4:96:ca:15:40:61:19:b0:31:f1:43:be:37:15:ab:34:f6:cc:
c1:de:41:8c:3a:93:ba:6f:35:13:5e:ae:74:d1:a4:de:ea:82:
76:5c:42:9d:67:42:9d:d0:02:d8:dc:99:9e:b4:8e:35:15:f2:
6c:e2:4c:6a:55:53:b8:32:f1:b5:83:e9:b2:94:88:c7:33:b4:
fb:46:52:0c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun May 4 00:57:38 2025 by rpki-client