Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ad/3c293a-1591-4685-8769-a8f90d45ea67/1/uRil9IFVJuHpJRDTZI69oM27wqw.mft
File: uRil9IFVJuHpJRDTZI69oM27wqw.mft (raw, json)
Hash identifier: CAosSqp8KPeoKoQW+hdwWrn/CBBbvn798I0L/cjjYGA=
Subject key identifier: D8:C8:86:3E:2D:33:43:47:DD:29:9A:AD:02:B5:21:29:BF:68:8F:D5
Authority key identifier: B9:18:A5:F4:81:55:26:E1:E9:25:10:D3:64:8E:BD:A0:CD:BB:C2:AC
Certificate issuer: /CN=b918a5f4815526e1e92510d3648ebda0cdbbc2ac
Certificate serial: 0196759E8B92B04682C24E647883A5E71200
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/uRil9IFVJuHpJRDTZI69oM27wqw.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ad/3c293a-1591-4685-8769-a8f90d45ea67/1/uRil9IFVJuHpJRDTZI69oM27wqw.mft
Manifest number: 071A
Signing time: Sun 27 Apr 2025 05:00:46 +0000
Manifest this update: Sun 27 Apr 2025 05:00:46 +0000
Manifest next update: Mon 28 Apr 2025 05:00:46 +0000
Files and hashes: 1: NQ1K-9XIHqQJwtN4074dlf3XMz8.roa (hash: vM/pIxk1nyw8ZAVigG02xXVdjyCX5kUlIgX1S1etmX8=)
2: uRil9IFVJuHpJRDTZI69oM27wqw.crl (hash: tJ3Xa+xRC+FMLaSYOcvmF0KuZ36jahIJzBTibMUtbfA=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/ad/3c293a-1591-4685-8769-a8f90d45ea67/1/uRil9IFVJuHpJRDTZI69oM27wqw.crl
rsync://rpki.ripe.net/repository/DEFAULT/ad/3c293a-1591-4685-8769-a8f90d45ea67/1/uRil9IFVJuHpJRDTZI69oM27wqw.mft
rsync://rpki.ripe.net/repository/DEFAULT/uRil9IFVJuHpJRDTZI69oM27wqw.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 28 Apr 2025 05:00:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:75:9e:8b:92:b0:46:82:c2:4e:64:78:83:a5:e7:12:00
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=b918a5f4815526e1e92510d3648ebda0cdbbc2ac
Validity
Not Before: Apr 27 05:00:46 2025 GMT
Not After : Apr 28 05:00:46 2025 GMT
Subject: CN=d8c8863e2d334347dd299aad02b52129bf688fd5
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9c:20:4a:a4:38:bf:cd:bc:ac:70:c8:30:1f:e0:
22:6b:34:44:ac:12:be:0c:38:cb:7e:73:57:c7:de:
53:76:49:a6:a3:72:bd:15:42:2c:90:9d:48:95:ab:
da:3c:0f:b9:72:58:df:0d:b2:78:3b:d5:fa:a3:98:
a2:25:86:ec:de:1a:6f:ff:4a:d4:de:3b:00:fe:09:
46:46:46:f6:ab:a8:d4:2d:f3:f6:65:c8:32:4e:56:
b7:12:6e:e8:41:dc:f2:5b:1f:de:74:15:05:ee:f3:
0b:04:79:ac:e9:e1:fe:85:29:d6:06:48:65:b0:62:
cb:5d:5e:6f:d8:6f:0f:c9:06:3a:6a:18:32:cf:d2:
a7:51:a1:35:fa:53:6d:09:be:98:31:4e:90:58:26:
19:a1:e0:87:e6:27:24:1d:40:f5:1e:e3:10:25:d1:
67:17:26:b0:49:4f:63:5a:50:e9:fd:44:c5:20:7b:
bb:db:dc:8d:80:4c:76:fa:fc:8d:7a:32:4f:43:38:
00:a3:46:e3:9c:8c:47:89:3e:57:9d:14:7d:7b:74:
8d:63:d4:9c:4c:b5:e1:29:78:e5:37:54:f1:17:86:
2f:de:03:c2:07:21:ea:d3:d4:1c:3a:dc:c3:13:87:
8e:38:c1:c7:e1:a6:43:54:84:28:e3:15:9c:62:6a:
f9:23
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D8:C8:86:3E:2D:33:43:47:DD:29:9A:AD:02:B5:21:29:BF:68:8F:D5
X509v3 Authority Key Identifier:
keyid:B9:18:A5:F4:81:55:26:E1:E9:25:10:D3:64:8E:BD:A0:CD:BB:C2:AC
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/uRil9IFVJuHpJRDTZI69oM27wqw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ad/3c293a-1591-4685-8769-a8f90d45ea67/1/uRil9IFVJuHpJRDTZI69oM27wqw.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/ad/3c293a-1591-4685-8769-a8f90d45ea67/1/uRil9IFVJuHpJRDTZI69oM27wqw.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
28:e1:da:18:11:88:f0:09:62:47:25:59:15:94:90:f4:7f:20:
29:60:b7:19:83:98:61:67:5b:a3:97:ae:56:bc:be:68:d1:62:
20:aa:9d:ea:62:83:e7:2f:ff:2c:6d:d2:8a:63:d7:f8:e7:8b:
8a:b6:bf:1f:33:2f:b3:0f:80:7e:b1:8e:01:cf:2e:d6:13:ad:
d4:bb:aa:5d:a9:3c:98:df:6f:57:5f:3a:08:fc:af:66:63:f5:
0d:6c:38:9a:93:f5:af:6d:46:48:4a:d6:6a:62:78:3b:43:42:
cf:c8:9d:f1:5f:1b:ce:0e:40:82:b1:c6:f4:68:7c:c9:3f:b9:
bb:06:93:da:bd:54:b2:7c:2f:2d:88:54:25:1c:b4:bb:73:34:
bc:7c:80:44:81:29:6b:13:68:0f:f0:63:26:5d:86:b1:74:d5:
3f:7f:b6:0d:ed:dd:f4:06:e1:a9:d1:85:57:d7:7d:f7:d9:76:
d8:13:0c:c7:8f:5f:6f:8a:04:5d:10:82:fb:1f:04:56:9b:6c:
4e:3b:ae:d6:89:a8:f8:95:89:12:86:1c:61:07:89:32:56:62:
75:a9:42:ad:ca:da:89:02:a6:96:71:d7:b1:1e:13:c4:d3:24:
8f:d0:02:b7:9a:ec:b5:20:97:4a:f4:b1:72:ba:a7:f3:0f:0e:
0b:43:81:e9
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Apr 27 11:32:45 2025 by rpki-client