Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b3/6a6700-5517-4558-a67e-1e8d2f30cf0d/1/uksi0igKF9DVTGhsm0M_C1tYAk8.mft
File: uksi0igKF9DVTGhsm0M_C1tYAk8.mft (raw, json)
Hash identifier: RbF0PuceY2UyIZfRsyVqkP+fWIk8s4mejWfn+jalJ6Y=
Subject key identifier: 86:0C:BC:8B:85:7A:68:DE:D1:67:76:6A:D6:5D:60:68:16:B9:1A:4B
Authority key identifier: BA:4B:22:D2:28:0A:17:D0:D5:4C:68:6C:9B:43:3F:0B:5B:58:02:4F
Certificate issuer: /CN=ba4b22d2280a17d0d54c686c9b433f0b5b58024f
Certificate serial: 0196982A74D5E74C6C8CB1EEEB4A2FC0644A
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/uksi0igKF9DVTGhsm0M_C1tYAk8.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/b3/6a6700-5517-4558-a67e-1e8d2f30cf0d/1/uksi0igKF9DVTGhsm0M_C1tYAk8.mft
Manifest number: 1408
Signing time: Sat 03 May 2025 22:00:41 +0000
Manifest this update: Sat 03 May 2025 22:00:41 +0000
Manifest next update: Sun 04 May 2025 22:00:41 +0000
Files and hashes: 1: uksi0igKF9DVTGhsm0M_C1tYAk8.crl (hash: 88MoiyvvWhCeKrnIRCqSe0SuOkYqd1Fu0hJzd0zDlYk=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/b3/6a6700-5517-4558-a67e-1e8d2f30cf0d/1/uksi0igKF9DVTGhsm0M_C1tYAk8.crl
rsync://rpki.ripe.net/repository/DEFAULT/b3/6a6700-5517-4558-a67e-1e8d2f30cf0d/1/uksi0igKF9DVTGhsm0M_C1tYAk8.mft
rsync://rpki.ripe.net/repository/DEFAULT/uksi0igKF9DVTGhsm0M_C1tYAk8.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 04 May 2025 19:00:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:98:2a:74:d5:e7:4c:6c:8c:b1:ee:eb:4a:2f:c0:64:4a
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=ba4b22d2280a17d0d54c686c9b433f0b5b58024f
Validity
Not Before: May 3 22:00:41 2025 GMT
Not After : May 4 22:00:41 2025 GMT
Subject: CN=860cbc8b857a68ded167766ad65d606816b91a4b
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a8:06:41:c7:d2:ac:cd:ed:a9:08:93:82:5e:12:
6f:b6:18:de:87:10:84:67:ce:e3:e0:7c:96:25:f6:
89:c9:45:d6:0f:d7:ee:e0:bf:26:8d:36:ff:33:46:
a0:d7:f1:a9:02:75:e3:69:dd:6e:6d:08:f8:b0:28:
22:75:2a:f9:fd:a4:3d:a1:02:cb:b6:04:e4:a2:0f:
03:57:24:c7:52:6d:02:63:fa:cf:2d:50:59:3d:ec:
77:ca:f9:81:5e:0a:00:92:2b:b9:7c:8d:2d:b8:02:
11:b3:12:0c:6a:9d:a9:3f:ab:7e:7b:ff:68:e2:0c:
cb:4d:61:75:5c:12:88:83:fb:9c:0e:1e:54:cf:b9:
d8:70:6d:c3:55:4a:00:a3:94:02:08:99:08:49:55:
37:dc:12:35:d2:e9:7f:de:76:18:f2:aa:90:84:92:
e4:f7:42:7a:1b:00:48:ba:87:48:43:56:55:78:cd:
0e:81:c7:b2:20:0e:15:fc:34:1b:77:c3:22:33:74:
16:40:71:c6:12:ad:b0:c6:cf:4b:d7:74:54:f9:45:
06:e4:66:9f:ab:5a:c0:19:97:f6:3e:98:f8:82:e3:
c5:2a:35:9c:73:22:d3:1e:f9:5b:46:16:a5:26:ce:
35:84:2d:78:72:d1:c5:9c:d8:56:96:05:b7:bb:72:
31:39
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
86:0C:BC:8B:85:7A:68:DE:D1:67:76:6A:D6:5D:60:68:16:B9:1A:4B
X509v3 Authority Key Identifier:
keyid:BA:4B:22:D2:28:0A:17:D0:D5:4C:68:6C:9B:43:3F:0B:5B:58:02:4F
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/uksi0igKF9DVTGhsm0M_C1tYAk8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b3/6a6700-5517-4558-a67e-1e8d2f30cf0d/1/uksi0igKF9DVTGhsm0M_C1tYAk8.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/b3/6a6700-5517-4558-a67e-1e8d2f30cf0d/1/uksi0igKF9DVTGhsm0M_C1tYAk8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
87:8e:40:2f:f4:27:b9:90:9b:8a:f7:a9:6b:6c:1b:10:bb:ee:
02:c6:dc:7e:de:99:08:0d:14:26:40:7c:14:4a:bf:3a:1e:14:
60:3c:22:b7:bb:c1:49:d7:78:21:24:9f:07:67:3a:f6:71:b1:
8a:dc:46:75:c5:21:b1:78:3e:b9:57:0a:69:bd:20:9a:6e:84:
dc:04:92:eb:59:52:a8:d4:88:67:18:68:90:11:ef:60:45:99:
eb:f6:41:39:65:e3:66:87:c6:22:0a:92:0f:d4:a1:e8:0f:dc:
1e:96:81:55:18:7b:69:66:90:6d:cb:e5:cc:79:9e:d8:5c:07:
c4:91:48:df:d6:f0:e3:28:7c:59:fb:1b:9c:06:62:74:29:5b:
ce:60:7a:77:62:63:a3:c2:c2:5d:45:59:40:33:ed:99:35:ef:
1a:92:66:f2:e1:93:16:9f:79:6d:83:97:53:65:0f:68:dc:2d:
ca:e7:cc:43:4b:ec:a4:83:99:20:fd:0a:0b:dd:36:ec:3e:24:
19:ab:cb:1d:93:49:9f:41:7e:7f:2a:74:f8:e2:0b:0c:52:73:
10:86:2b:24:26:88:f2:03:83:03:b5:4d:f6:4b:42:00:18:77:
90:5c:4a:5e:9a:47:cc:46:92:9f:fd:cf:dd:c4:42:f6:36:e2:
12:e1:d2:9d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun May 4 04:37:24 2025 by rpki-client