Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b8/b34a33-062b-4b70-ba51-02a12b86180d/1/uUTKLZktd4WAC91VJNPhE4PZ8d4.mft
File: uUTKLZktd4WAC91VJNPhE4PZ8d4.mft (raw, json)
Hash identifier: Jen6JgoiwBPeVi3+8CE2nR/kEe842nzSePHcxvFmlmw=
Subject key identifier: 95:E6:F8:9B:D5:8E:49:5B:46:90:17:19:5D:AD:63:06:8E:50:2E:BC
Authority key identifier: B9:44:CA:2D:99:2D:77:85:80:0B:DD:55:24:D3:E1:13:83:D9:F1:DE
Certificate issuer: /CN=b944ca2d992d7785800bdd5524d3e11383d9f1de
Certificate serial: 0196753059CB0F8B348D8AF3588171956996
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/uUTKLZktd4WAC91VJNPhE4PZ8d4.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/b8/b34a33-062b-4b70-ba51-02a12b86180d/1/uUTKLZktd4WAC91VJNPhE4PZ8d4.mft
Manifest number: 1143
Signing time: Sun 27 Apr 2025 03:00:25 +0000
Manifest this update: Sun 27 Apr 2025 03:00:25 +0000
Manifest next update: Mon 28 Apr 2025 03:00:25 +0000
Files and hashes: 1: FWSXCF4qgT0faY_P6PSKnBV7G2M.roa (hash: tFzm3MTdpBb4fBz33ckdkrZ9Nss77FL8hdTAaxqUFls=)
2: uUTKLZktd4WAC91VJNPhE4PZ8d4.crl (hash: lEL8SCVrOh/+h8PFLJSoUBVSkXZiEGytBq1yKQIQIAc=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/b8/b34a33-062b-4b70-ba51-02a12b86180d/1/uUTKLZktd4WAC91VJNPhE4PZ8d4.crl
rsync://rpki.ripe.net/repository/DEFAULT/b8/b34a33-062b-4b70-ba51-02a12b86180d/1/uUTKLZktd4WAC91VJNPhE4PZ8d4.mft
rsync://rpki.ripe.net/repository/DEFAULT/uUTKLZktd4WAC91VJNPhE4PZ8d4.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 28 Apr 2025 03:00:25 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:75:30:59:cb:0f:8b:34:8d:8a:f3:58:81:71:95:69:96
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=b944ca2d992d7785800bdd5524d3e11383d9f1de
Validity
Not Before: Apr 27 03:00:25 2025 GMT
Not After : Apr 28 03:00:25 2025 GMT
Subject: CN=95e6f89bd58e495b469017195dad63068e502ebc
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b8:c6:b9:64:e2:0d:65:02:83:ea:08:a6:d3:89:
48:dd:89:8e:7c:9c:69:85:16:a0:00:39:b3:db:74:
cf:f4:12:08:0d:25:0a:d9:2a:5c:56:31:9e:d7:71:
32:0c:20:2a:5a:3d:11:4f:8e:62:e6:e9:89:bb:e3:
5c:49:8f:2a:33:1f:c0:3c:cb:b0:bf:0b:3a:a1:cc:
07:90:6b:b6:86:79:35:2e:29:f1:76:e9:ce:ba:7d:
39:71:07:a6:41:82:72:cd:c8:b1:c5:ad:37:72:60:
d9:c7:05:a1:55:1c:6a:77:58:4f:d2:7f:da:cf:91:
41:8c:e2:40:f6:43:34:d3:b4:fc:bd:f1:08:1c:da:
0d:46:66:ec:94:7d:e5:26:f0:ca:ce:8e:40:bf:74:
b0:8d:a7:32:56:53:0e:41:51:9b:55:ab:be:36:4b:
bf:9e:d8:4a:ee:10:21:37:fc:83:89:b6:a1:33:14:
43:a4:a6:0a:91:af:b9:a4:45:72:9c:53:e5:6b:96:
46:83:c0:23:91:01:75:07:6e:f2:79:97:cb:4f:fa:
aa:c0:8f:a9:76:f2:dd:73:93:a7:4a:df:f9:ef:6f:
52:77:16:30:2b:ab:73:71:fc:96:b3:0d:7d:b5:2a:
a6:52:65:35:3e:c0:76:0d:d7:49:d5:69:a8:18:d6:
be:5f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
95:E6:F8:9B:D5:8E:49:5B:46:90:17:19:5D:AD:63:06:8E:50:2E:BC
X509v3 Authority Key Identifier:
keyid:B9:44:CA:2D:99:2D:77:85:80:0B:DD:55:24:D3:E1:13:83:D9:F1:DE
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/uUTKLZktd4WAC91VJNPhE4PZ8d4.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b8/b34a33-062b-4b70-ba51-02a12b86180d/1/uUTKLZktd4WAC91VJNPhE4PZ8d4.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/b8/b34a33-062b-4b70-ba51-02a12b86180d/1/uUTKLZktd4WAC91VJNPhE4PZ8d4.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
04:ec:5a:f6:ad:21:86:68:3f:2a:f3:91:c2:f8:34:2d:60:48:
c4:4a:f2:3f:1a:01:f9:05:c0:b3:7f:52:61:07:5d:67:80:68:
08:07:9f:32:19:d9:b1:d7:4e:be:9b:14:11:f5:0a:f8:5e:ba:
08:5b:e4:ee:71:d2:7f:2b:1c:2b:5e:44:aa:b5:76:fc:91:ef:
86:29:17:ab:85:bf:0e:e6:20:90:b5:e4:41:83:bb:b4:7d:fe:
7b:69:a6:65:71:8b:59:67:34:f1:cf:47:2c:46:71:0f:0b:fa:
f2:e0:fd:56:ca:7c:47:de:6e:8e:b9:59:f3:35:ac:de:4e:d3:
5d:65:5a:71:a4:68:70:2e:cc:e5:76:eb:97:52:db:e4:63:c1:
00:3a:a9:8b:ed:a2:f9:ac:28:1a:5f:b6:40:89:fc:c9:5d:c1:
c8:07:f2:1c:59:47:5c:0d:3e:5f:cd:b9:3b:b7:64:b7:96:48:
ca:5d:2d:4f:79:50:64:1e:c3:bd:93:13:0e:dc:00:d4:2a:09:
93:39:7e:85:a2:7d:5f:07:01:73:4b:18:0d:7a:ee:4b:27:6e:
80:88:fa:d2:03:6c:f4:f9:7a:e3:26:ff:fc:21:d4:33:5a:44:
f3:36:ae:8d:29:ba:73:7d:1e:83:ff:47:80:c2:4f:09:0a:39:
00:cc:08:80
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Apr 27 12:55:46 2025 by rpki-client