Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/bb/1d5ee1-accf-474f-a589-cd1fa484411b/1/uGnuZhZNPLQdvS31QXgXwy9M6gU.mft
File: uGnuZhZNPLQdvS31QXgXwy9M6gU.mft (raw, json)
Hash identifier: HLcOgbld0GFlNBONpwyCpFBpaFpuD6SvV8s37dC8BHw=
Subject key identifier: 23:1A:86:C0:07:8F:B4:F5:8B:F5:B8:23:4B:67:A0:CD:DF:BE:4B:77
Authority key identifier: B8:69:EE:66:16:4D:3C:B4:1D:BD:2D:F5:41:78:17:C3:2F:4C:EA:05
Certificate issuer: /CN=b869ee66164d3cb41dbd2df5417817c32f4cea05
Certificate serial: 019676E7E1FC354EABA8972D426D39C3749F
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/uGnuZhZNPLQdvS31QXgXwy9M6gU.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/bb/1d5ee1-accf-474f-a589-cd1fa484411b/1/uGnuZhZNPLQdvS31QXgXwy9M6gU.mft
Manifest number: 150F
Signing time: Sun 27 Apr 2025 11:00:30 +0000
Manifest this update: Sun 27 Apr 2025 11:00:30 +0000
Manifest next update: Mon 28 Apr 2025 11:00:30 +0000
Files and hashes: 1: 2hZweGDLaTOG9__dBEdUkTtfsSw.roa (hash: x2mvxEnLHZTwd7sK9WWW9RrPHq1tkRpvzUBh9hY6j6E=)
2: YKs5bmFUVAk0U3c65JyA-yx_ru8.roa (hash: /iSRIEZxHR2KYrSfKlv13GZuPtZZ9il7XqwpwVFRwXE=)
3: uGnuZhZNPLQdvS31QXgXwy9M6gU.crl (hash: 8QyNCs5MRE2Rw3aOrFcvuB+aoBdToZ0vm6aWU0aGQTE=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/bb/1d5ee1-accf-474f-a589-cd1fa484411b/1/uGnuZhZNPLQdvS31QXgXwy9M6gU.crl
rsync://rpki.ripe.net/repository/DEFAULT/bb/1d5ee1-accf-474f-a589-cd1fa484411b/1/uGnuZhZNPLQdvS31QXgXwy9M6gU.mft
rsync://rpki.ripe.net/repository/DEFAULT/uGnuZhZNPLQdvS31QXgXwy9M6gU.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 28 Apr 2025 07:29:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:76:e7:e1:fc:35:4e:ab:a8:97:2d:42:6d:39:c3:74:9f
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=b869ee66164d3cb41dbd2df5417817c32f4cea05
Validity
Not Before: Apr 27 11:00:30 2025 GMT
Not After : Apr 28 11:00:30 2025 GMT
Subject: CN=231a86c0078fb4f58bf5b8234b67a0cddfbe4b77
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bb:68:20:89:37:ed:2c:b6:42:e3:cb:1f:ef:d5:
7f:af:c1:83:7e:62:5f:5a:3d:f8:42:98:f4:f0:aa:
54:ef:2f:82:ca:d4:03:4e:b1:63:78:38:eb:69:61:
bd:02:76:fb:f7:04:f8:d0:70:e0:9b:2a:3e:10:d2:
af:68:c7:98:ea:e3:74:56:7e:30:a1:e8:f0:0c:32:
1c:2f:58:8e:10:d8:03:eb:0e:6f:56:25:5e:31:15:
ef:ad:ba:be:82:5c:eb:a9:fa:2c:28:27:3e:90:2f:
06:ac:9b:7e:0d:0f:4c:bc:60:2d:0c:f5:73:6f:7e:
f8:1a:dc:87:51:27:ca:bb:8a:0b:9a:79:f7:08:37:
3f:7f:4b:e0:a0:af:93:f6:fc:93:8f:e4:4b:96:7a:
3c:3b:83:a1:8d:51:80:85:19:1e:5d:7b:56:be:54:
27:8b:49:6c:f8:bc:4d:bf:19:5a:a3:53:d3:64:0a:
00:33:16:36:ce:51:3e:7c:bb:b4:a5:dd:40:d3:93:
83:22:89:84:fc:5a:14:97:46:5f:34:fb:b1:ba:69:
78:ee:5b:e0:7f:42:c0:9e:a7:9b:35:7e:b7:83:85:
68:89:7b:18:ab:ec:ce:96:9c:08:96:35:0f:f7:6d:
30:37:57:e8:67:af:c3:7c:58:81:82:70:b4:93:cd:
0f:7d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
23:1A:86:C0:07:8F:B4:F5:8B:F5:B8:23:4B:67:A0:CD:DF:BE:4B:77
X509v3 Authority Key Identifier:
keyid:B8:69:EE:66:16:4D:3C:B4:1D:BD:2D:F5:41:78:17:C3:2F:4C:EA:05
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/uGnuZhZNPLQdvS31QXgXwy9M6gU.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/bb/1d5ee1-accf-474f-a589-cd1fa484411b/1/uGnuZhZNPLQdvS31QXgXwy9M6gU.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/bb/1d5ee1-accf-474f-a589-cd1fa484411b/1/uGnuZhZNPLQdvS31QXgXwy9M6gU.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
c5:98:85:83:25:72:22:a2:d4:4f:38:0c:e8:e0:f2:1e:9c:20:
d5:50:80:44:c3:13:49:6d:93:74:58:27:7b:cc:fb:c1:f0:f1:
90:ae:44:46:6a:ea:1e:fe:e0:b5:f0:2a:36:58:f7:a0:dd:12:
d5:01:1b:de:9b:22:b1:05:18:69:0c:99:22:64:ef:ee:1e:d9:
e0:32:74:00:f8:b6:51:8e:eb:bf:99:1d:16:8c:38:99:a1:99:
f4:86:ab:40:34:1e:5e:4d:07:a0:0d:43:7b:40:9f:fc:62:95:
ab:d5:59:e5:3f:ff:5b:a6:51:13:5f:69:5f:79:1d:d4:23:bc:
f6:87:69:e6:7c:8d:bf:30:05:40:41:e1:51:df:d0:df:ba:8b:
8e:3c:17:4d:7b:6e:78:68:2e:4a:78:22:bc:3a:18:30:31:1d:
a9:55:63:0a:f3:3a:ec:3d:5c:71:f1:c7:a4:22:3e:da:87:6b:
92:41:51:2f:6a:84:49:46:83:89:81:a0:4b:70:76:de:0e:56:
d0:b1:05:87:63:f4:5e:ed:d5:64:d8:c3:ae:fb:ad:8e:ac:1f:
c8:f4:fe:c8:84:ca:5d:1b:2a:a0:03:0b:46:31:97:49:07:b1:
fe:46:6f:0d:f1:1e:86:d4:28:bd:86:5b:d2:72:9b:8e:20:17:
83:73:d4:a0
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Apr 27 16:35:36 2025 by rpki-client