Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c8/d74b80-40ea-4e34-b50d-114face1a571/1/uNFCJ0c-S3XIdydM9sBQ8lxXch8.mft
File: uNFCJ0c-S3XIdydM9sBQ8lxXch8.mft (raw, json)
Hash identifier: +iXdEr9qUrx4wP/Imk6RI8iOgU9kP4MKII3D9VhCSek=
Subject key identifier: AC:6A:46:AF:91:2A:61:9B:8A:89:F4:DF:03:0E:60:4A:A8:C6:80:31
Authority key identifier: B8:D1:42:27:47:3E:4B:75:C8:77:27:4C:F6:C0:50:F2:5C:57:72:1F
Certificate issuer: /CN=b8d14227473e4b75c877274cf6c050f25c57721f
Certificate serial: 01967B698186C68FD5B49FDCB6D05C1C9F72
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/uNFCJ0c-S3XIdydM9sBQ8lxXch8.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c8/d74b80-40ea-4e34-b50d-114face1a571/1/uNFCJ0c-S3XIdydM9sBQ8lxXch8.mft
Manifest number: 1513
Signing time: Mon 28 Apr 2025 08:00:34 +0000
Manifest this update: Mon 28 Apr 2025 08:00:34 +0000
Manifest next update: Tue 29 Apr 2025 08:00:34 +0000
Files and hashes: 1: H6IzZrx8byO3caIkcY49jLe8s6I.roa (hash: aD1h/fBmUnkEqmwINWb3tP7Y404DXB5JUPfFMk9OdX0=)
2: uNFCJ0c-S3XIdydM9sBQ8lxXch8.crl (hash: F2KxmJXz7Px/AP5YWCK7Vs1S0ZdGDIGQVnYfRZTgbkI=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/c8/d74b80-40ea-4e34-b50d-114face1a571/1/uNFCJ0c-S3XIdydM9sBQ8lxXch8.crl
rsync://rpki.ripe.net/repository/DEFAULT/c8/d74b80-40ea-4e34-b50d-114face1a571/1/uNFCJ0c-S3XIdydM9sBQ8lxXch8.mft
rsync://rpki.ripe.net/repository/DEFAULT/uNFCJ0c-S3XIdydM9sBQ8lxXch8.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 29 Apr 2025 08:00:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:7b:69:81:86:c6:8f:d5:b4:9f:dc:b6:d0:5c:1c:9f:72
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=b8d14227473e4b75c877274cf6c050f25c57721f
Validity
Not Before: Apr 28 08:00:34 2025 GMT
Not After : Apr 29 08:00:34 2025 GMT
Subject: CN=ac6a46af912a619b8a89f4df030e604aa8c68031
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ad:ee:28:15:01:96:11:09:4b:77:3b:1b:c3:91:
50:56:20:33:3d:f5:e4:f1:09:73:5f:c0:90:77:c8:
72:35:ad:7c:13:ce:bb:5a:9e:7b:85:03:63:d4:eb:
45:41:9d:ae:a9:ef:75:bd:be:52:da:b1:08:17:33:
2f:04:3c:a2:c1:6e:0b:ea:f7:4e:aa:9e:82:51:c4:
b6:ed:7d:91:02:29:12:c6:50:a4:7c:a3:40:08:d8:
0f:6b:13:7c:cb:71:36:e5:c8:8d:43:49:5f:7d:99:
d7:c4:f5:89:71:73:49:65:c6:01:59:15:74:c2:cd:
49:5e:eb:8c:0f:14:9b:6c:8a:4a:60:ff:f5:43:34:
bc:ad:3b:c6:b7:eb:be:2c:f2:17:41:cb:40:3c:05:
9a:92:6d:ce:6c:1b:69:de:05:df:54:f7:8a:68:b2:
a9:b0:2e:64:0f:b8:28:7e:3d:f5:ce:c6:2a:ae:a7:
91:5f:28:51:4e:a5:f4:3e:25:b3:18:c7:ab:3d:7d:
32:91:b1:ae:4d:e7:67:23:88:1a:b9:51:2f:9d:38:
2d:89:62:43:62:95:a7:b8:1f:bc:ab:04:79:2e:bf:
f4:3c:99:6e:36:e7:5e:e6:d9:c9:7d:80:0a:13:28:
5f:17:58:2a:4e:f5:16:9e:b8:c2:30:14:6f:73:f8:
04:d3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
AC:6A:46:AF:91:2A:61:9B:8A:89:F4:DF:03:0E:60:4A:A8:C6:80:31
X509v3 Authority Key Identifier:
keyid:B8:D1:42:27:47:3E:4B:75:C8:77:27:4C:F6:C0:50:F2:5C:57:72:1F
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/uNFCJ0c-S3XIdydM9sBQ8lxXch8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c8/d74b80-40ea-4e34-b50d-114face1a571/1/uNFCJ0c-S3XIdydM9sBQ8lxXch8.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/c8/d74b80-40ea-4e34-b50d-114face1a571/1/uNFCJ0c-S3XIdydM9sBQ8lxXch8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
9b:b8:fa:cc:48:9a:48:b3:c7:a8:8e:6d:22:8a:3b:22:1c:8a:
03:64:89:42:3f:94:55:d2:c3:73:31:1e:3f:41:aa:66:92:bf:
e4:45:31:b9:1b:7d:67:dc:1f:e5:4b:57:82:93:7c:f1:22:54:
0d:ff:68:94:23:d9:34:7a:ff:8a:ba:4d:36:b8:74:6d:57:ec:
a0:a0:87:62:39:c9:7e:73:cf:7c:77:1c:cd:2f:d1:4a:5c:02:
31:94:2a:3c:78:cc:50:04:31:1d:ed:e9:67:03:37:9e:eb:40:
1f:58:bd:73:ef:e7:6c:7a:5a:ab:83:80:30:59:20:2b:a4:26:
80:28:f2:2b:0e:94:e7:00:f4:08:f4:0e:53:95:b8:e9:72:ca:
17:78:c5:e7:c1:5a:fc:d3:75:79:00:4c:24:ac:bb:04:89:0d:
05:21:dd:e8:71:0e:7e:34:24:70:40:56:6b:34:f7:66:1b:5e:
c4:13:a5:77:00:11:9e:3b:5d:b0:d6:11:bd:a3:86:cd:7b:3b:
f6:78:d2:6f:6f:1b:46:ab:08:5c:9c:4e:bf:02:d1:38:d9:db:
1d:37:9c:34:35:a1:99:c4:c0:2e:8a:d1:11:11:bd:33:ec:55:
b5:16:78:16:77:8e:28:58:5c:d9:ff:4a:0b:d7:6c:bc:09:2b:
9b:dd:4f:b1
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 28 12:42:05 2025 by rpki-client