Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c9/dd672d-e980-4dca-9195-859dbca38714/1/rUQr3aKjUyCpbYBr8WjVuEp21CY.mft
File: rUQr3aKjUyCpbYBr8WjVuEp21CY.mft (raw, json)
Hash identifier: 1liKPgk8JpsVLaSX2r6Kd8ifc9IAgYiyU9QamEN0i4k=
Subject key identifier: DA:99:7E:6C:CC:D5:8B:19:98:56:EE:46:5B:52:4A:1B:CE:39:0D:81
Authority key identifier: AD:44:2B:DD:A2:A3:53:20:A9:6D:80:6B:F1:68:D5:B8:4A:76:D4:26
Certificate issuer: /CN=ad442bdda2a35320a96d806bf168d5b84a76d426
Certificate serial: 01967F4658BD78419BEFA92960D807EDEB6C
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/rUQr3aKjUyCpbYBr8WjVuEp21CY.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c9/dd672d-e980-4dca-9195-859dbca38714/1/rUQr3aKjUyCpbYBr8WjVuEp21CY.mft
Manifest number: 13ED
Signing time: Tue 29 Apr 2025 02:00:38 +0000
Manifest this update: Tue 29 Apr 2025 02:00:38 +0000
Manifest next update: Wed 30 Apr 2025 02:00:38 +0000
Files and hashes: 1: Yi8LhGXH_nRs0tEcTr_lCHwmcpA.roa (hash: oMJi8GS/Dld+gizK0j1juoqyLq72TaRv/Im2Ftty3+c=)
2: hT840T8mica095PLsmh6UJWn1xw.roa (hash: BtlUar+Qm61Tys6a6+qj8yTMdU/uS3Pp3uWg+aNGVWY=)
3: rUQr3aKjUyCpbYBr8WjVuEp21CY.crl (hash: xe/Yb+G9elKXfsvJ3xmLSHsZL5f94J8XUhObK7H3ep8=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/c9/dd672d-e980-4dca-9195-859dbca38714/1/rUQr3aKjUyCpbYBr8WjVuEp21CY.crl
rsync://rpki.ripe.net/repository/DEFAULT/c9/dd672d-e980-4dca-9195-859dbca38714/1/rUQr3aKjUyCpbYBr8WjVuEp21CY.mft
rsync://rpki.ripe.net/repository/DEFAULT/rUQr3aKjUyCpbYBr8WjVuEp21CY.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 30 Apr 2025 02:00:38 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:7f:46:58:bd:78:41:9b:ef:a9:29:60:d8:07:ed:eb:6c
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=ad442bdda2a35320a96d806bf168d5b84a76d426
Validity
Not Before: Apr 29 02:00:38 2025 GMT
Not After : Apr 30 02:00:38 2025 GMT
Subject: CN=da997e6cccd58b199856ee465b524a1bce390d81
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b9:32:cf:2b:1f:ca:c8:53:59:e1:59:df:b2:cc:
04:28:c2:ec:e7:44:b3:0c:29:16:88:a7:7c:8f:e0:
20:51:90:9e:10:44:2d:98:06:df:00:ad:52:1b:ae:
79:d1:3e:b7:e6:94:aa:06:54:3a:8a:5f:93:bd:27:
73:c6:fe:40:42:fc:16:9e:b2:1f:06:c6:a6:d2:d3:
62:65:42:d5:cc:93:c2:0d:20:e9:10:51:6e:1a:52:
05:2a:0d:43:9b:a3:2c:5a:a3:2e:14:ca:90:55:fb:
b6:c9:02:da:b0:79:1a:3f:0c:04:6f:64:3a:43:cb:
28:c3:a9:f8:57:91:47:a0:5c:95:fc:cd:74:70:23:
4f:d6:a2:c9:ce:73:70:dd:4a:54:2c:a5:6d:73:3f:
df:45:65:cd:cc:c2:d2:ad:55:32:13:c7:7a:e5:3c:
ae:f8:66:47:de:17:36:b1:a4:02:38:ea:48:d7:ba:
2a:20:c4:25:77:26:e2:8a:bb:20:b6:48:54:af:48:
0e:f5:46:c0:f5:4a:01:97:0c:63:65:cb:cd:8b:ae:
38:a7:9b:1c:48:f3:36:d9:2a:7d:09:a6:db:94:cc:
ae:52:c0:12:1b:f4:a7:a0:c8:ca:d8:38:db:02:3e:
d4:27:5b:94:ad:e0:c9:2d:2e:74:06:d9:da:58:d0:
ac:39
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
DA:99:7E:6C:CC:D5:8B:19:98:56:EE:46:5B:52:4A:1B:CE:39:0D:81
X509v3 Authority Key Identifier:
keyid:AD:44:2B:DD:A2:A3:53:20:A9:6D:80:6B:F1:68:D5:B8:4A:76:D4:26
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/rUQr3aKjUyCpbYBr8WjVuEp21CY.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c9/dd672d-e980-4dca-9195-859dbca38714/1/rUQr3aKjUyCpbYBr8WjVuEp21CY.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/c9/dd672d-e980-4dca-9195-859dbca38714/1/rUQr3aKjUyCpbYBr8WjVuEp21CY.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
26:1c:b6:5a:a8:c5:80:5e:41:2e:14:ab:de:7a:8b:58:a0:90:
ba:b8:d6:f1:2a:72:e5:f5:cb:32:b2:0b:c9:fa:15:df:95:b1:
4f:c2:5c:30:89:7c:e2:65:84:ff:7f:8f:30:02:6b:df:e6:df:
a7:83:2c:cb:76:a7:57:ee:b4:17:1f:bb:ac:3f:2e:e0:b2:8b:
0c:36:51:57:b0:d8:fd:de:29:db:26:b2:82:de:46:e5:55:3d:
f0:85:0f:a6:ae:94:a6:98:89:51:51:17:c7:ba:c8:0a:29:fb:
d6:c3:07:81:eb:5b:17:50:3f:17:c0:5d:48:d0:5f:07:00:ba:
41:2a:5c:79:bf:cf:1a:25:c7:eb:7f:61:dc:bb:a5:f7:b5:c3:
00:d3:e3:1c:be:19:5b:10:29:55:76:4f:f2:66:b7:38:c3:6c:
6a:54:58:d1:2c:c0:a1:12:4a:52:f4:8f:5d:73:42:3a:7f:1c:
66:26:73:43:74:15:2b:3a:38:22:ad:2f:c8:4c:35:59:82:d9:
09:a4:41:68:37:5a:e7:25:b6:39:f0:05:e0:7e:7f:80:93:a0:
b7:25:b6:8e:40:c6:0d:1e:ac:01:f2:1d:4c:6d:58:92:08:9e:
37:50:4a:07:79:0c:59:de:e5:71:62:08:b2:8d:4b:2e:55:a4:
81:f2:7e:75
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Apr 29 11:15:26 2025 by rpki-client