Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/dd/550c39-44a2-431b-933d-ccbf0e5b2add/1/uybM-gcX259Wqji4aSzl3PooJec.mft
File: uybM-gcX259Wqji4aSzl3PooJec.mft (raw, json)
Hash identifier: nCeunJjZnDVgERRTnHjrVQceEZOrZimpnH+HXad+Jio=
Subject key identifier: C8:E6:3D:34:6B:35:B2:19:E6:39:DC:CF:71:52:D6:7A:B1:1C:D4:98
Authority key identifier: BB:26:CC:FA:07:17:DB:9F:56:AA:38:B8:69:2C:E5:DC:FA:28:25:E7
Certificate issuer: /CN=bb26ccfa0717db9f56aa38b8692ce5dcfa2825e7
Certificate serial: 019682106B95B64A2E898DE71FDED83B2720
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/uybM-gcX259Wqji4aSzl3PooJec.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/dd/550c39-44a2-431b-933d-ccbf0e5b2add/1/uybM-gcX259Wqji4aSzl3PooJec.mft
Manifest number: E0
Signing time: Tue 29 Apr 2025 15:00:36 +0000
Manifest this update: Tue 29 Apr 2025 15:00:36 +0000
Manifest next update: Wed 30 Apr 2025 15:00:36 +0000
Files and hashes: 1: lakVHG3W0xwUWB-wySLMgQJ_pvo.roa (hash: vGuvZzEzVEJozeZlKkwAw1MUHsR6k7X2w8QfYCIWc2E=)
2: uybM-gcX259Wqji4aSzl3PooJec.crl (hash: E5TZZy9ttgRtXusYmj7r9mCLJizwBIuTe/EDxUfNROc=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/dd/550c39-44a2-431b-933d-ccbf0e5b2add/1/uybM-gcX259Wqji4aSzl3PooJec.crl
rsync://rpki.ripe.net/repository/DEFAULT/dd/550c39-44a2-431b-933d-ccbf0e5b2add/1/uybM-gcX259Wqji4aSzl3PooJec.mft
rsync://rpki.ripe.net/repository/DEFAULT/uybM-gcX259Wqji4aSzl3PooJec.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 30 Apr 2025 15:00:36 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:82:10:6b:95:b6:4a:2e:89:8d:e7:1f:de:d8:3b:27:20
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=bb26ccfa0717db9f56aa38b8692ce5dcfa2825e7
Validity
Not Before: Apr 29 15:00:36 2025 GMT
Not After : Apr 30 15:00:36 2025 GMT
Subject: CN=c8e63d346b35b219e639dccf7152d67ab11cd498
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cf:1b:f8:bd:0a:e9:c4:40:9e:70:57:06:bf:2d:
be:cb:18:62:c3:53:a2:e9:7d:5b:d9:e4:f8:15:bc:
3c:4f:06:5c:a7:22:65:a5:64:87:3b:32:52:17:7b:
de:39:89:80:ab:59:c3:67:0f:05:8e:ea:be:da:ac:
0b:86:bf:7f:ef:44:05:5b:53:ae:8e:a2:06:0b:22:
c6:cc:36:c6:06:77:87:ac:f5:1a:e0:50:04:ae:9e:
d2:a5:b2:90:31:d1:4c:85:02:e5:92:1d:bb:db:98:
37:b6:bb:eb:3e:8d:b5:df:d2:14:5d:fc:d6:19:30:
98:6e:3c:f1:fb:69:2a:52:fd:c1:c6:b8:5d:f6:25:
5b:01:4c:5a:11:6f:f9:5c:dd:9f:1c:f2:fb:6b:7f:
be:85:06:d7:6b:b0:4f:45:7e:f1:ca:5d:38:08:93:
09:70:59:ba:06:46:bd:c1:84:61:5b:1d:f9:e4:9d:
4c:8c:29:7e:4e:01:08:66:c9:86:c3:a3:d8:bf:25:
e5:6d:1f:8b:6e:e6:78:38:e1:1e:8c:de:ed:90:59:
65:ef:a8:32:9d:b5:3c:ea:bb:a3:d5:5b:c4:8f:95:
4d:38:da:91:d3:3b:d1:e2:a6:59:80:73:3d:6c:18:
3d:3f:31:c0:20:89:65:47:c2:21:95:fc:0f:e5:f9:
59:a1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C8:E6:3D:34:6B:35:B2:19:E6:39:DC:CF:71:52:D6:7A:B1:1C:D4:98
X509v3 Authority Key Identifier:
keyid:BB:26:CC:FA:07:17:DB:9F:56:AA:38:B8:69:2C:E5:DC:FA:28:25:E7
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/uybM-gcX259Wqji4aSzl3PooJec.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/dd/550c39-44a2-431b-933d-ccbf0e5b2add/1/uybM-gcX259Wqji4aSzl3PooJec.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/dd/550c39-44a2-431b-933d-ccbf0e5b2add/1/uybM-gcX259Wqji4aSzl3PooJec.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
8c:81:c7:f5:dd:ba:27:b2:95:62:ec:93:8f:ff:f7:ce:a5:28:
d7:07:a6:06:6d:c6:99:7e:fa:16:18:06:ac:01:91:17:98:35:
9a:54:d4:9a:42:50:a4:71:f0:f3:6e:5d:8b:27:00:e9:06:1c:
60:34:7c:58:ae:15:d4:50:6a:ce:2b:54:b2:2e:eb:e4:72:45:
0a:21:73:93:f2:a1:41:8f:bb:81:80:63:c7:dc:2c:b1:c6:76:
41:bc:8d:f2:10:de:e9:6c:8b:ff:cd:f7:6b:50:37:2c:ad:87:
58:e8:fb:93:9f:89:fe:59:51:bb:a8:e3:e2:01:cb:a2:be:11:
76:90:76:76:ea:1f:45:dc:57:e6:d2:63:5b:e2:4e:71:98:3a:
9f:81:57:2e:d1:93:ca:fb:df:3e:37:2e:ae:d0:9d:e9:2e:53:
11:d5:0d:82:06:55:63:df:10:91:cb:8c:fa:35:2d:c9:fb:7f:
58:37:eb:70:97:81:d6:d2:5c:0e:cb:28:2e:0e:f4:1b:6c:ee:
60:46:e7:8e:60:0b:b9:a3:d4:67:2d:c4:f8:9d:cb:c4:d2:56:
da:be:6c:f2:18:38:4c:73:95:8b:60:1d:3b:22:6f:d9:e8:d6:
ce:aa:63:0c:ee:23:f6:58:cb:e1:88:47:73:ee:25:2e:c3:97:
2e:ec:ff:3e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Apr 29 18:42:38 2025 by rpki-client