
Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e0/c69eef-5ac2-4768-83b7-ecdf2a906b4c/1/uidBVRBOQzKMO_oq1qxnGXZvEyU.mft
File: uidBVRBOQzKMO_oq1qxnGXZvEyU.mft (raw, json)
Hash identifier: cA52o0y8U7i5s+oAARp6w1QV5+tQiWN+uCvpa0FyRkQ=
Subject key identifier: C2:15:8D:CA:31:D6:FF:11:58:51:D1:81:00:9D:D9:1B:BF:0A:95:3B
Authority key identifier: BA:27:41:55:10:4E:43:32:8C:3B:FA:2A:D6:AC:67:19:76:6F:13:25
Certificate issuer: /CN=ba274155104e43328c3bfa2ad6ac6719766f1325
Certificate serial: 0196767A6B9EB378DA491F31A5707123F6C4
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/uidBVRBOQzKMO_oq1qxnGXZvEyU.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/e0/c69eef-5ac2-4768-83b7-ecdf2a906b4c/1/uidBVRBOQzKMO_oq1qxnGXZvEyU.mft
Manifest number: 0352
Signing time: Sun 27 Apr 2025 09:00:56 +0000
Manifest this update: Sun 27 Apr 2025 09:00:56 +0000
Manifest next update: Mon 28 Apr 2025 09:00:56 +0000
Files and hashes: 1: H4KA0sxWbQn0TsS16gkHA_XLpks.roa (hash: aXldWw/SJurvCLdfL24USIy9/ELw56XWGz7XXExpHyU=)
2: uidBVRBOQzKMO_oq1qxnGXZvEyU.crl (hash: GWbZFBDHE29RmsjFzwCOWMCsaH1xeGN16CaH4hcKuXA=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/e0/c69eef-5ac2-4768-83b7-ecdf2a906b4c/1/uidBVRBOQzKMO_oq1qxnGXZvEyU.crl
rsync://rpki.ripe.net/repository/DEFAULT/e0/c69eef-5ac2-4768-83b7-ecdf2a906b4c/1/uidBVRBOQzKMO_oq1qxnGXZvEyU.mft
rsync://rpki.ripe.net/repository/DEFAULT/uidBVRBOQzKMO_oq1qxnGXZvEyU.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 28 Apr 2025 05:00:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:76:7a:6b:9e:b3:78:da:49:1f:31:a5:70:71:23:f6:c4
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=ba274155104e43328c3bfa2ad6ac6719766f1325
Validity
Not Before: Apr 27 09:00:56 2025 GMT
Not After : Apr 28 09:00:56 2025 GMT
Subject: CN=c2158dca31d6ff115851d181009dd91bbf0a953b
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c3:f3:d6:9a:1a:63:01:ce:0e:6e:fb:f0:37:cd:
03:d2:e0:1c:1c:68:f4:4d:3e:4d:79:28:a0:b2:51:
ce:1a:35:cd:7d:75:7f:6c:11:7d:4b:4a:07:5a:fb:
b7:f1:c9:7c:b9:48:53:c7:43:83:f2:35:c9:43:bd:
d3:a1:3d:49:ec:ba:bf:37:66:3a:f3:1e:bb:18:b0:
44:36:8b:b7:4a:2c:e5:6d:f3:5b:2f:1c:75:dd:1e:
dc:90:29:bd:ef:aa:61:53:c9:98:ad:d2:20:ea:ad:
5e:49:b7:e0:90:f1:80:a7:b2:ad:64:a5:9f:d4:07:
25:68:7f:a4:91:2c:b4:e8:59:ad:07:ac:5c:f6:2a:
7a:fd:f1:1b:2c:da:92:de:fc:f9:f4:50:75:6e:43:
5b:ef:53:1f:05:6e:40:b4:c7:92:8f:7a:e3:88:11:
fd:14:7a:33:e4:b0:0a:52:bd:d7:44:0b:c1:13:97:
9b:d9:8a:ce:77:92:c5:f7:98:c9:82:a5:78:44:24:
08:5a:31:2f:38:ab:43:aa:42:b9:63:f4:ad:89:46:
0b:64:8c:5f:4b:85:88:67:26:fd:c2:a6:03:b7:de:
e4:98:64:24:9d:00:90:d8:3f:6b:34:6c:1b:42:db:
20:3f:42:92:fb:79:66:d5:25:dd:9b:32:7b:d5:8d:
8d:c1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C2:15:8D:CA:31:D6:FF:11:58:51:D1:81:00:9D:D9:1B:BF:0A:95:3B
X509v3 Authority Key Identifier:
keyid:BA:27:41:55:10:4E:43:32:8C:3B:FA:2A:D6:AC:67:19:76:6F:13:25
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/uidBVRBOQzKMO_oq1qxnGXZvEyU.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e0/c69eef-5ac2-4768-83b7-ecdf2a906b4c/1/uidBVRBOQzKMO_oq1qxnGXZvEyU.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/e0/c69eef-5ac2-4768-83b7-ecdf2a906b4c/1/uidBVRBOQzKMO_oq1qxnGXZvEyU.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
31:93:90:b4:d7:20:14:4b:5e:8d:89:a3:74:46:94:fb:07:ba:
41:37:1a:23:b2:69:e6:ed:3c:f0:82:29:37:f8:43:f9:b6:74:
b2:f2:ef:f6:4b:f9:1d:de:88:43:22:bb:bf:8b:ca:67:64:3a:
96:94:92:a6:ee:07:08:28:60:70:f5:1a:2d:7b:c8:ea:e0:28:
85:10:2f:1d:b8:36:7f:51:fb:05:88:02:8f:18:65:55:5d:a1:
ab:c5:5a:49:fa:32:2b:89:49:39:5b:dc:d9:f9:c3:59:f5:a2:
82:f8:5c:d7:5b:eb:77:a9:24:8c:ee:aa:19:e6:7e:dd:d7:2e:
83:ea:59:c2:72:b6:51:57:c1:2a:91:08:42:22:0a:2b:62:bc:
f2:4f:3b:32:e6:c0:b1:42:0c:cc:eb:4f:52:a3:e8:41:6d:49:
7c:fe:46:97:29:07:ab:6b:19:b5:df:a0:02:79:e5:30:be:31:
00:5e:e2:d1:08:d1:fe:4f:8d:be:2c:78:a0:ae:22:c1:5e:46:
09:89:44:52:40:4c:84:8e:06:9d:6e:9c:9f:08:e4:dd:aa:5a:
21:e9:08:6e:e9:98:0f:6b:47:8d:3f:e4:33:03:2a:f3:01:4c:
c4:dd:7e:d0:e2:fa:43:73:48:f1:02:01:1d:58:ca:63:e9:11:
fa:47:99:54
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Apr 27 12:06:48 2025 by rpki-client