Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e1/748120-b4f5-44b0-ac9e-6060c48da837/1/uxmjOYHjSyrlBYbjBIxmOixrhYY.mft
File: uxmjOYHjSyrlBYbjBIxmOixrhYY.mft (raw, json)
Hash identifier: H/aWTrHajot2jEjtpN3dSJ1P39cG+SBGTNmh5ekPs58=
Subject key identifier: 52:DB:D5:A7:6C:AA:AD:B8:AD:15:07:C8:BB:6F:1A:37:DD:33:30:41
Authority key identifier: BB:19:A3:39:81:E3:4B:2A:E5:05:86:E3:04:8C:66:3A:2C:6B:85:86
Certificate issuer: /CN=bb19a33981e34b2ae50586e3048c663a2c6b8586
Certificate serial: 01968B4AA6BE847AF15440A95DDE8B4B35E3
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/uxmjOYHjSyrlBYbjBIxmOixrhYY.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/e1/748120-b4f5-44b0-ac9e-6060c48da837/1/uxmjOYHjSyrlBYbjBIxmOixrhYY.mft
Manifest number: 151C
Signing time: Thu 01 May 2025 10:00:47 +0000
Manifest this update: Thu 01 May 2025 10:00:47 +0000
Manifest next update: Fri 02 May 2025 10:00:47 +0000
Files and hashes: 1: bZS4GQEsIdGvUWQSX9_jSboYCqI.roa (hash: BRbDs0+QJ+0EPq8EFb6UZkNMpqutF1fRVS1+a5Uut1U=)
2: uxmjOYHjSyrlBYbjBIxmOixrhYY.crl (hash: 7O3gz6ps3C6SAsjG63b9eVyc1PKMU9OkzzdERgz4SnI=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/e1/748120-b4f5-44b0-ac9e-6060c48da837/1/uxmjOYHjSyrlBYbjBIxmOixrhYY.crl
rsync://rpki.ripe.net/repository/DEFAULT/e1/748120-b4f5-44b0-ac9e-6060c48da837/1/uxmjOYHjSyrlBYbjBIxmOixrhYY.mft
rsync://rpki.ripe.net/repository/DEFAULT/uxmjOYHjSyrlBYbjBIxmOixrhYY.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 02 May 2025 07:00:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:8b:4a:a6:be:84:7a:f1:54:40:a9:5d:de:8b:4b:35:e3
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=bb19a33981e34b2ae50586e3048c663a2c6b8586
Validity
Not Before: May 1 10:00:47 2025 GMT
Not After : May 2 10:00:47 2025 GMT
Subject: CN=52dbd5a76caaadb8ad1507c8bb6f1a37dd333041
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b0:13:72:28:cc:05:d8:7a:83:3d:62:f5:c4:d8:
2f:40:18:36:51:e5:64:7d:76:7c:71:57:48:82:91:
5d:c3:c9:42:1f:0c:d3:64:cd:88:0d:d8:1f:fa:8f:
ff:fb:87:00:09:4b:29:54:9a:37:db:97:bd:e5:73:
d8:cc:b2:01:27:7f:b2:91:02:de:ca:50:fb:aa:af:
9d:19:a9:c1:48:81:51:88:25:29:c7:41:45:90:aa:
26:1c:24:27:20:c8:0c:d0:e8:55:84:a0:72:b5:3e:
d5:e7:5f:95:a5:cd:fc:52:8e:fa:d4:74:42:2a:ee:
1d:d2:7d:9b:90:b7:9a:d0:0a:94:7b:10:eb:e8:28:
46:29:c5:a2:d9:35:0c:99:4b:ac:02:85:37:f6:1c:
f7:71:31:5e:cd:09:48:e9:77:30:16:17:fc:6b:fe:
4a:84:63:61:dc:45:6c:1c:41:be:29:10:90:90:8e:
7e:b5:65:bb:9f:a5:7c:6a:4d:0d:30:57:4a:d8:80:
c9:cd:6d:2e:94:32:b2:45:1a:c6:e4:09:7c:0e:6d:
7f:94:75:d3:11:d2:67:42:ff:56:b3:6c:81:70:1e:
d7:9e:c3:d0:ad:e8:91:ea:98:ee:31:df:33:aa:cf:
cc:c9:90:88:65:97:89:8f:d7:35:c1:ea:5d:af:99:
58:d7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
52:DB:D5:A7:6C:AA:AD:B8:AD:15:07:C8:BB:6F:1A:37:DD:33:30:41
X509v3 Authority Key Identifier:
keyid:BB:19:A3:39:81:E3:4B:2A:E5:05:86:E3:04:8C:66:3A:2C:6B:85:86
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/uxmjOYHjSyrlBYbjBIxmOixrhYY.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e1/748120-b4f5-44b0-ac9e-6060c48da837/1/uxmjOYHjSyrlBYbjBIxmOixrhYY.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/e1/748120-b4f5-44b0-ac9e-6060c48da837/1/uxmjOYHjSyrlBYbjBIxmOixrhYY.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
6d:bb:2c:7f:7c:fd:e0:b1:ea:5e:d1:ac:55:00:dc:1a:fe:89:
78:e0:d0:75:27:cc:0a:b3:06:8c:13:2d:10:9f:48:85:94:1e:
21:ac:a3:15:dd:9e:63:31:be:88:9e:1a:9d:a1:45:cf:24:fe:
b1:19:72:2d:41:b3:ee:ae:13:6c:f3:8a:b8:2c:82:b0:37:c6:
eb:7e:31:0d:02:c5:8d:89:47:b5:5f:41:aa:04:f6:dd:dc:30:
46:68:47:8a:e5:32:ed:5d:c6:5b:0c:b7:aa:57:72:15:b9:42:
b0:8c:63:d1:40:be:c6:fb:ba:3d:11:f1:cb:36:c8:df:6e:a0:
55:6b:e0:9c:e9:30:a6:e9:ed:ba:a2:09:ce:d7:f4:53:64:c8:
56:7c:93:d1:68:6d:f8:eb:12:11:45:dc:a0:12:7f:c6:79:2c:
ba:42:39:7a:7a:e6:27:e4:b1:78:97:6d:3d:06:58:79:59:35:
be:6b:62:ba:bc:51:a9:74:4d:d6:6d:f5:0d:2b:e0:b2:19:66:
c5:5e:59:8c:b2:11:70:57:d9:ce:87:83:55:98:90:9b:54:ce:
e4:42:53:ff:a8:e5:d1:8c:fe:71:55:02:c8:ea:ff:f5:5c:bf:
59:16:59:60:61:c6:76:ff:53:da:bd:bf:4c:4f:34:62:a8:87:
4f:dd:7d:9b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu May 1 17:09:46 2025 by rpki-client