Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/fc/a56b2d-f795-495d-9c48-6f67b647722d/1/uPrah6dvKfguJaMXnno4zwxrAwA.mft
File: uPrah6dvKfguJaMXnno4zwxrAwA.mft (raw, json)
Hash identifier: H3ZilzBX8uDqZZIcPnQpd5TB9Xe6yMu8mx7NnMR26cQ=
Subject key identifier: 30:F4:3A:AF:E2:84:14:71:98:26:32:45:7D:60:B4:5F:B2:1C:38:0E
Authority key identifier: B8:FA:DA:87:A7:6F:29:F8:2E:25:A3:17:9E:7A:38:CF:0C:6B:03:00
Certificate issuer: /CN=b8fada87a76f29f82e25a3179e7a38cf0c6b0300
Certificate serial: 0196827E13D17BDA2A9B9C584B4766B9411B
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/uPrah6dvKfguJaMXnno4zwxrAwA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/fc/a56b2d-f795-495d-9c48-6f67b647722d/1/uPrah6dvKfguJaMXnno4zwxrAwA.mft
Manifest number: 14E4
Signing time: Tue 29 Apr 2025 17:00:22 +0000
Manifest this update: Tue 29 Apr 2025 17:00:22 +0000
Manifest next update: Wed 30 Apr 2025 17:00:22 +0000
Files and hashes: 1: qMZm8Udrq7vD5T2yYBAeB18Ev8A.roa (hash: z2089CzZPnbakpAVa3XOh5ZgRIHqWKGPuJw64Jno6FU=)
2: uPrah6dvKfguJaMXnno4zwxrAwA.crl (hash: HCU92o4mKQ7fFk74vHRn67iHPmXjcjO7to+jdQZi4Iw=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/fc/a56b2d-f795-495d-9c48-6f67b647722d/1/uPrah6dvKfguJaMXnno4zwxrAwA.crl
rsync://rpki.ripe.net/repository/DEFAULT/fc/a56b2d-f795-495d-9c48-6f67b647722d/1/uPrah6dvKfguJaMXnno4zwxrAwA.mft
rsync://rpki.ripe.net/repository/DEFAULT/uPrah6dvKfguJaMXnno4zwxrAwA.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 30 Apr 2025 15:02:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:82:7e:13:d1:7b:da:2a:9b:9c:58:4b:47:66:b9:41:1b
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=b8fada87a76f29f82e25a3179e7a38cf0c6b0300
Validity
Not Before: Apr 29 17:00:22 2025 GMT
Not After : Apr 30 17:00:22 2025 GMT
Subject: CN=30f43aafe2841471982632457d60b45fb21c380e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ef:a7:58:4d:b0:b0:21:e7:e2:d3:41:1a:16:4e:
fc:00:65:99:54:d6:be:b7:cf:e1:6e:aa:1c:8f:36:
c1:47:77:a2:0e:69:8d:53:52:f7:fd:10:9e:e7:81:
56:53:54:c5:7e:00:b4:d7:29:c5:50:c5:c0:38:cc:
d9:10:ed:ef:3f:dd:96:70:91:b3:ad:8e:30:23:7b:
1a:51:3c:64:fa:93:3b:ac:95:15:80:02:cb:35:3c:
39:08:75:74:8e:bd:ee:b2:33:62:c1:e5:ad:6d:34:
d4:9b:95:39:21:f8:4c:66:96:8c:6f:e6:52:63:e6:
5c:77:f3:65:ab:4a:d3:d3:71:fc:7d:76:b0:15:de:
49:72:d9:9b:5f:63:ca:7f:ef:01:da:e8:63:ca:8f:
e4:d8:cd:49:2d:4e:25:3e:ea:28:56:68:0a:26:3c:
ca:4e:eb:a8:b4:6d:4a:34:41:57:d3:09:e3:c9:4b:
49:6d:7b:4a:7c:9d:80:72:04:01:81:84:89:b4:5b:
b2:08:3d:12:64:dd:0c:01:53:27:de:e7:de:83:5f:
e9:5f:95:a8:bd:41:8e:15:ec:32:3c:3a:c4:71:43:
7e:b8:ee:9e:cb:29:cc:41:11:8b:e3:ad:6d:37:3d:
3c:f8:cd:12:7b:68:57:f0:4f:0a:2f:71:00:a6:d9:
8c:ef
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
30:F4:3A:AF:E2:84:14:71:98:26:32:45:7D:60:B4:5F:B2:1C:38:0E
X509v3 Authority Key Identifier:
keyid:B8:FA:DA:87:A7:6F:29:F8:2E:25:A3:17:9E:7A:38:CF:0C:6B:03:00
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/uPrah6dvKfguJaMXnno4zwxrAwA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/fc/a56b2d-f795-495d-9c48-6f67b647722d/1/uPrah6dvKfguJaMXnno4zwxrAwA.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/fc/a56b2d-f795-495d-9c48-6f67b647722d/1/uPrah6dvKfguJaMXnno4zwxrAwA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
63:89:23:1c:21:64:bd:cd:bd:d0:c9:79:d8:db:7a:43:80:ba:
8c:27:8e:fd:5e:f9:10:95:50:ae:ce:b1:ee:8a:01:48:f7:33:
a9:35:72:75:ef:cc:a3:da:4d:83:28:f5:4b:da:e6:80:84:1a:
75:cc:26:17:2a:d3:5d:b0:e6:e6:10:9e:a3:bd:f0:c9:7d:46:
57:cc:e8:1b:bc:1c:06:43:3b:a9:8d:4c:a5:b2:ae:11:0f:68:
d3:7e:55:fd:b8:6c:7a:37:33:b9:de:8f:f2:e5:5e:07:ce:0b:
77:10:c8:2b:42:fd:d1:e8:6b:38:ca:93:91:3f:ef:82:5f:65:
2f:2c:3c:50:4a:b1:7e:d0:d0:9e:38:11:5e:8c:1c:1c:cc:96:
1d:53:b8:34:23:49:22:ca:5d:d2:48:1d:60:83:bf:67:1e:f8:
d6:d1:db:31:58:1f:d6:9f:7a:26:a8:53:06:a9:17:d2:ff:85:
e3:02:69:d0:c0:e2:93:00:e9:88:43:47:71:e2:88:58:d7:1e:
9f:bf:e5:91:42:df:7c:56:2d:01:5c:9c:ba:0a:49:d7:a3:76:
da:80:d3:ae:5a:d3:8b:2b:a7:5f:35:e9:17:60:38:dd:72:ef:
10:93:9f:ae:38:6d:e4:38:7d:b0:c9:a7:64:2a:40:2f:9e:db:
34:94:b9:a0
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Apr 30 00:14:54 2025 by rpki-client