Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/3b/10d153-c3c3-4011-97cf-10fdca385ea4/1/uohh4X6-1XlQ_zLHs3f8QwQT2-Q.mft
File: uohh4X6-1XlQ_zLHs3f8QwQT2-Q.mft (raw, json)
Hash identifier: e3xahVzfIox8OmSgro7tZLo3AaHFve0i6ePv5hI3iwI=
Subject key identifier: 4A:19:DA:93:B0:3C:80:67:26:94:E0:33:3B:A9:DB:F6:25:83:0A:83
Authority key identifier: BA:88:61:E1:7E:BE:D5:79:50:FF:32:C7:B3:77:FC:43:04:13:DB:E4
Certificate issuer: /CN=ba8861e17ebed57950ff32c7b377fc430413dbe4
Certificate serial: 019654C9ACD4932B4A6AFD1E319169EF3605
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/uohh4X6-1XlQ_zLHs3f8QwQT2-Q.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/3b/10d153-c3c3-4011-97cf-10fdca385ea4/1/uohh4X6-1XlQ_zLHs3f8QwQT2-Q.mft
Manifest number: 0C26
Signing time: Sun 20 Apr 2025 20:00:25 +0000
Manifest this update: Sun 20 Apr 2025 20:00:25 +0000
Manifest next update: Mon 21 Apr 2025 20:00:25 +0000
Files and hashes: 1: DKKUdW46_6zXz80AQeVOjRiUJ4A.roa (hash: xKACAtSTQQnsNmsto4dOmpcxKzakaVi9kzieeQlXs5g=)
2: uohh4X6-1XlQ_zLHs3f8QwQT2-Q.crl (hash: eR+LgnMLDqmAkeObZXb9Q17tagtAmw6klljULagYe0A=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/3b/10d153-c3c3-4011-97cf-10fdca385ea4/1/uohh4X6-1XlQ_zLHs3f8QwQT2-Q.crl
rsync://rpki.ripe.net/repository/DEFAULT/3b/10d153-c3c3-4011-97cf-10fdca385ea4/1/uohh4X6-1XlQ_zLHs3f8QwQT2-Q.mft
rsync://rpki.ripe.net/repository/DEFAULT/uohh4X6-1XlQ_zLHs3f8QwQT2-Q.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 21 Apr 2025 20:00:25 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:54:c9:ac:d4:93:2b:4a:6a:fd:1e:31:91:69:ef:36:05
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=ba8861e17ebed57950ff32c7b377fc430413dbe4
Validity
Not Before: Apr 20 20:00:25 2025 GMT
Not After : Apr 21 20:00:25 2025 GMT
Subject: CN=4a19da93b03c80672694e0333ba9dbf625830a83
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b7:c1:c4:c7:20:2b:05:cf:58:cd:b9:76:ab:ad:
ab:38:70:24:d5:0e:2b:4c:47:c8:d3:f8:53:20:ff:
b7:a9:67:f1:0e:8c:f6:ac:fb:ca:f7:ef:b5:61:b3:
bc:f6:53:ea:e7:48:fb:7f:14:7a:75:db:90:48:1f:
93:d7:5d:f6:db:92:bd:61:45:7a:77:a1:fa:92:15:
c2:51:a2:14:1b:0b:e7:78:60:c6:6d:a5:3e:5a:e5:
38:1b:65:e8:c1:17:bb:8c:d5:16:a3:ee:95:d8:42:
37:7f:43:8d:24:50:c8:dd:0a:d8:bf:72:e4:55:23:
33:01:8f:e5:84:6d:09:79:cb:f9:f1:84:ea:a2:46:
93:0a:f3:73:2f:1e:fc:d1:c7:a8:7d:9f:31:a8:b6:
72:41:04:0b:79:da:dd:1a:ab:9e:dc:fc:e2:df:bc:
c0:86:b8:1c:46:1e:a3:fb:77:3f:bb:f1:ce:0b:68:
cb:4a:97:89:06:36:7a:4d:2a:ce:4c:43:30:73:a9:
6b:82:85:1d:e7:2a:b3:c1:d0:41:6e:af:1b:7a:8b:
31:95:ab:cd:11:56:0c:42:27:f3:6c:75:1e:ae:c0:
49:b1:9c:d4:22:4c:3d:48:f1:60:9f:10:cc:6b:29:
a7:55:2c:62:80:ca:42:01:4a:e4:68:c0:d9:b2:d2:
3d:f7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
4A:19:DA:93:B0:3C:80:67:26:94:E0:33:3B:A9:DB:F6:25:83:0A:83
X509v3 Authority Key Identifier:
keyid:BA:88:61:E1:7E:BE:D5:79:50:FF:32:C7:B3:77:FC:43:04:13:DB:E4
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/uohh4X6-1XlQ_zLHs3f8QwQT2-Q.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/3b/10d153-c3c3-4011-97cf-10fdca385ea4/1/uohh4X6-1XlQ_zLHs3f8QwQT2-Q.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/3b/10d153-c3c3-4011-97cf-10fdca385ea4/1/uohh4X6-1XlQ_zLHs3f8QwQT2-Q.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
55:f7:38:e0:b4:12:c5:a2:83:16:a6:c5:49:2d:dc:bb:d8:b1:
9e:42:6c:a8:17:51:6b:45:1d:b5:18:02:cd:b4:f6:42:73:a6:
8d:f8:6a:a9:c7:de:e0:89:d4:5e:bc:a0:bb:29:95:08:f9:82:
f4:e3:af:1d:66:31:18:eb:13:f5:58:78:11:bb:1d:d1:06:aa:
6d:f4:9a:d9:0b:e5:58:4b:62:60:1a:e9:64:cd:54:7e:6d:36:
91:11:0b:98:b2:b2:54:a0:57:42:6f:04:ad:e5:8b:b2:6a:71:
85:94:ec:eb:4d:15:0f:e4:67:63:17:8e:d2:81:da:62:59:3a:
96:96:8f:c3:6c:3a:87:03:61:72:41:ba:9f:87:97:24:d1:97:
47:27:31:b9:5c:f5:ae:87:b7:10:70:9a:95:5d:30:e8:e4:9b:
fd:bc:5f:b7:87:d7:2a:52:92:44:6e:06:6a:98:c7:6b:05:1f:
87:50:5e:6a:5c:b6:9b:c0:8c:a0:ba:06:12:8d:05:c5:f1:15:
3f:52:a2:bf:b3:c6:01:b4:3d:d2:05:c2:ae:95:2a:2e:05:44:
35:5d:27:dc:c8:2d:a8:32:f9:74:2b:50:c5:63:6b:e1:f0:47:
13:6c:43:8b:65:e1:e4:bf:09:1e:42:9d:4f:24:1a:37:09:cd:
ed:07:05:dc
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 21 05:51:13 2025 by rpki-client