Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/45/a9bbce-d3c7-4221-9f6b-87d3ec7f0410/1/uTYoo2ME473CH4U7s_rUPkhhpcU.mft
File: uTYoo2ME473CH4U7s_rUPkhhpcU.mft (raw, json)
Hash identifier: zkiucQpsWwTWwwfIcfDrZYIlJ//QxpFJ7In2fae6Wd0=
Subject key identifier: FC:BD:A4:B1:BA:CB:7F:22:D5:E3:E2:CF:F0:93:42:4E:62:1B:78:4E
Authority key identifier: B9:36:28:A3:63:04:E3:BD:C2:1F:85:3B:B3:FA:D4:3E:48:61:A5:C5
Certificate issuer: /CN=b93628a36304e3bdc21f853bb3fad43e4861a5c5
Certificate serial: 019659EFE0BD42C56D8346A32F6A274D42A4
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/uTYoo2ME473CH4U7s_rUPkhhpcU.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/45/a9bbce-d3c7-4221-9f6b-87d3ec7f0410/1/uTYoo2ME473CH4U7s_rUPkhhpcU.mft
Manifest number: 0875
Signing time: Mon 21 Apr 2025 20:00:14 +0000
Manifest this update: Mon 21 Apr 2025 20:00:14 +0000
Manifest next update: Tue 22 Apr 2025 20:00:14 +0000
Files and hashes: 1: aHkiBdyDgksjPTve6ijI7EpizCc.roa (hash: NQknuIOWctzhCd+JdINj8cg9TjzpycFVkYWDzHbdSKY=)
2: uTYoo2ME473CH4U7s_rUPkhhpcU.crl (hash: DZUSOie82hEo1g7wRwkNhyHxp0AYg500Bl03bUApIfk=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/45/a9bbce-d3c7-4221-9f6b-87d3ec7f0410/1/uTYoo2ME473CH4U7s_rUPkhhpcU.crl
rsync://rpki.ripe.net/repository/DEFAULT/45/a9bbce-d3c7-4221-9f6b-87d3ec7f0410/1/uTYoo2ME473CH4U7s_rUPkhhpcU.mft
rsync://rpki.ripe.net/repository/DEFAULT/uTYoo2ME473CH4U7s_rUPkhhpcU.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 22 Apr 2025 19:00:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:59:ef:e0:bd:42:c5:6d:83:46:a3:2f:6a:27:4d:42:a4
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=b93628a36304e3bdc21f853bb3fad43e4861a5c5
Validity
Not Before: Apr 21 20:00:14 2025 GMT
Not After : Apr 22 20:00:14 2025 GMT
Subject: CN=fcbda4b1bacb7f22d5e3e2cff093424e621b784e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9f:36:d0:e1:ca:94:b0:1f:b6:61:09:01:6e:1a:
7d:63:5e:d8:91:88:e2:61:a3:fb:f6:42:96:1f:d4:
57:0e:38:26:45:01:d8:a1:98:2f:d2:6f:96:52:39:
92:97:31:30:09:83:a9:32:b6:df:72:eb:95:5f:2a:
b3:46:d1:59:ec:bc:3a:29:b1:5f:d0:47:6b:7b:f9:
c1:2a:31:5d:78:89:95:df:d2:32:3e:e5:30:fc:a9:
81:b7:88:80:af:a1:25:11:04:f2:f8:a6:1a:29:5b:
be:1d:38:dc:95:bc:be:31:68:d0:6b:6a:77:bc:df:
e9:4d:38:9c:62:b9:59:bf:40:0e:68:a6:99:bd:2f:
39:4d:99:01:17:89:58:1e:fb:ba:04:5b:b4:a6:37:
4e:97:a6:f0:3e:06:87:cd:d5:2a:64:41:c2:ff:4c:
3c:fc:33:c6:c2:2a:49:3a:f7:b7:a7:a1:af:b7:78:
55:de:56:e5:dd:b0:d8:da:b4:93:8d:92:fe:fc:7b:
8e:72:99:66:17:1c:b7:6c:35:0d:bd:d5:fa:49:bd:
3f:47:07:7a:e3:2c:d5:a5:bf:16:9b:2d:ac:1a:a6:
00:74:48:f3:c3:e6:26:13:66:2e:87:56:4c:24:15:
f3:a5:34:3e:4e:3e:42:20:35:3a:1b:84:36:b1:15:
21:03
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
FC:BD:A4:B1:BA:CB:7F:22:D5:E3:E2:CF:F0:93:42:4E:62:1B:78:4E
X509v3 Authority Key Identifier:
keyid:B9:36:28:A3:63:04:E3:BD:C2:1F:85:3B:B3:FA:D4:3E:48:61:A5:C5
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/uTYoo2ME473CH4U7s_rUPkhhpcU.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/45/a9bbce-d3c7-4221-9f6b-87d3ec7f0410/1/uTYoo2ME473CH4U7s_rUPkhhpcU.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/45/a9bbce-d3c7-4221-9f6b-87d3ec7f0410/1/uTYoo2ME473CH4U7s_rUPkhhpcU.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
4d:53:18:fb:a4:be:43:ff:7c:bf:61:7a:45:2e:f9:62:43:30:
5e:13:82:cd:8a:15:08:d5:c9:bf:66:75:29:68:c0:b6:9f:95:
49:4f:b2:2c:97:f8:b9:ac:cc:f1:23:0e:40:57:73:05:ca:e2:
2c:4e:33:07:0d:d5:be:a6:52:f2:ee:98:3a:5d:ea:06:68:e3:
39:99:fb:e8:77:ed:6e:18:cd:a1:6b:8e:35:eb:96:f4:5a:e1:
4b:ad:83:65:dd:fd:f0:85:84:a3:ac:df:59:e9:7f:c1:8b:49:
5c:1f:25:38:9c:cc:3d:54:fb:11:4a:31:71:57:d6:d7:fa:86:
36:79:bf:2f:c1:93:0f:90:f1:cc:19:4c:19:d6:29:05:07:75:
35:47:50:b0:77:de:94:ab:7d:09:fd:4c:25:69:d7:64:6a:84:
2f:22:54:d3:78:ec:fc:9b:96:20:35:b4:84:5c:03:9e:66:a6:
de:9c:0b:39:46:8a:b8:7e:42:fc:46:0a:5c:86:8b:c4:e9:28:
ac:2c:1c:39:38:d2:c6:32:2a:1f:5d:4c:3f:47:bf:35:ce:39:
2f:32:50:4a:7d:d1:20:29:dc:c2:a6:ee:0f:ea:99:53:34:4b:
e6:46:14:72:bb:e6:6e:1b:f0:79:e1:f5:ea:42:49:7a:e1:e2:
f2:ec:f1:33
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 21 23:58:39 2025 by rpki-client