Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/57/b92cc3-ddf1-43cb-b4b1-4154da5ceb9b/1/uQ9AvbnmZHaekXWQ942253GT11E.mft
File: uQ9AvbnmZHaekXWQ942253GT11E.mft (raw, json)
Hash identifier: DZY+jB233Tg5D/4XDAwbrsDhOnXd9Dy2MQwmHcHadnE=
Subject key identifier: 6A:24:CD:EA:48:DA:16:D8:DE:A4:3E:2A:E5:3A:1E:5B:7D:8C:68:8C
Authority key identifier: B9:0F:40:BD:B9:E6:64:76:9E:91:75:90:F7:8D:B6:E7:71:93:D7:51
Certificate issuer: /CN=b90f40bdb9e664769e917590f78db6e77193d751
Certificate serial: 01965C4C2FD1C11D0C75CBAA31E720522D81
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/uQ9AvbnmZHaekXWQ942253GT11E.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/57/b92cc3-ddf1-43cb-b4b1-4154da5ceb9b/1/uQ9AvbnmZHaekXWQ942253GT11E.mft
Manifest number: 07BE
Signing time: Tue 22 Apr 2025 07:00:18 +0000
Manifest this update: Tue 22 Apr 2025 07:00:18 +0000
Manifest next update: Wed 23 Apr 2025 07:00:18 +0000
Files and hashes: 1: IVNizmINzGKtS16vA6MUtf-GXl0.roa (hash: G8i6jSbmxzUZcDObDJ5m5iiPjmE+XboSGsF4lQOtdC8=)
2: uQ9AvbnmZHaekXWQ942253GT11E.crl (hash: bB1euaCyLEFldvBGI/OL0TFidUftUaebGOqqZg6AG6o=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/57/b92cc3-ddf1-43cb-b4b1-4154da5ceb9b/1/uQ9AvbnmZHaekXWQ942253GT11E.crl
rsync://rpki.ripe.net/repository/DEFAULT/57/b92cc3-ddf1-43cb-b4b1-4154da5ceb9b/1/uQ9AvbnmZHaekXWQ942253GT11E.mft
rsync://rpki.ripe.net/repository/DEFAULT/uQ9AvbnmZHaekXWQ942253GT11E.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 23 Apr 2025 04:00:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:5c:4c:2f:d1:c1:1d:0c:75:cb:aa:31:e7:20:52:2d:81
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=b90f40bdb9e664769e917590f78db6e77193d751
Validity
Not Before: Apr 22 07:00:18 2025 GMT
Not After : Apr 23 07:00:18 2025 GMT
Subject: CN=6a24cdea48da16d8dea43e2ae53a1e5b7d8c688c
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ab:5d:1e:22:49:68:94:97:f6:27:b0:71:f2:c2:
8f:73:b1:87:32:ab:ff:17:58:2c:a5:c6:79:a5:24:
fd:d8:fa:c2:a5:80:50:df:0c:dd:e4:16:64:4b:86:
ef:18:8c:11:f9:3c:75:7c:a9:ca:c1:ca:33:bd:db:
fe:ed:13:7d:91:84:fc:b0:0d:63:e3:a0:1d:dc:89:
78:57:e0:2f:5c:6f:6c:77:ac:c7:3a:8a:65:e8:fb:
5a:65:6c:88:dd:55:78:24:7d:51:77:4f:1b:2d:4a:
7a:6b:a0:85:c8:9a:83:07:bb:f6:2d:7e:b5:9a:1f:
62:68:67:9e:ba:51:65:8b:67:62:97:c5:dc:94:ff:
ba:17:f3:46:bc:a9:2f:ca:71:8c:4f:38:74:6c:2a:
fc:67:bb:45:f7:c2:33:b7:b1:68:4c:17:94:1a:37:
5f:cd:2f:59:b2:2f:9d:d7:32:21:c6:9b:9f:87:37:
10:9f:a9:15:88:4a:04:5e:26:9b:b9:05:12:f9:2c:
b8:09:0f:64:46:cd:d4:ce:fd:27:a8:2e:8a:03:7e:
ce:6d:6a:de:bc:79:cc:31:f9:43:79:7f:88:94:99:
b7:dc:ce:7b:3d:91:04:0b:60:01:b7:2b:fe:6c:35:
1f:6f:ac:74:73:10:2c:16:5f:2c:9c:de:85:13:15:
11:d1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
6A:24:CD:EA:48:DA:16:D8:DE:A4:3E:2A:E5:3A:1E:5B:7D:8C:68:8C
X509v3 Authority Key Identifier:
keyid:B9:0F:40:BD:B9:E6:64:76:9E:91:75:90:F7:8D:B6:E7:71:93:D7:51
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/uQ9AvbnmZHaekXWQ942253GT11E.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/57/b92cc3-ddf1-43cb-b4b1-4154da5ceb9b/1/uQ9AvbnmZHaekXWQ942253GT11E.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/57/b92cc3-ddf1-43cb-b4b1-4154da5ceb9b/1/uQ9AvbnmZHaekXWQ942253GT11E.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
58:7a:86:8f:f8:26:23:91:a2:b9:a1:33:dc:52:be:5b:b8:54:
2b:e1:39:09:24:5e:92:fe:00:1f:7e:17:93:7e:55:ab:cb:44:
6a:d1:c4:65:d0:c6:74:43:70:0b:2a:3c:30:a6:9a:af:8f:c8:
5c:c4:58:2e:b7:8d:f3:a5:f9:42:2d:b9:fd:ad:cc:9a:b2:c2:
d6:10:f6:bf:83:94:5f:9a:df:7d:70:d8:70:01:e7:c7:6e:22:
c3:86:5c:ef:b5:75:92:d4:d9:e7:6b:cd:3c:c0:af:9e:e5:de:
a5:bf:78:c3:27:72:33:e3:e0:14:59:4f:73:9a:0f:02:d9:25:
f0:08:7d:f2:34:9a:62:3a:a1:34:6e:d1:78:d6:2e:2c:25:1c:
df:9e:cf:99:81:b5:6f:a1:5c:91:8f:30:d5:4c:4b:09:ec:58:
0a:d5:6b:0c:77:f0:1a:3d:f9:d8:e2:73:14:06:58:2b:87:d8:
33:60:21:69:2b:92:44:ff:b3:5c:43:1e:51:33:13:fc:7f:12:
86:89:08:10:70:74:b3:9f:89:f6:eb:50:60:f6:c7:0a:dc:96:
58:a9:03:e6:d7:d4:f6:89:3a:13:f7:30:83:6d:59:ae:c6:68:
4c:24:79:46:be:d2:a7:41:1a:78:15:ef:82:4d:fe:d2:74:d6:
89:ae:67:a1
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Apr 22 10:26:49 2025 by rpki-client