Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/6d/057a69-e68e-4004-8625-9177b14ee633/1/uUUIWZXzy3x9vQXkF3TaYksa8uk.mft
File: uUUIWZXzy3x9vQXkF3TaYksa8uk.mft (raw, json)
Hash identifier: T/vtg1DXId/xU8XPO+4H8wZwOY7MPkAhqhna8OmwOHg=
Subject key identifier: 14:6E:A5:EF:B3:79:ED:62:A2:3C:32:60:1C:29:7A:78:1E:C9:C3:D6
Authority key identifier: B9:45:08:59:95:F3:CB:7C:7D:BD:05:E4:17:74:DA:62:4B:1A:F2:E9
Certificate issuer: /CN=b945085995f3cb7c7dbd05e41774da624b1af2e9
Certificate serial: 019655387B44539CEF1A5596CD6D9E1A5982
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/uUUIWZXzy3x9vQXkF3TaYksa8uk.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/6d/057a69-e68e-4004-8625-9177b14ee633/1/uUUIWZXzy3x9vQXkF3TaYksa8uk.mft
Manifest number: 14AB
Signing time: Sun 20 Apr 2025 22:01:26 +0000
Manifest this update: Sun 20 Apr 2025 22:01:26 +0000
Manifest next update: Mon 21 Apr 2025 22:01:26 +0000
Files and hashes: 1: EsduMUwM_I8I9QBhuMSlNVS-Wi4.roa (hash: RsxXFAy4vLF5L/pTYoeAN6hWsbZx1lCA8MFJDhAYUDI=)
2: uUUIWZXzy3x9vQXkF3TaYksa8uk.crl (hash: OjPzPJWkLd9tOanOm1py0SxY+stxqaSZFYH+cYoTxa8=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/6d/057a69-e68e-4004-8625-9177b14ee633/1/uUUIWZXzy3x9vQXkF3TaYksa8uk.crl
rsync://rpki.ripe.net/repository/DEFAULT/6d/057a69-e68e-4004-8625-9177b14ee633/1/uUUIWZXzy3x9vQXkF3TaYksa8uk.mft
rsync://rpki.ripe.net/repository/DEFAULT/uUUIWZXzy3x9vQXkF3TaYksa8uk.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 21 Apr 2025 16:00:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:55:38:7b:44:53:9c:ef:1a:55:96:cd:6d:9e:1a:59:82
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=b945085995f3cb7c7dbd05e41774da624b1af2e9
Validity
Not Before: Apr 20 22:01:26 2025 GMT
Not After : Apr 21 22:01:26 2025 GMT
Subject: CN=146ea5efb379ed62a23c32601c297a781ec9c3d6
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c0:b9:f0:fb:75:77:97:ce:20:83:94:a7:b4:71:
dc:f5:3e:98:2a:1b:a5:4c:3f:da:7b:cf:42:88:bb:
8b:61:e9:d2:ac:0a:81:98:71:c2:72:45:3f:2c:d7:
17:2e:a2:75:28:16:18:d0:88:2f:22:be:ce:17:16:
04:ab:92:04:a7:04:d7:53:14:58:7b:c7:fa:79:2e:
2a:5c:67:b5:70:6d:de:ce:60:7e:9c:25:ac:4e:1e:
74:75:56:77:d6:e1:c5:5d:6b:43:df:b8:b9:aa:fb:
ed:17:db:91:9e:a9:b8:40:9b:fc:0f:0d:c9:a0:7b:
0b:3b:93:99:81:65:7f:da:ee:be:e5:81:35:ab:2a:
d1:f2:18:40:aa:90:84:d0:89:6a:8c:28:2d:11:0a:
fd:88:c4:aa:48:4c:a0:11:e0:2a:22:d4:8a:0e:45:
4a:5c:27:9b:ef:2b:3c:d5:5f:51:3e:af:2a:ae:c4:
ca:53:b4:57:72:c8:8e:5a:8e:4f:86:7c:37:0f:a2:
2b:6a:5b:c1:35:f6:e5:0d:51:5b:c8:5f:77:3a:58:
b4:34:67:25:4a:76:ef:40:e8:4f:84:22:6a:bc:b8:
cc:8b:cf:e3:24:62:6d:62:a4:37:2f:0a:22:e6:1a:
da:14:93:dd:10:eb:d9:6f:a7:6a:68:18:52:fe:2f:
22:cd
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
14:6E:A5:EF:B3:79:ED:62:A2:3C:32:60:1C:29:7A:78:1E:C9:C3:D6
X509v3 Authority Key Identifier:
keyid:B9:45:08:59:95:F3:CB:7C:7D:BD:05:E4:17:74:DA:62:4B:1A:F2:E9
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/uUUIWZXzy3x9vQXkF3TaYksa8uk.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/6d/057a69-e68e-4004-8625-9177b14ee633/1/uUUIWZXzy3x9vQXkF3TaYksa8uk.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/6d/057a69-e68e-4004-8625-9177b14ee633/1/uUUIWZXzy3x9vQXkF3TaYksa8uk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
b6:7b:70:a0:1e:93:4a:d0:17:e0:25:14:bc:ad:1a:77:ea:22:
0f:3d:92:45:12:b5:10:c0:59:fa:2a:06:76:63:0e:58:57:0a:
5c:61:8f:1b:94:d4:38:b2:2d:c6:d3:6e:be:d0:db:20:ae:9a:
48:9a:9c:00:9d:86:9a:00:5f:5d:db:cd:7e:10:31:10:8c:45:
64:96:64:94:27:e1:89:41:f2:6c:fb:a9:ca:71:af:2c:9f:29:
f3:d3:47:30:61:19:bc:3c:95:59:6f:63:f2:ec:c8:d8:7f:77:
68:c7:4c:7e:05:c9:86:ad:5f:a4:c0:db:78:97:23:6d:37:3c:
b2:93:bf:d8:4a:da:a2:85:db:22:14:9e:74:b8:5f:06:12:f6:
5c:65:c0:d0:a6:88:1b:53:23:db:2f:bc:47:24:7e:25:19:f3:
a2:e2:23:b6:34:3d:2a:d6:a4:30:28:f8:aa:21:89:e9:12:af:
f5:b1:ca:c4:28:dc:54:30:53:7d:eb:40:57:98:89:be:38:d5:
7b:18:02:eb:f7:22:a2:0e:05:3a:ab:79:78:59:73:07:ab:0d:
ca:b5:39:f6:2c:de:d6:a0:76:d0:53:12:53:e2:ca:a1:5f:31:
f5:35:27:36:10:a7:7e:be:27:56:9f:b9:52:c8:3b:aa:56:40:
32:1f:8b:b7
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 21 02:10:40 2025 by rpki-client