Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/73/bcb03d-1c11-4516-a88f-fe846f75d170/1/uQMr2xKMhuALIcd5WagBHEDQZQw.mft
File: uQMr2xKMhuALIcd5WagBHEDQZQw.mft (raw, json)
Hash identifier: 8ZQA9NtRpCddTrHXn4f9sEMfPRMWhr0ro4MDEQxclLA=
Subject key identifier: 32:78:7B:C0:22:14:FE:D2:58:F5:4A:7E:8F:FD:1A:DB:E8:F6:5B:EF
Authority key identifier: B9:03:2B:DB:12:8C:86:E0:0B:21:C7:79:59:A8:01:1C:40:D0:65:0C
Certificate issuer: /CN=b9032bdb128c86e00b21c77959a8011c40d0650c
Certificate serial: 01965537B15415C395C1135C3F6B946A2681
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/uQMr2xKMhuALIcd5WagBHEDQZQw.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/73/bcb03d-1c11-4516-a88f-fe846f75d170/1/uQMr2xKMhuALIcd5WagBHEDQZQw.mft
Manifest number: 14FE
Signing time: Sun 20 Apr 2025 22:00:35 +0000
Manifest this update: Sun 20 Apr 2025 22:00:35 +0000
Manifest next update: Mon 21 Apr 2025 22:00:35 +0000
Files and hashes: 1: 20jWiNa9lpRbt6Z9H39OkMSzDj0.roa (hash: ycgKPEXuVp6S/jba9lnIlg52vzn3ozObwHjih623JU0=)
2: Z6HFahWFFQZoRakyttCStfHboiI.roa (hash: Zw2JYkod1FG2LmToml/rEnl9fqbRcjF21ljWrCU4l0U=)
3: uQMr2xKMhuALIcd5WagBHEDQZQw.crl (hash: XNOPzv7Cd+jcpAo09IhDhdlpAaPR/MPvqSnyztU0BBI=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/73/bcb03d-1c11-4516-a88f-fe846f75d170/1/uQMr2xKMhuALIcd5WagBHEDQZQw.crl
rsync://rpki.ripe.net/repository/DEFAULT/73/bcb03d-1c11-4516-a88f-fe846f75d170/1/uQMr2xKMhuALIcd5WagBHEDQZQw.mft
rsync://rpki.ripe.net/repository/DEFAULT/uQMr2xKMhuALIcd5WagBHEDQZQw.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 21 Apr 2025 22:00:35 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:55:37:b1:54:15:c3:95:c1:13:5c:3f:6b:94:6a:26:81
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=b9032bdb128c86e00b21c77959a8011c40d0650c
Validity
Not Before: Apr 20 22:00:35 2025 GMT
Not After : Apr 21 22:00:35 2025 GMT
Subject: CN=32787bc02214fed258f54a7e8ffd1adbe8f65bef
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bd:83:91:3e:de:cb:72:e1:ed:93:f5:4e:ca:12:
8e:4c:4c:ac:2a:8a:1d:9f:e1:0e:b9:53:a5:2c:b2:
c3:60:27:cb:f9:b2:69:82:04:b4:e6:13:69:0e:81:
68:b1:08:67:d5:cb:1b:7d:e8:be:10:f9:18:cd:2d:
75:71:b0:91:8f:fa:e9:19:c2:59:35:12:15:1e:c9:
12:80:24:71:50:6d:32:ca:45:dc:1c:4f:b2:9d:a8:
80:c7:c9:de:d4:01:ec:30:eb:5b:d6:ed:fe:88:45:
a5:fc:41:9c:08:94:bb:56:13:65:47:71:3c:ad:68:
3b:33:4a:90:ba:61:d5:17:a4:70:35:82:c6:29:39:
c8:f3:8c:71:76:c1:97:9e:43:32:13:83:6b:25:ea:
33:e1:15:25:1b:19:c0:85:3a:7e:95:28:d8:1c:72:
fc:82:ad:6f:53:07:fd:97:cf:d9:28:86:57:df:ba:
ac:2c:88:26:fc:0d:16:a4:56:00:48:48:bd:34:5c:
b8:3d:d4:92:ec:38:5f:9a:ff:8d:ab:4a:9e:7e:26:
4c:fd:8a:40:90:30:92:49:b1:bf:2e:1a:5e:e2:1c:
6a:2d:10:39:6f:03:6a:84:8e:47:bd:e7:48:2f:60:
64:23:66:41:b9:46:40:e5:88:64:a1:b1:4c:f2:1b:
8e:4d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
32:78:7B:C0:22:14:FE:D2:58:F5:4A:7E:8F:FD:1A:DB:E8:F6:5B:EF
X509v3 Authority Key Identifier:
keyid:B9:03:2B:DB:12:8C:86:E0:0B:21:C7:79:59:A8:01:1C:40:D0:65:0C
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/uQMr2xKMhuALIcd5WagBHEDQZQw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/73/bcb03d-1c11-4516-a88f-fe846f75d170/1/uQMr2xKMhuALIcd5WagBHEDQZQw.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/73/bcb03d-1c11-4516-a88f-fe846f75d170/1/uQMr2xKMhuALIcd5WagBHEDQZQw.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
40:17:99:63:9b:c3:ac:29:07:42:6a:92:44:d6:d2:0e:fa:c8:
31:71:20:f1:82:1c:c0:e8:ea:c9:97:77:5a:d5:cb:2d:55:ec:
7e:b0:60:e9:ed:2d:62:7a:6b:75:71:ea:ab:1a:af:c9:5a:37:
c1:50:a1:fd:b9:c1:11:3b:66:99:a9:61:78:f1:03:6c:8e:dc:
25:2b:ff:89:cc:0f:42:24:33:95:98:8c:5b:7e:2b:e2:c4:9a:
a2:e4:41:f1:13:53:14:08:44:d4:0c:a9:c6:5e:31:59:26:59:
02:e0:14:ed:91:05:90:fe:b3:31:70:0e:66:5c:92:4e:ff:df:
73:a1:a4:a5:6c:03:f3:45:5e:c0:16:a7:ee:7c:42:12:3e:55:
bc:3b:c2:be:ec:79:87:a0:39:9e:e8:44:50:2e:2b:39:e0:63:
fd:09:f9:42:a7:c3:5f:ee:84:5b:bd:6a:a7:41:16:18:4e:07:
17:d5:d0:86:4e:3e:78:a5:85:00:dd:18:b9:6e:9c:7c:ec:9b:
15:4d:0d:e1:a7:e6:51:aa:77:e9:32:e2:73:32:6f:20:3b:87:
ac:6c:39:53:ff:10:e2:84:bc:cc:41:c3:40:b0:ce:1d:11:7f:
d5:85:1f:f8:70:e2:5a:87:18:42:72:51:36:c3:d7:71:c3:8c:
d8:2e:09:85
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 21 04:06:37 2025 by rpki-client