Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b2/0cd2f3-0f6a-4eaa-9845-99eca5651023/1/ucNjOsv2PC7LECBbm5JYCrtOuH4.mft
File: ucNjOsv2PC7LECBbm5JYCrtOuH4.mft (raw, json)
Hash identifier: XbPO8tswz4fahdmVPzm31Mk57cDRupObOIo9bJR/4Vg=
Subject key identifier: 20:0B:D3:B6:C4:97:3E:9D:4F:30:3F:A8:9E:BF:78:31:1F:E5:25:A9
Authority key identifier: B9:C3:63:3A:CB:F6:3C:2E:CB:10:20:5B:9B:92:58:0A:BB:4E:B8:7E
Certificate issuer: /CN=b9c3633acbf63c2ecb10205b9b92580abb4eb87e
Certificate serial: 01964DB5358700423058848D0654A03A7510
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/ucNjOsv2PC7LECBbm5JYCrtOuH4.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/b2/0cd2f3-0f6a-4eaa-9845-99eca5651023/1/ucNjOsv2PC7LECBbm5JYCrtOuH4.mft
Manifest number: 0D6F
Signing time: Sat 19 Apr 2025 11:00:43 +0000
Manifest this update: Sat 19 Apr 2025 11:00:43 +0000
Manifest next update: Sun 20 Apr 2025 11:00:43 +0000
Files and hashes: 1: SVqYet6gqafuP93fvR-cXcD_lZE.roa (hash: W9VR4dYgi4TiBeDzcyIekcyHyO1LO5e+JjlzGp7Zlac=)
2: jJL_UCt1xKDnehMaxOeWEPnn1w4.roa (hash: OUjyb/sGoJvyBaOSinwB5CR/YZjUj96cHrntVj6IrpM=)
3: ucNjOsv2PC7LECBbm5JYCrtOuH4.crl (hash: /vIQVSjyXHDc+9J3bOwqvowjG8b2Zn+Zn4f2//zeGXA=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/b2/0cd2f3-0f6a-4eaa-9845-99eca5651023/1/ucNjOsv2PC7LECBbm5JYCrtOuH4.crl
rsync://rpki.ripe.net/repository/DEFAULT/b2/0cd2f3-0f6a-4eaa-9845-99eca5651023/1/ucNjOsv2PC7LECBbm5JYCrtOuH4.mft
rsync://rpki.ripe.net/repository/DEFAULT/ucNjOsv2PC7LECBbm5JYCrtOuH4.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 20 Apr 2025 11:00:43 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:4d:b5:35:87:00:42:30:58:84:8d:06:54:a0:3a:75:10
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=b9c3633acbf63c2ecb10205b9b92580abb4eb87e
Validity
Not Before: Apr 19 11:00:43 2025 GMT
Not After : Apr 20 11:00:43 2025 GMT
Subject: CN=200bd3b6c4973e9d4f303fa89ebf78311fe525a9
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ae:b9:b9:71:00:45:47:36:54:ec:7d:2e:8d:14:
f6:ab:0e:3b:91:0a:f9:c8:01:88:50:5a:ee:b3:ac:
a1:a1:78:4e:a7:e5:96:90:33:ce:17:44:4b:51:3e:
8e:73:9e:61:fb:60:2a:04:08:a7:e8:e8:01:93:89:
d5:19:95:84:5e:5b:95:ef:27:c9:38:73:c8:aa:72:
0e:20:dd:db:74:81:4f:7a:01:08:00:62:3b:f1:38:
e1:b3:3c:b0:a1:8b:9d:21:c0:39:b3:ea:af:b9:02:
a4:ff:44:a1:50:2c:58:49:63:d3:03:f7:d7:60:e8:
cb:0b:8e:9f:21:49:34:ab:7b:f3:2a:33:c4:fd:95:
74:b8:41:aa:48:1c:38:7a:0c:e0:57:c1:e7:21:ac:
b9:ce:f2:0a:fb:5d:57:ee:92:e4:19:7e:1e:fd:b2:
c1:ad:d6:84:fa:50:ad:0b:91:65:10:5c:eb:39:e3:
e4:10:12:c0:3e:c6:4e:e0:f6:f6:49:7f:da:18:44:
a1:cc:eb:10:31:4e:e1:e4:41:f3:ea:da:46:27:25:
c4:21:7c:03:04:f7:05:ac:ff:a0:29:b9:ec:cb:de:
3f:3d:8d:85:81:2f:56:21:32:a5:33:83:5d:e1:1b:
57:4b:e1:69:b2:07:0e:15:33:60:de:44:f4:d9:f2:
05:ff
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
20:0B:D3:B6:C4:97:3E:9D:4F:30:3F:A8:9E:BF:78:31:1F:E5:25:A9
X509v3 Authority Key Identifier:
keyid:B9:C3:63:3A:CB:F6:3C:2E:CB:10:20:5B:9B:92:58:0A:BB:4E:B8:7E
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ucNjOsv2PC7LECBbm5JYCrtOuH4.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b2/0cd2f3-0f6a-4eaa-9845-99eca5651023/1/ucNjOsv2PC7LECBbm5JYCrtOuH4.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/b2/0cd2f3-0f6a-4eaa-9845-99eca5651023/1/ucNjOsv2PC7LECBbm5JYCrtOuH4.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
81:41:00:ed:dc:ec:d8:fa:f5:d6:cb:6d:ba:ac:e1:99:70:d3:
d6:db:77:de:ea:da:33:79:a0:4e:3d:89:6e:16:6f:58:4a:17:
f6:1d:bb:7d:31:9c:74:8a:b8:19:fa:c8:4e:36:bb:ae:21:14:
8a:6d:c6:31:ae:cb:f9:1b:58:0c:fb:f7:5d:97:a0:9a:63:54:
72:40:d2:6b:bc:89:48:67:0c:76:7a:77:3d:0e:65:9f:d0:81:
87:42:68:ea:45:31:d1:73:bd:6d:0a:1a:7b:ae:f1:49:fc:5e:
ea:f2:db:ff:54:d2:02:52:6c:c9:8c:e9:3a:4d:fc:a8:69:f1:
88:67:a5:5e:a2:18:bc:e4:72:01:fb:db:f3:ad:af:04:e0:87:
e6:c3:ae:ba:2a:7b:6c:3e:f6:cd:81:f0:3e:49:73:d2:25:6b:
10:8b:05:66:7b:94:62:3c:58:61:15:02:27:c4:83:12:f5:50:
6c:3c:c5:91:ce:ea:94:56:85:43:9a:e2:fa:f4:12:93:92:34:
aa:ea:83:1c:f3:21:83:a6:1e:92:bd:15:ce:42:e0:73:62:dc:
6a:7c:d7:b5:86:29:9d:58:21:69:84:32:be:4a:f6:ea:17:3d:
30:4f:2f:d5:12:a5:40:c7:06:65:78:68:9f:b5:be:7d:9b:90:
f7:27:c2:0f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 19 18:51:03 2025 by rpki-client