Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c9/dd672d-e980-4dca-9195-859dbca38714/1/rUQr3aKjUyCpbYBr8WjVuEp21CY.mft
File: rUQr3aKjUyCpbYBr8WjVuEp21CY.mft (raw, json)
Hash identifier: L0KXpoyE4NfK9z7d7oUZLn2x9bVBy/DNmKhOS1zMInQ=
Subject key identifier: 6A:46:CB:C6:02:88:BC:12:F4:1C:FC:9B:42:42:7B:15:F3:D3:1E:F1
Authority key identifier: AD:44:2B:DD:A2:A3:53:20:A9:6D:80:6B:F1:68:D5:B8:4A:76:D4:26
Certificate issuer: /CN=ad442bdda2a35320a96d806bf168d5b84a76d426
Certificate serial: 019658A65C38E098A9CE3D8A2308A3726255
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/rUQr3aKjUyCpbYBr8WjVuEp21CY.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c9/dd672d-e980-4dca-9195-859dbca38714/1/rUQr3aKjUyCpbYBr8WjVuEp21CY.mft
Manifest number: 13D9
Signing time: Mon 21 Apr 2025 14:00:19 +0000
Manifest this update: Mon 21 Apr 2025 14:00:19 +0000
Manifest next update: Tue 22 Apr 2025 14:00:19 +0000
Files and hashes: 1: Yi8LhGXH_nRs0tEcTr_lCHwmcpA.roa (hash: oMJi8GS/Dld+gizK0j1juoqyLq72TaRv/Im2Ftty3+c=)
2: hT840T8mica095PLsmh6UJWn1xw.roa (hash: BtlUar+Qm61Tys6a6+qj8yTMdU/uS3Pp3uWg+aNGVWY=)
3: rUQr3aKjUyCpbYBr8WjVuEp21CY.crl (hash: /0qHFo6gin/Y8m9HUW5XY12WX1k1/eEQI5gEXkQVjCA=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/c9/dd672d-e980-4dca-9195-859dbca38714/1/rUQr3aKjUyCpbYBr8WjVuEp21CY.crl
rsync://rpki.ripe.net/repository/DEFAULT/c9/dd672d-e980-4dca-9195-859dbca38714/1/rUQr3aKjUyCpbYBr8WjVuEp21CY.mft
rsync://rpki.ripe.net/repository/DEFAULT/rUQr3aKjUyCpbYBr8WjVuEp21CY.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 22 Apr 2025 10:00:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:58:a6:5c:38:e0:98:a9:ce:3d:8a:23:08:a3:72:62:55
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=ad442bdda2a35320a96d806bf168d5b84a76d426
Validity
Not Before: Apr 21 14:00:19 2025 GMT
Not After : Apr 22 14:00:19 2025 GMT
Subject: CN=6a46cbc60288bc12f41cfc9b42427b15f3d31ef1
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a3:91:5d:98:fe:e3:27:62:2e:43:91:bf:e1:f5:
ab:96:eb:f0:89:cb:df:09:2e:d2:74:0a:a9:97:fc:
ca:db:30:ea:f5:ff:ff:cf:7f:26:e6:d5:79:19:9d:
45:a9:b4:3a:91:4e:b2:29:58:68:c9:3a:60:d0:eb:
22:ab:92:20:f6:00:29:ba:f8:cc:bd:00:2d:fc:57:
ff:aa:1e:24:2e:b1:35:15:03:46:1c:fc:7c:f4:69:
36:bb:86:7d:cb:49:53:32:29:38:27:69:be:15:7b:
77:dc:89:06:44:0c:2f:2b:cc:67:b3:7f:eb:5f:7f:
ca:0b:0d:54:1b:83:84:ca:81:a9:cb:a4:38:ba:56:
c4:32:ae:f4:87:b0:e3:2b:fa:04:90:e6:dd:25:53:
a7:db:37:7d:c4:f0:03:f5:f8:2a:46:0e:5c:bb:4a:
69:61:ab:3f:ef:04:4a:4a:86:eb:64:7e:49:c0:cb:
1b:47:ba:f9:c7:cc:02:40:8e:f8:66:a2:4d:0e:78:
7f:46:72:f7:ec:f0:a4:4a:94:15:07:e8:ce:74:a7:
bf:85:5b:2e:56:c1:b2:2e:83:17:25:01:da:77:40:
cb:eb:c0:27:6e:69:bf:67:42:46:70:00:39:26:82:
d2:d2:e2:30:01:a1:cb:a6:0f:39:0f:75:6e:de:b0:
80:1f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
6A:46:CB:C6:02:88:BC:12:F4:1C:FC:9B:42:42:7B:15:F3:D3:1E:F1
X509v3 Authority Key Identifier:
keyid:AD:44:2B:DD:A2:A3:53:20:A9:6D:80:6B:F1:68:D5:B8:4A:76:D4:26
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/rUQr3aKjUyCpbYBr8WjVuEp21CY.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c9/dd672d-e980-4dca-9195-859dbca38714/1/rUQr3aKjUyCpbYBr8WjVuEp21CY.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/c9/dd672d-e980-4dca-9195-859dbca38714/1/rUQr3aKjUyCpbYBr8WjVuEp21CY.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
86:84:89:b8:15:07:65:50:77:4b:02:7f:7f:13:35:ac:a7:5e:
63:55:a3:c7:87:6e:48:74:96:61:ca:8a:af:7e:66:05:57:78:
ed:9d:79:90:42:7b:bf:78:a5:7c:de:82:92:19:7c:72:92:89:
19:ea:86:f3:14:5d:19:ae:e8:b7:27:f4:b6:8f:7e:2f:b1:27:
e9:5e:d2:dc:ec:a5:32:8f:4c:85:2b:b7:fb:a2:9b:6c:bf:0d:
29:21:7a:f9:d7:96:7b:98:ad:c5:17:d4:d9:77:99:8b:e8:1e:
a5:63:bc:08:9a:89:37:b5:4b:c7:d2:42:6f:c4:af:0c:00:a8:
b2:b2:6a:72:44:02:0a:e2:ab:de:00:bf:e6:78:8b:87:ac:ba:
aa:cd:f3:50:d4:83:d5:d5:ad:80:70:cd:77:6f:3f:c8:16:dd:
36:9f:b6:94:b4:82:cd:ee:ca:bb:4e:0d:56:82:5d:3a:ea:0d:
39:c7:f2:24:3c:13:d3:2d:4a:ce:95:16:02:05:0d:e5:36:20:
03:70:bd:a4:e6:ce:cf:64:5d:62:02:57:5e:c7:82:5b:80:92:
b1:23:70:64:de:10:25:6d:bc:cb:a2:3a:ad:a2:8c:c3:40:27:
d4:3c:eb:54:6e:e0:d9:ea:68:d3:e6:a0:5b:d9:b7:6f:3b:b0:
c9:ab:37:c2
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 21 20:20:53 2025 by rpki-client