Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e3/5aa303-59f7-4f99-907d-83a25a94c77f/1/uUhRCuQauFZ3msGG8EcJkfWipQ8.mft
File: uUhRCuQauFZ3msGG8EcJkfWipQ8.mft (raw, json)
Hash identifier: ctMitfnJi+j8y1HagXz3f0tNKVxtYGGRSbGUoZlfjUg=
Subject key identifier: B8:9F:1B:6D:E2:06:29:D8:4C:1F:23:18:E1:9A:3C:EC:56:59:51:3A
Authority key identifier: B9:48:51:0A:E4:1A:B8:56:77:9A:C1:86:F0:47:09:91:F5:A2:A5:0F
Certificate issuer: /CN=b948510ae41ab856779ac186f0470991f5a2a50f
Certificate serial: 019658A6AA0A4BD68ECF1B6F44FB3A2171C6
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/uUhRCuQauFZ3msGG8EcJkfWipQ8.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/e3/5aa303-59f7-4f99-907d-83a25a94c77f/1/uUhRCuQauFZ3msGG8EcJkfWipQ8.mft
Manifest number: 0B41
Signing time: Mon 21 Apr 2025 14:00:39 +0000
Manifest this update: Mon 21 Apr 2025 14:00:39 +0000
Manifest next update: Tue 22 Apr 2025 14:00:39 +0000
Files and hashes: 1: ZyJpNgXETgUAoMGW4Tc1fNHY6Xc.roa (hash: d0r/X5GHVSm+6B+uw9WbyoANujmYXCe7JpWPWgRCmfA=)
2: uUhRCuQauFZ3msGG8EcJkfWipQ8.crl (hash: ciKDqXlzPjl1uqDHvSIpHbxbEHqUIBzylmhfIzG/6Y8=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/e3/5aa303-59f7-4f99-907d-83a25a94c77f/1/uUhRCuQauFZ3msGG8EcJkfWipQ8.crl
rsync://rpki.ripe.net/repository/DEFAULT/e3/5aa303-59f7-4f99-907d-83a25a94c77f/1/uUhRCuQauFZ3msGG8EcJkfWipQ8.mft
rsync://rpki.ripe.net/repository/DEFAULT/uUhRCuQauFZ3msGG8EcJkfWipQ8.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 22 Apr 2025 14:00:39 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:58:a6:aa:0a:4b:d6:8e:cf:1b:6f:44:fb:3a:21:71:c6
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=b948510ae41ab856779ac186f0470991f5a2a50f
Validity
Not Before: Apr 21 14:00:39 2025 GMT
Not After : Apr 22 14:00:39 2025 GMT
Subject: CN=b89f1b6de20629d84c1f2318e19a3cec5659513a
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d4:f7:a8:31:5b:9d:79:73:38:af:70:52:89:d5:
40:52:af:78:4b:18:74:f0:e4:be:72:0f:a1:42:44:
8c:61:02:66:1e:10:c6:9a:56:aa:33:9f:f8:43:06:
b3:96:18:c5:c2:ac:66:e0:f2:9d:1a:bd:e0:98:fb:
8f:28:91:76:7d:09:bb:31:6c:b6:f3:8d:60:3a:67:
b6:a3:ce:ce:53:98:a9:fe:5c:92:9e:fb:67:71:b5:
d4:2a:73:a8:94:36:5b:d6:fc:f9:6e:c4:c4:42:c5:
38:c0:6d:81:20:56:f5:ba:c4:e6:12:9e:79:da:a5:
c3:f0:19:3f:55:df:9e:fe:f3:f7:ba:72:5a:9c:0b:
db:a6:23:3f:3f:6f:cc:87:b4:ab:7e:b1:d9:1e:21:
69:b4:d8:dc:0b:93:5d:aa:c0:1d:2d:71:f3:c6:10:
cc:ea:41:b5:80:25:bf:b9:a0:f0:6d:d3:12:87:99:
00:a3:c8:28:dd:d6:38:c6:ca:8a:8c:8a:ff:39:ad:
fe:ac:65:e6:38:38:fe:5d:a3:d4:69:bc:36:d8:a0:
14:94:8b:47:26:5f:6f:29:d9:a8:9f:2a:1b:ea:45:
42:57:1d:ae:f9:0f:08:19:8e:56:c8:d3:37:29:46:
56:23:eb:5f:f5:df:0c:7e:fe:3b:f0:03:40:e6:4a:
e0:89
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B8:9F:1B:6D:E2:06:29:D8:4C:1F:23:18:E1:9A:3C:EC:56:59:51:3A
X509v3 Authority Key Identifier:
keyid:B9:48:51:0A:E4:1A:B8:56:77:9A:C1:86:F0:47:09:91:F5:A2:A5:0F
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/uUhRCuQauFZ3msGG8EcJkfWipQ8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e3/5aa303-59f7-4f99-907d-83a25a94c77f/1/uUhRCuQauFZ3msGG8EcJkfWipQ8.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/e3/5aa303-59f7-4f99-907d-83a25a94c77f/1/uUhRCuQauFZ3msGG8EcJkfWipQ8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
8c:33:ab:31:89:90:59:e9:7f:40:fd:2d:65:70:13:11:15:31:
83:51:70:8e:b6:0e:34:9f:63:54:41:b5:89:ea:e2:58:b4:73:
11:35:d7:35:85:12:17:d0:46:b8:8e:cb:83:e6:ee:e6:70:a7:
40:8c:db:0c:ab:ae:86:9b:6d:e7:6e:22:35:91:df:88:a4:91:
04:8d:a1:26:33:04:c5:55:e2:33:5b:a8:7a:61:4f:88:41:22:
93:06:89:64:d1:65:50:88:d0:5d:43:d4:c2:25:4a:b5:33:75:
8e:94:00:ea:8b:d3:89:fd:75:7b:51:89:d3:f4:40:33:16:6b:
d2:e8:9b:c8:79:91:eb:44:06:f4:ef:c5:c9:77:62:7c:23:54:
ae:b0:0e:66:92:0a:c2:0a:50:ba:5a:e3:19:28:42:a5:6a:a3:
51:4a:7c:02:f7:ce:04:3a:6d:67:66:89:d4:45:37:36:a2:8d:
01:24:1f:af:7a:39:fc:c9:81:98:e5:d1:50:16:a1:84:46:0d:
29:6e:0e:de:2b:4e:da:2b:2e:77:85:0a:1f:e9:01:f6:a4:63:
ae:5f:20:08:69:e4:42:e6:b1:44:2e:b9:17:f7:dd:01:a2:6b:
aa:f3:87:b3:3f:01:02:17:31:ee:22:47:45:c5:8c:77:cd:cf:
f8:f6:94:ea
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 21 23:58:47 2025 by rpki-client