Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/03/6679f4-9165-4a8b-8892-7dea8fff2e08/1/uG3av8SJUr7ibW1fgogx9ZahVOk.mft
File: uG3av8SJUr7ibW1fgogx9ZahVOk.mft (raw, json)
Hash identifier: J0rFZjfotNuUT51Ihp/I0fNXwGBnoRmFv0F5llm6wQQ=
Subject key identifier: 65:05:AD:05:90:81:C2:AA:22:A1:7C:6C:DE:2D:D1:86:E5:33:DB:B4
Authority key identifier: B8:6D:DA:BF:C4:89:52:BE:E2:6D:6D:5F:82:88:31:F5:96:A1:54:E9
Certificate issuer: /CN=b86ddabfc48952bee26d6d5f828831f596a154e9
Certificate serial: 019653B7D5930EC6A8EE6ADB2692A5D655BF
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/uG3av8SJUr7ibW1fgogx9ZahVOk.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/03/6679f4-9165-4a8b-8892-7dea8fff2e08/1/uG3av8SJUr7ibW1fgogx9ZahVOk.mft
Manifest number: 0353
Signing time: Sun 20 Apr 2025 15:01:18 +0000
Manifest this update: Sun 20 Apr 2025 15:01:18 +0000
Manifest next update: Mon 21 Apr 2025 15:01:18 +0000
Files and hashes: 1: XAkJAeMsm3qGc5VmVm5cet8IGU0.roa (hash: lDEEW1AxkG0v1QYe+CdCiOCSdsED9l+6Ar+8XrHNs4Y=)
2: uG3av8SJUr7ibW1fgogx9ZahVOk.crl (hash: v1ots5xBndHvPx8QJDjN8hfgVeMe2Wjh8zdBoq5UYuo=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/03/6679f4-9165-4a8b-8892-7dea8fff2e08/1/uG3av8SJUr7ibW1fgogx9ZahVOk.crl
rsync://rpki.ripe.net/repository/DEFAULT/03/6679f4-9165-4a8b-8892-7dea8fff2e08/1/uG3av8SJUr7ibW1fgogx9ZahVOk.mft
rsync://rpki.ripe.net/repository/DEFAULT/uG3av8SJUr7ibW1fgogx9ZahVOk.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 21 Apr 2025 15:01:18 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:53:b7:d5:93:0e:c6:a8:ee:6a:db:26:92:a5:d6:55:bf
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=b86ddabfc48952bee26d6d5f828831f596a154e9
Validity
Not Before: Apr 20 15:01:18 2025 GMT
Not After : Apr 21 15:01:18 2025 GMT
Subject: CN=6505ad059081c2aa22a17c6cde2dd186e533dbb4
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d5:97:41:8e:37:15:70:ef:f7:0e:41:d2:f1:37:
0e:22:3c:55:7a:33:46:64:7d:14:8a:9d:66:c8:1f:
89:dc:4b:64:69:b2:b4:d2:16:62:d9:3d:d2:1e:af:
ca:b8:24:7a:58:a8:bb:8c:27:f9:d6:ac:92:9d:2f:
c6:26:36:9e:b5:e7:8c:7c:fa:ca:b0:8a:7c:43:9f:
ea:bc:e9:bd:39:74:dc:72:0d:e5:96:45:df:7c:ce:
89:90:85:23:73:93:47:bf:e9:16:b2:4b:67:c2:04:
a3:f9:01:4d:d0:e9:cb:10:96:57:22:3a:0a:c3:53:
80:53:be:bc:18:54:a1:02:82:0e:6e:6e:18:3f:de:
f7:be:d3:21:44:8a:82:2f:e9:1c:58:20:ad:cd:17:
17:8a:a3:02:10:18:4f:a5:52:be:5e:7b:21:9c:b3:
fe:10:44:ab:ad:e8:4f:c0:1b:ef:31:b4:77:a9:bc:
d7:f6:16:5e:7b:7a:cd:c0:71:e7:3f:a2:90:3d:73:
a7:b2:57:80:1d:e9:9f:b3:bb:ae:78:cf:cc:d7:ed:
bf:40:c9:df:a5:61:b5:c0:3e:77:3f:78:68:5b:f4:
2b:bd:46:09:8c:db:2d:06:21:3f:a2:fd:08:78:9d:
46:2a:8c:e8:e2:de:b4:05:b2:7e:ee:ea:79:61:f2:
13:73
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
65:05:AD:05:90:81:C2:AA:22:A1:7C:6C:DE:2D:D1:86:E5:33:DB:B4
X509v3 Authority Key Identifier:
keyid:B8:6D:DA:BF:C4:89:52:BE:E2:6D:6D:5F:82:88:31:F5:96:A1:54:E9
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/uG3av8SJUr7ibW1fgogx9ZahVOk.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/03/6679f4-9165-4a8b-8892-7dea8fff2e08/1/uG3av8SJUr7ibW1fgogx9ZahVOk.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/03/6679f4-9165-4a8b-8892-7dea8fff2e08/1/uG3av8SJUr7ibW1fgogx9ZahVOk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
0f:82:23:3c:45:97:ab:1b:42:d7:1d:f1:c2:4a:e5:19:18:8f:
1f:bf:97:b2:99:1d:04:68:f3:01:dc:f1:9c:b8:89:53:67:42:
a9:c0:7a:72:c2:3c:a5:a4:3b:cf:3f:2a:c5:41:00:6f:15:5b:
80:c0:2b:06:e2:36:57:ef:c4:40:2e:e6:8e:e9:92:de:1b:ca:
f3:54:27:9d:a9:d4:da:c4:5d:7d:09:69:ca:89:89:de:a5:0f:
26:a8:7f:80:62:c9:42:e3:4d:d6:66:85:87:78:2f:5e:df:a6:
32:6c:36:10:62:24:df:50:a5:16:c2:b2:d9:49:96:16:ac:f1:
ef:2e:13:ea:bf:56:a9:ae:89:fc:ae:5d:8a:d2:24:ec:3b:51:
28:8d:d3:7a:f8:a5:b6:63:00:bf:52:f0:e5:6d:a1:08:90:92:
00:01:12:3e:05:de:e7:14:0b:53:48:89:b2:8b:d9:16:38:58:
88:f8:7c:de:6e:64:7f:50:f5:24:99:61:9b:65:7c:83:fe:8c:
70:ef:30:cb:f3:bd:dd:95:59:55:a6:84:92:a5:09:6d:c3:ab:
05:69:b9:53:b6:15:00:06:78:5b:f6:88:4d:92:7c:18:ce:d1:
47:b5:73:dd:db:09:bc:fc:d8:51:42:3f:f1:50:1b:f2:1d:f9:
4c:b3:e4:f1
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Apr 20 17:53:13 2025 by rpki-client