Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/05/2d2570-ab91-4c27-9cb3-5fd716d67e4c/1/_uG-QL1MEKAseDca8xPU59o9RKE.mft
File: _uG-QL1MEKAseDca8xPU59o9RKE.mft (raw, json)
Hash identifier: MS36FqzObZI33VbcBdwzm1WBqSWrUYtn98KzG3WwukE=
Subject key identifier: 8B:D0:3D:E3:C5:DB:0E:90:6C:D7:EE:2F:9D:3D:D4:79:79:69:68:C3
Authority key identifier: FE:E1:BE:40:BD:4C:10:A0:2C:78:37:1A:F3:13:D4:E7:DA:3D:44:A1
Certificate issuer: /CN=fee1be40bd4c10a02c78371af313d4e7da3d44a1
Certificate serial: 019649338DEF077D4B8DAF0C0D604808CE7D
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/_uG-QL1MEKAseDca8xPU59o9RKE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/05/2d2570-ab91-4c27-9cb3-5fd716d67e4c/1/_uG-QL1MEKAseDca8xPU59o9RKE.mft
Manifest number: 07C4
Signing time: Fri 18 Apr 2025 14:00:37 +0000
Manifest this update: Fri 18 Apr 2025 14:00:37 +0000
Manifest next update: Sat 19 Apr 2025 14:00:37 +0000
Files and hashes: 1: _uG-QL1MEKAseDca8xPU59o9RKE.crl (hash: auUj0I9+c0IuEQ288Nd5/h2E0cGjTx6pgFVLyEjyfyo=)
2: iCr5oYGEZyOApm19IeGXneZ8Nck.roa (hash: J3nYb+wykQAlDMqhpN3eQPaOUzevZQuJ9bBWTRwBP/Q=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/05/2d2570-ab91-4c27-9cb3-5fd716d67e4c/1/_uG-QL1MEKAseDca8xPU59o9RKE.crl
rsync://rpki.ripe.net/repository/DEFAULT/05/2d2570-ab91-4c27-9cb3-5fd716d67e4c/1/_uG-QL1MEKAseDca8xPU59o9RKE.mft
rsync://rpki.ripe.net/repository/DEFAULT/_uG-QL1MEKAseDca8xPU59o9RKE.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 19 Apr 2025 10:00:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:49:33:8d:ef:07:7d:4b:8d:af:0c:0d:60:48:08:ce:7d
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=fee1be40bd4c10a02c78371af313d4e7da3d44a1
Validity
Not Before: Apr 18 14:00:37 2025 GMT
Not After : Apr 19 14:00:37 2025 GMT
Subject: CN=8bd03de3c5db0e906cd7ee2f9d3dd479796968c3
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:99:60:33:3a:ba:d4:98:35:b7:ad:62:84:ff:8e:
2d:62:85:4e:9b:8d:0b:77:d1:9e:0f:45:c6:57:35:
60:85:aa:b9:4d:ab:03:49:5a:ba:d7:7d:75:bd:a0:
f1:3f:be:00:e0:9d:56:a0:5f:ca:19:c4:95:63:df:
4d:36:aa:4b:ce:12:fd:d6:96:8d:05:f3:d0:3d:94:
d4:fc:34:32:b6:b7:93:8a:23:55:8f:3e:83:71:75:
72:04:98:a9:d6:1c:12:d3:76:85:76:aa:24:f4:7e:
14:5a:8c:10:a2:92:89:41:79:2a:e4:be:67:8d:57:
5b:fd:59:fd:3d:b0:31:ed:4a:54:33:bc:e4:14:0b:
91:ca:23:35:e1:b3:90:51:09:89:5c:24:e5:b9:c1:
35:55:cb:13:59:09:29:43:bc:be:0b:dd:36:f2:cb:
63:70:db:dd:64:a8:d3:64:6d:e1:3e:3a:61:1f:73:
91:8a:0a:3d:23:e8:17:1e:2a:d5:b9:7b:b9:db:35:
22:20:c5:21:64:13:6a:5c:07:f9:4f:71:f3:bd:58:
8b:61:a5:d9:e1:f4:a8:bb:e8:cb:a3:8c:a2:55:6b:
2e:2f:83:eb:81:99:8b:83:31:36:7e:0b:1d:20:c8:
0b:55:e8:7c:c6:08:bd:82:33:fa:fd:0d:ae:64:ca:
9c:8d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
8B:D0:3D:E3:C5:DB:0E:90:6C:D7:EE:2F:9D:3D:D4:79:79:69:68:C3
X509v3 Authority Key Identifier:
keyid:FE:E1:BE:40:BD:4C:10:A0:2C:78:37:1A:F3:13:D4:E7:DA:3D:44:A1
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/_uG-QL1MEKAseDca8xPU59o9RKE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/05/2d2570-ab91-4c27-9cb3-5fd716d67e4c/1/_uG-QL1MEKAseDca8xPU59o9RKE.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/05/2d2570-ab91-4c27-9cb3-5fd716d67e4c/1/_uG-QL1MEKAseDca8xPU59o9RKE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
84:b8:61:71:fb:cf:03:4c:af:15:c3:18:71:03:fe:f7:5c:97:
01:55:87:26:68:3b:0f:97:f4:76:b5:f9:3b:fc:fd:87:67:03:
2e:95:9e:cf:ef:e7:2e:e1:99:24:9b:6e:55:c3:85:db:41:2a:
6b:88:b6:78:81:f2:26:71:d4:e4:1f:01:78:b5:25:ee:34:b6:
2c:32:79:5e:7d:75:d8:c7:4a:40:81:f7:32:ba:01:2a:ff:be:
00:e6:12:52:2e:d7:a2:22:11:6d:e0:e4:28:3e:ef:f0:7c:40:
3d:fe:00:90:a5:e0:71:85:68:e0:54:c9:4f:f7:33:e7:08:40:
b3:3d:f7:ed:51:78:92:35:a6:b7:20:ba:cc:d5:cd:8c:aa:f5:
7b:dd:c5:e8:d8:9a:9a:5f:db:48:60:6c:1a:95:26:f3:73:2d:
41:4d:d1:1c:5f:2c:33:bf:70:6e:e1:e8:55:50:81:02:9c:e1:
76:6a:97:80:c8:1c:5d:f2:8b:58:27:a5:6c:28:63:0d:37:7f:
e0:0e:ec:66:70:1f:6b:52:d3:02:dc:22:22:91:fe:72:75:4f:
37:be:91:87:5b:78:ac:a3:97:c7:d4:ab:59:f5:a6:b6:e1:cf:
b9:37:22:a3:63:56:b2:98:ec:eb:74:85:c3:92:3c:ba:bc:f3:
18:77:00:59
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 18 19:04:59 2025 by rpki-client