Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/32/9dac2f-301e-406d-b8d0-03857ef5b387/1/uY0fbjNqfIE1GUG8C53qOdfXZNs.mft
File: uY0fbjNqfIE1GUG8C53qOdfXZNs.mft (raw, json)
Hash identifier: i2CC/0e+ZT+UYLDNAeYbgkULZKXUequ5CfrtYSvMFCA=
Subject key identifier: 0A:3E:C6:5B:3B:B3:61:3B:3C:31:34:9B:2F:E1:46:9E:D7:CB:B6:B6
Authority key identifier: B9:8D:1F:6E:33:6A:7C:81:35:19:41:BC:0B:9D:EA:39:D7:D7:64:DB
Certificate issuer: /CN=b98d1f6e336a7c81351941bc0b9dea39d7d764db
Certificate serial: 01964BC6C567BA53F160E3E0A9F495D186BF
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/uY0fbjNqfIE1GUG8C53qOdfXZNs.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/32/9dac2f-301e-406d-b8d0-03857ef5b387/1/uY0fbjNqfIE1GUG8C53qOdfXZNs.mft
Manifest number: 1240
Signing time: Sat 19 Apr 2025 02:00:39 +0000
Manifest this update: Sat 19 Apr 2025 02:00:39 +0000
Manifest next update: Sun 20 Apr 2025 02:00:39 +0000
Files and hashes: 1: 2Bhbw3leMOOThPESRkMOR1dkKo8.roa (hash: 8BdnwPJfHaRJdOgffZDaE9NFXhulzq329A7S3hKg76Q=)
2: uY0fbjNqfIE1GUG8C53qOdfXZNs.crl (hash: Tnl8q9R647loTIyhVYdAD8Sulv+gGzPER9jAIHEwKd0=)
3: udj1thQf8POAsC3euXPolxF29Rc.roa (hash: utsXGxz2o3qqGU1Prwq6PnQjBA2bBXJwiwg1ebpMM78=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/32/9dac2f-301e-406d-b8d0-03857ef5b387/1/uY0fbjNqfIE1GUG8C53qOdfXZNs.crl
rsync://rpki.ripe.net/repository/DEFAULT/32/9dac2f-301e-406d-b8d0-03857ef5b387/1/uY0fbjNqfIE1GUG8C53qOdfXZNs.mft
rsync://rpki.ripe.net/repository/DEFAULT/uY0fbjNqfIE1GUG8C53qOdfXZNs.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 20 Apr 2025 02:00:39 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:4b:c6:c5:67:ba:53:f1:60:e3:e0:a9:f4:95:d1:86:bf
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=b98d1f6e336a7c81351941bc0b9dea39d7d764db
Validity
Not Before: Apr 19 02:00:39 2025 GMT
Not After : Apr 20 02:00:39 2025 GMT
Subject: CN=0a3ec65b3bb3613b3c31349b2fe1469ed7cbb6b6
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c2:b8:91:34:44:a3:d3:6e:be:0d:e7:be:c4:1f:
3b:99:8a:fa:ac:38:7c:dc:07:af:ac:cb:f8:d6:f9:
a3:0d:f4:7a:2a:56:c1:7c:9c:59:c8:a2:b7:14:03:
d4:f4:e2:d8:0d:5e:c3:0c:e0:0c:14:0a:fa:e3:2b:
ee:8a:73:a9:06:40:8b:8f:8c:d8:15:56:3f:bd:d6:
df:6d:aa:a5:bc:f0:23:9c:85:dc:fa:b2:7c:fd:41:
5c:ef:40:e3:a5:39:20:e5:e3:50:2a:d2:c9:63:b2:
6c:79:c7:bc:95:b2:10:44:db:3a:d4:0d:4e:17:e7:
57:dc:7e:da:2d:1a:2c:1c:ee:0c:c3:7f:97:a6:fc:
78:bb:19:8e:c8:51:3e:cb:39:31:a0:24:e4:2c:77:
f1:80:36:32:eb:c9:f2:52:2d:f3:40:71:1d:9d:7e:
87:59:ca:2a:f2:22:ff:69:01:64:8a:4a:d5:97:d7:
d2:b6:be:8e:45:95:0b:3f:5b:3c:08:cb:53:72:bc:
18:5e:bf:d9:42:3f:c3:9c:20:55:8a:92:74:28:0e:
4c:b7:ce:e4:b8:44:f4:0b:69:4a:db:d3:70:79:97:
76:91:32:5b:08:12:7f:ba:3a:ea:74:5f:d3:63:86:
e7:38:ab:74:0e:51:8a:5a:23:75:95:32:ac:01:1b:
c2:dd
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
0A:3E:C6:5B:3B:B3:61:3B:3C:31:34:9B:2F:E1:46:9E:D7:CB:B6:B6
X509v3 Authority Key Identifier:
keyid:B9:8D:1F:6E:33:6A:7C:81:35:19:41:BC:0B:9D:EA:39:D7:D7:64:DB
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/uY0fbjNqfIE1GUG8C53qOdfXZNs.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/32/9dac2f-301e-406d-b8d0-03857ef5b387/1/uY0fbjNqfIE1GUG8C53qOdfXZNs.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/32/9dac2f-301e-406d-b8d0-03857ef5b387/1/uY0fbjNqfIE1GUG8C53qOdfXZNs.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
17:05:48:dd:66:f6:d5:be:a9:72:a7:02:c9:db:c9:ff:40:b9:
2f:64:d7:55:d7:13:c2:a2:7b:9c:b0:b8:77:d5:85:5c:6c:ed:
f0:38:05:d5:34:75:5d:1c:39:d6:e6:3c:71:37:6b:c9:99:18:
af:d8:0a:dd:3f:16:63:04:d6:d7:0c:62:8a:4f:ed:04:b9:95:
83:34:79:29:09:f2:02:18:31:f2:c9:c3:cc:f2:8f:45:54:2e:
58:86:68:45:0f:e8:86:a3:fa:36:7e:c4:f7:47:bb:40:2e:85:
b7:11:2c:46:a9:14:32:56:e9:e4:bf:4f:a3:2a:f2:09:93:f6:
5d:a0:ff:5e:94:1e:f1:b2:be:5b:16:a7:b5:e9:15:ff:e9:3c:
54:fc:fb:fe:5a:69:29:90:69:cc:ca:c6:06:ee:f2:cd:3d:c1:
a6:2c:eb:ce:48:8a:07:93:d8:e5:15:d8:6c:35:85:6b:85:2e:
66:5f:9c:77:9a:65:7e:cb:5e:d7:09:5a:2c:4f:8a:97:0d:13:
7a:4a:d4:d5:85:21:a3:3a:81:4c:02:df:a9:ea:56:8b:df:8e:
93:44:d8:1f:5d:ad:7e:f3:b4:25:d5:41:61:31:fb:7b:e9:93:
c2:bf:f3:57:0c:1c:15:5c:53:2b:11:0a:84:96:7a:b9:ab:0f:
a1:00:9f:a8
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 19 12:44:23 2025 by rpki-client