Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/41/8331e0-e8ab-4a6e-92b7-8a96f03bc617/1/uqftCLjp6O71-D48yyZ0X4s4hec.mft
File: uqftCLjp6O71-D48yyZ0X4s4hec.mft (raw, json)
Hash identifier: 6y0b6a+0HYIh1LaP9zvVV+co+8/jPyYY9oyae6y+s/U=
Subject key identifier: 28:17:A2:B9:40:51:AC:30:37:DA:65:82:3D:49:E0:EE:ED:AC:BD:1D
Authority key identifier: BA:A7:ED:08:B8:E9:E8:EE:F5:F8:3E:3C:CB:26:74:5F:8B:38:85:E7
Certificate issuer: /CN=baa7ed08b8e9e8eef5f83e3ccb26745f8b3885e7
Certificate serial: 019652DB879DF5F099404381D1A062BEDC18
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/uqftCLjp6O71-D48yyZ0X4s4hec.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/41/8331e0-e8ab-4a6e-92b7-8a96f03bc617/1/uqftCLjp6O71-D48yyZ0X4s4hec.mft
Manifest number: 0227
Signing time: Sun 20 Apr 2025 11:00:40 +0000
Manifest this update: Sun 20 Apr 2025 11:00:40 +0000
Manifest next update: Mon 21 Apr 2025 11:00:40 +0000
Files and hashes: 1: FqXqM-CF5p0Rq38uJsia_NQp_xY.roa (hash: GMH0+ju4uwTjeyWz+p9XJEoUNztNymm7JQRhgTt4Qx4=)
2: clTTMYUnhIxX-9Q2AVTo1gp5nOQ.roa (hash: zxw0qvHYZIrsTwUU39fdb8nl6XgBcWyyRbtlR0A6A58=)
3: r1yy0iaaI6tU-hR6fBL9Hl5rZ8s.roa (hash: YmIYOIAciROTE+jQf1c1upjbnpWZiAky+TZT072x85g=)
4: tPs3GfF30oL_YN3V2-6-sgSR5vI.roa (hash: dKCGleVNGeQ7syDLSUJzqSgk8sblx18tc2ARIjFcsRs=)
5: uqftCLjp6O71-D48yyZ0X4s4hec.crl (hash: tsElaIxQKHRlVXqDbWzVm9ns8n21VWTDq/QevqzLjPA=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/41/8331e0-e8ab-4a6e-92b7-8a96f03bc617/1/uqftCLjp6O71-D48yyZ0X4s4hec.crl
rsync://rpki.ripe.net/repository/DEFAULT/41/8331e0-e8ab-4a6e-92b7-8a96f03bc617/1/uqftCLjp6O71-D48yyZ0X4s4hec.mft
rsync://rpki.ripe.net/repository/DEFAULT/uqftCLjp6O71-D48yyZ0X4s4hec.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 21 Apr 2025 07:00:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:52:db:87:9d:f5:f0:99:40:43:81:d1:a0:62:be:dc:18
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=baa7ed08b8e9e8eef5f83e3ccb26745f8b3885e7
Validity
Not Before: Apr 20 11:00:40 2025 GMT
Not After : Apr 21 11:00:40 2025 GMT
Subject: CN=2817a2b94051ac3037da65823d49e0eeedacbd1d
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c0:33:8c:3f:93:67:11:6b:07:29:1e:38:f6:96:
a0:57:25:4b:51:ff:c4:0f:0f:9e:ed:84:2c:1c:47:
43:98:37:ac:1d:e1:1f:cb:78:bf:b8:19:4a:db:9f:
13:f2:77:a4:b1:2a:11:8a:1c:fe:84:19:9c:ed:c3:
35:b4:67:b3:9e:d4:8e:b5:75:9b:44:08:5b:2c:20:
3d:cf:ca:55:64:05:e4:aa:39:29:3f:24:b4:f5:89:
1c:c8:1d:1a:6e:39:d2:db:05:f0:f4:0a:e3:22:54:
71:c9:a4:18:95:a8:5a:ea:b6:b2:17:64:e6:6c:01:
c4:26:b0:4b:12:8a:88:51:87:1e:39:54:7e:a4:40:
5d:c2:a2:ac:73:70:4a:28:35:ae:a3:8e:b0:1d:45:
e2:7f:e9:13:d5:09:c3:1a:f2:fa:c9:54:bf:a5:51:
43:b9:12:ef:55:3b:90:96:75:f2:a5:4e:52:a5:d4:
9a:3e:b3:19:38:a2:ba:6d:c9:fd:c7:42:56:31:f2:
96:11:22:7f:fa:fd:9a:62:0c:6a:41:1e:e1:38:d2:
d9:7d:8a:22:04:85:30:3f:72:12:2d:3b:9d:b3:52:
13:0d:55:31:09:9a:67:e8:2a:c8:04:ea:2a:94:31:
d0:3d:fa:b5:a0:d9:50:b4:78:20:ba:83:44:2b:33:
3d:cf
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
28:17:A2:B9:40:51:AC:30:37:DA:65:82:3D:49:E0:EE:ED:AC:BD:1D
X509v3 Authority Key Identifier:
keyid:BA:A7:ED:08:B8:E9:E8:EE:F5:F8:3E:3C:CB:26:74:5F:8B:38:85:E7
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/uqftCLjp6O71-D48yyZ0X4s4hec.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/41/8331e0-e8ab-4a6e-92b7-8a96f03bc617/1/uqftCLjp6O71-D48yyZ0X4s4hec.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/41/8331e0-e8ab-4a6e-92b7-8a96f03bc617/1/uqftCLjp6O71-D48yyZ0X4s4hec.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
24:a5:79:54:6b:0c:a0:24:d3:40:4e:f9:cb:9f:cc:26:9d:73:
99:47:33:aa:c0:05:1d:39:07:94:d0:e4:e3:aa:a4:37:e5:01:
ae:1d:9b:37:f2:87:05:b2:3c:c3:06:2f:4a:31:d8:da:4c:8e:
3c:14:ff:02:d3:36:63:38:88:27:af:a8:18:df:4c:16:49:65:
25:5b:9c:26:44:e1:d6:ac:95:a7:33:7f:b8:60:a6:a3:47:9a:
cc:98:35:bb:de:fa:b3:47:d8:09:c8:31:55:38:34:c9:2b:32:
61:b7:44:b8:1f:e8:bc:0b:2e:0a:0b:6b:d7:02:67:59:6d:3b:
6e:c3:82:9c:ea:76:28:ba:41:a1:e8:42:c7:14:f8:15:04:ec:
c2:eb:5a:f5:2c:fa:c6:d7:35:6c:87:36:98:d5:1b:fc:5d:90:
61:81:59:3e:55:ac:cb:1d:73:a4:fe:c7:0c:a2:f4:45:8a:1e:
4f:20:da:38:1c:5a:fe:89:8b:b0:09:95:11:dd:6b:a2:9d:70:
da:6f:9c:f4:32:c7:44:5e:4e:ef:66:90:49:ef:94:0d:97:70:
aa:10:79:b8:18:74:da:fb:c7:b3:92:63:1f:40:06:33:25:74:
7f:6a:d4:ca:51:f1:60:65:dd:19:47:fc:a7:2b:6f:db:ed:f8:
7f:7d:32:26
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Apr 20 14:15:41 2025 by rpki-client