Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/48/d80877-7f1e-4a50-9957-070a1f71885e/1/uFh0CVxMlCK5NZdacVZPB3HNKS4.mft
File: uFh0CVxMlCK5NZdacVZPB3HNKS4.mft (raw, json)
Hash identifier: RN731edtQwSya/7aHMWC5UT3m+s2kMRIkeB8kuyBJ9s=
Subject key identifier: B0:70:45:1D:ED:78:3B:9D:02:82:33:07:21:95:EB:8C:CC:DC:53:E9
Authority key identifier: B8:58:74:09:5C:4C:94:22:B9:35:97:5A:71:56:4F:07:71:CD:29:2E
Certificate issuer: /CN=b85874095c4c9422b935975a71564f0771cd292e
Certificate serial: 019603AE4D6D53DBDEBE609C3C811E8C52A7
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/uFh0CVxMlCK5NZdacVZPB3HNKS4.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/48/d80877-7f1e-4a50-9957-070a1f71885e/1/uFh0CVxMlCK5NZdacVZPB3HNKS4.mft
Manifest number: 046C
Signing time: Sat 05 Apr 2025 02:01:16 +0000
Manifest this update: Sat 05 Apr 2025 02:01:16 +0000
Manifest next update: Sun 06 Apr 2025 02:01:16 +0000
Files and hashes: 1: 4YgTCDr1c5g3jVQHEpRMEOptksE.roa (hash: M/7AjuESzQHGAA4OkIywfGz3Bl0/7ZHRB4vt9CwoaKo=)
2: uFh0CVxMlCK5NZdacVZPB3HNKS4.crl (hash: s5JLXHVUGYt+zC0g/kQ7T7e6xguRmKVkGLVcqc8MAKo=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/48/d80877-7f1e-4a50-9957-070a1f71885e/1/uFh0CVxMlCK5NZdacVZPB3HNKS4.crl
rsync://rpki.ripe.net/repository/DEFAULT/48/d80877-7f1e-4a50-9957-070a1f71885e/1/uFh0CVxMlCK5NZdacVZPB3HNKS4.mft
rsync://rpki.ripe.net/repository/DEFAULT/uFh0CVxMlCK5NZdacVZPB3HNKS4.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 06 Apr 2025 02:01:16 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:03:ae:4d:6d:53:db:de:be:60:9c:3c:81:1e:8c:52:a7
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=b85874095c4c9422b935975a71564f0771cd292e
Validity
Not Before: Apr 5 02:01:16 2025 GMT
Not After : Apr 6 02:01:16 2025 GMT
Subject: CN=b070451ded783b9d028233072195eb8cccdc53e9
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c4:a6:0e:30:86:64:ce:f3:cc:e3:de:7e:67:1f:
f3:fb:6e:2f:d0:01:df:5d:59:7c:1e:79:62:a9:95:
17:dd:c0:34:9d:05:af:f8:49:a6:6b:3e:12:6b:ff:
01:68:29:e9:7b:e8:a8:04:cb:cb:28:17:b1:7b:37:
69:6e:d5:45:74:a6:d6:38:3c:67:eb:ed:88:66:80:
c6:39:bb:60:9e:80:fb:fb:a4:9d:4c:ca:25:13:8d:
cc:09:ab:7a:1c:35:56:c3:dd:46:ba:f8:8b:1d:86:
8a:a8:3a:ae:d4:17:34:fd:ef:7e:8b:49:b0:eb:93:
e3:07:aa:9e:37:95:70:09:0c:79:f6:24:0a:91:28:
20:8c:b6:5d:b2:6e:c9:d4:6a:6c:f7:2c:26:41:27:
a5:53:5a:61:ff:4e:85:00:01:61:2c:70:72:15:7a:
d7:cb:c1:c2:e9:06:67:8c:c3:76:7f:c3:fa:e5:46:
8f:fc:34:a8:05:d4:e6:08:e8:b5:80:85:72:fc:ba:
7d:92:cd:26:2d:43:09:19:cb:88:47:a6:42:29:af:
0b:8b:1b:67:c7:bc:52:17:3b:22:73:c8:9c:76:e6:
1d:c0:2f:93:ef:2e:47:7a:31:ef:2b:cf:79:e4:a6:
fe:2a:7c:ff:94:f4:a9:93:fd:1e:b1:e8:7f:6a:a8:
a7:69
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B0:70:45:1D:ED:78:3B:9D:02:82:33:07:21:95:EB:8C:CC:DC:53:E9
X509v3 Authority Key Identifier:
keyid:B8:58:74:09:5C:4C:94:22:B9:35:97:5A:71:56:4F:07:71:CD:29:2E
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/uFh0CVxMlCK5NZdacVZPB3HNKS4.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/48/d80877-7f1e-4a50-9957-070a1f71885e/1/uFh0CVxMlCK5NZdacVZPB3HNKS4.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/48/d80877-7f1e-4a50-9957-070a1f71885e/1/uFh0CVxMlCK5NZdacVZPB3HNKS4.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
01:b7:69:6f:d8:32:5e:47:83:0f:60:5c:3a:de:50:76:fa:30:
ea:e9:3e:1b:50:b1:e9:ef:a0:6a:04:0c:68:3d:0f:2c:c7:27:
11:64:08:7a:e2:3e:50:12:b6:63:73:46:c6:68:e9:61:ed:59:
02:0b:5d:51:1a:09:e5:8d:01:ff:bf:a6:6f:97:3d:d3:9a:37:
b9:3d:c7:f6:86:46:16:2d:b4:40:b6:6f:36:d1:fa:93:7b:75:
89:21:32:91:5b:50:8a:f3:29:7a:5d:55:89:04:9a:07:92:c5:
35:13:48:db:53:e5:d8:cb:9e:d1:20:af:42:9f:21:93:66:7d:
44:0a:61:93:bd:46:ec:91:ad:77:ba:7c:db:8b:14:63:03:61:
0f:aa:12:f7:cb:9e:9f:68:74:0d:b6:68:61:d8:52:a1:7e:db:
d7:39:5e:61:25:09:7e:d6:0a:03:0a:3c:12:af:73:04:7c:96:
58:05:63:4c:6e:60:b1:71:5b:5b:71:58:38:6d:58:d7:d9:44:
4f:07:8d:f7:85:2f:2a:32:e1:92:fa:03:5f:1e:b6:22:ec:25:
7b:6f:7f:2f:c1:35:3c:c9:7a:33:5c:fc:bc:8a:a9:31:c8:97:
06:2c:5e:0d:b4:4d:b3:b1:06:31:85:a6:50:08:d1:97:4e:df:
0f:79:1b:3e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 5 08:09:32 2025 by rpki-client