Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/55/10ea98-78bf-4897-9756-83f156c7ef92/1/uPfyTeOp5SyUxspoAxJEHdnAiAQ.mft
File: uPfyTeOp5SyUxspoAxJEHdnAiAQ.mft (raw, json)
Hash identifier: xst9OCNU/FE3hmn6We0Dn7oLMk36BoFbjUXu0v+f3dQ=
Subject key identifier: DB:69:E6:4F:99:E0:A8:AF:74:8A:85:39:15:C1:4F:6C:1C:11:1A:DA
Authority key identifier: B8:F7:F2:4D:E3:A9:E5:2C:94:C6:CA:68:03:12:44:1D:D9:C0:88:04
Certificate issuer: /CN=b8f7f24de3a9e52c94c6ca680312441dd9c08804
Certificate serial: 01963C8B134970FCA14B64D9B6A3956CF9CD
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/uPfyTeOp5SyUxspoAxJEHdnAiAQ.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/55/10ea98-78bf-4897-9756-83f156c7ef92/1/uPfyTeOp5SyUxspoAxJEHdnAiAQ.mft
Manifest number: 14F3
Signing time: Wed 16 Apr 2025 03:01:09 +0000
Manifest this update: Wed 16 Apr 2025 03:01:09 +0000
Manifest next update: Thu 17 Apr 2025 03:01:09 +0000
Files and hashes: 1: 7jnl02v03sYUg549kXFE9hZBS9Q.roa (hash: vAWHGB1e28ce0D//4raXhcDRmRnXWhQvQ0wU2NiSE9Y=)
2: uPfyTeOp5SyUxspoAxJEHdnAiAQ.crl (hash: kEI0LXd5EEtzsOFTh6FSqYjx+M58pADr76UDxngh/x0=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/55/10ea98-78bf-4897-9756-83f156c7ef92/1/uPfyTeOp5SyUxspoAxJEHdnAiAQ.crl
rsync://rpki.ripe.net/repository/DEFAULT/55/10ea98-78bf-4897-9756-83f156c7ef92/1/uPfyTeOp5SyUxspoAxJEHdnAiAQ.mft
rsync://rpki.ripe.net/repository/DEFAULT/uPfyTeOp5SyUxspoAxJEHdnAiAQ.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 17 Apr 2025 02:00:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:3c:8b:13:49:70:fc:a1:4b:64:d9:b6:a3:95:6c:f9:cd
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=b8f7f24de3a9e52c94c6ca680312441dd9c08804
Validity
Not Before: Apr 16 03:01:09 2025 GMT
Not After : Apr 17 03:01:09 2025 GMT
Subject: CN=db69e64f99e0a8af748a853915c14f6c1c111ada
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e4:39:b8:51:9c:70:d5:80:4c:3c:a4:70:2d:ef:
c9:dd:06:19:7d:e8:ea:b8:6b:ca:6f:b1:ce:63:15:
91:5c:74:3a:19:78:76:8a:6d:b0:73:e2:c3:e5:c3:
e5:30:0d:40:68:24:6e:a9:09:45:37:93:2c:eb:5a:
ba:6d:fd:5c:b0:c7:3d:a3:a0:50:ce:91:9d:bb:fc:
dc:88:f5:94:ff:ab:a9:41:4a:e3:b8:e5:42:97:54:
f9:81:17:b2:c4:94:11:e3:b0:4d:a8:7f:3c:3a:a3:
01:d6:90:9a:73:84:0a:a5:bd:bc:b9:4d:7c:40:31:
5b:fe:43:42:37:eb:fc:4c:07:31:0f:96:13:1b:d1:
da:6c:7b:e5:38:29:0f:55:00:26:fc:fb:0e:3d:e4:
3d:96:1e:17:f5:5f:26:67:3b:f8:82:98:5c:6e:70:
cd:24:fc:08:80:08:9a:49:a4:a5:f9:a1:80:49:2a:
2a:d5:cd:99:c4:7a:76:2d:b9:6b:8b:53:b9:18:f4:
b0:55:f0:58:89:2f:f3:be:95:17:3d:94:77:34:1f:
f1:83:4e:c5:b4:ea:fc:ab:15:09:85:f4:ce:73:40:
83:02:8f:2c:42:19:b3:54:a2:e2:8e:ac:ea:80:ed:
b0:46:e7:cf:a4:62:01:d9:20:3a:bc:62:9a:f7:a1:
15:4b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
DB:69:E6:4F:99:E0:A8:AF:74:8A:85:39:15:C1:4F:6C:1C:11:1A:DA
X509v3 Authority Key Identifier:
keyid:B8:F7:F2:4D:E3:A9:E5:2C:94:C6:CA:68:03:12:44:1D:D9:C0:88:04
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/uPfyTeOp5SyUxspoAxJEHdnAiAQ.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/55/10ea98-78bf-4897-9756-83f156c7ef92/1/uPfyTeOp5SyUxspoAxJEHdnAiAQ.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/55/10ea98-78bf-4897-9756-83f156c7ef92/1/uPfyTeOp5SyUxspoAxJEHdnAiAQ.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
6e:27:03:30:f8:06:54:6d:60:50:0e:b7:ac:31:29:e0:1e:3c:
f1:e6:4e:9a:5a:89:bc:ac:5c:a9:05:63:32:e1:82:49:9e:ea:
a8:b4:84:5c:47:b0:2d:c9:18:4d:48:db:ec:d4:2f:61:3a:4a:
34:83:0b:64:2c:a8:7a:30:9e:12:20:3c:0c:00:87:8a:82:92:
6a:cd:51:4d:73:89:d5:e1:9b:a3:92:b3:61:df:55:dc:ef:d2:
c7:56:0e:ca:bf:df:2b:37:b0:c0:30:c9:f2:4d:a4:49:1a:05:
7d:5e:42:c9:28:f2:e3:cd:fe:7a:d9:d3:ab:8a:e3:d4:80:6e:
ef:45:b3:bd:4f:5d:20:60:d4:50:2a:5a:a3:42:88:6d:6d:00:
67:7c:dd:c8:7a:15:32:31:ff:a2:48:47:d2:47:f3:d8:8d:91:
25:a8:79:a7:9c:a9:e1:2e:27:52:e6:d0:40:31:b1:60:50:5b:
79:15:a2:d3:bd:9e:f3:c6:e6:87:20:b9:bd:fb:d3:42:11:4d:
dc:c0:04:1a:e9:15:b8:17:cf:3f:db:ff:d1:f4:f1:f1:2e:e5:
c0:09:3f:b9:ba:76:3b:2b:7e:7d:5f:6c:24:eb:f2:2d:ed:b4:
ad:f3:c5:46:10:68:13:a6:b5:be:c4:e3:fa:45:cc:eb:0a:b4:
e1:70:d0:9d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Apr 16 09:13:28 2025 by rpki-client