Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/5a/23b148-e0dd-4fa6-af44-613017886e8b/1/uRHH7b8dPMT7B1OBo392JWuHKF0.mft
File: uRHH7b8dPMT7B1OBo392JWuHKF0.mft (raw, json)
Hash identifier: lLse4iRd++Euer9Jrzblsb3fuWChyDEc5bn2RGbB3UE=
Subject key identifier: 7B:A5:C4:71:56:B4:48:3A:A9:49:30:F9:30:68:74:C7:07:B8:B0:52
Authority key identifier: B9:11:C7:ED:BF:1D:3C:C4:FB:07:53:81:A3:7F:76:25:6B:87:28:5D
Certificate issuer: /CN=b911c7edbf1d3cc4fb075381a37f76256b87285d
Certificate serial: 01964D10544BC46EF841D6D06735F8905D86
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/uRHH7b8dPMT7B1OBo392JWuHKF0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/5a/23b148-e0dd-4fa6-af44-613017886e8b/1/uRHH7b8dPMT7B1OBo392JWuHKF0.mft
Manifest number: 14F8
Signing time: Sat 19 Apr 2025 08:00:37 +0000
Manifest this update: Sat 19 Apr 2025 08:00:37 +0000
Manifest next update: Sun 20 Apr 2025 08:00:37 +0000
Files and hashes: 1: OqSdyDZh6NqO8-7N9t70Rdg7P_c.roa (hash: x00OtA3aq4wEzTMJMk5pH/UOCzQUUaU7IjKw5glYcJU=)
2: RpnGjFmcT56C89eB4k7yZQkJFTU.roa (hash: 1K/n2yLPZy3QlKzwTHvqK3jkvNSKTZzceS8co3Qu1JU=)
3: uRHH7b8dPMT7B1OBo392JWuHKF0.crl (hash: v3dfNSEBWnG2xWJzOEArNvBGO2Xe2YISogT/QU1zVfM=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/5a/23b148-e0dd-4fa6-af44-613017886e8b/1/uRHH7b8dPMT7B1OBo392JWuHKF0.crl
rsync://rpki.ripe.net/repository/DEFAULT/5a/23b148-e0dd-4fa6-af44-613017886e8b/1/uRHH7b8dPMT7B1OBo392JWuHKF0.mft
rsync://rpki.ripe.net/repository/DEFAULT/uRHH7b8dPMT7B1OBo392JWuHKF0.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 20 Apr 2025 04:00:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:4d:10:54:4b:c4:6e:f8:41:d6:d0:67:35:f8:90:5d:86
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=b911c7edbf1d3cc4fb075381a37f76256b87285d
Validity
Not Before: Apr 19 08:00:37 2025 GMT
Not After : Apr 20 08:00:37 2025 GMT
Subject: CN=7ba5c47156b4483aa94930f9306874c707b8b052
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e0:eb:4e:17:7d:71:13:ab:85:da:ce:64:f5:b6:
3d:1c:c7:1e:8f:f5:9d:ac:e3:fa:e2:c2:14:0f:7b:
75:b4:30:54:58:db:07:76:b8:5b:64:92:4c:4e:5d:
a9:dc:eb:8f:60:1f:2f:e7:20:40:17:d9:c5:be:44:
f2:d6:20:da:38:a9:ca:75:72:be:76:01:0b:d8:49:
15:6a:ed:46:8b:ea:5f:21:df:5d:33:b7:8b:17:0e:
28:b6:97:d1:af:7f:84:13:47:9b:e2:87:43:2e:d2:
9f:f4:fb:cc:2a:f8:ba:88:f7:1b:6a:8d:e1:19:19:
e9:92:b1:65:10:89:7e:08:9e:68:60:13:13:8c:31:
1b:20:7e:8b:50:40:d4:5a:cf:92:ce:03:07:c3:23:
2f:a2:25:6a:34:de:ce:8a:ee:63:36:e1:28:f1:74:
ed:0c:08:a3:77:71:25:a1:7d:37:b9:e1:68:ed:53:
04:62:7b:15:dd:e0:71:79:f6:c7:25:b0:fb:1c:1d:
65:af:14:fc:0b:74:3d:9c:42:74:0e:47:8f:8e:ef:
c4:16:33:a4:de:a7:7f:67:57:35:28:80:c5:7c:da:
7c:55:db:90:72:d0:db:62:b6:8a:6d:25:bc:e9:c2:
68:13:95:51:56:6e:f2:ba:02:fa:32:bd:b4:55:62:
43:a7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
7B:A5:C4:71:56:B4:48:3A:A9:49:30:F9:30:68:74:C7:07:B8:B0:52
X509v3 Authority Key Identifier:
keyid:B9:11:C7:ED:BF:1D:3C:C4:FB:07:53:81:A3:7F:76:25:6B:87:28:5D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/uRHH7b8dPMT7B1OBo392JWuHKF0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5a/23b148-e0dd-4fa6-af44-613017886e8b/1/uRHH7b8dPMT7B1OBo392JWuHKF0.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/5a/23b148-e0dd-4fa6-af44-613017886e8b/1/uRHH7b8dPMT7B1OBo392JWuHKF0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
05:f8:ea:5c:0e:82:03:e4:d9:1e:af:85:50:62:44:ad:7c:c5:
ca:23:ac:1c:63:e5:38:40:0a:7e:f6:3b:cf:31:da:68:14:e8:
c1:69:e5:0b:34:97:5d:21:f1:2d:e1:e6:b2:0b:c2:7c:62:6a:
8f:98:a7:f1:10:3d:fe:cb:d6:a7:1a:d6:a1:e8:56:d1:77:8c:
8f:3f:7f:36:32:39:90:4b:28:e2:2a:8b:8c:73:b8:12:c7:bc:
b5:99:73:f8:21:32:63:ed:57:35:24:a1:ae:7d:2a:64:bd:1d:
75:fd:7d:e7:d2:48:84:e8:79:46:27:04:82:1c:ca:ef:54:0f:
f6:03:d8:cb:87:ff:d0:9d:41:9c:d0:a8:b5:f1:93:4f:e0:07:
0f:c4:b1:4c:78:d1:b4:ca:98:b5:ff:f6:b2:b3:ea:d1:c3:7e:
78:90:68:28:19:d2:07:64:1d:6b:05:eb:92:ea:af:81:a2:c1:
08:86:54:e5:f3:ba:5c:b4:80:c5:3f:1f:f6:9e:f0:ee:1f:00:
6d:b6:f9:79:d8:bd:a5:55:d7:79:bd:f8:97:9a:c4:a6:54:9e:
0c:d3:ba:6b:49:9f:c3:4a:7e:31:40:f6:d5:b5:4e:6a:a3:1f:
bc:b4:92:67:7b:af:f6:e8:2b:0f:a9:e0:f0:59:95:92:2f:ed:
13:40:d0:1d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 19 12:34:39 2025 by rpki-client