Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/5e/ccaf34-3dee-4fe2-b2fc-8dd453ab423d/1/uakIi7QgHORtjrg9yfOMeLjzvhs.mft
File: uakIi7QgHORtjrg9yfOMeLjzvhs.mft (raw, json)
Hash identifier: dfgnqSEKCT9pBUlbeBRcLjPGCl96R1QTquwFj4wC6vc=
Subject key identifier: 38:BF:43:41:6C:4C:39:15:FF:9C:7B:2A:24:A3:50:F7:8A:18:2E:84
Authority key identifier: B9:A9:08:8B:B4:20:1C:E4:6D:8E:B8:3D:C9:F3:8C:78:B8:F3:BE:1B
Certificate issuer: /CN=b9a9088bb4201ce46d8eb83dc9f38c78b8f3be1b
Certificate serial: 019656EEE0C90171B1262A7B8ECD00D82696
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/uakIi7QgHORtjrg9yfOMeLjzvhs.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/5e/ccaf34-3dee-4fe2-b2fc-8dd453ab423d/1/uakIi7QgHORtjrg9yfOMeLjzvhs.mft
Manifest number: 0C35
Signing time: Mon 21 Apr 2025 06:00:17 +0000
Manifest this update: Mon 21 Apr 2025 06:00:17 +0000
Manifest next update: Tue 22 Apr 2025 06:00:17 +0000
Files and hashes: 1: rgvtyID9p-DqMnjSKCFn-cGMrm8.roa (hash: KZX9vOyc4u5urfjnyI1iRG4cI0C7NijDH3Acv+79gvU=)
2: uakIi7QgHORtjrg9yfOMeLjzvhs.crl (hash: 2+kKQ7AhonGPZfG07829ZtgKyj5napadvB7wQaUYkYk=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/5e/ccaf34-3dee-4fe2-b2fc-8dd453ab423d/1/uakIi7QgHORtjrg9yfOMeLjzvhs.crl
rsync://rpki.ripe.net/repository/DEFAULT/5e/ccaf34-3dee-4fe2-b2fc-8dd453ab423d/1/uakIi7QgHORtjrg9yfOMeLjzvhs.mft
rsync://rpki.ripe.net/repository/DEFAULT/uakIi7QgHORtjrg9yfOMeLjzvhs.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 22 Apr 2025 01:00:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:56:ee:e0:c9:01:71:b1:26:2a:7b:8e:cd:00:d8:26:96
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=b9a9088bb4201ce46d8eb83dc9f38c78b8f3be1b
Validity
Not Before: Apr 21 06:00:17 2025 GMT
Not After : Apr 22 06:00:17 2025 GMT
Subject: CN=38bf43416c4c3915ff9c7b2a24a350f78a182e84
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b0:7c:bf:a8:1e:ce:cb:84:f4:7f:e1:a0:f0:fd:
a1:58:39:99:92:a8:9e:c6:d4:9a:99:9e:97:70:2d:
36:c5:81:65:af:8a:4a:e2:4b:88:15:46:ef:64:c3:
4e:6b:1d:22:99:aa:66:2c:5b:fe:8d:db:d9:4b:9b:
7a:89:3f:de:e3:23:3b:b8:7a:d5:34:2f:1a:3e:51:
97:87:d2:47:f6:a7:4a:80:bb:99:ad:10:fe:2b:4f:
ae:8e:0f:a8:67:d7:9f:ae:43:ef:0e:8c:c5:1f:b9:
ed:75:f2:82:7b:9d:18:88:53:6a:35:73:e0:51:f7:
94:29:52:cc:e5:b8:28:2d:4d:91:24:43:31:3d:3e:
0f:98:42:00:f9:6c:1e:68:a4:1c:ac:90:5b:f3:98:
9d:7e:22:7a:c4:61:0c:2a:c0:89:1f:ac:4e:49:21:
eb:61:fb:50:e4:e7:47:cd:89:2d:4d:41:6f:90:a1:
7b:40:a4:18:bf:ad:82:ae:ba:bd:73:bf:22:09:ba:
f9:f6:a5:59:78:ad:b2:49:0f:d1:21:c8:8e:0f:cd:
4f:a8:19:4d:45:09:c2:bd:8b:bb:55:66:46:f6:4f:
15:35:8b:6a:53:96:91:db:2e:97:97:97:31:57:cd:
42:b6:2a:88:1b:bb:0f:e9:f0:50:de:8f:be:d8:c4:
ea:8f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
38:BF:43:41:6C:4C:39:15:FF:9C:7B:2A:24:A3:50:F7:8A:18:2E:84
X509v3 Authority Key Identifier:
keyid:B9:A9:08:8B:B4:20:1C:E4:6D:8E:B8:3D:C9:F3:8C:78:B8:F3:BE:1B
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/uakIi7QgHORtjrg9yfOMeLjzvhs.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5e/ccaf34-3dee-4fe2-b2fc-8dd453ab423d/1/uakIi7QgHORtjrg9yfOMeLjzvhs.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/5e/ccaf34-3dee-4fe2-b2fc-8dd453ab423d/1/uakIi7QgHORtjrg9yfOMeLjzvhs.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
01:71:bb:03:59:b2:72:c2:df:7f:15:72:f4:cf:99:98:bb:a3:
3b:11:3c:98:d4:15:ee:3f:f2:02:18:da:39:a7:c4:df:93:be:
ec:eb:f0:5d:15:83:2b:67:48:76:ed:d2:a3:65:a8:1e:d0:96:
1b:16:f4:ba:a6:94:d8:15:a3:36:3d:33:00:04:88:4a:c2:f4:
33:0c:02:d4:81:3c:c3:82:7f:6d:86:b6:0c:0f:80:3c:fa:f4:
24:3b:b2:3d:3c:de:f0:f7:2c:ed:e9:2e:cf:b7:d0:24:f2:01:
77:82:5f:40:c8:ea:8b:fb:36:96:7e:60:53:26:22:2d:c1:62:
c5:71:37:28:03:83:bd:c1:22:af:ca:84:e2:d0:d0:52:73:1d:
1c:71:00:00:19:dc:af:3c:7a:d2:3b:0c:c9:5f:f2:73:3f:41:
84:e4:f3:22:f5:50:a0:4c:7b:27:4c:81:e2:d9:be:12:17:e7:
ae:30:9d:72:9f:21:d2:3d:6a:ff:f6:a9:6c:33:e7:7d:d6:c5:
72:e9:70:2e:98:f7:f3:f3:0b:3f:c2:82:04:58:a6:97:8c:71:
1d:75:87:0a:13:70:a9:a4:4f:58:b4:d4:40:3a:87:c1:99:bc:
12:6a:be:21:de:98:f9:3a:53:50:85:be:52:95:db:41:f2:3d:
0e:ab:40:a2
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 21 10:56:33 2025 by rpki-client