Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/61/e425de-236e-4a34-b41a-42481a62123c/1/uMjyPQxIxi4Y4o9WDMkVmJPU5C8.mft
File: uMjyPQxIxi4Y4o9WDMkVmJPU5C8.mft (raw, json)
Hash identifier: WMfEvs3bheHUh27BAvwFyonAt5ml2g+c9I1Ey+eXjRw=
Subject key identifier: 54:3B:D2:68:2A:6F:2E:87:DD:75:F4:F3:45:22:0C:AC:8F:EC:20:D8
Authority key identifier: B8:C8:F2:3D:0C:48:C6:2E:18:E2:8F:56:0C:C9:15:98:93:D4:E4:2F
Certificate issuer: /CN=b8c8f23d0c48c62e18e28f560cc9159893d4e42f
Certificate serial: 01964C6C2B71211A9BAABB67DB584B50ADC6
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/uMjyPQxIxi4Y4o9WDMkVmJPU5C8.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/61/e425de-236e-4a34-b41a-42481a62123c/1/uMjyPQxIxi4Y4o9WDMkVmJPU5C8.mft
Manifest number: 11AA
Signing time: Sat 19 Apr 2025 05:01:19 +0000
Manifest this update: Sat 19 Apr 2025 05:01:19 +0000
Manifest next update: Sun 20 Apr 2025 05:01:19 +0000
Files and hashes: 1: 65Z91RtgEwjU2KLES_hAyj1MASE.roa (hash: 2gFZ2u3yjyG8HV67uy1q1utBS/LzjR+Y0ZIVib1xl14=)
2: uMjyPQxIxi4Y4o9WDMkVmJPU5C8.crl (hash: 8GP+lcVMR4BCqrMiYBwq4F5gnVRiU59zveWow1g9oCI=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/61/e425de-236e-4a34-b41a-42481a62123c/1/uMjyPQxIxi4Y4o9WDMkVmJPU5C8.crl
rsync://rpki.ripe.net/repository/DEFAULT/61/e425de-236e-4a34-b41a-42481a62123c/1/uMjyPQxIxi4Y4o9WDMkVmJPU5C8.mft
rsync://rpki.ripe.net/repository/DEFAULT/uMjyPQxIxi4Y4o9WDMkVmJPU5C8.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 19 Apr 2025 23:00:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:4c:6c:2b:71:21:1a:9b:aa:bb:67:db:58:4b:50:ad:c6
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=b8c8f23d0c48c62e18e28f560cc9159893d4e42f
Validity
Not Before: Apr 19 05:01:19 2025 GMT
Not After : Apr 20 05:01:19 2025 GMT
Subject: CN=543bd2682a6f2e87dd75f4f345220cac8fec20d8
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cf:cb:62:6c:81:8d:be:91:c8:e1:5a:17:a8:e6:
3c:6c:cb:5b:8d:16:d4:83:33:d0:a7:a4:a8:88:d5:
58:a2:45:d4:d0:83:a9:50:0a:0b:bc:40:60:63:b3:
3d:01:5b:79:cc:e0:c2:34:78:53:88:9b:50:df:4b:
77:8f:79:1e:02:dd:4e:c8:e4:6a:06:9a:05:51:24:
c1:aa:38:c6:90:68:78:d0:21:04:43:1a:0c:f5:f9:
74:3c:5b:8f:5d:e9:f8:5f:bf:3f:cb:33:30:b9:59:
4e:41:11:3b:9f:c8:2d:55:e7:d0:1d:8b:e4:ce:4b:
66:bd:ff:b0:cc:b1:b4:16:d0:4f:f3:ab:2d:a2:c3:
55:b2:43:58:1d:76:0b:cd:3b:67:da:52:22:62:9f:
69:ab:2e:1c:5c:2f:5b:8b:07:31:cb:da:34:14:23:
17:c4:28:50:37:3b:90:de:12:de:3f:fc:87:e2:40:
e0:9e:5d:c6:96:e8:7b:4d:44:dd:a6:d9:ce:53:b5:
37:46:d1:39:21:6f:42:2d:9c:fb:2c:7b:f6:9f:95:
91:50:37:5b:f5:2d:87:e8:27:6c:e6:9b:2d:8f:3e:
ce:5c:dd:e9:ff:25:8b:fd:27:43:13:fc:70:b6:b9:
88:23:a2:2e:f5:9a:e8:49:4f:87:65:57:7e:be:22:
84:8b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
54:3B:D2:68:2A:6F:2E:87:DD:75:F4:F3:45:22:0C:AC:8F:EC:20:D8
X509v3 Authority Key Identifier:
keyid:B8:C8:F2:3D:0C:48:C6:2E:18:E2:8F:56:0C:C9:15:98:93:D4:E4:2F
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/uMjyPQxIxi4Y4o9WDMkVmJPU5C8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/61/e425de-236e-4a34-b41a-42481a62123c/1/uMjyPQxIxi4Y4o9WDMkVmJPU5C8.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/61/e425de-236e-4a34-b41a-42481a62123c/1/uMjyPQxIxi4Y4o9WDMkVmJPU5C8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
3a:27:57:95:b1:cc:87:c5:68:38:3b:a5:25:d1:ae:8c:d4:1e:
f1:79:ef:73:a5:4e:4c:2b:11:6f:4e:06:88:0e:55:8e:8a:35:
49:83:13:69:26:0c:f7:8c:0d:3e:4d:7a:e3:61:7d:76:e3:3f:
44:7d:6b:cd:1a:9b:3b:33:df:f4:c8:11:a3:75:fd:e9:71:3c:
ba:88:da:4f:75:e7:02:37:c3:63:3a:cd:e7:a6:37:39:f8:7b:
1c:94:94:d0:d5:b9:02:13:ac:42:81:6f:35:37:8f:f7:74:ba:
7e:de:80:c4:93:fe:81:dd:e7:f1:87:39:91:40:4c:50:ed:c9:
76:a5:25:36:e0:59:1c:77:e5:a7:49:a1:c0:31:36:37:e7:40:
b2:c1:2f:d7:e1:42:27:80:dc:08:7a:7e:44:b6:a9:d4:23:cc:
f6:e2:dc:2e:44:24:da:13:1b:e3:7e:ce:06:77:b9:e2:7a:99:
2e:b1:2f:08:7f:18:e9:7c:fa:7b:17:6d:69:80:d1:29:ef:e8:
a0:ce:77:f8:61:13:50:83:8d:84:24:30:de:a7:71:a3:24:bf:
3a:b5:8b:7b:c2:c3:63:12:d4:10:3e:71:20:f5:ca:87:eb:00:
eb:fa:46:1b:96:8d:2e:a3:ab:4b:65:3d:47:47:dc:35:8b:b2:
1c:80:f2:68
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 19 07:59:01 2025 by rpki-client