Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/64/104bae-2c9a-4beb-9035-b2d79ae49646/1/uNaZAUpVUnPtOrsXCGquPwL_mg8.mft
File: uNaZAUpVUnPtOrsXCGquPwL_mg8.mft (raw, json)
Hash identifier: m7UsKyyA+fBUExYO2CnwpMXEqpvdDRP2RIZ+sYCN9N8=
Subject key identifier: D4:68:94:D6:39:35:23:61:15:3D:A9:41:52:84:5E:B7:C0:1E:52:63
Authority key identifier: B8:D6:99:01:4A:55:52:73:ED:3A:BB:17:08:6A:AE:3F:02:FF:9A:0F
Certificate issuer: /CN=b8d699014a555273ed3abb17086aae3f02ff9a0f
Certificate serial: 0195797DE1414C9942822D57F70581A89B7F
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/uNaZAUpVUnPtOrsXCGquPwL_mg8.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/64/104bae-2c9a-4beb-9035-b2d79ae49646/1/uNaZAUpVUnPtOrsXCGquPwL_mg8.mft
Manifest number: 09D6
Signing time: Sun 09 Mar 2025 06:00:47 +0000
Manifest this update: Sun 09 Mar 2025 06:00:47 +0000
Manifest next update: Mon 10 Mar 2025 06:00:47 +0000
Files and hashes: 1: grkiyNrBsZFvA41Z_BZuZwQjbk0.roa (hash: orWqkkbt375i6JBo+FAAzLtCgy2y10AY9MRPYxvZKZE=)
2: uNaZAUpVUnPtOrsXCGquPwL_mg8.crl (hash: 7SQueVqucgDQveR+MuPaLnkccE+544SoB3IGg34M56c=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/64/104bae-2c9a-4beb-9035-b2d79ae49646/1/uNaZAUpVUnPtOrsXCGquPwL_mg8.crl
rsync://rpki.ripe.net/repository/DEFAULT/64/104bae-2c9a-4beb-9035-b2d79ae49646/1/uNaZAUpVUnPtOrsXCGquPwL_mg8.mft
rsync://rpki.ripe.net/repository/DEFAULT/uNaZAUpVUnPtOrsXCGquPwL_mg8.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 10 Mar 2025 06:00:19 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:95:79:7d:e1:41:4c:99:42:82:2d:57:f7:05:81:a8:9b:7f
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=b8d699014a555273ed3abb17086aae3f02ff9a0f
Validity
Not Before: Mar 9 06:00:47 2025 GMT
Not After : Mar 10 06:00:47 2025 GMT
Subject: CN=d46894d639352361153da94152845eb7c01e5263
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e7:68:a2:c8:01:85:91:6b:e5:27:a3:fb:06:18:
c6:99:80:db:d1:1f:35:67:e6:84:9c:77:ab:d2:d2:
97:c4:2d:92:59:5d:c9:1a:00:0e:9d:ff:b4:bf:dc:
ce:52:34:2e:91:ba:60:ac:16:fb:a8:2a:46:32:15:
37:35:7a:97:d5:40:b2:89:ac:57:47:b2:dc:e2:d7:
1d:8a:db:e3:0b:02:5c:47:40:e1:30:24:12:a3:53:
b0:99:80:da:83:d1:34:96:05:7c:70:43:ac:a4:33:
ab:4b:04:0a:7d:c5:14:0d:67:6c:c0:9d:3b:20:ea:
1c:8b:59:b4:1a:81:d4:a5:37:5d:f3:79:7f:4b:28:
f9:99:23:b1:b4:b9:16:a7:42:51:3b:94:d6:39:de:
6c:80:bd:46:ec:53:9c:bc:a3:e8:4e:96:64:9d:05:
dd:6b:8c:40:c8:f7:47:d3:84:8e:ad:4d:77:7a:c8:
8d:f9:7a:1e:93:80:d4:a3:2b:10:cd:79:da:54:f4:
7b:02:52:66:27:69:d5:19:59:5a:ea:ba:89:bd:76:
25:56:7a:0d:97:7a:1d:c4:9b:80:84:29:ec:00:7a:
d1:8b:64:97:ed:b0:ee:c8:d3:c6:82:7a:f9:8e:f3:
46:ea:84:fa:f8:3e:a3:61:c4:e1:92:08:9a:0e:6a:
f6:a3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D4:68:94:D6:39:35:23:61:15:3D:A9:41:52:84:5E:B7:C0:1E:52:63
X509v3 Authority Key Identifier:
keyid:B8:D6:99:01:4A:55:52:73:ED:3A:BB:17:08:6A:AE:3F:02:FF:9A:0F
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/uNaZAUpVUnPtOrsXCGquPwL_mg8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/64/104bae-2c9a-4beb-9035-b2d79ae49646/1/uNaZAUpVUnPtOrsXCGquPwL_mg8.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/64/104bae-2c9a-4beb-9035-b2d79ae49646/1/uNaZAUpVUnPtOrsXCGquPwL_mg8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
49:14:4b:a3:9d:47:da:f1:01:da:5a:ee:47:f7:3b:a2:71:ac:
1e:1e:4f:25:eb:36:ed:9d:da:6b:27:e5:72:7e:1e:19:20:02:
d3:ab:2a:b3:7e:e5:07:d8:f7:78:51:55:68:91:a3:75:a7:ce:
cf:99:b3:7f:d4:27:b5:ac:5f:46:4f:c3:a9:5a:bc:35:7c:0a:
54:12:6f:ef:70:c2:5f:ac:ab:31:2d:b5:64:e0:ec:1d:09:52:
3e:9b:de:67:09:ea:4c:d2:9b:98:17:4b:be:13:66:20:fc:3c:
a2:40:2d:a5:95:44:65:3b:ff:2a:60:98:54:2c:34:a3:fe:92:
da:73:8e:d9:7a:5c:d8:6b:41:4e:9c:12:c3:cb:b6:80:4e:f5:
1f:47:18:81:56:e9:a7:99:51:b2:f1:55:91:74:17:94:af:a3:
95:55:2b:64:46:da:6a:23:bb:c6:1b:9e:51:44:7f:27:c3:e1:
03:8a:5a:52:64:a6:8e:4c:fb:92:18:00:ba:6b:ee:a0:52:72:
c2:3f:87:bd:7c:0b:07:3d:3a:96:ee:0b:17:aa:bd:ef:a2:dc:
10:4a:01:2e:ea:ec:70:6f:31:d0:2a:73:e1:33:31:61:07:7a:
8b:ec:9d:da:64:c5:fa:be:f4:21:80:51:64:b5:39:d3:c0:94:
f6:15:f4:86
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Mar 9 11:39:50 2025 by rpki-client