Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/68/c7f05d-35f5-4115-9f7f-fcaaf2ef3601/1/uZndWsAyJYRLa0kPkvA0fM8JZwg.mft
File: uZndWsAyJYRLa0kPkvA0fM8JZwg.mft (raw, json)
Hash identifier: I0JQM6ljCNQQ0+dU99uPCuptgqp/zBdH+VcljCi7Xc8=
Subject key identifier: 4C:78:32:53:57:64:62:FC:1B:62:F1:75:65:76:8A:02:C9:FD:B6:03
Authority key identifier: B9:99:DD:5A:C0:32:25:84:4B:6B:49:0F:92:F0:34:7C:CF:09:67:08
Certificate issuer: /CN=b999dd5ac03225844b6b490f92f0347ccf096708
Certificate serial: 019657CB51CE086DF288E76746D221405CCC
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/uZndWsAyJYRLa0kPkvA0fM8JZwg.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/68/c7f05d-35f5-4115-9f7f-fcaaf2ef3601/1/uZndWsAyJYRLa0kPkvA0fM8JZwg.mft
Manifest number: 130A
Signing time: Mon 21 Apr 2025 10:01:04 +0000
Manifest this update: Mon 21 Apr 2025 10:01:04 +0000
Manifest next update: Tue 22 Apr 2025 10:01:04 +0000
Files and hashes: 1: gDuCjO0DIgLxN7C48R4JfGoQRVc.roa (hash: lP/yR1n5GIu8r34Q5gSsLb2yf1Tw72xt4gkUVUOEXik=)
2: uZndWsAyJYRLa0kPkvA0fM8JZwg.crl (hash: DaIN/OGzwzSbNFZZREf+/5WLVPlH8qq2HqAWgIZc+oA=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/68/c7f05d-35f5-4115-9f7f-fcaaf2ef3601/1/uZndWsAyJYRLa0kPkvA0fM8JZwg.crl
rsync://rpki.ripe.net/repository/DEFAULT/68/c7f05d-35f5-4115-9f7f-fcaaf2ef3601/1/uZndWsAyJYRLa0kPkvA0fM8JZwg.mft
rsync://rpki.ripe.net/repository/DEFAULT/uZndWsAyJYRLa0kPkvA0fM8JZwg.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 22 Apr 2025 10:00:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:57:cb:51:ce:08:6d:f2:88:e7:67:46:d2:21:40:5c:cc
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=b999dd5ac03225844b6b490f92f0347ccf096708
Validity
Not Before: Apr 21 10:01:04 2025 GMT
Not After : Apr 22 10:01:04 2025 GMT
Subject: CN=4c783253576462fc1b62f17565768a02c9fdb603
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c1:05:d1:dc:20:7d:5d:dc:31:2f:e4:f3:7a:cb:
b5:aa:2a:75:c4:9e:8b:61:50:53:17:41:74:6e:67:
20:ae:8a:97:b8:26:8d:c1:7f:11:a7:02:66:91:12:
3f:f8:5b:03:17:28:91:84:06:22:52:be:71:e6:03:
89:50:e4:c7:27:a3:ea:31:b9:2a:85:ac:ef:13:de:
06:95:4f:72:d7:a5:c7:7c:e4:fe:d5:c6:bb:e3:ad:
d5:e0:20:ea:c3:b1:c6:92:b1:cd:3a:00:cd:97:9b:
03:3b:b2:93:75:f6:ec:a8:e1:7a:3e:09:b6:c0:e9:
27:1e:06:13:b1:13:94:8b:36:7b:59:05:fd:e9:84:
f4:d2:57:6d:09:fe:70:c2:26:7e:39:93:1c:b8:f7:
79:8a:8e:08:88:77:54:53:4f:cb:b1:2d:eb:ce:f9:
02:9b:6c:11:da:ce:49:79:f1:4e:27:70:5f:69:44:
8c:1e:da:17:4d:b1:08:28:64:b2:c9:a3:21:6a:3f:
fe:02:2b:ac:55:b3:cb:74:bb:d4:90:b2:be:e2:87:
38:4b:7e:38:f0:31:93:88:2b:22:70:56:39:ea:db:
a5:dc:ef:52:4d:dc:05:af:44:14:62:ee:95:72:16:
b7:64:88:4a:69:9e:12:18:bf:30:45:03:fe:01:f1:
2a:53
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
4C:78:32:53:57:64:62:FC:1B:62:F1:75:65:76:8A:02:C9:FD:B6:03
X509v3 Authority Key Identifier:
keyid:B9:99:DD:5A:C0:32:25:84:4B:6B:49:0F:92:F0:34:7C:CF:09:67:08
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/uZndWsAyJYRLa0kPkvA0fM8JZwg.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/68/c7f05d-35f5-4115-9f7f-fcaaf2ef3601/1/uZndWsAyJYRLa0kPkvA0fM8JZwg.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/68/c7f05d-35f5-4115-9f7f-fcaaf2ef3601/1/uZndWsAyJYRLa0kPkvA0fM8JZwg.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
11:eb:6d:a5:0e:95:14:5d:c0:02:94:1d:12:bb:30:dd:68:3c:
58:5e:c4:52:c4:4f:b7:fb:4e:ca:ff:69:54:be:56:47:31:9d:
cf:bc:9b:9b:37:3e:ec:57:b6:a5:bd:93:2a:e0:e1:01:d0:db:
6e:63:7b:ff:c7:32:f5:17:27:45:0d:37:2f:ca:0b:e6:13:04:
4f:90:2a:f6:a2:c0:ba:e7:b8:cd:09:87:60:63:89:25:61:53:
4e:e4:65:1e:c2:6c:b0:74:ce:5c:8a:cb:f1:ed:3f:01:94:48:
cd:58:bf:0a:40:19:09:ff:58:53:8d:77:49:72:d6:a0:48:de:
06:79:ae:56:8a:f3:5f:27:04:14:a8:b2:1e:f2:aa:a9:b5:ed:
40:61:85:38:e4:5e:b6:21:8d:1f:1e:6f:48:dd:d4:e5:42:1d:
65:54:df:af:69:e8:c7:21:81:59:41:34:c4:bb:fd:6c:7b:2c:
af:e6:35:66:c9:a2:5d:53:68:ab:36:59:36:dd:b1:4d:ac:10:
35:63:93:70:f5:97:80:7b:05:fd:a3:30:55:86:ba:84:ff:81:
bf:2c:8b:cf:ca:a0:9f:aa:60:b4:5f:30:a1:81:4d:57:99:85:
04:1f:f2:e6:f5:a8:48:d6:f3:4a:02:6e:35:f1:2c:25:f1:12:
06:c2:9a:d5
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 21 20:07:22 2025 by rpki-client