Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/6d/057a69-e68e-4004-8625-9177b14ee633/1/uUUIWZXzy3x9vQXkF3TaYksa8uk.mft
File: uUUIWZXzy3x9vQXkF3TaYksa8uk.mft (raw, json)
Hash identifier: EiXLcOrM4qhSs/+polTcYMPFGjfo8M0SxZega7tgeGY=
Subject key identifier: 0B:EC:1F:31:88:BF:62:DD:F4:01:C7:2E:2D:D7:04:7C:A3:80:90:02
Authority key identifier: B9:45:08:59:95:F3:CB:7C:7D:BD:05:E4:17:74:DA:62:4B:1A:F2:E9
Certificate issuer: /CN=b945085995f3cb7c7dbd05e41774da624b1af2e9
Certificate serial: 01958C60255E9C73C9CA186E2BD709ED1C17
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/uUUIWZXzy3x9vQXkF3TaYksa8uk.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/6d/057a69-e68e-4004-8625-9177b14ee633/1/uUUIWZXzy3x9vQXkF3TaYksa8uk.mft
Manifest number: 1443
Signing time: Wed 12 Mar 2025 22:01:06 +0000
Manifest this update: Wed 12 Mar 2025 22:01:06 +0000
Manifest next update: Thu 13 Mar 2025 22:01:06 +0000
Files and hashes: 1: EsduMUwM_I8I9QBhuMSlNVS-Wi4.roa (hash: RsxXFAy4vLF5L/pTYoeAN6hWsbZx1lCA8MFJDhAYUDI=)
2: uUUIWZXzy3x9vQXkF3TaYksa8uk.crl (hash: YHyFynsjqJVP+M5MbTDVI4UWNXAdJW/7JngOuTxwkPQ=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/6d/057a69-e68e-4004-8625-9177b14ee633/1/uUUIWZXzy3x9vQXkF3TaYksa8uk.crl
rsync://rpki.ripe.net/repository/DEFAULT/6d/057a69-e68e-4004-8625-9177b14ee633/1/uUUIWZXzy3x9vQXkF3TaYksa8uk.mft
rsync://rpki.ripe.net/repository/DEFAULT/uUUIWZXzy3x9vQXkF3TaYksa8uk.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 13 Mar 2025 19:14:49 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:95:8c:60:25:5e:9c:73:c9:ca:18:6e:2b:d7:09:ed:1c:17
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=b945085995f3cb7c7dbd05e41774da624b1af2e9
Validity
Not Before: Mar 12 22:01:06 2025 GMT
Not After : Mar 13 22:01:06 2025 GMT
Subject: CN=0bec1f3188bf62ddf401c72e2dd7047ca3809002
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cf:f9:6a:7e:15:52:7e:f6:73:2a:3d:6f:91:c9:
ef:41:2c:1c:67:66:ab:ce:b3:9e:2a:55:2c:49:36:
1c:3f:98:57:ae:c4:a2:95:ce:be:8a:fc:ae:76:f6:
73:05:ef:07:69:26:4c:96:81:dd:66:13:21:eb:28:
26:5a:c2:ea:37:c1:8f:8c:c3:c3:88:f8:b0:11:77:
8b:c2:b7:5b:65:b0:4a:f5:15:d8:c2:37:b0:fb:58:
75:b4:ae:e0:77:52:76:23:7c:22:a4:09:bf:90:6d:
4d:51:e0:d9:71:54:86:b8:0c:55:ae:86:67:c2:e9:
ed:ad:fb:da:6c:2f:14:cc:a4:23:33:30:ef:24:9f:
08:4f:b7:cb:4d:95:2a:83:17:8f:93:cc:29:fa:c6:
01:e2:61:6c:64:16:b9:cc:9a:dc:33:9a:29:5e:cb:
cc:f3:5a:ea:5c:d4:11:57:1b:43:0d:5f:28:e1:7c:
04:31:21:66:4b:23:84:17:57:3c:58:22:22:dd:75:
92:9c:79:dc:18:07:e9:e0:97:be:1f:37:bb:c4:d8:
a9:28:d4:6e:5e:fd:9f:d2:08:3f:da:bc:f2:31:52:
1f:9a:1e:7e:3d:38:79:c8:75:eb:9f:30:7e:87:79:
68:24:85:24:a4:17:07:57:fb:7e:38:13:ac:4c:01:
13:0b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
0B:EC:1F:31:88:BF:62:DD:F4:01:C7:2E:2D:D7:04:7C:A3:80:90:02
X509v3 Authority Key Identifier:
keyid:B9:45:08:59:95:F3:CB:7C:7D:BD:05:E4:17:74:DA:62:4B:1A:F2:E9
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/uUUIWZXzy3x9vQXkF3TaYksa8uk.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/6d/057a69-e68e-4004-8625-9177b14ee633/1/uUUIWZXzy3x9vQXkF3TaYksa8uk.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/6d/057a69-e68e-4004-8625-9177b14ee633/1/uUUIWZXzy3x9vQXkF3TaYksa8uk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
65:ac:38:92:7a:47:76:4c:fe:db:22:f2:b5:49:7b:8b:05:2c:
dd:cd:80:72:a0:1d:d5:5f:ce:63:5c:e3:a8:0e:b4:47:be:9c:
35:c4:1a:11:63:b3:be:9f:65:78:2f:cc:93:4c:34:b9:92:8c:
ef:a1:db:34:ab:76:02:ce:98:64:f1:b2:be:45:2a:4a:4a:70:
04:c1:38:37:86:19:f8:5e:ba:ac:5f:85:86:46:0e:46:e6:85:
8c:4a:51:7d:4c:79:10:64:1c:79:f9:1c:12:c4:5c:99:dd:54:
1f:7a:cf:2e:1f:53:43:91:e9:ae:fa:26:98:ad:7d:4a:4d:f5:
82:2d:74:29:ed:81:69:a2:40:b0:49:34:ac:13:c8:07:61:a1:
43:ee:b9:82:99:50:13:fb:d2:a7:07:f1:1b:ac:a8:b9:73:5b:
05:5e:c8:cf:8e:ef:7d:e5:9d:7c:dc:bc:f3:a3:34:85:db:29:
8f:52:35:be:e9:85:59:c5:34:44:8b:12:2c:ff:b5:ec:34:73:
6f:c8:a8:b4:89:83:d6:6a:48:b4:32:d7:60:88:84:6d:44:61:
1d:10:23:7e:89:5b:54:08:8f:88:6c:79:78:0e:43:34:34:73:
49:3a:c1:db:27:aa:7c:6d:92:a9:5b:af:8c:6a:67:af:b2:b6:
a8:80:4a:24
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 13 02:46:40 2025 by rpki-client