Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/72/76a7f1-748d-406c-a51f-1ba343f17ec2/1/ujG8-SPF8lyvvavf3UblEfld8NE.mft
File: ujG8-SPF8lyvvavf3UblEfld8NE.mft (raw, json)
Hash identifier: CMqb/V4IdsBdsZ1F0FUB3AFiHtDbb8Lygt60x6CFJOw=
Subject key identifier: 78:22:3D:11:0F:4A:E0:CB:91:98:F3:92:C5:AD:75:0F:8C:BE:51:D4
Authority key identifier: BA:31:BC:F9:23:C5:F2:5C:AF:BD:AB:DF:DD:46:E5:11:F9:5D:F0:D1
Certificate issuer: /CN=ba31bcf923c5f25cafbdabdfdd46e511f95df0d1
Certificate serial: 01964D7DE0307DB0AD16FBDF727931BA52C0
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/ujG8-SPF8lyvvavf3UblEfld8NE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/72/76a7f1-748d-406c-a51f-1ba343f17ec2/1/ujG8-SPF8lyvvavf3UblEfld8NE.mft
Manifest number: 1503
Signing time: Sat 19 Apr 2025 10:00:16 +0000
Manifest this update: Sat 19 Apr 2025 10:00:16 +0000
Manifest next update: Sun 20 Apr 2025 10:00:16 +0000
Files and hashes: 1: 1-F-lRo8Hv4MMErxkMI8nf-QWOn0.roa (hash: 7Ak7QRZESqRwXP4kX1/tNAiv86us+4hOvNSyL+b0r48=)
2: uewbSpC9FC5XlY_eCEo6RSIybUc.roa (hash: cOCIDwbVrfM9ZnTl9yxy//LsNgZKG3oH8DmYwSlxygI=)
3: ujG8-SPF8lyvvavf3UblEfld8NE.crl (hash: ezEwYjHbfehQhkwtPz+D6ZWvWE2vQE1RxF/jg3kBuyM=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/72/76a7f1-748d-406c-a51f-1ba343f17ec2/1/ujG8-SPF8lyvvavf3UblEfld8NE.crl
rsync://rpki.ripe.net/repository/DEFAULT/72/76a7f1-748d-406c-a51f-1ba343f17ec2/1/ujG8-SPF8lyvvavf3UblEfld8NE.mft
rsync://rpki.ripe.net/repository/DEFAULT/ujG8-SPF8lyvvavf3UblEfld8NE.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 20 Apr 2025 07:26:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:4d:7d:e0:30:7d:b0:ad:16:fb:df:72:79:31:ba:52:c0
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=ba31bcf923c5f25cafbdabdfdd46e511f95df0d1
Validity
Not Before: Apr 19 10:00:16 2025 GMT
Not After : Apr 20 10:00:16 2025 GMT
Subject: CN=78223d110f4ae0cb9198f392c5ad750f8cbe51d4
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cd:4f:a8:d9:5c:a6:77:69:ed:88:a4:f7:db:84:
8e:02:9b:6c:52:03:00:f1:3b:99:3f:41:9f:eb:3a:
c9:08:35:18:cc:3e:ee:0a:e8:78:8f:4c:9c:24:a8:
7c:90:e8:6a:9c:23:19:5e:1c:80:67:ff:0d:bb:dc:
79:f1:45:90:2c:00:97:61:36:69:dd:a9:fc:56:ba:
e5:c2:96:38:a6:f2:a8:f8:6e:6b:b3:4b:17:d5:6c:
9e:4b:36:5e:7b:02:16:8f:cb:b4:f4:63:37:8a:7f:
d5:3a:86:0c:72:7e:d1:1c:62:08:aa:3d:b2:4d:67:
09:78:10:da:8a:19:7b:1d:b8:41:d0:a0:37:de:ab:
4e:ca:c8:1a:d8:e9:2f:e8:4a:e0:a9:78:e6:74:1b:
28:99:4c:78:e1:61:80:c0:c5:26:4f:02:b7:ca:5a:
a1:47:7a:e6:7c:33:e0:82:3d:4a:5b:27:d4:e1:3e:
f8:da:f3:98:07:b5:3e:0b:37:61:76:a8:9b:32:00:
7b:6a:bb:3c:70:b4:d7:2e:d1:d7:06:4d:e0:fa:d7:
91:1f:29:33:31:ab:56:55:14:69:ba:81:c6:c8:b7:
86:e7:84:53:27:ab:ae:6e:81:0d:07:89:26:37:0e:
93:7e:83:69:ee:7b:c5:f0:4d:1a:90:cc:8b:86:48:
dc:b1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
78:22:3D:11:0F:4A:E0:CB:91:98:F3:92:C5:AD:75:0F:8C:BE:51:D4
X509v3 Authority Key Identifier:
keyid:BA:31:BC:F9:23:C5:F2:5C:AF:BD:AB:DF:DD:46:E5:11:F9:5D:F0:D1
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ujG8-SPF8lyvvavf3UblEfld8NE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/72/76a7f1-748d-406c-a51f-1ba343f17ec2/1/ujG8-SPF8lyvvavf3UblEfld8NE.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/72/76a7f1-748d-406c-a51f-1ba343f17ec2/1/ujG8-SPF8lyvvavf3UblEfld8NE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
86:e9:db:cc:ad:05:bf:78:ca:05:cc:11:d8:24:be:e4:a0:90:
f8:af:45:49:cf:5e:53:1f:87:ed:1d:12:18:23:33:67:52:09:
5b:e7:ab:6f:40:ad:65:86:56:bf:dd:4c:ad:e5:fd:8b:21:cc:
be:bf:00:30:0e:e4:50:98:de:de:5b:fd:20:c5:06:8e:df:ed:
b7:dc:78:94:c1:d3:61:df:a7:52:0e:1d:2a:f1:2d:fe:78:d9:
4e:ad:91:cf:04:94:30:53:29:32:32:65:c9:9d:c5:ab:62:79:
36:53:cd:c8:66:61:d3:76:d7:e0:74:b3:17:0c:76:c6:19:15:
d2:8f:f3:11:74:ce:56:95:88:1d:ad:61:c9:e6:34:5c:4c:58:
f7:21:2d:d1:48:6a:ee:8c:b9:23:c1:a4:5a:bd:ac:d6:55:9c:
c3:ee:f4:a7:d8:44:d3:b5:26:f6:9f:e7:e1:e4:04:f7:6d:3b:
29:b4:bb:d9:66:ec:83:1c:25:19:98:3d:ad:92:30:68:6c:c5:
f1:fc:e3:ba:da:e6:df:95:69:fb:f5:cd:40:81:87:de:10:96:
51:36:1e:9f:4a:6a:ac:27:6d:89:bb:27:cb:c7:fd:f9:88:c2:
d6:cb:ea:9d:08:fe:de:fb:d7:af:36:1e:57:76:9d:05:dc:bc:
b8:60:b6:18
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 19 15:55:26 2025 by rpki-client