Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/77/6f99d2-ad05-4cfc-9a5e-9cbedcec86d6/1/ueLcI0DFMJtj66I8--fu0Rt0r0c.mft
File: ueLcI0DFMJtj66I8--fu0Rt0r0c.mft (raw, json)
Hash identifier: JkYXGNahUCZCR/YUHTik5aqMktkGpFOTilHkU3LXM7E=
Subject key identifier: 13:44:17:23:18:74:74:E0:A0:73:0D:DC:7F:7F:22:8E:F0:81:03:3B
Authority key identifier: B9:E2:DC:23:40:C5:30:9B:63:EB:A2:3C:FB:E7:EE:D1:1B:74:AF:47
Certificate issuer: /CN=b9e2dc2340c5309b63eba23cfbe7eed11b74af47
Certificate serial: 01964DB51DECB9694F3B4335C3B5FDD8A6D8
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/ueLcI0DFMJtj66I8--fu0Rt0r0c.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/77/6f99d2-ad05-4cfc-9a5e-9cbedcec86d6/1/ueLcI0DFMJtj66I8--fu0Rt0r0c.mft
Manifest number: 0DFE
Signing time: Sat 19 Apr 2025 11:00:37 +0000
Manifest this update: Sat 19 Apr 2025 11:00:37 +0000
Manifest next update: Sun 20 Apr 2025 11:00:37 +0000
Files and hashes: 1: B_TjvpIb0yLFS65mk6ISqfofzjA.roa (hash: q5/nXiQuX9jf7AxyuDuG4cnRKI4OPuttYtvlaMLZtB8=)
2: EeH5wT6Wd2uRWfhKCYRFmXtYUyE.roa (hash: 1z7kJSxRufE+Rr3Vk/FEsQraw1poJT+1o6mmpJ+VP7o=)
3: ueLcI0DFMJtj66I8--fu0Rt0r0c.crl (hash: t2SHahPOxU+90lHv98AIFdcK/3o56r3gXz99xDAixvA=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/77/6f99d2-ad05-4cfc-9a5e-9cbedcec86d6/1/ueLcI0DFMJtj66I8--fu0Rt0r0c.crl
rsync://rpki.ripe.net/repository/DEFAULT/77/6f99d2-ad05-4cfc-9a5e-9cbedcec86d6/1/ueLcI0DFMJtj66I8--fu0Rt0r0c.mft
rsync://rpki.ripe.net/repository/DEFAULT/ueLcI0DFMJtj66I8--fu0Rt0r0c.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 20 Apr 2025 04:00:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:4d:b5:1d:ec:b9:69:4f:3b:43:35:c3:b5:fd:d8:a6:d8
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=b9e2dc2340c5309b63eba23cfbe7eed11b74af47
Validity
Not Before: Apr 19 11:00:37 2025 GMT
Not After : Apr 20 11:00:37 2025 GMT
Subject: CN=13441723187474e0a0730ddc7f7f228ef081033b
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cb:4e:fe:2f:25:00:bb:ec:a9:f5:55:e6:60:14:
f3:b6:1d:3b:f1:6e:ee:81:22:fd:8b:60:a9:5a:90:
95:da:47:d5:af:0a:22:87:8f:5f:49:78:42:9a:b8:
88:94:f2:71:e6:e5:cc:a3:b9:2d:bb:20:8b:0c:82:
43:74:66:64:b2:32:06:0a:f4:5b:a7:3d:28:2c:ba:
e1:26:ee:34:65:f2:a0:49:1b:99:f8:37:9c:3a:3e:
73:b8:6e:04:5e:b7:cd:25:6f:6c:09:a1:33:bc:12:
60:71:45:dc:cd:fd:23:b5:c5:a9:b0:c3:f6:03:db:
45:fa:fb:9b:c2:af:01:b3:4b:7c:fc:82:a9:7d:61:
38:e0:24:de:8b:51:d5:44:35:b3:f7:8b:ee:36:77:
e0:fd:58:af:f2:f4:fd:fa:99:9f:f4:02:58:74:c9:
94:26:f3:b4:4d:22:f3:70:b4:6b:bc:e2:4f:4b:d8:
86:50:95:1f:86:42:3c:b4:77:da:dd:bf:63:cc:52:
a6:44:3c:34:07:cf:72:6e:05:6c:20:0b:ab:11:f6:
68:85:67:21:a0:82:8e:dd:4b:62:09:a7:5c:0a:7e:
ee:49:07:67:8f:bc:60:93:6d:ef:0d:cc:3f:f4:fd:
19:78:79:63:2d:1e:5e:d1:1e:35:00:7f:1c:2c:5b:
bf:55
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
13:44:17:23:18:74:74:E0:A0:73:0D:DC:7F:7F:22:8E:F0:81:03:3B
X509v3 Authority Key Identifier:
keyid:B9:E2:DC:23:40:C5:30:9B:63:EB:A2:3C:FB:E7:EE:D1:1B:74:AF:47
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ueLcI0DFMJtj66I8--fu0Rt0r0c.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/77/6f99d2-ad05-4cfc-9a5e-9cbedcec86d6/1/ueLcI0DFMJtj66I8--fu0Rt0r0c.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/77/6f99d2-ad05-4cfc-9a5e-9cbedcec86d6/1/ueLcI0DFMJtj66I8--fu0Rt0r0c.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
96:55:40:a6:55:e5:6b:63:0b:56:97:b5:b2:cd:aa:a4:84:29:
4b:03:35:65:a4:0e:0e:c8:fd:3a:f9:dd:5d:bf:91:85:b2:32:
69:d7:8c:40:0b:2a:dd:f6:0d:cf:07:95:90:c8:0f:bf:27:c2:
d7:e2:29:d3:0b:fc:ec:e5:a4:f8:74:44:ce:0a:16:8a:81:b1:
34:9b:b6:bd:af:72:f0:4e:cc:03:ad:32:3b:38:84:5b:cb:6c:
63:1f:5d:6d:46:fc:91:5b:1d:19:a9:4c:b1:8f:f5:ca:bc:d5:
f8:90:b5:1a:5f:71:cd:34:a1:27:66:c8:92:4d:06:34:7c:d4:
d7:fe:a3:2a:ca:f8:bd:a4:24:5f:1c:49:9a:cd:be:43:35:56:
a8:ff:3d:90:e5:53:09:58:98:90:78:0a:83:20:e5:4d:3f:48:
b6:96:ce:45:2c:0e:b0:c9:de:6d:bb:54:d0:3a:53:e5:7c:35:
99:2e:6b:07:0a:d1:ff:1d:cc:ce:1b:d4:8e:e7:c6:f4:c5:b8:
59:63:2a:b0:53:07:5b:9f:4b:c7:ea:0e:e5:92:5a:6c:99:41:
19:fa:c4:f0:db:d0:5b:84:3f:a5:db:6c:6e:64:ee:37:28:c1:
9c:7e:59:4b:cf:64:a4:c4:02:89:0d:f6:a4:6a:fa:58:7a:ec:
15:41:79:36
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 19 12:28:04 2025 by rpki-client