Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/8a/285850-7551-4229-87b6-3a4468c4dfdf/1/uYYCjJ_rbxQrP-y2Rmf0iHS6nDc.mft
File: uYYCjJ_rbxQrP-y2Rmf0iHS6nDc.mft (raw, json)
Hash identifier: rSMHypLeDC2xrrtXrZsJpwLjcMuL55nCKVePYkliWgs=
Subject key identifier: F7:C1:00:CB:D9:48:44:DB:E1:3E:B0:E8:91:4D:4E:BF:11:24:C7:D9
Authority key identifier: B9:86:02:8C:9F:EB:6F:14:2B:3F:EC:B6:46:67:F4:88:74:BA:9C:37
Certificate issuer: /CN=b986028c9feb6f142b3fecb64667f48874ba9c37
Certificate serial: 01965D27CEB562CD14869C7A87AA80F6103A
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/uYYCjJ_rbxQrP-y2Rmf0iHS6nDc.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/8a/285850-7551-4229-87b6-3a4468c4dfdf/1/uYYCjJ_rbxQrP-y2Rmf0iHS6nDc.mft
Manifest number: 1502
Signing time: Tue 22 Apr 2025 11:00:11 +0000
Manifest this update: Tue 22 Apr 2025 11:00:11 +0000
Manifest next update: Wed 23 Apr 2025 11:00:11 +0000
Files and hashes: 1: 8zI-HN-JYFyfgILvr9zfTCbs0ds.roa (hash: 1sTx3tescRJTi+8dNgjbNQgEYulQVlIWJfqn2hjKmvE=)
2: Ck8KWAOp0OiApi8sM8DlwNi2iNw.roa (hash: AtNRUIXDWlWkvPw9HA278DuXcNcCmUIBAWFIiOSvpUQ=)
3: q-ihxTx20OUAnVHNFFcYB5dSVFg.roa (hash: E2e3aiYkFxz102ztqUxfhjzNFXG410Fy4awppSQ4du4=)
4: uYYCjJ_rbxQrP-y2Rmf0iHS6nDc.crl (hash: hKF8yOCJ083CUvrQCa7wH31X3f4g7KPLaaoBapuUVkU=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/8a/285850-7551-4229-87b6-3a4468c4dfdf/1/uYYCjJ_rbxQrP-y2Rmf0iHS6nDc.crl
rsync://rpki.ripe.net/repository/DEFAULT/8a/285850-7551-4229-87b6-3a4468c4dfdf/1/uYYCjJ_rbxQrP-y2Rmf0iHS6nDc.mft
rsync://rpki.ripe.net/repository/DEFAULT/uYYCjJ_rbxQrP-y2Rmf0iHS6nDc.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 23 Apr 2025 11:00:11 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:5d:27:ce:b5:62:cd:14:86:9c:7a:87:aa:80:f6:10:3a
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=b986028c9feb6f142b3fecb64667f48874ba9c37
Validity
Not Before: Apr 22 11:00:11 2025 GMT
Not After : Apr 23 11:00:11 2025 GMT
Subject: CN=f7c100cbd94844dbe13eb0e8914d4ebf1124c7d9
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a4:50:3f:b1:78:b2:49:c5:78:2b:ae:a6:b0:b3:
cf:e2:52:3f:1e:5f:34:4d:f6:6b:42:7e:93:99:7e:
f7:16:a8:e6:e5:49:c7:27:81:2c:fb:13:f3:45:5e:
05:f5:d0:71:f2:d1:fc:80:b4:e2:a2:af:b6:89:65:
29:a4:4f:ba:de:18:2e:60:de:27:f8:e2:0d:7b:79:
86:5a:7f:ae:31:c7:ec:ab:60:db:dd:9e:df:68:3b:
30:d0:81:4c:f7:95:37:88:53:cb:ef:8d:e4:1e:c7:
a2:dc:ef:7c:d4:f9:ee:6b:5f:70:05:7d:25:98:85:
b0:63:da:e0:77:1d:2c:9c:06:7d:59:16:3e:6c:7d:
3f:c9:8b:79:38:a5:bb:34:e6:32:99:4d:8a:ed:36:
cd:46:3d:66:0a:87:32:75:9b:33:c4:98:07:69:e0:
5e:7c:f4:85:02:7c:17:20:fa:0d:8e:fe:8a:a2:35:
aa:50:85:60:0b:cd:05:5d:1e:20:43:47:7c:6d:73:
1b:41:fa:3f:eb:5e:9a:5b:1a:b6:19:f2:8d:96:c4:
5e:18:56:28:75:5c:94:ba:cd:e0:4b:44:c6:42:70:
0a:66:7c:6d:f7:20:05:13:9f:7d:53:b5:ae:0b:60:
f9:30:cb:92:d6:85:81:87:3e:9b:f3:06:59:8f:47:
34:e7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F7:C1:00:CB:D9:48:44:DB:E1:3E:B0:E8:91:4D:4E:BF:11:24:C7:D9
X509v3 Authority Key Identifier:
keyid:B9:86:02:8C:9F:EB:6F:14:2B:3F:EC:B6:46:67:F4:88:74:BA:9C:37
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/uYYCjJ_rbxQrP-y2Rmf0iHS6nDc.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/8a/285850-7551-4229-87b6-3a4468c4dfdf/1/uYYCjJ_rbxQrP-y2Rmf0iHS6nDc.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/8a/285850-7551-4229-87b6-3a4468c4dfdf/1/uYYCjJ_rbxQrP-y2Rmf0iHS6nDc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
32:23:3b:f4:74:a1:8d:05:3e:c9:3f:e3:0d:55:7e:a7:eb:ec:
d1:58:82:16:9e:2a:37:4d:1d:eb:56:9b:4e:74:c8:42:c4:a5:
a4:4a:ba:b8:5d:ac:4f:a2:46:35:4d:95:5f:5a:ba:6e:2e:7a:
af:90:3a:e8:55:fc:aa:15:47:f5:44:64:87:3f:eb:4d:27:21:
ed:01:78:e2:33:4c:68:9e:bd:99:a3:7b:a1:b9:9e:6b:57:fa:
e6:f7:84:84:9c:2d:1b:cc:62:36:d0:68:4a:b2:ff:c0:c1:32:
8d:22:ae:6a:f5:2e:60:f2:c6:e7:6c:5e:34:bf:56:20:7f:f2:
77:3b:1b:0d:39:a7:cf:a3:21:c7:fb:94:0e:50:23:08:99:00:
d0:6a:a2:b7:02:19:bc:34:80:0f:b7:87:9f:ad:5d:62:d2:48:
30:8c:d1:a8:ad:0f:6c:02:90:1b:c5:ff:27:fa:ff:94:ef:c4:
7d:b7:39:9e:6d:bb:02:93:eb:cf:31:1d:c9:d2:95:e0:55:dc:
53:7b:b5:ea:bf:c4:e5:ee:4b:03:dd:55:82:40:55:65:d7:cb:
ef:d6:58:02:81:cf:33:57:0d:5c:76:44:d6:4a:5a:9c:0b:a7:
8c:d6:2a:70:89:e9:fb:4a:38:67:88:df:f7:15:5e:a9:b6:25:
9a:3b:ca:6e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Apr 22 21:00:04 2025 by rpki-client