Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/8a/69c880-23ef-49c0-adbf-3d113d39f77b/1/uMxZ2ZSshg5bJeCVddmflDcOkcs.mft
File: uMxZ2ZSshg5bJeCVddmflDcOkcs.mft (raw, json)
Hash identifier: 0bGp4xxeAJxtlqYi23tKkMJkidHdIBsHWGCDmrhZYtU=
Subject key identifier: 63:A8:86:6B:95:16:DB:49:E9:52:E3:E0:55:5F:1A:9B:01:0C:F0:7A
Authority key identifier: B8:CC:59:D9:94:AC:86:0E:5B:25:E0:95:75:D9:9F:94:37:0E:91:CB
Certificate issuer: /CN=b8cc59d994ac860e5b25e09575d99f94370e91cb
Certificate serial: 01958C5FFCB0CDAA8C1373202F3EA1EDAFC9
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/uMxZ2ZSshg5bJeCVddmflDcOkcs.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/8a/69c880-23ef-49c0-adbf-3d113d39f77b/1/uMxZ2ZSshg5bJeCVddmflDcOkcs.mft
Manifest number: 083F
Signing time: Wed 12 Mar 2025 22:00:55 +0000
Manifest this update: Wed 12 Mar 2025 22:00:55 +0000
Manifest next update: Thu 13 Mar 2025 22:00:55 +0000
Files and hashes: 1: LqqgWlluL1jyuXsBRZw9RUpy_xU.roa (hash: QQZFs0dWDvcdU2w068AQi10DYXURIlBm26Llbc6SIDU=)
2: uMxZ2ZSshg5bJeCVddmflDcOkcs.crl (hash: WCrwLEgwPUzOfWCn13MpvGZv/fMset5uQd9phqCZwys=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/8a/69c880-23ef-49c0-adbf-3d113d39f77b/1/uMxZ2ZSshg5bJeCVddmflDcOkcs.crl
rsync://rpki.ripe.net/repository/DEFAULT/8a/69c880-23ef-49c0-adbf-3d113d39f77b/1/uMxZ2ZSshg5bJeCVddmflDcOkcs.mft
rsync://rpki.ripe.net/repository/DEFAULT/uMxZ2ZSshg5bJeCVddmflDcOkcs.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 13 Mar 2025 19:14:49 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:95:8c:5f:fc:b0:cd:aa:8c:13:73:20:2f:3e:a1:ed:af:c9
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=b8cc59d994ac860e5b25e09575d99f94370e91cb
Validity
Not Before: Mar 12 22:00:55 2025 GMT
Not After : Mar 13 22:00:55 2025 GMT
Subject: CN=63a8866b9516db49e952e3e0555f1a9b010cf07a
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ae:f0:df:3e:27:16:7d:a6:2a:62:02:87:d5:8c:
f3:14:15:fd:94:5a:c2:58:6a:c8:78:df:ae:de:35:
e8:70:0c:9f:08:8d:12:88:3e:6c:78:9c:21:b5:65:
93:f4:ae:c5:7f:f1:2d:92:a3:2a:a2:38:90:0f:75:
a5:9a:58:5d:4f:aa:d5:ac:f4:ca:18:bf:b8:69:11:
e0:3c:a2:ad:a1:5d:8a:ec:dc:77:95:f6:2c:d4:20:
c2:1b:35:23:27:16:5b:68:ff:13:48:7c:08:45:f3:
df:71:6a:92:9e:d4:22:a9:f2:bf:6f:f7:71:d4:d7:
5e:58:60:f6:7a:0b:6e:cd:2f:53:66:97:ad:9a:4a:
6c:d5:79:f3:96:90:54:ed:86:a7:26:e2:ab:6a:d8:
52:8c:b4:c5:b6:c2:33:46:94:64:43:6f:80:7d:b1:
dd:83:11:a9:fc:67:0b:5e:dc:64:fa:18:ff:f1:1a:
cb:de:6c:81:92:cf:e6:5b:ab:7b:09:ca:46:7b:72:
5c:23:74:d4:45:be:89:ef:ff:75:56:c8:71:26:55:
91:09:8c:20:cb:cd:71:8d:d0:eb:ac:3a:59:68:7d:
26:a4:65:52:31:85:be:77:94:91:09:29:7a:f6:13:
23:22:d5:a0:af:43:9d:d0:31:86:de:95:6e:cb:c8:
04:43
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
63:A8:86:6B:95:16:DB:49:E9:52:E3:E0:55:5F:1A:9B:01:0C:F0:7A
X509v3 Authority Key Identifier:
keyid:B8:CC:59:D9:94:AC:86:0E:5B:25:E0:95:75:D9:9F:94:37:0E:91:CB
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/uMxZ2ZSshg5bJeCVddmflDcOkcs.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/8a/69c880-23ef-49c0-adbf-3d113d39f77b/1/uMxZ2ZSshg5bJeCVddmflDcOkcs.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/8a/69c880-23ef-49c0-adbf-3d113d39f77b/1/uMxZ2ZSshg5bJeCVddmflDcOkcs.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
13:87:6f:e3:24:d9:de:d7:74:4a:df:75:13:ab:3d:3c:16:80:
96:42:ad:85:b1:51:63:f4:6c:ab:83:66:a8:53:94:e0:35:00:
41:c1:f3:e3:93:19:aa:a0:e5:84:cc:f2:56:f9:5d:fd:96:85:
a6:8d:94:bb:e4:b1:41:9b:4a:c4:78:dd:44:40:ee:94:cf:55:
04:87:d8:20:a9:b9:59:ed:3c:b3:51:7e:ea:aa:0a:99:74:9f:
57:64:f7:c5:2a:ff:16:c0:20:40:e8:0f:72:b6:3b:8f:7e:e4:
73:5f:d8:e2:9e:2c:91:97:d3:3f:89:ba:85:cb:e9:3f:63:3b:
73:50:b5:2c:c4:ef:2d:a8:07:ee:10:c4:3d:b9:28:75:0a:49:
6a:c9:08:ac:dd:aa:3a:b3:9a:ab:c7:b5:a4:c8:7e:5a:8e:c5:
d7:32:bc:a4:cf:61:42:d7:b9:16:a2:23:21:98:18:54:7b:8f:
01:ec:80:1b:64:a5:b6:b9:e8:4a:7c:6e:78:7f:ce:10:d7:4f:
42:a3:8a:74:84:1b:85:1f:99:56:50:7e:b7:6a:e0:1c:18:74:
38:65:1a:25:60:25:a4:d9:6a:cf:8f:20:fe:7f:c9:61:e1:fe:
fd:fd:32:21:cf:01:2a:61:a8:fe:80:6a:ef:e6:c0:03:cf:9f:
7c:a5:e7:fb
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 13 02:46:38 2025 by rpki-client