Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/8a/69c880-23ef-49c0-adbf-3d113d39f77b/1/uMxZ2ZSshg5bJeCVddmflDcOkcs.mft
File: uMxZ2ZSshg5bJeCVddmflDcOkcs.mft (raw, json)
Hash identifier: 5fQJEyJZmisfeALVh3yH9aYG4NOwZ+Ew1fZGA72t2RU=
Subject key identifier: A9:87:5C:0A:1A:DB:B7:1B:7F:6D:0C:18:F9:B3:14:41:B7:AE:4C:EB
Authority key identifier: B8:CC:59:D9:94:AC:86:0E:5B:25:E0:95:75:D9:9F:94:37:0E:91:CB
Certificate issuer: /CN=b8cc59d994ac860e5b25e09575d99f94370e91cb
Certificate serial: 01965538422D014456C37A00B2D69C742247
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/uMxZ2ZSshg5bJeCVddmflDcOkcs.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/8a/69c880-23ef-49c0-adbf-3d113d39f77b/1/uMxZ2ZSshg5bJeCVddmflDcOkcs.mft
Manifest number: 08A7
Signing time: Sun 20 Apr 2025 22:01:12 +0000
Manifest this update: Sun 20 Apr 2025 22:01:12 +0000
Manifest next update: Mon 21 Apr 2025 22:01:12 +0000
Files and hashes: 1: LqqgWlluL1jyuXsBRZw9RUpy_xU.roa (hash: QQZFs0dWDvcdU2w068AQi10DYXURIlBm26Llbc6SIDU=)
2: uMxZ2ZSshg5bJeCVddmflDcOkcs.crl (hash: +Of18lPtysw1JfK9GkrLZJ3SHQyIxmASswxXHDv8B/s=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/8a/69c880-23ef-49c0-adbf-3d113d39f77b/1/uMxZ2ZSshg5bJeCVddmflDcOkcs.crl
rsync://rpki.ripe.net/repository/DEFAULT/8a/69c880-23ef-49c0-adbf-3d113d39f77b/1/uMxZ2ZSshg5bJeCVddmflDcOkcs.mft
rsync://rpki.ripe.net/repository/DEFAULT/uMxZ2ZSshg5bJeCVddmflDcOkcs.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 21 Apr 2025 16:00:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:55:38:42:2d:01:44:56:c3:7a:00:b2:d6:9c:74:22:47
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=b8cc59d994ac860e5b25e09575d99f94370e91cb
Validity
Not Before: Apr 20 22:01:12 2025 GMT
Not After : Apr 21 22:01:12 2025 GMT
Subject: CN=a9875c0a1adbb71b7f6d0c18f9b31441b7ae4ceb
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b6:66:2b:b2:3e:b2:36:f7:70:7c:4a:ee:d3:84:
3d:af:83:9a:cd:e1:26:cd:15:bb:ac:07:1b:c3:bc:
c8:4d:65:a1:8a:b1:00:a8:0c:00:09:bc:47:66:06:
45:60:01:25:dc:c6:b6:1b:12:5f:0b:cb:39:c8:c5:
e9:bd:48:5e:e1:49:9b:12:3b:35:82:51:a2:5b:bd:
8d:2f:6b:5d:27:82:8e:6f:1f:71:9e:82:48:0a:25:
a9:e4:bb:9b:c8:9c:1f:b5:4e:bc:f1:27:c9:48:38:
8d:a0:cf:a2:f4:7d:fe:bf:8d:9e:8b:df:85:d3:a0:
25:ee:aa:f3:2d:86:a5:83:5a:33:00:8f:76:2f:0c:
44:e5:aa:bd:68:67:c0:47:9f:f6:7d:a6:f3:63:cc:
e9:a5:f3:7a:a2:a4:d7:2d:6c:83:25:72:2a:2a:1f:
44:9c:0e:c5:f5:fe:da:98:50:dc:14:13:1e:b0:a4:
49:3e:6b:e1:67:31:13:08:68:ab:00:52:70:58:2e:
73:56:7a:b2:62:d2:2f:1e:91:5a:72:7c:4b:61:5c:
fa:55:d0:5d:91:05:c5:4f:e2:d1:f5:e9:e0:af:57:
8a:68:cf:ee:f9:85:77:b6:7c:27:57:91:64:fb:58:
e8:f5:d2:f8:92:26:3a:5e:c2:66:4b:af:2e:86:d3:
06:27
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A9:87:5C:0A:1A:DB:B7:1B:7F:6D:0C:18:F9:B3:14:41:B7:AE:4C:EB
X509v3 Authority Key Identifier:
keyid:B8:CC:59:D9:94:AC:86:0E:5B:25:E0:95:75:D9:9F:94:37:0E:91:CB
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/uMxZ2ZSshg5bJeCVddmflDcOkcs.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/8a/69c880-23ef-49c0-adbf-3d113d39f77b/1/uMxZ2ZSshg5bJeCVddmflDcOkcs.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/8a/69c880-23ef-49c0-adbf-3d113d39f77b/1/uMxZ2ZSshg5bJeCVddmflDcOkcs.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
2d:2f:a4:66:4c:38:4e:cd:79:c0:52:25:24:a8:02:a4:bf:48:
41:32:21:34:d3:8e:d6:ff:bf:1d:75:a7:38:9b:94:93:76:48:
6b:19:9a:45:ba:0f:a6:67:a6:58:86:d5:b9:a5:93:b4:78:c5:
9c:e9:8d:4c:de:27:5a:6d:f2:6c:b7:13:20:9c:65:e8:9b:7b:
04:a1:e0:02:5b:46:1b:7c:9a:f6:7e:8b:a7:8c:86:08:01:30:
e7:9e:8b:73:b1:02:8a:a6:11:65:e7:74:16:46:80:5a:63:37:
19:fc:c9:18:9d:72:68:8a:10:ba:03:a2:c4:86:51:78:ae:68:
28:53:02:c2:8f:ee:61:15:5d:62:f8:a9:3e:f1:6e:32:64:f8:
b9:09:a9:40:ca:33:45:b8:fb:2f:63:4f:57:23:16:da:45:86:
37:5a:60:84:83:c2:03:f9:50:34:a6:c3:2c:25:a6:50:90:3b:
1a:ce:78:ca:47:66:09:b4:66:0c:0a:3f:d4:68:9a:cc:8f:87:
42:50:4b:d9:69:75:05:0d:02:fc:3c:4f:b9:02:db:36:78:9d:
ed:92:94:e1:7e:73:8e:22:ca:b9:df:10:08:56:54:bc:52:16:
33:29:4b:50:a1:c9:fb:71:94:28:e5:aa:06:8a:74:9b:7b:4c:
81:79:2a:7f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 21 02:36:43 2025 by rpki-client