Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/8a/c5811d-1da0-4c32-9c4c-d82a90e34c2d/1/uv7ROd8PrW_eDYKGkUQQTSBLkrU.mft
File: uv7ROd8PrW_eDYKGkUQQTSBLkrU.mft (raw, json)
Hash identifier: OujtrinuFYPlBU8p2FhXXM3FgELiTWGZjRDasFG0CCM=
Subject key identifier: 21:3E:A6:39:E0:21:39:FB:55:8F:42:23:8B:8A:BA:4F:56:D3:1E:4F
Authority key identifier: BA:FE:D1:39:DF:0F:AD:6F:DE:0D:82:86:91:44:10:4D:20:4B:92:B5
Certificate issuer: /CN=bafed139df0fad6fde0d82869144104d204b92b5
Certificate serial: 01964E5A1912F2F44E02B8A46D6BC6AA5F59
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/uv7ROd8PrW_eDYKGkUQQTSBLkrU.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/8a/c5811d-1da0-4c32-9c4c-d82a90e34c2d/1/uv7ROd8PrW_eDYKGkUQQTSBLkrU.mft
Manifest number: 040D
Signing time: Sat 19 Apr 2025 14:00:49 +0000
Manifest this update: Sat 19 Apr 2025 14:00:49 +0000
Manifest next update: Sun 20 Apr 2025 14:00:49 +0000
Files and hashes: 1: Ll30cYUSRjJU1aCHZ1YRr-iUyf8.roa (hash: /bA9u2h5NTMZDfewDc1SRyw5qIxS43DYtdeQY6zyTlU=)
2: uv7ROd8PrW_eDYKGkUQQTSBLkrU.crl (hash: vfUzKITK+daSWu9IDiJzxCkeDhlDkbhfGQFkM4V9h20=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/8a/c5811d-1da0-4c32-9c4c-d82a90e34c2d/1/uv7ROd8PrW_eDYKGkUQQTSBLkrU.crl
rsync://rpki.ripe.net/repository/DEFAULT/8a/c5811d-1da0-4c32-9c4c-d82a90e34c2d/1/uv7ROd8PrW_eDYKGkUQQTSBLkrU.mft
rsync://rpki.ripe.net/repository/DEFAULT/uv7ROd8PrW_eDYKGkUQQTSBLkrU.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 20 Apr 2025 07:26:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:4e:5a:19:12:f2:f4:4e:02:b8:a4:6d:6b:c6:aa:5f:59
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=bafed139df0fad6fde0d82869144104d204b92b5
Validity
Not Before: Apr 19 14:00:49 2025 GMT
Not After : Apr 20 14:00:49 2025 GMT
Subject: CN=213ea639e02139fb558f42238b8aba4f56d31e4f
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c6:53:53:b4:2c:3f:87:ba:99:b7:c5:55:48:1a:
fc:d1:43:a9:70:47:65:ad:c9:2a:f7:fc:61:82:c3:
8f:a8:f7:c7:dc:4a:49:98:89:3c:7c:0c:9d:85:55:
24:43:6d:0d:cf:25:a7:d4:e0:9b:14:67:c1:b8:87:
68:ca:f2:9d:c8:00:bc:66:e5:a1:bd:2a:9a:b5:07:
f9:f9:a8:41:5e:72:be:42:68:cc:06:be:52:3a:1f:
57:93:92:d5:eb:49:65:4d:3a:cd:bc:01:ed:bb:5d:
5c:84:a9:17:dc:3c:b1:97:d2:e6:58:b8:62:d3:4c:
d7:b2:f8:dc:65:05:d1:b8:4f:bc:0a:23:74:d2:6f:
40:a0:73:6e:95:41:f0:dd:13:62:62:88:a4:73:ba:
f7:ed:bc:f3:20:12:e4:4c:c5:6f:e8:a9:63:cc:2d:
e7:b0:b1:f3:e2:0a:13:a0:cb:29:e8:be:f6:40:22:
0b:ee:3b:8e:e4:90:9c:6a:70:88:dd:2a:1e:84:19:
01:45:ed:0c:f9:08:7b:d0:c7:f5:f9:62:33:29:1c:
9e:9c:89:66:32:7b:80:3d:f6:0f:a6:b0:44:81:be:
9d:7a:4b:9a:6c:23:f3:42:92:60:de:88:89:3a:75:
28:3a:eb:6a:8d:38:bc:7d:f3:f4:47:3e:ed:22:5d:
ae:3f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
21:3E:A6:39:E0:21:39:FB:55:8F:42:23:8B:8A:BA:4F:56:D3:1E:4F
X509v3 Authority Key Identifier:
keyid:BA:FE:D1:39:DF:0F:AD:6F:DE:0D:82:86:91:44:10:4D:20:4B:92:B5
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/uv7ROd8PrW_eDYKGkUQQTSBLkrU.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/8a/c5811d-1da0-4c32-9c4c-d82a90e34c2d/1/uv7ROd8PrW_eDYKGkUQQTSBLkrU.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/8a/c5811d-1da0-4c32-9c4c-d82a90e34c2d/1/uv7ROd8PrW_eDYKGkUQQTSBLkrU.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
ad:fe:e2:04:52:cc:0f:b4:25:a7:27:e8:b5:d8:5e:c3:6c:f8:
66:dc:ed:80:92:85:02:9b:cc:61:ea:ce:ab:98:6e:b6:ff:61:
8b:64:03:12:11:ff:fb:0b:40:55:a7:ba:0a:09:c3:af:2f:1f:
bd:82:18:66:2b:16:d3:4b:b9:71:16:c9:ef:32:94:1b:a0:b0:
b8:ee:a5:93:e0:30:80:c6:73:7b:00:78:95:89:a6:81:34:81:
17:98:4e:f9:84:53:55:32:a8:40:9a:92:55:02:44:88:16:ee:
ab:37:32:47:b8:84:07:27:ed:d5:be:ca:9e:ee:21:4d:49:b7:
52:65:c0:8d:f1:b2:21:21:13:2f:9d:5c:e1:8b:3b:6c:e7:3d:
23:8f:13:65:0f:3a:f6:42:99:78:aa:4a:be:78:0e:f1:9c:aa:
c1:30:6d:7b:70:7f:9a:b4:1c:5e:d3:fb:20:5c:6b:50:df:7b:
b0:c9:38:d7:0c:64:cf:da:be:3b:17:95:16:9c:4b:6d:a8:2f:
8d:36:f5:58:87:eb:af:19:f0:a7:b6:71:4e:28:07:6f:3c:c7:
e9:4c:62:3b:c9:7f:b4:31:2e:40:bb:69:05:35:56:31:43:ae:
10:dd:6e:a5:cb:7d:e0:a5:c9:97:7c:a3:43:f4:ce:b1:99:53:
f1:c7:c4:8b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 19 17:15:25 2025 by rpki-client