Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/94/a5fc11-72b4-4f9d-aa45-a2a5a8d99db8/1/uveRJ-40o67pB5yOl5nEDw3I3KI.mft
File: uveRJ-40o67pB5yOl5nEDw3I3KI.mft (raw, json)
Hash identifier: uwgg0LO2q5y1pdaStkZ5FI/QgmoeIcl96zd6b+5MaAY=
Subject key identifier: 18:52:C2:41:EA:47:AA:60:2F:61:B5:BF:C5:94:78:60:CB:7B:72:FC
Authority key identifier: BA:F7:91:27:EE:34:A3:AE:E9:07:9C:8E:97:99:C4:0F:0D:C8:DC:A2
Certificate issuer: /CN=baf79127ee34a3aee9079c8e9799c40f0dc8dca2
Certificate serial: 019590741A65E88D8075F5B0E7A10DE94AAC
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/uveRJ-40o67pB5yOl5nEDw3I3KI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/94/a5fc11-72b4-4f9d-aa45-a2a5a8d99db8/1/uveRJ-40o67pB5yOl5nEDw3I3KI.mft
Manifest number: 08B1
Signing time: Thu 13 Mar 2025 17:01:22 +0000
Manifest this update: Thu 13 Mar 2025 17:01:22 +0000
Manifest next update: Fri 14 Mar 2025 17:01:22 +0000
Files and hashes: 1: _M8jdVXBLepBqO_3Zez_e6x2zw4.roa (hash: eZyfLyYE2Xw4ZTr06KMTpykro4FTlkDr9TejnMS2e4E=)
2: uveRJ-40o67pB5yOl5nEDw3I3KI.crl (hash: rZA8fNTTu4mo1y6v8+gc4WwSCidEkrYkFr1gG7hDWCw=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/94/a5fc11-72b4-4f9d-aa45-a2a5a8d99db8/1/uveRJ-40o67pB5yOl5nEDw3I3KI.crl
rsync://rpki.ripe.net/repository/DEFAULT/94/a5fc11-72b4-4f9d-aa45-a2a5a8d99db8/1/uveRJ-40o67pB5yOl5nEDw3I3KI.mft
rsync://rpki.ripe.net/repository/DEFAULT/uveRJ-40o67pB5yOl5nEDw3I3KI.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 14 Mar 2025 09:00:49 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:95:90:74:1a:65:e8:8d:80:75:f5:b0:e7:a1:0d:e9:4a:ac
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=baf79127ee34a3aee9079c8e9799c40f0dc8dca2
Validity
Not Before: Mar 13 17:01:22 2025 GMT
Not After : Mar 14 17:01:22 2025 GMT
Subject: CN=1852c241ea47aa602f61b5bfc5947860cb7b72fc
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:99:9c:fc:a4:94:8f:85:e3:6b:27:3e:43:d9:ee:
04:97:d9:b3:89:09:19:df:3d:d5:38:19:20:23:13:
ce:ee:8f:d8:24:c0:69:cc:1e:f2:bc:37:e0:fb:19:
3c:15:12:e2:91:d3:07:68:8e:46:20:34:9e:68:50:
cc:71:14:7d:9f:c3:74:60:76:d3:dc:3d:4e:9b:57:
d2:49:79:61:cf:28:6f:3e:e8:9b:0b:1f:44:5c:08:
e1:4c:2c:8c:74:bf:a5:57:5c:8c:cf:e0:cb:45:dd:
4e:67:68:4b:e0:fb:9c:0b:79:3c:c9:ca:1d:84:24:
76:4a:c3:bb:f1:e4:8c:b7:f6:24:f7:50:b3:f4:aa:
dd:5b:60:b3:ba:2f:7f:9f:50:0c:dc:12:d7:7f:23:
38:23:3d:1a:46:cb:ef:22:45:16:cc:d8:23:d8:5a:
c3:3b:23:34:5d:00:75:29:4e:d7:66:52:2d:c3:f9:
87:3f:ca:41:b7:d4:af:1b:e3:94:b7:45:ac:bb:dd:
a0:7c:4f:96:51:44:d5:a2:06:b5:74:d6:cc:5d:6b:
30:5d:e4:07:10:e8:6d:95:16:76:43:74:25:e6:d9:
36:fa:3b:e5:54:ab:f7:17:cc:2b:a5:c1:9d:3a:12:
c9:33:87:58:a4:dc:e8:fb:57:4c:6e:4c:3c:d1:bf:
c0:77
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
18:52:C2:41:EA:47:AA:60:2F:61:B5:BF:C5:94:78:60:CB:7B:72:FC
X509v3 Authority Key Identifier:
keyid:BA:F7:91:27:EE:34:A3:AE:E9:07:9C:8E:97:99:C4:0F:0D:C8:DC:A2
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/uveRJ-40o67pB5yOl5nEDw3I3KI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/94/a5fc11-72b4-4f9d-aa45-a2a5a8d99db8/1/uveRJ-40o67pB5yOl5nEDw3I3KI.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/94/a5fc11-72b4-4f9d-aa45-a2a5a8d99db8/1/uveRJ-40o67pB5yOl5nEDw3I3KI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
43:96:0f:2c:4f:ed:bd:be:46:11:28:31:6b:1b:4d:31:fa:a5:
38:4a:dd:89:48:b2:b8:f3:ad:98:2c:63:38:56:3f:41:35:76:
24:f9:83:d4:6d:0e:64:c2:1c:64:c7:b2:4f:77:86:44:9e:d1:
59:7d:d6:6f:de:70:0d:9a:ec:e8:e8:7c:b4:ae:f9:04:cc:18:
b3:08:6d:67:39:ce:a2:fc:2d:ea:cb:98:b0:ca:7f:b2:a1:4c:
8d:98:5b:7f:91:06:38:a6:de:56:28:c5:75:51:84:a3:0a:cc:
20:8f:43:ae:de:95:6e:5c:f0:95:de:9b:2f:50:ce:33:b8:e7:
63:ec:34:70:07:a1:f4:91:d6:23:56:1e:9d:0a:86:81:10:98:
8c:b2:1f:fa:85:0a:2f:5e:d8:b8:4b:8c:90:e5:14:7d:09:e5:
d1:98:b1:c5:41:7c:48:8c:8d:d4:2b:51:33:cb:2f:db:46:34:
c0:8d:76:05:55:16:35:cc:7d:aa:a0:d0:57:c9:18:39:cd:0e:
4d:b4:8a:54:52:47:1d:1e:d9:df:8d:3c:17:75:35:cb:77:41:
e1:05:be:9b:51:24:32:cf:67:1c:ff:40:ca:52:c3:11:20:0c:
89:84:4b:cf:96:6e:46:8e:9c:8c:4a:86:5a:43:88:83:9e:13:
21:da:3a:e5
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 13 20:45:25 2025 by rpki-client