Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/9b/28eeb6-eb48-4ff8-8741-bcfe3ad387ce/1/uOT3NP3nGsQhlX8nyEmUlvREDXw.mft
File: uOT3NP3nGsQhlX8nyEmUlvREDXw.mft (raw, json)
Hash identifier: 6EqzlqGEnwCpAD011urDtJ8+8THfC1oxZ460raLuhX4=
Subject key identifier: F2:6E:FB:61:6C:B3:99:BE:D8:D0:C0:1B:DC:1B:CA:E7:30:C6:1B:AE
Authority key identifier: B8:E4:F7:34:FD:E7:1A:C4:21:95:7F:27:C8:49:94:96:F4:44:0D:7C
Certificate issuer: /CN=b8e4f734fde71ac421957f27c8499496f4440d7c
Certificate serial: 01958B168396E4612EEEAF317FB26E8024CA
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/uOT3NP3nGsQhlX8nyEmUlvREDXw.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/9b/28eeb6-eb48-4ff8-8741-bcfe3ad387ce/1/uOT3NP3nGsQhlX8nyEmUlvREDXw.mft
Manifest number: 0651
Signing time: Wed 12 Mar 2025 16:01:03 +0000
Manifest this update: Wed 12 Mar 2025 16:01:03 +0000
Manifest next update: Thu 13 Mar 2025 16:01:03 +0000
Files and hashes: 1: d2hr0pHHIb2j2ec6gvu36_cpbPw.roa (hash: jc4XIb7FDS9N2TD9hPswSv8o+WQzbQbclxlPYsHdj3U=)
2: uOT3NP3nGsQhlX8nyEmUlvREDXw.crl (hash: Nve/NycYvUv9bFOhnFRImbLqfU4oJnOSBkB2pY+j5h8=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/9b/28eeb6-eb48-4ff8-8741-bcfe3ad387ce/1/uOT3NP3nGsQhlX8nyEmUlvREDXw.crl
rsync://rpki.ripe.net/repository/DEFAULT/9b/28eeb6-eb48-4ff8-8741-bcfe3ad387ce/1/uOT3NP3nGsQhlX8nyEmUlvREDXw.mft
rsync://rpki.ripe.net/repository/DEFAULT/uOT3NP3nGsQhlX8nyEmUlvREDXw.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 13 Mar 2025 16:01:03 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:95:8b:16:83:96:e4:61:2e:ee:af:31:7f:b2:6e:80:24:ca
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=b8e4f734fde71ac421957f27c8499496f4440d7c
Validity
Not Before: Mar 12 16:01:03 2025 GMT
Not After : Mar 13 16:01:03 2025 GMT
Subject: CN=f26efb616cb399bed8d0c01bdc1bcae730c61bae
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:dd:7e:fe:3d:b1:cc:8c:52:5b:e6:d1:10:d4:c8:
ea:8b:60:4d:05:d1:36:d8:1a:8b:aa:60:e2:d9:57:
d6:9e:3b:09:8e:46:78:f9:2f:f0:26:ea:56:ed:fd:
9d:8f:25:41:86:52:d3:be:16:1b:a2:a6:d3:9d:1e:
d1:ec:ee:bf:25:af:5b:47:2a:a8:82:d6:5d:8a:38:
e7:ef:0b:1d:57:4d:82:a9:62:ae:52:09:ac:c8:5e:
e7:9d:73:45:24:68:c5:d9:a5:a8:11:9e:38:19:de:
00:c6:39:99:b9:bf:2f:f3:4f:6e:82:cb:0c:f9:8a:
8a:17:ef:b6:88:c2:ae:84:9f:da:aa:46:77:c1:42:
52:be:0a:bf:6f:34:4e:4c:b3:bc:c4:8c:c1:c3:2a:
af:eb:0e:cc:51:30:a2:be:ae:7a:ce:65:a4:bc:69:
20:c0:a7:2c:7f:d3:67:60:c5:b2:ae:a4:89:5a:34:
8f:bd:08:7c:bb:b1:b3:65:dd:5c:f0:23:51:85:7e:
2c:8d:fa:82:82:2e:f9:8b:8b:2f:6a:8e:05:76:f3:
42:95:50:99:0e:b4:ef:f4:24:e4:85:99:c5:d8:c9:
1d:c1:a1:77:07:a8:15:c3:a6:42:e7:bd:a7:c0:0c:
5f:c5:03:ed:f1:02:ac:6d:a2:72:60:e2:00:38:ba:
11:87
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F2:6E:FB:61:6C:B3:99:BE:D8:D0:C0:1B:DC:1B:CA:E7:30:C6:1B:AE
X509v3 Authority Key Identifier:
keyid:B8:E4:F7:34:FD:E7:1A:C4:21:95:7F:27:C8:49:94:96:F4:44:0D:7C
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/uOT3NP3nGsQhlX8nyEmUlvREDXw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/9b/28eeb6-eb48-4ff8-8741-bcfe3ad387ce/1/uOT3NP3nGsQhlX8nyEmUlvREDXw.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/9b/28eeb6-eb48-4ff8-8741-bcfe3ad387ce/1/uOT3NP3nGsQhlX8nyEmUlvREDXw.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
33:f0:41:7a:fb:a1:e2:db:97:57:95:94:7a:aa:df:ad:a6:03:
60:79:da:8f:2a:2d:6c:8b:69:4d:8e:95:77:b8:40:24:90:77:
3d:95:0c:53:0f:39:75:77:7b:a9:97:cb:90:38:bb:cd:46:b1:
dd:0f:af:69:cc:d7:0a:2e:21:d9:74:df:14:33:18:f2:05:13:
3c:5a:cd:12:d9:64:60:ca:40:95:df:c1:cd:da:e1:9a:e0:64:
5d:f7:53:34:20:d0:b4:73:eb:a4:40:7b:57:44:7e:ba:64:5f:
8b:de:92:6f:9e:23:32:f9:aa:d5:36:cf:ac:ff:a1:47:4f:b4:
c9:35:e0:d5:ae:3e:6b:45:ea:04:91:43:a6:5c:69:7d:c0:a9:
99:95:30:be:cb:91:dd:0e:d9:57:e0:27:42:ad:36:f1:36:67:
af:97:17:02:c7:70:95:90:3d:5a:d2:17:99:b5:5c:1b:8b:74:
d7:b5:d0:c6:1d:01:2c:85:5c:80:f9:ae:67:1d:d5:9f:b2:3b:
00:f0:a3:c4:a5:0b:9b:07:32:a8:11:66:6f:11:d6:3b:c3:76:
cb:d3:42:cd:8e:e9:63:31:a2:9f:2d:3b:56:d7:b8:32:57:f9:
da:1d:12:6f:4f:3e:33:d5:b9:b2:c0:9d:56:3f:72:b4:a0:c9:
f0:be:7a:d3
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 13 02:25:32 2025 by rpki-client