Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/9b/3a90f5-65b5-40b5-8ed9-98c095c07e24/1/UV9hpuCN7W8f9QURxiCJaWq1ZKg.mft
File: UV9hpuCN7W8f9QURxiCJaWq1ZKg.mft (raw, json)
Hash identifier: OAqlWKO56F7BbnIzUJjxIykzY06CkD7DmJ5qU3bDBAo=
Subject key identifier: 30:95:EC:91:57:2E:4E:FC:E2:F7:C7:5C:7C:5A:9B:D4:BE:1F:F0:6B
Authority key identifier: 51:5F:61:A6:E0:8D:ED:6F:1F:F5:05:11:C6:20:89:69:6A:B5:64:A8
Certificate issuer: /CN=515f61a6e08ded6f1ff50511c62089696ab564a8
Certificate serial: 01964D473D3868C6F41A77BE5AEE85114FE1
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/UV9hpuCN7W8f9QURxiCJaWq1ZKg.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/9b/3a90f5-65b5-40b5-8ed9-98c095c07e24/1/UV9hpuCN7W8f9QURxiCJaWq1ZKg.mft
Manifest number: 11F7
Signing time: Sat 19 Apr 2025 09:00:36 +0000
Manifest this update: Sat 19 Apr 2025 09:00:36 +0000
Manifest next update: Sun 20 Apr 2025 09:00:36 +0000
Files and hashes: 1: CNzkiSB6aHtzY0O727sE464QSi8.roa (hash: jl53RICMTSEcHClA6hdGIYAm+qbxdQWju025NBkPLn8=)
2: UV9hpuCN7W8f9QURxiCJaWq1ZKg.crl (hash: u2hFgcVBoSV7hPVuUkrwY7CSCBWV0ej37fd9Wiomv2w=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/9b/3a90f5-65b5-40b5-8ed9-98c095c07e24/1/UV9hpuCN7W8f9QURxiCJaWq1ZKg.crl
rsync://rpki.ripe.net/repository/DEFAULT/9b/3a90f5-65b5-40b5-8ed9-98c095c07e24/1/UV9hpuCN7W8f9QURxiCJaWq1ZKg.mft
rsync://rpki.ripe.net/repository/DEFAULT/UV9hpuCN7W8f9QURxiCJaWq1ZKg.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 20 Apr 2025 04:00:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:4d:47:3d:38:68:c6:f4:1a:77:be:5a:ee:85:11:4f:e1
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=515f61a6e08ded6f1ff50511c62089696ab564a8
Validity
Not Before: Apr 19 09:00:36 2025 GMT
Not After : Apr 20 09:00:36 2025 GMT
Subject: CN=3095ec91572e4efce2f7c75c7c5a9bd4be1ff06b
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b1:ac:6b:43:a1:62:84:25:73:8e:58:01:40:16:
8c:97:4e:92:bc:51:dc:e4:a9:d8:f5:52:b9:5c:16:
95:4a:19:ce:d1:b4:8b:3d:35:fb:c9:53:50:89:7f:
f3:a2:da:b6:3b:51:e3:69:68:d4:4e:98:cf:4a:43:
22:79:d1:3d:39:d2:f6:e1:df:98:ab:b4:7b:76:0c:
97:ce:69:86:28:76:85:7c:27:03:fc:e8:28:8a:17:
5c:92:de:0f:7a:0e:5f:6b:29:de:b6:10:76:0a:83:
59:2c:f4:34:e8:66:6e:c9:09:8c:e3:71:9f:0d:9d:
57:78:bd:e4:83:56:c4:53:ff:4e:82:e7:0a:4b:0c:
41:c9:a4:69:74:9b:ca:2b:ee:9a:b7:f1:6f:f7:55:
4c:ac:4c:dc:f1:79:11:4e:c0:12:c5:f4:76:97:ae:
75:09:12:64:8d:55:58:24:71:19:e2:58:3f:6b:7c:
8e:bc:2a:64:34:89:06:18:e9:c0:32:b0:ed:49:57:
f3:d9:24:e5:30:86:9f:78:78:1a:7f:be:fc:02:21:
d2:f4:a5:63:76:0f:9d:57:8f:25:ad:1e:0e:6d:17:
5f:25:76:14:2a:9c:b8:8b:97:ba:e0:47:2b:29:28:
6b:5c:f0:d9:fa:92:62:66:b1:b0:3f:3b:fc:19:2c:
ff:8d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
30:95:EC:91:57:2E:4E:FC:E2:F7:C7:5C:7C:5A:9B:D4:BE:1F:F0:6B
X509v3 Authority Key Identifier:
keyid:51:5F:61:A6:E0:8D:ED:6F:1F:F5:05:11:C6:20:89:69:6A:B5:64:A8
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/UV9hpuCN7W8f9QURxiCJaWq1ZKg.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/9b/3a90f5-65b5-40b5-8ed9-98c095c07e24/1/UV9hpuCN7W8f9QURxiCJaWq1ZKg.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/9b/3a90f5-65b5-40b5-8ed9-98c095c07e24/1/UV9hpuCN7W8f9QURxiCJaWq1ZKg.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
42:42:4f:68:71:bd:0b:fe:f0:e2:0f:10:ab:1c:84:f6:6f:cd:
7f:40:c8:26:b1:84:c7:d1:cb:4c:a8:ae:4c:48:bf:60:7f:cc:
fa:62:68:16:a5:18:28:61:f4:4b:e7:f6:ac:8c:36:7a:c5:e3:
6e:f0:7c:d7:ca:e5:14:4f:75:3a:e8:ef:1b:4a:23:b6:16:0f:
13:62:e7:87:87:e9:ce:18:36:cd:fe:a0:c0:00:5b:45:14:b3:
73:2a:83:ca:69:ef:cd:82:db:93:74:81:54:c9:52:2c:9a:75:
16:74:89:b2:4f:a3:48:f4:ee:2f:a2:c7:98:51:16:92:10:c7:
86:73:9c:67:57:8f:15:13:2b:6f:7b:0c:ee:e7:1c:ee:d2:6f:
39:78:f7:6c:4e:60:b1:28:87:df:4d:39:29:64:00:87:75:d1:
ba:81:ce:72:f4:13:13:01:d9:b8:4e:75:d4:07:f8:a9:81:91:
a4:cb:bb:d1:74:52:c7:37:8b:87:81:76:b7:bb:a6:9c:d0:40:
dc:db:05:90:54:d7:a8:b9:21:38:f0:40:00:af:bd:c4:ab:48:
81:1f:32:89:5e:b4:06:6b:f3:98:22:f5:b4:ab:89:65:31:2e:
61:0c:69:bd:32:96:b9:89:95:fb:6c:7b:f8:f8:7b:7e:47:1f:
35:06:98:6f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 19 14:02:08 2025 by rpki-client