Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/9f/aab054-ed50-4aa6-acee-fa0d2e47e6f1/1/uByWUlV5h6KgWAzFxl42RrAdo7s.mft
File: uByWUlV5h6KgWAzFxl42RrAdo7s.mft (raw, json)
Hash identifier: i30gFBX3ezXdqISkitnrbCxLHJvdtNm+OU3zDHHSvjc=
Subject key identifier: 3A:26:93:BB:E2:1A:E5:BF:87:FE:23:63:F9:AE:E9:D9:7B:F3:07:4A
Authority key identifier: B8:1C:96:52:55:79:87:A2:A0:58:0C:C5:C6:5E:36:46:B0:1D:A3:BB
Certificate issuer: /CN=b81c9652557987a2a0580cc5c65e3646b01da3bb
Certificate serial: 01964F3567FAC174C9A19A89AAE324778513
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/uByWUlV5h6KgWAzFxl42RrAdo7s.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/9f/aab054-ed50-4aa6-acee-fa0d2e47e6f1/1/uByWUlV5h6KgWAzFxl42RrAdo7s.mft
Manifest number: 0C1A
Signing time: Sat 19 Apr 2025 18:00:22 +0000
Manifest this update: Sat 19 Apr 2025 18:00:22 +0000
Manifest next update: Sun 20 Apr 2025 18:00:22 +0000
Files and hashes: 1: 1Rw_6oXkH_K9aKZcgWueLYw2s-E.roa (hash: bNeeSn2K9PhEeXEHT+JPXfqKFFY067qwi6XfweStm4U=)
2: uByWUlV5h6KgWAzFxl42RrAdo7s.crl (hash: 7IQAMXMgEru02WQ3HPkN3mt6aCEhlhaT884ZgLa29TU=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/9f/aab054-ed50-4aa6-acee-fa0d2e47e6f1/1/uByWUlV5h6KgWAzFxl42RrAdo7s.crl
rsync://rpki.ripe.net/repository/DEFAULT/9f/aab054-ed50-4aa6-acee-fa0d2e47e6f1/1/uByWUlV5h6KgWAzFxl42RrAdo7s.mft
rsync://rpki.ripe.net/repository/DEFAULT/uByWUlV5h6KgWAzFxl42RrAdo7s.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 20 Apr 2025 16:41:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:4f:35:67:fa:c1:74:c9:a1:9a:89:aa:e3:24:77:85:13
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=b81c9652557987a2a0580cc5c65e3646b01da3bb
Validity
Not Before: Apr 19 18:00:22 2025 GMT
Not After : Apr 20 18:00:22 2025 GMT
Subject: CN=3a2693bbe21ae5bf87fe2363f9aee9d97bf3074a
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bb:12:d3:59:ff:c9:cb:9f:02:86:de:69:75:2b:
b0:1a:a2:5a:a4:14:c1:39:a4:c8:cf:3a:27:67:df:
4e:ed:aa:5d:63:e8:54:1c:41:fc:8d:48:b9:d4:53:
01:0f:ea:1d:ba:e5:4b:1d:aa:49:d7:3d:36:7e:52:
8a:97:30:fa:55:9f:2d:fe:f3:0c:ac:d0:3c:0a:1e:
dd:99:4b:c1:a3:3b:51:a3:60:6b:b2:6d:bf:d3:99:
a9:18:4a:0c:d2:5a:ec:4c:ea:62:d3:ed:5d:90:94:
f0:5a:2f:e4:b7:f0:13:49:59:66:32:66:db:9e:95:
d9:56:02:47:91:5f:72:72:d5:b6:0f:3f:c0:27:18:
f6:d6:47:f6:f1:30:aa:4d:df:a8:43:9b:d9:af:36:
4a:42:0f:15:98:6f:9e:64:0c:88:66:ac:06:fd:69:
72:76:5a:ad:c1:3b:cc:72:8d:29:16:0c:d5:47:b8:
1a:21:26:11:13:e5:e7:1c:56:b0:7c:7e:5c:16:0b:
5a:70:91:b0:0c:c2:98:cc:ad:18:39:f8:6b:d2:76:
68:cd:7d:4f:9e:28:33:35:66:d3:e2:75:f5:cd:86:
d7:83:d9:c8:d1:f4:6b:59:4d:91:3c:3c:1d:a1:3a:
ea:fa:83:3e:bf:62:31:b0:8d:62:fe:a0:5f:c5:2e:
6a:f7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
3A:26:93:BB:E2:1A:E5:BF:87:FE:23:63:F9:AE:E9:D9:7B:F3:07:4A
X509v3 Authority Key Identifier:
keyid:B8:1C:96:52:55:79:87:A2:A0:58:0C:C5:C6:5E:36:46:B0:1D:A3:BB
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/uByWUlV5h6KgWAzFxl42RrAdo7s.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/9f/aab054-ed50-4aa6-acee-fa0d2e47e6f1/1/uByWUlV5h6KgWAzFxl42RrAdo7s.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/9f/aab054-ed50-4aa6-acee-fa0d2e47e6f1/1/uByWUlV5h6KgWAzFxl42RrAdo7s.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
1c:20:53:da:d2:5f:0c:b0:99:92:e3:79:c7:93:c6:b9:6b:5f:
1a:b2:fd:55:72:f4:0a:3b:1a:bc:44:0c:3b:0b:5a:cd:54:1f:
e8:7e:b6:3b:03:e3:7d:1e:6a:67:e6:6b:06:b9:1d:98:08:f0:
d6:0b:dd:ee:9f:3b:fa:d1:a0:c9:1c:e6:57:83:79:5c:10:10:
5f:31:60:6c:87:cb:3d:ad:32:51:ca:b2:d2:a9:c0:04:26:e7:
3f:ed:7a:fa:af:9f:d9:a6:f5:ff:e9:2a:f3:f9:30:56:06:87:
8c:50:1e:d2:81:da:bd:27:bd:69:68:25:90:53:b2:d8:21:9b:
f4:5a:34:75:b4:f1:3e:dd:5c:34:12:e1:8d:e8:24:fb:44:fd:
d4:c8:df:ab:49:86:87:5d:f6:25:0f:6e:23:41:23:4f:55:36:
7f:49:d5:b7:44:6e:07:3e:da:ce:19:23:95:50:6c:a0:da:70:
98:ff:2c:8e:b8:12:36:69:13:b0:93:c3:38:4c:b9:ba:b2:f1:
40:68:eb:7b:d9:c4:30:5c:b8:a7:64:64:17:89:b9:7f:14:ee:
71:d6:ed:41:9c:b6:6b:e5:48:1b:c5:b8:b7:cb:49:08:bb:0d:
04:17:7c:b7:c8:10:4b:b6:46:70:f3:03:fb:cd:be:bc:f4:9a:
af:c3:cc:90
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Apr 20 02:35:36 2025 by rpki-client