Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/a0/3c6876-96ae-48af-ae7a-ff05d446e7fd/1/uRFN_za5SLVsIR0l85h1HTW5PMI.mft
File: uRFN_za5SLVsIR0l85h1HTW5PMI.mft (raw, json)
Hash identifier: aMH/yTVpGP9MoDEt/XEGrT12ssatsGFjEHGSCphlIZc=
Subject key identifier: 68:4E:89:24:F8:75:F5:33:CC:5E:57:9D:39:C2:08:1F:2F:84:72:AE
Authority key identifier: B9:11:4D:FF:36:B9:48:B5:6C:21:1D:25:F3:98:75:1D:35:B9:3C:C2
Certificate issuer: /CN=b9114dff36b948b56c211d25f398751d35b93cc2
Certificate serial: 01964C6B4466417F2FFD3534FA4432A24521
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/uRFN_za5SLVsIR0l85h1HTW5PMI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/a0/3c6876-96ae-48af-ae7a-ff05d446e7fd/1/uRFN_za5SLVsIR0l85h1HTW5PMI.mft
Manifest number: 0D04
Signing time: Sat 19 Apr 2025 05:00:20 +0000
Manifest this update: Sat 19 Apr 2025 05:00:20 +0000
Manifest next update: Sun 20 Apr 2025 05:00:20 +0000
Files and hashes: 1: 1-_Px5n1Sga5Zt8S-x1iB09Td3qo.roa (hash: 23ZQeG0ng9+MyZlvY3tVFGHtF3ECWQ2rfUxxtpg8t4c=)
2: NYoZjbIugQuxKbQ3AOfllIqIvGI.roa (hash: MP3bZZbgC6I+guroq7hjxBmjZFMjOlVQchFUz6yhGNE=)
3: u36ax0xpTJgFKndS5YsGMSqnq7s.roa (hash: uik0LuaE13Pf2kO3ppprzpbjfY2DRZ0GXchvvKMGvNo=)
4: uRFN_za5SLVsIR0l85h1HTW5PMI.crl (hash: IHO/AGfX2RqCg8bOsR2kbzwLQ6Gs7X7bB6BDL5pFwG0=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/a0/3c6876-96ae-48af-ae7a-ff05d446e7fd/1/uRFN_za5SLVsIR0l85h1HTW5PMI.crl
rsync://rpki.ripe.net/repository/DEFAULT/a0/3c6876-96ae-48af-ae7a-ff05d446e7fd/1/uRFN_za5SLVsIR0l85h1HTW5PMI.mft
rsync://rpki.ripe.net/repository/DEFAULT/uRFN_za5SLVsIR0l85h1HTW5PMI.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 20 Apr 2025 04:00:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:4c:6b:44:66:41:7f:2f:fd:35:34:fa:44:32:a2:45:21
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=b9114dff36b948b56c211d25f398751d35b93cc2
Validity
Not Before: Apr 19 05:00:20 2025 GMT
Not After : Apr 20 05:00:20 2025 GMT
Subject: CN=684e8924f875f533cc5e579d39c2081f2f8472ae
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cd:a7:b6:8d:e1:64:8c:5b:ed:ab:57:a9:e0:94:
d2:e5:0a:c4:14:a7:fe:0b:8a:9b:7f:ed:6d:8b:6c:
b9:11:af:4f:ef:cf:b0:ef:6b:62:a0:9c:e7:06:16:
b3:15:a6:ad:56:d4:ae:85:cc:5b:86:07:be:d1:17:
10:58:de:5b:25:6e:95:11:7d:77:25:b9:f7:63:57:
2b:d8:a1:cf:d9:b6:84:fe:aa:36:de:a5:4d:09:8d:
7d:e8:ef:f1:9e:a8:ad:ce:31:c4:62:e3:73:55:c5:
f3:1c:f6:d3:7b:6b:68:c7:83:54:74:22:d8:4b:0b:
27:07:4d:37:66:2a:90:a8:90:d8:e6:ee:40:3b:81:
9d:1a:82:6c:23:d5:d7:bb:9a:59:63:b1:28:38:b1:
b7:04:fd:b4:c5:a3:42:8d:db:5d:90:d6:1c:87:d1:
53:c3:b6:0a:34:2e:f7:16:fc:9e:61:76:8f:20:fc:
6a:df:68:51:0f:bc:35:e7:4f:db:79:c2:b4:3e:17:
f7:87:38:31:79:5e:e0:bb:75:3f:05:b7:2f:25:52:
a0:31:d4:e5:7d:b3:79:ec:47:6e:d6:22:83:d4:1c:
4d:c5:4e:f6:13:3c:bf:71:28:30:46:95:1a:8d:ec:
e4:fd:9d:93:e8:f9:da:51:d0:04:eb:fb:2b:ca:85:
11:83
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
68:4E:89:24:F8:75:F5:33:CC:5E:57:9D:39:C2:08:1F:2F:84:72:AE
X509v3 Authority Key Identifier:
keyid:B9:11:4D:FF:36:B9:48:B5:6C:21:1D:25:F3:98:75:1D:35:B9:3C:C2
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/uRFN_za5SLVsIR0l85h1HTW5PMI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a0/3c6876-96ae-48af-ae7a-ff05d446e7fd/1/uRFN_za5SLVsIR0l85h1HTW5PMI.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/a0/3c6876-96ae-48af-ae7a-ff05d446e7fd/1/uRFN_za5SLVsIR0l85h1HTW5PMI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
8c:a8:8f:3b:de:d8:7c:ed:a4:44:a1:9f:46:a9:f8:65:1c:1c:
8b:7c:a8:6d:5b:33:39:ed:59:18:5b:cc:76:44:cb:90:a2:7b:
da:28:50:db:ab:66:48:0b:bb:dc:6e:2f:07:3f:c5:e7:aa:41:
39:c8:6a:1e:3d:8c:35:53:d1:74:36:b6:dd:e7:57:7e:02:a7:
90:35:21:e3:b2:10:8f:b3:6c:28:d7:a4:aa:9a:73:56:84:7c:
2a:96:64:a8:42:83:7e:82:18:d6:b6:4f:42:8b:fb:8b:a9:25:
46:cd:f3:53:fc:2e:30:f9:d4:c6:7c:0a:39:39:27:72:e9:20:
6f:31:29:f2:6d:50:1c:55:fb:2e:9d:29:2f:36:3a:18:c7:03:
8b:ce:c4:ba:18:1f:76:43:09:1a:0f:83:e2:46:a7:91:cf:b9:
23:83:0e:2c:27:2e:45:0e:2a:8f:45:12:aa:81:a7:2a:80:5e:
2f:f1:19:ba:d6:02:9e:a1:e2:ed:50:30:3d:88:28:20:ef:f6:
b2:ef:5b:ae:9c:e8:a8:7c:1a:b7:3d:ca:ce:2d:77:18:08:3b:
1a:96:61:0c:2b:6a:fb:7e:f0:93:64:5d:0d:52:3e:64:49:a6:
78:7b:8d:b3:24:71:8b:72:ee:16:fa:22:b9:ac:65:1c:e6:93:
5a:80:c9:29
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 19 12:18:00 2025 by rpki-client