Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/a3/ec29e2-3440-409a-986a-b250997fc75d/1/ueqJNvjlMGO0s73w87FbKuZn7xM.mft
File: ueqJNvjlMGO0s73w87FbKuZn7xM.mft (raw, json)
Hash identifier: nLDsNNMLjvgq2FfDthJWezfLQ9jYvelaZNrZCVi6UxU=
Subject key identifier: 33:77:62:41:45:76:09:9E:D8:BC:57:AE:D5:66:FF:79:4A:E1:84:9A
Authority key identifier: B9:EA:89:36:F8:E5:30:63:B4:B3:BD:F0:F3:B1:5B:2A:E6:67:EF:13
Certificate issuer: /CN=b9ea8936f8e53063b4b3bdf0f3b15b2ae667ef13
Certificate serial: 019629A8F9AD354E16E29EE49247A09249A5
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/ueqJNvjlMGO0s73w87FbKuZn7xM.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/a3/ec29e2-3440-409a-986a-b250997fc75d/1/ueqJNvjlMGO0s73w87FbKuZn7xM.mft
Manifest number: 1095
Signing time: Sat 12 Apr 2025 11:01:01 +0000
Manifest this update: Sat 12 Apr 2025 11:01:01 +0000
Manifest next update: Sun 13 Apr 2025 11:01:01 +0000
Files and hashes: 1: 1-yC-3OHn3v-G1smlX40MjBLjtIk.roa (hash: a65aVWnVNxmwRG3dcoSw93hwzHCpqxRPcFAazQc55Uw=)
2: 1Z8mxBJ-5mF0e5QEPAGyZpCKFxU.roa (hash: 6P4lvJGk11v0OAwMwa6Dw3iNwzGZi6eZ4h8l5OgG/a4=)
3: 6YyTiJSPbv1UicGAUpUrIjUSl7s.roa (hash: ywn3zNCMDdDSXu4XFpg6gkYa11yzJumgJ7B2JgWvpHQ=)
4: 8RH3qUKE88xn5HbZw6qudmUS57M.roa (hash: 2XUgMZycB/m/voP6J2TdO00CC19oe6XDb8VlW5+rmh4=)
5: EL8NwIW4ynHKuDJKgSdS-YOLUw0.roa (hash: myxXdWA4+IfOZijb00R5q5cEaLQsxJLVjp4payzucnw=)
6: FnKylUr6R_VPycGaWtm0ZgdzgFs.roa (hash: anhVyOcar+oGd9A/1X9bq9qCt93XDdGRp5RsP7BWo9k=)
7: Vtno6vek4R1iYxrs_iTCKNXbvV4.roa (hash: yuyPRcKOieLl5HUe7kBKDY9ApeZ5pBE7VliV6ltXJ/I=)
8: c6eHaiXiRvnVAbCikD-QIkjcWys.roa (hash: tOo0YRqhlyq81kcBT/wqHTaOL3woOVGxvlxCwePoeKQ=)
9: ueqJNvjlMGO0s73w87FbKuZn7xM.crl (hash: a+4yhDkeeKfoct1yE1nj9sRJV9FWLZTnC/qE4t7fmoo=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/a3/ec29e2-3440-409a-986a-b250997fc75d/1/ueqJNvjlMGO0s73w87FbKuZn7xM.crl
rsync://rpki.ripe.net/repository/DEFAULT/a3/ec29e2-3440-409a-986a-b250997fc75d/1/ueqJNvjlMGO0s73w87FbKuZn7xM.mft
rsync://rpki.ripe.net/repository/DEFAULT/ueqJNvjlMGO0s73w87FbKuZn7xM.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 13 Apr 2025 08:00:59 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:29:a8:f9:ad:35:4e:16:e2:9e:e4:92:47:a0:92:49:a5
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=b9ea8936f8e53063b4b3bdf0f3b15b2ae667ef13
Validity
Not Before: Apr 12 11:01:01 2025 GMT
Not After : Apr 13 11:01:01 2025 GMT
Subject: CN=337762414576099ed8bc57aed566ff794ae1849a
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ab:38:5a:f5:27:ca:e1:23:8f:61:d2:fe:32:43:
3c:3e:02:15:e0:14:75:66:8f:62:66:11:95:19:fc:
d3:05:15:e5:0b:d1:47:e1:94:ed:bb:f2:40:d8:6d:
b6:54:38:17:e1:cf:85:66:be:b9:6e:aa:29:30:c2:
1e:90:17:f1:cf:bf:08:0c:54:f7:c8:08:3d:5a:43:
dd:ff:9a:61:73:6c:11:fc:0a:e3:69:1c:15:53:9e:
91:33:03:ce:31:f0:ec:16:c6:e1:a4:f6:a2:ef:5f:
2d:5d:00:a3:cf:1b:aa:d3:f1:01:e8:e4:49:9c:67:
65:52:f6:9e:c2:32:6a:05:aa:c6:fb:99:6e:f9:41:
1e:72:26:76:66:dd:93:00:19:0b:be:c6:f9:ae:e7:
68:7f:80:99:ea:dd:86:a3:d0:cd:b3:57:54:8c:3c:
cb:99:27:e0:d8:bf:ea:71:68:9c:85:e8:11:d3:bb:
d9:70:f2:35:66:52:ac:3d:0b:fe:a3:5f:00:73:00:
f3:47:6f:7e:f9:38:08:fb:a8:56:48:b6:c8:ab:2e:
6c:68:31:8a:63:b4:24:a0:e5:3a:2d:d7:20:a7:35:
e9:e0:89:a1:4a:d7:45:b6:65:a5:ee:48:45:ab:c8:
8a:50:59:b3:78:72:c5:30:ad:68:2d:94:86:71:8a:
da:49
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
33:77:62:41:45:76:09:9E:D8:BC:57:AE:D5:66:FF:79:4A:E1:84:9A
X509v3 Authority Key Identifier:
keyid:B9:EA:89:36:F8:E5:30:63:B4:B3:BD:F0:F3:B1:5B:2A:E6:67:EF:13
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ueqJNvjlMGO0s73w87FbKuZn7xM.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a3/ec29e2-3440-409a-986a-b250997fc75d/1/ueqJNvjlMGO0s73w87FbKuZn7xM.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/a3/ec29e2-3440-409a-986a-b250997fc75d/1/ueqJNvjlMGO0s73w87FbKuZn7xM.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
54:91:04:d4:d1:a2:3c:16:d2:09:d5:d2:b3:6d:54:90:9f:68:
80:5b:15:33:a8:66:ad:ee:58:8d:af:49:b5:12:3f:c0:f1:02:
ce:25:18:45:e1:92:1e:1f:16:ac:07:a6:ab:63:52:11:da:52:
f3:3b:20:50:81:c5:09:e3:66:78:45:81:4a:cd:1b:93:2a:60:
a3:69:0d:50:c7:df:a0:8e:a1:74:f4:2e:2e:26:2d:f3:95:a5:
0b:67:89:98:48:f3:59:fd:59:6d:55:db:ff:a2:d7:b5:47:28:
43:af:f8:71:85:7a:b9:8e:bb:78:34:20:54:96:9b:4e:52:22:
18:55:ea:53:be:d0:9f:5b:d7:b2:4c:68:4e:32:b9:13:ba:12:
b8:73:1c:6c:71:d4:de:fd:0f:8a:d7:4d:e0:e8:d8:2d:7d:1e:
de:d1:1a:84:3a:65:8c:2d:ea:71:5c:6b:46:32:ed:ff:66:ad:
85:0e:13:a2:02:51:e5:7d:34:31:48:0a:72:37:ee:22:26:70:
27:b1:cf:7b:75:cc:69:98:f3:99:f2:cf:14:5a:63:9c:71:0c:
8e:d1:80:9c:70:69:c7:5c:d3:d2:a7:46:9a:4c:1b:42:ea:30:
77:0c:d9:04:49:b4:7d:46:20:e0:e1:5d:13:17:8c:98:ac:93:
2d:94:96:27
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 12 16:01:40 2025 by rpki-client