Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/a5/f10922-9954-453f-b1c6-820d5fc44e35/1/ucxtc0SS5BBmCKJPoble-qh5xFo.mft
File: ucxtc0SS5BBmCKJPoble-qh5xFo.mft (raw, json)
Hash identifier: pUaye5FmOOZFF3vzRNgkkH8MUL1Zk1naGnpA7ieb1FE=
Subject key identifier: E5:C4:4F:B0:84:BA:C1:B4:D4:F3:A2:F8:2F:6B:38:1A:35:27:C6:CE
Authority key identifier: B9:CC:6D:73:44:92:E4:10:66:08:A2:4F:A1:B9:5E:FA:A8:79:C4:5A
Certificate issuer: /CN=b9cc6d734492e4106608a24fa1b95efaa879c45a
Certificate serial: 0196440CD8F71F27F3D6D060F4527F2BE941
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/ucxtc0SS5BBmCKJPoble-qh5xFo.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/a5/f10922-9954-453f-b1c6-820d5fc44e35/1/ucxtc0SS5BBmCKJPoble-qh5xFo.mft
Manifest number: 14F4
Signing time: Thu 17 Apr 2025 14:00:14 +0000
Manifest this update: Thu 17 Apr 2025 14:00:14 +0000
Manifest next update: Fri 18 Apr 2025 14:00:14 +0000
Files and hashes: 1: 9U8A1KCT8rlJoIi8RO4fIEudUPM.roa (hash: 06pwZ9byNjemxUaq18ITW8U3Jpcvif9Eha+WU/EFPjM=)
2: ucxtc0SS5BBmCKJPoble-qh5xFo.crl (hash: W5YIV9Xpriax3PA7PZFakZONEC08PdheAJUqmppv3dc=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/a5/f10922-9954-453f-b1c6-820d5fc44e35/1/ucxtc0SS5BBmCKJPoble-qh5xFo.crl
rsync://rpki.ripe.net/repository/DEFAULT/a5/f10922-9954-453f-b1c6-820d5fc44e35/1/ucxtc0SS5BBmCKJPoble-qh5xFo.mft
rsync://rpki.ripe.net/repository/DEFAULT/ucxtc0SS5BBmCKJPoble-qh5xFo.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 18 Apr 2025 14:00:14 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:44:0c:d8:f7:1f:27:f3:d6:d0:60:f4:52:7f:2b:e9:41
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=b9cc6d734492e4106608a24fa1b95efaa879c45a
Validity
Not Before: Apr 17 14:00:14 2025 GMT
Not After : Apr 18 14:00:14 2025 GMT
Subject: CN=e5c44fb084bac1b4d4f3a2f82f6b381a3527c6ce
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e5:5b:7b:34:97:74:74:87:8d:a1:93:08:92:94:
07:51:11:eb:de:9b:b3:c2:d2:e1:28:11:1e:ce:c4:
7b:bc:d2:86:ec:54:46:24:87:84:4a:f7:e6:3a:95:
2b:c2:18:8d:e3:e8:b9:2d:7d:b1:1a:f5:3c:8b:7a:
c0:5f:5c:34:ce:13:3f:4c:c8:0a:40:a6:7f:21:d1:
64:48:d9:85:0f:49:39:05:28:c6:d3:a9:82:d7:94:
84:0c:35:c3:20:44:f7:33:2f:0b:17:eb:b1:e1:5f:
8b:81:0d:86:74:4b:fa:39:04:34:97:28:5a:dc:6c:
07:de:09:fb:bf:aa:bc:bb:58:7b:e6:44:05:52:bc:
16:8c:55:70:c0:06:3e:2c:94:9a:27:9d:09:e4:2c:
b7:58:c0:46:92:03:47:45:a7:50:13:e1:1b:66:1f:
a0:cc:0d:33:c2:16:3f:bf:c4:44:5e:85:1d:77:97:
b4:96:4d:e5:a1:13:82:dd:a1:b8:80:7e:fb:8e:63:
60:ad:04:17:7d:a2:fe:04:af:6c:13:7a:1b:a5:75:
80:2d:02:32:4d:ed:8d:90:3f:05:12:91:1e:04:97:
9e:13:f0:ae:ef:cd:68:7c:b7:0e:2d:51:3f:dc:51:
67:9e:91:7a:b4:43:b0:56:60:b4:65:40:3b:87:2c:
f1:df
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E5:C4:4F:B0:84:BA:C1:B4:D4:F3:A2:F8:2F:6B:38:1A:35:27:C6:CE
X509v3 Authority Key Identifier:
keyid:B9:CC:6D:73:44:92:E4:10:66:08:A2:4F:A1:B9:5E:FA:A8:79:C4:5A
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ucxtc0SS5BBmCKJPoble-qh5xFo.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a5/f10922-9954-453f-b1c6-820d5fc44e35/1/ucxtc0SS5BBmCKJPoble-qh5xFo.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/a5/f10922-9954-453f-b1c6-820d5fc44e35/1/ucxtc0SS5BBmCKJPoble-qh5xFo.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
3d:b8:fc:4c:c8:da:ec:15:83:52:b4:3d:8e:fa:5d:b3:6e:1e:
d2:5f:32:db:6a:02:7f:a6:77:99:2e:d3:88:42:df:93:41:12:
61:bf:e2:43:5c:88:f3:30:d7:dd:8c:83:72:1a:d0:c3:20:41:
c9:7b:a9:d5:08:e2:04:89:eb:36:5c:2d:07:1b:90:7e:b9:63:
03:2e:07:eb:c6:df:73:3f:14:98:d8:50:a4:3b:5e:77:a8:a9:
15:36:b4:01:25:2d:b1:0c:3a:0f:56:2d:4e:5f:99:a4:64:2c:
fe:59:a6:65:e4:41:f7:93:26:32:2f:ed:93:f4:1e:a3:cc:f0:
8e:68:96:6b:fd:92:8f:83:81:73:e7:cc:44:2c:90:d5:66:e5:
5d:95:c8:71:f3:98:02:9b:21:4a:c5:ab:82:99:3a:f3:2e:56:
5e:60:0c:00:df:25:ba:bb:97:4c:36:20:45:a7:33:e1:4e:19:
a5:12:09:76:15:08:10:25:0e:6e:5a:ba:8a:31:5c:b0:b7:eb:
31:6c:47:5a:5e:7d:fe:95:29:f7:d8:c0:28:3c:0b:70:2b:17:
21:d9:39:ce:b5:df:29:fb:52:46:2a:7b:19:19:8a:5b:bc:9e:
6c:36:99:de:64:89:61:40:b0:2d:12:76:33:72:78:83:78:8e:
f9:86:5f:dc
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 18 00:37:29 2025 by rpki-client