Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/bd/8819e2-c4e3-4bce-a61c-305d41d53a65/1/uFsMinWJOk-OHvDZpNQUeNizMng.mft
File: uFsMinWJOk-OHvDZpNQUeNizMng.mft (raw, json)
Hash identifier: oVWPVj6Y/nO1Yl0WBJLqYX8y/ancpNdZiJtrzW6tUxI=
Subject key identifier: A3:34:9E:A8:A7:6E:31:8B:C2:17:12:54:13:7A:AD:4C:F1:6C:EE:D9
Authority key identifier: B8:5B:0C:8A:75:89:3A:4F:8E:1E:F0:D9:A4:D4:14:78:D8:B3:32:78
Certificate issuer: /CN=b85b0c8a75893a4f8e1ef0d9a4d41478d8b33278
Certificate serial: 019615B4300FE6C44FC5C4EB815B8B5FAD98
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/uFsMinWJOk-OHvDZpNQUeNizMng.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/bd/8819e2-c4e3-4bce-a61c-305d41d53a65/1/uFsMinWJOk-OHvDZpNQUeNizMng.mft
Manifest number: 1433
Signing time: Tue 08 Apr 2025 14:00:52 +0000
Manifest this update: Tue 08 Apr 2025 14:00:52 +0000
Manifest next update: Wed 09 Apr 2025 14:00:52 +0000
Files and hashes: 1: FAbnnF69oHTmqk-_EL74zctuaA4.roa (hash: fltdyHSTKiTHvNl3z1Whswl3hhYadpjXzd/kAG+oHEc=)
2: aJV7GbLDrd2CQzyoG7J6OnTP5DY.roa (hash: RYvSIhl4EMxqFZiyrQ0zAL7ZWanzg67h6dO8KAffWY0=)
3: uFsMinWJOk-OHvDZpNQUeNizMng.crl (hash: B9+JoG39h7pyMqT8PtYOIzYWI2yHZJqic3m6cRiQYk4=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/bd/8819e2-c4e3-4bce-a61c-305d41d53a65/1/uFsMinWJOk-OHvDZpNQUeNizMng.crl
rsync://rpki.ripe.net/repository/DEFAULT/bd/8819e2-c4e3-4bce-a61c-305d41d53a65/1/uFsMinWJOk-OHvDZpNQUeNizMng.mft
rsync://rpki.ripe.net/repository/DEFAULT/uFsMinWJOk-OHvDZpNQUeNizMng.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 09 Apr 2025 13:43:31 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:15:b4:30:0f:e6:c4:4f:c5:c4:eb:81:5b:8b:5f:ad:98
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=b85b0c8a75893a4f8e1ef0d9a4d41478d8b33278
Validity
Not Before: Apr 8 14:00:52 2025 GMT
Not After : Apr 9 14:00:52 2025 GMT
Subject: CN=a3349ea8a76e318bc2171254137aad4cf16ceed9
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d0:10:85:6c:ab:5f:20:55:5f:4e:65:b1:c0:49:
68:4d:00:63:74:dd:6e:c2:71:8f:ca:0f:49:7c:fc:
19:02:8e:34:58:e3:a7:a6:4a:9b:4c:a7:38:f5:68:
fa:7a:3d:c7:0f:4f:4d:fc:5a:17:f7:ef:21:32:b8:
49:cc:fe:ad:cc:8e:a9:82:64:cf:63:76:16:4d:42:
ea:69:c1:95:01:9f:73:e4:61:61:24:c1:fa:c4:36:
27:cf:02:2e:21:13:67:9a:5b:4b:63:fc:d1:57:60:
13:4d:1d:29:bf:5c:a1:d4:e0:ec:bc:37:da:af:c5:
4c:90:34:c1:80:9d:59:20:7c:1e:cc:25:e0:16:e6:
3b:43:23:55:dc:58:18:99:d6:1d:21:e3:e5:e1:6a:
bd:3c:d8:44:f1:3d:b6:eb:c6:d2:92:e1:79:59:81:
17:65:07:ef:e2:8e:d9:19:30:37:ab:3e:86:51:f8:
2f:2f:36:2c:3a:21:22:58:85:85:41:88:e2:e2:22:
56:ff:d2:65:19:eb:d1:59:82:66:36:d8:f8:1d:d5:
f9:87:fc:21:98:43:7c:12:9c:de:70:63:1e:59:36:
00:57:ca:52:97:9f:ae:e9:30:57:1e:ab:ac:37:d0:
4f:8b:ea:06:35:51:b4:cf:da:11:cd:de:e9:e7:c6:
56:25
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A3:34:9E:A8:A7:6E:31:8B:C2:17:12:54:13:7A:AD:4C:F1:6C:EE:D9
X509v3 Authority Key Identifier:
keyid:B8:5B:0C:8A:75:89:3A:4F:8E:1E:F0:D9:A4:D4:14:78:D8:B3:32:78
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/uFsMinWJOk-OHvDZpNQUeNizMng.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/bd/8819e2-c4e3-4bce-a61c-305d41d53a65/1/uFsMinWJOk-OHvDZpNQUeNizMng.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/bd/8819e2-c4e3-4bce-a61c-305d41d53a65/1/uFsMinWJOk-OHvDZpNQUeNizMng.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
b8:b8:90:a8:9f:2f:78:3e:9d:53:3b:8c:5c:3e:fe:3e:a6:13:
99:8b:df:27:76:51:c6:a8:84:84:a1:bf:e1:03:f8:35:cf:15:
7c:23:1d:fe:a7:8d:3a:99:09:a7:29:9a:b9:f6:eb:40:5a:4b:
cd:e8:bb:a3:d8:3d:55:5b:85:05:8c:f8:17:c7:99:5f:57:81:
7e:b0:0c:4e:51:84:b2:72:86:8a:f9:2d:a6:43:bd:90:f7:a8:
d4:61:2a:0a:94:66:a6:fe:1d:87:a4:0a:95:48:19:c1:d7:82:
2d:c7:ba:d7:12:2f:70:07:73:f9:00:b0:98:73:83:c8:26:01:
7f:02:a0:f7:ef:b0:c6:c0:a5:91:ae:34:a2:6e:bc:ff:49:a0:
f9:d7:d4:a0:c3:14:e1:13:d8:2a:1b:6b:40:34:23:7b:d2:a6:
ff:bc:f3:e7:f4:8e:11:f4:22:4e:2e:4f:8a:01:f2:32:15:79:
4b:94:5c:d8:14:e2:ff:85:bb:a9:40:7d:a9:28:c5:0d:ce:1a:
cd:31:0e:57:24:a2:62:5d:e5:e8:6a:15:23:05:de:a6:97:bb:
a9:cb:ce:c7:33:be:59:d9:32:ed:cf:66:99:fc:52:4b:13:12:
92:af:f5:4e:16:df:ea:22:e8:6f:9c:57:15:43:1c:38:74:22:
c7:0b:9f:0a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Apr 8 18:24:44 2025 by rpki-client