
Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/cf/b74aa2-25e0-4ad5-8cc3-69061ef2c499/1/uNI7HmwH5iry0ufrbeCJOwkRmrs.mft
File: uNI7HmwH5iry0ufrbeCJOwkRmrs.mft (raw, json)
Hash identifier: VWy6ERLZnYtHqpFFLDShQRJ8TqhCDA/A7djw0WGnhnM=
Subject key identifier: D2:DF:44:3A:11:9B:E7:5D:42:50:EE:6E:E3:8F:59:A3:A6:B2:10:4F
Authority key identifier: B8:D2:3B:1E:6C:07:E6:2A:F2:D2:E7:EB:6D:E0:89:3B:09:11:9A:BB
Certificate issuer: /CN=b8d23b1e6c07e62af2d2e7eb6de0893b09119abb
Certificate serial: 019650B64CA3652B296AA7A032485EC986C7
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/uNI7HmwH5iry0ufrbeCJOwkRmrs.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/cf/b74aa2-25e0-4ad5-8cc3-69061ef2c499/1/uNI7HmwH5iry0ufrbeCJOwkRmrs.mft
Manifest number: 14C1
Signing time: Sun 20 Apr 2025 01:00:46 +0000
Manifest this update: Sun 20 Apr 2025 01:00:46 +0000
Manifest next update: Mon 21 Apr 2025 01:00:46 +0000
Files and hashes: 1: i2eJrEfelYQqyMxjfIMrwo3xZoE.roa (hash: bJaj1yoLKIUnxfE/GQdxLjgX2i4lI/zxxe1rr7T/GTo=)
2: uNI7HmwH5iry0ufrbeCJOwkRmrs.crl (hash: NnI41SaBV8/D+JmIaBYfO/KSbywJ1JcIWaCkjATzNXY=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/cf/b74aa2-25e0-4ad5-8cc3-69061ef2c499/1/uNI7HmwH5iry0ufrbeCJOwkRmrs.crl
rsync://rpki.ripe.net/repository/DEFAULT/cf/b74aa2-25e0-4ad5-8cc3-69061ef2c499/1/uNI7HmwH5iry0ufrbeCJOwkRmrs.mft
rsync://rpki.ripe.net/repository/DEFAULT/uNI7HmwH5iry0ufrbeCJOwkRmrs.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 20 Apr 2025 22:00:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:50:b6:4c:a3:65:2b:29:6a:a7:a0:32:48:5e:c9:86:c7
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=b8d23b1e6c07e62af2d2e7eb6de0893b09119abb
Validity
Not Before: Apr 20 01:00:46 2025 GMT
Not After : Apr 21 01:00:46 2025 GMT
Subject: CN=d2df443a119be75d4250ee6ee38f59a3a6b2104f
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e1:e3:63:f6:82:c5:63:7b:63:0f:6c:f9:33:fd:
4d:c8:00:03:d5:4f:39:b3:99:11:e7:65:20:b2:7e:
6a:7f:88:db:dd:bf:5d:e3:5b:41:72:e3:e1:25:8b:
73:01:5b:25:43:e0:25:48:58:14:f2:5c:f5:22:af:
35:6f:71:5f:f3:22:76:dc:60:e1:eb:29:91:09:ed:
2a:98:23:66:b1:23:ef:aa:24:f4:3b:8f:55:f2:af:
83:d3:7e:c0:e4:3c:fb:b0:23:5b:f0:32:90:7f:24:
0d:02:b6:d1:77:4f:79:af:1c:c3:ed:63:66:92:fb:
43:f9:4b:d6:f4:9a:62:66:bc:08:45:16:f4:0b:16:
6b:43:96:a2:46:ba:0b:34:c4:08:f9:5e:2e:43:ac:
64:a3:86:79:84:4d:f5:27:b8:18:04:89:55:b1:b5:
2e:ec:e0:8c:75:ac:b8:6b:a3:36:a8:cf:25:02:71:
68:f0:1e:f7:6b:e2:d3:89:8d:8e:04:98:c0:8a:f7:
49:1c:7d:58:de:a2:93:70:ad:51:a7:d3:09:6b:08:
06:0d:a2:12:eb:26:bf:25:6a:f0:dd:4a:34:73:2a:
41:f4:84:e4:db:0d:8e:17:b7:9f:90:2e:11:d8:9f:
a6:e1:ac:6b:d6:c4:34:14:e7:44:c9:7b:ed:42:13:
ad:45
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D2:DF:44:3A:11:9B:E7:5D:42:50:EE:6E:E3:8F:59:A3:A6:B2:10:4F
X509v3 Authority Key Identifier:
keyid:B8:D2:3B:1E:6C:07:E6:2A:F2:D2:E7:EB:6D:E0:89:3B:09:11:9A:BB
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/uNI7HmwH5iry0ufrbeCJOwkRmrs.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/cf/b74aa2-25e0-4ad5-8cc3-69061ef2c499/1/uNI7HmwH5iry0ufrbeCJOwkRmrs.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/cf/b74aa2-25e0-4ad5-8cc3-69061ef2c499/1/uNI7HmwH5iry0ufrbeCJOwkRmrs.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
42:1f:44:b2:91:91:f4:33:96:ff:8d:39:aa:4b:a1:d7:35:74:
70:56:b1:2d:32:fd:18:03:b2:0d:4e:b9:cc:f6:97:b5:1e:8a:
68:a5:3d:73:cd:85:b5:92:6b:64:9f:bc:13:e8:12:60:d0:ed:
f8:7a:f8:bf:25:86:7c:fd:96:91:ae:af:0f:de:f4:ba:cb:8f:
c3:95:0f:72:57:5b:ea:bd:5a:10:17:3e:bb:57:bd:e7:7c:c7:
23:af:a0:28:89:c3:65:73:32:b8:2d:01:f8:75:4c:72:13:aa:
24:b1:6e:94:4f:fd:1f:31:55:30:d6:81:33:fe:16:74:2a:ab:
8e:37:73:09:74:82:b0:b2:e7:17:ca:13:c0:42:b3:7f:c4:1f:
4a:af:ce:84:a1:8c:59:33:d7:43:d8:84:47:88:d8:83:ac:18:
c7:9d:8d:32:2f:a4:f3:15:c2:82:71:93:06:80:02:20:2d:9c:
ce:ca:d7:be:db:91:47:59:c7:3a:b5:7c:ac:65:ec:6f:a5:f4:
3a:c9:8a:25:17:61:c0:21:5d:d7:e4:b1:0e:bb:4d:60:d8:b8:
1c:33:cb:0b:86:e3:96:4b:c9:dc:57:a6:9b:bd:88:e0:53:58:
be:4e:34:7e:80:51:b4:11:18:51:59:20:49:24:27:97:c0:9a:
90:46:3e:c5
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Apr 20 04:21:03 2025 by rpki-client