Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e3/5aa303-59f7-4f99-907d-83a25a94c77f/1/uUhRCuQauFZ3msGG8EcJkfWipQ8.mft
File: uUhRCuQauFZ3msGG8EcJkfWipQ8.mft (raw, json)
Hash identifier: MK8Jp3HMOlU+1m4LVFZTbjRzW/W//xQviMHabjPu1C4=
Subject key identifier: 03:7F:BC:F8:43:97:93:E4:A7:E1:09:63:E7:0A:86:B1:94:0E:5D:1D
Authority key identifier: B9:48:51:0A:E4:1A:B8:56:77:9A:C1:86:F0:47:09:91:F5:A2:A5:0F
Certificate issuer: /CN=b948510ae41ab856779ac186f0470991f5a2a50f
Certificate serial: 01958FCF3DDD5AB56EF3E5569A69B7EAA08B
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/uUhRCuQauFZ3msGG8EcJkfWipQ8.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/e3/5aa303-59f7-4f99-907d-83a25a94c77f/1/uUhRCuQauFZ3msGG8EcJkfWipQ8.mft
Manifest number: 0AD9
Signing time: Thu 13 Mar 2025 14:01:18 +0000
Manifest this update: Thu 13 Mar 2025 14:01:18 +0000
Manifest next update: Fri 14 Mar 2025 14:01:18 +0000
Files and hashes: 1: ZyJpNgXETgUAoMGW4Tc1fNHY6Xc.roa (hash: d0r/X5GHVSm+6B+uw9WbyoANujmYXCe7JpWPWgRCmfA=)
2: uUhRCuQauFZ3msGG8EcJkfWipQ8.crl (hash: wRHlljxgigpbZ+0y7mjASEpotSwWENepKGWtAq0Qq/g=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/e3/5aa303-59f7-4f99-907d-83a25a94c77f/1/uUhRCuQauFZ3msGG8EcJkfWipQ8.crl
rsync://rpki.ripe.net/repository/DEFAULT/e3/5aa303-59f7-4f99-907d-83a25a94c77f/1/uUhRCuQauFZ3msGG8EcJkfWipQ8.mft
rsync://rpki.ripe.net/repository/DEFAULT/uUhRCuQauFZ3msGG8EcJkfWipQ8.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 14 Mar 2025 09:00:49 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:95:8f:cf:3d:dd:5a:b5:6e:f3:e5:56:9a:69:b7:ea:a0:8b
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=b948510ae41ab856779ac186f0470991f5a2a50f
Validity
Not Before: Mar 13 14:01:18 2025 GMT
Not After : Mar 14 14:01:18 2025 GMT
Subject: CN=037fbcf8439793e4a7e10963e70a86b1940e5d1d
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e2:f6:c6:91:38:8e:76:56:c4:75:42:21:6b:c1:
16:8d:57:07:04:4a:5b:42:24:86:9e:fd:02:b4:31:
b6:cf:67:a0:2e:b0:bb:9f:70:5a:77:27:7b:ba:64:
2c:ca:5a:c2:6f:78:33:b9:81:1a:5b:1a:e3:26:f3:
b4:5b:80:ca:a0:ff:f0:cb:bd:c9:da:02:a8:cb:34:
36:5e:9c:84:63:9c:69:00:19:90:57:ce:06:ed:72:
e1:5e:87:8c:a5:00:72:44:c6:f7:82:36:5f:c9:2c:
73:8a:23:58:fc:2e:79:c7:7c:30:65:cd:30:ac:21:
63:47:ed:27:7a:c3:43:55:9a:e0:2a:a5:4f:86:46:
2e:49:0c:c9:96:1b:a1:69:c4:9e:e1:76:3e:e3:e7:
d6:4c:98:63:2e:31:51:51:31:13:79:f5:9f:6c:42:
80:cf:06:9d:a3:05:b6:1f:57:84:50:43:10:d5:5e:
25:6d:b7:fd:05:12:3a:0a:fd:ef:be:b2:58:45:02:
49:94:7a:ca:9f:b2:07:0b:26:79:14:50:4e:b5:a2:
bc:8d:e5:6c:d9:63:57:c2:76:01:48:43:91:10:52:
e7:7f:c0:40:99:df:40:b8:02:7c:29:f7:1f:37:70:
24:ce:3e:19:de:21:f7:fa:50:88:ec:d3:5f:df:22:
31:53
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
03:7F:BC:F8:43:97:93:E4:A7:E1:09:63:E7:0A:86:B1:94:0E:5D:1D
X509v3 Authority Key Identifier:
keyid:B9:48:51:0A:E4:1A:B8:56:77:9A:C1:86:F0:47:09:91:F5:A2:A5:0F
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/uUhRCuQauFZ3msGG8EcJkfWipQ8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e3/5aa303-59f7-4f99-907d-83a25a94c77f/1/uUhRCuQauFZ3msGG8EcJkfWipQ8.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/e3/5aa303-59f7-4f99-907d-83a25a94c77f/1/uUhRCuQauFZ3msGG8EcJkfWipQ8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
82:c2:e2:3c:fd:f4:9a:94:a9:c8:36:b9:33:ff:fb:6f:2b:da:
7b:32:22:3e:eb:8a:f1:52:b2:cb:c0:e0:e9:5f:45:30:ab:67:
c1:39:25:ad:42:28:62:ce:be:52:b8:7e:5f:97:b2:df:3a:4d:
59:55:c3:99:96:72:bb:84:60:97:4d:b3:24:86:76:98:cb:c5:
fe:10:dd:ea:ec:63:74:b4:cc:e9:33:b6:65:15:59:45:3c:45:
74:1c:80:ad:11:e7:f2:c7:05:c3:ba:5c:c9:c3:82:c9:98:2e:
a2:95:59:1f:bf:86:9a:36:f0:c8:04:99:09:97:b0:7a:b1:2e:
fa:e5:13:05:cd:fb:b0:82:5d:5c:f6:77:12:01:56:c5:4c:d8:
18:92:ea:54:68:3d:69:85:fc:c6:e8:f9:a2:2d:90:38:a8:6a:
f2:3e:48:7b:30:36:e7:b0:ca:19:41:52:11:e7:79:50:ca:2a:
5a:4d:8c:32:39:4a:99:3d:a4:e7:7e:c0:ca:bd:51:9e:a1:e6:
20:2a:ae:f5:8a:8c:eb:df:56:42:1a:74:24:ab:8b:40:ff:02:
11:6d:ca:04:c9:b5:bd:57:eb:0b:d8:6b:32:ce:6b:87:4d:75:
08:2f:6e:90:be:03:f9:ba:49:30:d8:18:0e:89:6d:d7:98:12:
b7:e5:d4:df
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 13 19:40:38 2025 by rpki-client