Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/eb/f66b6b-cdde-40cb-a182-c5229863aeba/1/uytI9kNYARx4QtPOxcstRwaLg20.mft
File: uytI9kNYARx4QtPOxcstRwaLg20.mft (raw, json)
Hash identifier: DEr60uGhkOhxwwT8TYkptf7ie2bRH4DWEJ3/V+8izOY=
Subject key identifier: 0E:E4:62:26:30:0F:50:70:74:5E:CD:10:F6:20:E1:C3:F3:FD:A5:28
Authority key identifier: BB:2B:48:F6:43:58:01:1C:78:42:D3:CE:C5:CB:2D:47:06:8B:83:6D
Certificate issuer: /CN=bb2b48f64358011c7842d3cec5cb2d47068b836d
Certificate serial: 01964520220F18DA3194896436EE7C48B3FF
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/uytI9kNYARx4QtPOxcstRwaLg20.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/eb/f66b6b-cdde-40cb-a182-c5229863aeba/1/uytI9kNYARx4QtPOxcstRwaLg20.mft
Manifest number: 1508
Signing time: Thu 17 Apr 2025 19:00:55 +0000
Manifest this update: Thu 17 Apr 2025 19:00:55 +0000
Manifest next update: Fri 18 Apr 2025 19:00:55 +0000
Files and hashes: 1: 1-K85qD4oivLUF1xQTVdq9r6NP7E.roa (hash: nx/kf+a12fPw7UIC5V6RoawXCPrhI9ndmVDlY4gQn1s=)
2: U-t-KYuIcMt9Lh-EEvDxBNSehA0.roa (hash: fNtqhAHoXJ8NAQIhvkEaB4dv9gnWdklcvBIBzltM3i4=)
3: uytI9kNYARx4QtPOxcstRwaLg20.crl (hash: TAVJKp2NpyfjIbh0lzBw9BsJDqyn2Xnr/5U7Za3QPaY=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/eb/f66b6b-cdde-40cb-a182-c5229863aeba/1/uytI9kNYARx4QtPOxcstRwaLg20.crl
rsync://rpki.ripe.net/repository/DEFAULT/eb/f66b6b-cdde-40cb-a182-c5229863aeba/1/uytI9kNYARx4QtPOxcstRwaLg20.mft
rsync://rpki.ripe.net/repository/DEFAULT/uytI9kNYARx4QtPOxcstRwaLg20.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 18 Apr 2025 18:56:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:45:20:22:0f:18:da:31:94:89:64:36:ee:7c:48:b3:ff
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=bb2b48f64358011c7842d3cec5cb2d47068b836d
Validity
Not Before: Apr 17 19:00:55 2025 GMT
Not After : Apr 18 19:00:55 2025 GMT
Subject: CN=0ee46226300f5070745ecd10f620e1c3f3fda528
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9a:6f:2e:ce:2f:e4:10:95:16:1d:04:56:36:db:
05:8b:5e:38:dc:c8:c9:c6:50:91:ef:3d:e5:4d:1d:
ac:44:62:a7:21:bb:c5:ba:f0:11:55:74:e9:35:45:
0e:14:2b:af:51:ca:02:02:e8:fd:b6:1c:b9:b6:4a:
7a:c7:77:52:4c:df:7b:4e:6e:f2:54:dd:08:31:ba:
cb:74:da:79:d8:c6:6c:20:0e:c9:9f:b4:9b:05:a1:
fd:cb:0c:55:6b:9e:0f:39:b7:63:44:6c:50:a3:4c:
71:b2:e6:85:69:01:f0:6b:b1:b2:59:a5:91:8f:ba:
ae:e1:0a:b3:8a:91:1a:e5:39:c9:cb:63:64:b3:08:
e8:c8:d0:63:e4:b6:24:29:16:75:34:79:7f:c0:f1:
2a:49:7c:75:d9:56:db:87:97:fe:f4:cf:61:59:bd:
35:01:eb:a9:10:d1:fc:a1:3a:47:2e:2e:ad:81:27:
86:80:58:51:10:d7:3e:cb:49:fa:7a:d0:c6:2f:b8:
77:55:b8:e9:7a:64:21:f3:6d:f8:3b:2a:5a:01:80:
b2:dd:fa:9e:12:e7:45:b5:bf:2f:9d:3f:ab:98:5b:
6f:10:d9:5d:c8:b7:78:b2:86:e7:50:c9:58:e6:a3:
7a:f5:17:f1:8e:25:eb:ee:a3:d6:21:47:fd:49:99:
1d:af
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
0E:E4:62:26:30:0F:50:70:74:5E:CD:10:F6:20:E1:C3:F3:FD:A5:28
X509v3 Authority Key Identifier:
keyid:BB:2B:48:F6:43:58:01:1C:78:42:D3:CE:C5:CB:2D:47:06:8B:83:6D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/uytI9kNYARx4QtPOxcstRwaLg20.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/eb/f66b6b-cdde-40cb-a182-c5229863aeba/1/uytI9kNYARx4QtPOxcstRwaLg20.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/eb/f66b6b-cdde-40cb-a182-c5229863aeba/1/uytI9kNYARx4QtPOxcstRwaLg20.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
8d:34:fc:d7:46:13:47:af:1e:bb:03:dc:3d:9f:4f:e5:bd:78:
1e:56:11:4b:1d:6c:1d:61:50:4a:4d:54:c3:39:9d:cd:4e:41:
b3:eb:57:75:7d:c3:f1:17:5a:e5:c7:8d:23:c1:c4:cf:cd:c0:
8e:9a:1d:d8:11:27:9b:30:e6:b1:7a:95:2a:91:ae:80:70:66:
2a:f2:6e:4f:cd:b6:89:db:07:e9:1f:9c:6b:b3:7f:fa:45:5b:
58:de:03:35:5c:29:e5:41:d5:3b:d2:8d:f0:7c:44:c4:11:9f:
7b:fd:8b:c2:53:3e:a4:27:56:25:53:ba:0e:42:d4:47:7c:cb:
6e:15:e4:7e:e8:20:30:8a:ea:58:f1:19:40:9a:f7:d0:d7:fb:
37:46:43:2b:37:14:fb:c9:d9:a6:cb:af:bc:d8:a0:0a:aa:f6:
b7:72:a3:69:26:cb:cc:99:2c:8b:d5:4d:4c:27:b8:88:9b:a2:
bf:73:22:85:d5:43:d0:a9:fb:12:84:b6:52:66:55:9b:12:bf:
af:3a:43:57:28:21:0c:63:e2:83:6d:e7:23:61:e4:a3:a4:d1:
ca:68:6e:f4:0e:9c:ac:7b:37:30:87:e6:7a:87:f9:8d:c0:01:
3f:c6:b5:36:d7:86:00:de:3b:6c:a8:4e:4f:4e:75:6f:d6:3f:
f4:6c:f8:f3
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 18 04:13:38 2025 by rpki-client