Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f2/bcf37f-ebe4-4a3b-9cd0-074d27dd930e/1/uWnnPeg29B_yckNAuT7Bd2PWnnI.mft
File: uWnnPeg29B_yckNAuT7Bd2PWnnI.mft (raw, json)
Hash identifier: EFFRC5kwy/DRZdblc8zPfA+rv68ZwWUEYEAOtrK2sZ4=
Subject key identifier: 45:E8:D1:01:F8:A9:B8:4F:B7:8B:33:9B:4B:28:CC:2A:0F:E9:CC:CF
Authority key identifier: B9:69:E7:3D:E8:36:F4:1F:F2:72:43:40:B9:3E:C1:77:63:D6:9E:72
Certificate issuer: /CN=b969e73de836f41ff2724340b93ec17763d69e72
Certificate serial: 01965493255EB6861BE12D7CF67933DF0797
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/uWnnPeg29B_yckNAuT7Bd2PWnnI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/f2/bcf37f-ebe4-4a3b-9cd0-074d27dd930e/1/uWnnPeg29B_yckNAuT7Bd2PWnnI.mft
Manifest number: 0C04
Signing time: Sun 20 Apr 2025 19:00:51 +0000
Manifest this update: Sun 20 Apr 2025 19:00:51 +0000
Manifest next update: Mon 21 Apr 2025 19:00:51 +0000
Files and hashes: 1: YLWwZbc1Rksp6CV3XbzezIH1zJw.roa (hash: uNij/Ew/dqch9BzkNRoCAQQNBCI7k53XhzJxnMM1FvE=)
2: uWnnPeg29B_yckNAuT7Bd2PWnnI.crl (hash: 4oyFbGslEn+swxbwzQwv+cjjEf2sEMIwRnUtg7QPiiE=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/f2/bcf37f-ebe4-4a3b-9cd0-074d27dd930e/1/uWnnPeg29B_yckNAuT7Bd2PWnnI.crl
rsync://rpki.ripe.net/repository/DEFAULT/f2/bcf37f-ebe4-4a3b-9cd0-074d27dd930e/1/uWnnPeg29B_yckNAuT7Bd2PWnnI.mft
rsync://rpki.ripe.net/repository/DEFAULT/uWnnPeg29B_yckNAuT7Bd2PWnnI.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 21 Apr 2025 19:00:51 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:54:93:25:5e:b6:86:1b:e1:2d:7c:f6:79:33:df:07:97
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=b969e73de836f41ff2724340b93ec17763d69e72
Validity
Not Before: Apr 20 19:00:51 2025 GMT
Not After : Apr 21 19:00:51 2025 GMT
Subject: CN=45e8d101f8a9b84fb78b339b4b28cc2a0fe9cccf
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c0:ac:b8:05:ba:9f:d4:21:4c:3d:06:50:c1:da:
d3:ca:31:be:42:27:47:94:bc:88:22:98:53:e2:7a:
61:f3:e4:ba:05:6e:95:2f:2f:5c:8e:c5:c5:62:5c:
ae:8e:95:03:dc:ab:17:25:64:b7:61:80:70:2c:b7:
b7:63:54:c1:22:79:ab:c3:d2:b7:19:07:f3:5c:79:
7e:d3:27:9b:b3:32:37:99:f5:9f:3a:25:a3:80:b5:
d8:bb:de:4e:01:51:d1:7c:7a:27:2f:62:37:e8:f4:
cc:0e:2e:f4:a7:b5:d7:cc:a4:6b:73:b6:43:04:41:
77:12:5e:a0:d9:a2:63:a1:0d:cd:e7:99:76:43:a4:
84:7a:86:af:33:a8:15:53:92:9a:1c:55:0c:39:fb:
32:cf:9d:5a:c4:57:b0:c6:00:47:f9:ba:71:ae:78:
7a:87:da:2f:77:9c:fc:46:60:7a:36:e9:0c:f5:7b:
94:04:85:b0:79:83:67:36:97:2f:4f:ee:fe:7d:7e:
55:2e:2b:5c:4e:2d:38:a5:24:8e:e1:cc:cf:38:41:
8e:0b:d0:c2:a9:17:df:0b:5b:2f:53:c9:8e:70:92:
4f:03:11:51:e8:a6:92:7c:2c:09:5e:49:73:84:ae:
74:8e:3a:0f:01:7d:4b:23:8a:18:05:d8:83:e1:54:
9b:bd
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
45:E8:D1:01:F8:A9:B8:4F:B7:8B:33:9B:4B:28:CC:2A:0F:E9:CC:CF
X509v3 Authority Key Identifier:
keyid:B9:69:E7:3D:E8:36:F4:1F:F2:72:43:40:B9:3E:C1:77:63:D6:9E:72
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/uWnnPeg29B_yckNAuT7Bd2PWnnI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f2/bcf37f-ebe4-4a3b-9cd0-074d27dd930e/1/uWnnPeg29B_yckNAuT7Bd2PWnnI.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/f2/bcf37f-ebe4-4a3b-9cd0-074d27dd930e/1/uWnnPeg29B_yckNAuT7Bd2PWnnI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
65:1e:f3:bc:4d:85:de:46:17:51:15:52:31:28:05:28:77:43:
52:ab:cc:e5:3a:23:b4:80:3e:a1:3a:b1:5b:ae:83:25:fc:93:
fd:f3:92:13:1f:95:a8:bb:b3:18:df:b2:69:a7:73:02:a9:17:
c6:8e:45:66:01:e6:28:a6:27:27:4b:58:98:83:31:57:74:23:
61:f1:ae:c4:69:aa:20:b7:66:a3:66:31:f1:c4:4e:5b:64:bb:
f3:52:02:2f:f4:23:71:1c:db:9d:c9:13:e4:d6:95:7d:37:96:
aa:a9:97:97:25:bf:59:3f:04:c6:f5:99:57:5a:bf:40:8f:72:
c3:c1:dd:28:bd:1f:6b:46:ae:3d:a4:5d:b5:0b:52:d2:c4:45:
e7:bf:28:5a:3e:8f:4a:2a:62:80:89:c2:ee:19:57:05:8d:10:
06:db:99:c7:05:ee:65:b3:13:86:a8:d5:72:56:b7:d4:12:b8:
94:e0:8f:df:d6:4c:f9:e4:ee:a3:27:1e:f0:86:fa:4a:35:42:
43:e9:77:86:06:51:b6:0f:e8:ad:f3:64:57:4f:ab:a3:4b:70:
67:9d:3d:cb:56:02:6e:1f:88:ef:5d:7c:79:a8:e3:a5:37:1f:
70:8f:60:e1:f3:49:25:de:a3:03:c2:50:f4:5c:37:e5:87:4a:
32:08:47:61
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 21 05:29:51 2025 by rpki-client