Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f7/3bc553-0ee0-4b72-b93e-938ab96454e9/1/uATBl0RFlLEexZnSBWVvZOTR_GE.mft
File: uATBl0RFlLEexZnSBWVvZOTR_GE.mft (raw, json)
Hash identifier: 7jLz93pRtlpbOPhyo3QKdCdmMvgO3gHC//xFgIinNGA=
Subject key identifier: CE:67:E7:08:E6:23:E2:0F:20:B7:E2:7E:4A:9D:18:F2:65:33:BD:C7
Authority key identifier: B8:04:C1:97:44:45:94:B1:1E:C5:99:D2:05:65:6F:64:E4:D1:FC:61
Certificate issuer: /CN=b804c197444594b11ec599d205656f64e4d1fc61
Certificate serial: 01964EFEC169AC55500F85A2D849EDC0CA19
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/uATBl0RFlLEexZnSBWVvZOTR_GE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/f7/3bc553-0ee0-4b72-b93e-938ab96454e9/1/uATBl0RFlLEexZnSBWVvZOTR_GE.mft
Manifest number: 0341
Signing time: Sat 19 Apr 2025 17:00:40 +0000
Manifest this update: Sat 19 Apr 2025 17:00:40 +0000
Manifest next update: Sun 20 Apr 2025 17:00:40 +0000
Files and hashes: 1: foSChvs7xZT_ef4fRZkz6kbja-A.roa (hash: qhfs8w9z0W9ldi8xd+XO5IRrkBZgJCAhgjlxgOvdESc=)
2: uATBl0RFlLEexZnSBWVvZOTR_GE.crl (hash: GaNCxnIFZ4yb/OOnkSwCjkALRBxGLqHLWW2mqNPBMlw=)
3: yO6MuzyCfqPl_Bd-5T_EUZAJiu0.roa (hash: uW68gXrjLbDAKIgIT5+2g3ynceUkFahctGoUtv0xIl8=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/f7/3bc553-0ee0-4b72-b93e-938ab96454e9/1/uATBl0RFlLEexZnSBWVvZOTR_GE.crl
rsync://rpki.ripe.net/repository/DEFAULT/f7/3bc553-0ee0-4b72-b93e-938ab96454e9/1/uATBl0RFlLEexZnSBWVvZOTR_GE.mft
rsync://rpki.ripe.net/repository/DEFAULT/uATBl0RFlLEexZnSBWVvZOTR_GE.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 20 Apr 2025 16:41:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:4e:fe:c1:69:ac:55:50:0f:85:a2:d8:49:ed:c0:ca:19
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=b804c197444594b11ec599d205656f64e4d1fc61
Validity
Not Before: Apr 19 17:00:40 2025 GMT
Not After : Apr 20 17:00:40 2025 GMT
Subject: CN=ce67e708e623e20f20b7e27e4a9d18f26533bdc7
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a6:67:ef:55:35:1d:b7:5c:0a:f3:b5:51:2b:44:
a3:a1:1a:28:3c:76:e5:ed:16:3a:cd:bd:fc:68:73:
d7:91:d5:11:be:3d:9d:13:ad:87:99:f4:03:49:f4:
0f:2c:c7:96:31:74:51:78:5c:c6:0f:47:4c:4c:c1:
c8:89:d7:7e:4f:c1:92:9f:bb:23:aa:82:39:3d:60:
b8:87:61:69:d1:b3:5f:f5:d9:28:e7:af:5f:76:98:
4c:06:bb:2d:1f:2c:f1:cc:2e:0a:59:bf:00:98:b7:
dc:ef:09:08:b2:85:e7:ee:83:da:20:22:56:fc:83:
9d:04:aa:9c:f7:73:4f:60:88:5b:58:89:ef:db:93:
ed:40:95:f0:0f:6c:71:2b:a3:f1:15:8d:c3:be:e3:
26:58:5c:e1:ca:4f:dd:b0:ce:5c:ea:a1:3c:a7:72:
f0:16:b6:6d:cf:ca:ae:f2:b1:0d:c1:a5:7d:74:73:
c3:e4:c2:97:cf:6f:9c:04:57:32:56:32:ce:2c:14:
62:8d:a1:74:d1:f3:3f:d4:b2:17:7c:80:02:9f:39:
2b:33:79:c7:a7:da:b5:22:14:b8:7d:68:ee:af:be:
13:00:42:ba:bb:ac:cf:f0:54:17:05:a0:fe:73:ee:
8f:52:ac:3c:d8:9a:4d:e1:8a:c9:77:38:a5:49:6b:
3e:17
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
CE:67:E7:08:E6:23:E2:0F:20:B7:E2:7E:4A:9D:18:F2:65:33:BD:C7
X509v3 Authority Key Identifier:
keyid:B8:04:C1:97:44:45:94:B1:1E:C5:99:D2:05:65:6F:64:E4:D1:FC:61
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/uATBl0RFlLEexZnSBWVvZOTR_GE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f7/3bc553-0ee0-4b72-b93e-938ab96454e9/1/uATBl0RFlLEexZnSBWVvZOTR_GE.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/f7/3bc553-0ee0-4b72-b93e-938ab96454e9/1/uATBl0RFlLEexZnSBWVvZOTR_GE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
5f:0e:98:82:fe:51:b6:02:fe:0a:ff:d0:95:dd:13:aa:61:4f:
a3:5b:32:66:56:5d:ea:ca:a2:8c:46:1e:1a:30:39:dd:c8:68:
65:21:dd:1e:a9:e5:1d:e6:1b:67:59:fb:c1:22:fb:cc:85:7f:
64:06:2b:3f:b3:57:6a:ef:d1:17:67:d8:9f:c1:87:16:1b:c0:
52:4e:a1:0c:d0:2e:28:de:26:c8:ce:83:ea:4f:5f:04:54:14:
cd:62:25:ad:da:88:de:f9:58:a7:c5:36:8f:e6:db:85:4f:b8:
7d:ba:da:04:9e:43:89:0f:d3:99:7a:e6:6e:46:d1:df:99:f6:
ad:50:c2:37:db:22:97:bc:25:46:01:ef:d9:06:8a:75:e6:eb:
70:4a:1e:65:87:87:9e:49:db:70:30:ff:3d:f1:03:a1:79:da:
61:b5:67:77:13:c3:51:22:ae:a8:33:c2:3f:52:3b:7c:33:de:
d5:9c:c0:58:8d:de:5c:e8:d6:2e:3d:59:0c:5c:9a:e6:30:14:
fc:6f:64:55:18:30:71:9a:80:90:b2:11:f5:7f:81:ea:62:eb:
c6:67:4b:3d:8c:ee:83:47:08:9e:3e:85:01:ff:4e:85:d9:97:
66:23:ea:3f:89:29:b2:66:e9:6f:80:b2:a5:f3:b5:f0:51:d8:
f6:d0:6f:3c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Apr 20 00:45:03 2025 by rpki-client