Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f9/1432ce-f5d2-4393-ab23-88a0d5fdcf9b/1/ubWqn-6wClEnSH80OEB3rnlw-Bo.mft
File: ubWqn-6wClEnSH80OEB3rnlw-Bo.mft (raw, json)
Hash identifier: YiiRuDgvhbvL00HHFFlmhO4luuNGYJd1sSFKSLKUQuU=
Subject key identifier: 2D:DE:05:85:AB:9D:FC:58:78:3A:3B:10:3B:C2:D4:EB:C3:E2:22:79
Authority key identifier: B9:B5:AA:9F:EE:B0:0A:51:27:48:7F:34:38:40:77:AE:79:70:F8:1A
Certificate issuer: /CN=b9b5aa9feeb00a5127487f34384077ae7970f81a
Certificate serial: 0196519179808B7B59E47A446636F7653396
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/ubWqn-6wClEnSH80OEB3rnlw-Bo.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/f9/1432ce-f5d2-4393-ab23-88a0d5fdcf9b/1/ubWqn-6wClEnSH80OEB3rnlw-Bo.mft
Manifest number: 1037
Signing time: Sun 20 Apr 2025 05:00:10 +0000
Manifest this update: Sun 20 Apr 2025 05:00:10 +0000
Manifest next update: Mon 21 Apr 2025 05:00:10 +0000
Files and hashes: 1: gmoUpsRbFiMA-YVm7rfIcmrKKCY.roa (hash: f5UVu1D2xToivyREz3dQQgbmn+Oo7D3EEy08Tqhgqrs=)
2: ubWqn-6wClEnSH80OEB3rnlw-Bo.crl (hash: o5jxy0SePyVOug2It1nE5HVmF16GGJISNi5Mzp1SKOQ=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/f9/1432ce-f5d2-4393-ab23-88a0d5fdcf9b/1/ubWqn-6wClEnSH80OEB3rnlw-Bo.crl
rsync://rpki.ripe.net/repository/DEFAULT/f9/1432ce-f5d2-4393-ab23-88a0d5fdcf9b/1/ubWqn-6wClEnSH80OEB3rnlw-Bo.mft
rsync://rpki.ripe.net/repository/DEFAULT/ubWqn-6wClEnSH80OEB3rnlw-Bo.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 21 Apr 2025 05:00:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:51:91:79:80:8b:7b:59:e4:7a:44:66:36:f7:65:33:96
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=b9b5aa9feeb00a5127487f34384077ae7970f81a
Validity
Not Before: Apr 20 05:00:10 2025 GMT
Not After : Apr 21 05:00:10 2025 GMT
Subject: CN=2dde0585ab9dfc58783a3b103bc2d4ebc3e22279
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a6:f2:04:36:7a:c7:bc:be:ca:3c:cd:b6:9b:d7:
f8:6b:d9:c4:99:25:44:49:49:68:54:78:13:f4:2d:
38:8c:8b:18:18:24:f8:07:bb:6d:a7:b1:53:5b:a8:
33:c2:04:e0:92:f5:6d:0e:24:d4:8d:97:27:26:d7:
f3:dd:6b:e3:9f:9d:30:4b:7c:d4:f0:e6:40:f4:e9:
bb:06:20:52:92:9a:7a:69:36:f2:94:7f:4a:73:c6:
fb:a7:28:09:25:03:ac:74:c1:11:6d:a3:97:7d:02:
bb:20:12:41:a1:dc:04:77:a6:79:92:66:b7:66:58:
aa:3c:21:fc:41:c1:9d:c7:93:e4:6d:ca:55:8c:cb:
fe:2e:cd:20:2c:6a:ce:e3:92:35:b5:f0:4e:e0:66:
5e:22:25:d6:40:05:6f:17:b6:8b:df:86:42:e1:87:
de:50:5d:a2:22:8e:b9:d3:a1:36:f2:2e:be:16:5f:
96:a1:36:ea:b2:68:18:8f:8a:43:e8:f4:cc:72:2a:
8d:54:31:88:50:c9:a1:f9:61:84:f6:ed:4b:c5:5a:
09:d4:40:4d:46:86:10:dc:c5:8b:8d:0c:aa:b5:ae:
0e:82:d1:ba:db:e7:b8:bc:46:b5:09:71:29:3b:00:
df:1f:03:58:06:ab:46:d8:ed:ef:2e:a1:91:53:9e:
0e:77
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
2D:DE:05:85:AB:9D:FC:58:78:3A:3B:10:3B:C2:D4:EB:C3:E2:22:79
X509v3 Authority Key Identifier:
keyid:B9:B5:AA:9F:EE:B0:0A:51:27:48:7F:34:38:40:77:AE:79:70:F8:1A
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ubWqn-6wClEnSH80OEB3rnlw-Bo.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f9/1432ce-f5d2-4393-ab23-88a0d5fdcf9b/1/ubWqn-6wClEnSH80OEB3rnlw-Bo.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/f9/1432ce-f5d2-4393-ab23-88a0d5fdcf9b/1/ubWqn-6wClEnSH80OEB3rnlw-Bo.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
cf:dd:93:03:97:4b:f7:f3:e8:37:68:3a:d1:0c:e8:30:02:38:
52:cf:8c:fc:2e:18:9c:f9:7b:44:3f:34:80:04:34:cf:28:3a:
8f:d6:92:a6:91:49:00:87:1c:8e:07:cc:b5:1c:4a:5a:87:f7:
85:66:c4:81:a3:65:3e:8a:3f:d4:a8:d6:fb:1f:3e:9a:3a:29:
c4:9a:9b:2b:b1:68:3b:9f:4a:ad:7f:dc:1e:2e:ec:fc:4a:eb:
b6:09:c3:0d:88:f5:25:d6:01:e3:cd:24:1b:08:80:dd:e9:66:
77:69:a8:0b:4c:53:2d:5e:b8:8c:1f:73:40:09:eb:0e:61:fd:
3b:86:c0:d8:c3:b9:ab:f7:10:e5:91:c2:6d:01:bd:9d:71:f3:
1d:10:64:4f:21:ad:20:a1:8f:78:1b:c3:23:15:1c:ae:4b:39:
fc:07:04:60:79:81:f5:17:ee:fd:ea:80:63:c2:6a:a9:0d:9f:
d6:c6:d7:6d:28:90:bc:db:33:5d:d1:20:f2:0c:9d:85:1e:3a:
f0:44:88:f8:cc:c0:64:1e:16:d8:de:cd:aa:eb:d5:7d:84:8f:
4a:97:85:ef:ed:1e:3e:45:b7:26:90:3f:01:2e:bf:f7:d8:6a:
82:98:0f:d1:74:b1:2f:13:fe:cb:79:3e:85:03:5e:32:a3:d1:
f6:c4:47:48
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Apr 20 14:50:19 2025 by rpki-client