Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/fc/14f46c-0a36-4cc3-b091-7425b13d5cf8/1/ua8Z9KYNrxXvt-xB_Fn12mVZcuY.mft
File: ua8Z9KYNrxXvt-xB_Fn12mVZcuY.mft (raw, json)
Hash identifier: HAqtgrtEHd+oEk4KY9PmTsfHPVFN13C8SgRzEiZ35Fk=
Subject key identifier: 50:6E:F7:B4:C5:8A:EE:2C:A1:B0:37:2B:58:19:BB:C3:83:87:DD:7F
Authority key identifier: B9:AF:19:F4:A6:0D:AF:15:EF:B7:EC:41:FC:59:F5:DA:65:59:72:E6
Certificate issuer: /CN=b9af19f4a60daf15efb7ec41fc59f5da655972e6
Certificate serial: 0196391B843F0E85F51249853C99999E1F58
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/ua8Z9KYNrxXvt-xB_Fn12mVZcuY.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/fc/14f46c-0a36-4cc3-b091-7425b13d5cf8/1/ua8Z9KYNrxXvt-xB_Fn12mVZcuY.mft
Manifest number: 08C7
Signing time: Tue 15 Apr 2025 11:00:26 +0000
Manifest this update: Tue 15 Apr 2025 11:00:26 +0000
Manifest next update: Wed 16 Apr 2025 11:00:26 +0000
Files and hashes: 1: 2s76caLde7v2dsIuooS45-OE_SY.roa (hash: SfMU8ADtIuJJDH8Zngm2/B9pvSJn1Jkcdcg5vCFct6s=)
2: hAOrJ7n2bun5jkQeVJ9u3pREyw0.roa (hash: J5fmwTFLbZB76uCMtlFvn6lgAqKVEV1D5qVFE1f0+94=)
3: ua8Z9KYNrxXvt-xB_Fn12mVZcuY.crl (hash: VRpFpiC1DSv+CDYX+9Wqk4258GrhPYsxwMxf6FC4RmM=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/fc/14f46c-0a36-4cc3-b091-7425b13d5cf8/1/ua8Z9KYNrxXvt-xB_Fn12mVZcuY.crl
rsync://rpki.ripe.net/repository/DEFAULT/fc/14f46c-0a36-4cc3-b091-7425b13d5cf8/1/ua8Z9KYNrxXvt-xB_Fn12mVZcuY.mft
rsync://rpki.ripe.net/repository/DEFAULT/ua8Z9KYNrxXvt-xB_Fn12mVZcuY.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 16 Apr 2025 08:00:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:39:1b:84:3f:0e:85:f5:12:49:85:3c:99:99:9e:1f:58
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=b9af19f4a60daf15efb7ec41fc59f5da655972e6
Validity
Not Before: Apr 15 11:00:26 2025 GMT
Not After : Apr 16 11:00:26 2025 GMT
Subject: CN=506ef7b4c58aee2ca1b0372b5819bbc38387dd7f
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c0:00:78:4c:d5:3e:43:db:7c:05:1f:c7:fa:e6:
2b:c2:c6:85:e0:7f:46:bb:21:4b:6d:95:f2:ac:05:
42:3d:49:b3:68:ac:72:41:76:c0:89:4b:3a:38:de:
38:95:c3:c6:d2:b2:a7:26:b9:3d:d7:5b:05:f8:f4:
74:a9:87:42:86:17:19:28:f4:71:6b:a0:77:95:b5:
6e:cc:f9:6f:a0:05:7a:5a:90:00:32:e5:d7:9a:3e:
35:21:b6:0a:7b:16:01:3d:13:e7:84:eb:d5:40:9c:
e7:9f:9b:66:4b:72:79:47:0a:4a:12:a3:ee:56:08:
38:9c:8c:bd:bd:c5:2b:7d:89:81:e0:18:8f:41:03:
8a:19:16:bd:e5:3a:54:92:67:49:a5:77:26:76:f0:
89:83:a8:fb:ed:75:b4:5c:d7:78:10:c5:78:7e:b3:
f4:11:95:25:93:0f:2c:82:e4:27:ca:f2:d3:11:1d:
07:db:52:16:48:d4:f2:da:30:9c:2f:be:3a:37:b9:
f3:bc:53:0c:73:f6:b4:6c:70:44:df:d7:e4:1a:81:
72:75:10:ec:ac:d5:54:99:41:8d:7c:b3:29:26:c1:
24:6e:71:aa:d2:91:3a:c2:c8:ac:66:f1:da:4f:1f:
86:a0:da:15:b9:f6:cf:d5:40:c1:97:cf:04:cc:fc:
59:35
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
50:6E:F7:B4:C5:8A:EE:2C:A1:B0:37:2B:58:19:BB:C3:83:87:DD:7F
X509v3 Authority Key Identifier:
keyid:B9:AF:19:F4:A6:0D:AF:15:EF:B7:EC:41:FC:59:F5:DA:65:59:72:E6
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ua8Z9KYNrxXvt-xB_Fn12mVZcuY.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/fc/14f46c-0a36-4cc3-b091-7425b13d5cf8/1/ua8Z9KYNrxXvt-xB_Fn12mVZcuY.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/fc/14f46c-0a36-4cc3-b091-7425b13d5cf8/1/ua8Z9KYNrxXvt-xB_Fn12mVZcuY.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
11:0e:b8:f4:0b:53:e3:7d:82:73:61:39:7b:42:b8:eb:7e:b5:
81:6e:25:87:37:d4:da:2f:8e:69:1d:04:4d:18:e7:e8:1f:ae:
86:84:8b:1d:7c:40:3a:a2:0a:af:c0:4c:31:e3:e9:18:28:40:
12:74:bb:cc:52:1a:28:f2:32:33:a1:cf:3f:11:3f:eb:17:9d:
3c:da:ff:ad:96:ac:30:46:9d:9e:76:01:d5:5b:65:14:ab:50:
92:4d:a5:d7:6b:80:bd:1d:ae:e5:b8:fd:b1:84:01:13:33:8e:
0d:e9:a3:fc:b8:2d:7f:da:eb:f6:ef:d9:a2:d8:6e:23:a1:cb:
b3:ce:2a:d5:b9:5f:5c:55:13:30:03:03:18:8b:e7:59:eb:c9:
17:7a:b2:37:fd:05:3e:cd:ed:ae:40:36:47:71:4c:72:23:e1:
4c:b9:8a:ab:7e:89:66:65:a5:f6:dc:8b:db:95:ad:5e:e0:2d:
e5:f4:a0:13:cc:cd:70:0c:b9:09:82:02:a9:26:3f:b1:4e:a6:
7d:7d:f0:b0:3d:c3:ca:02:00:d9:48:ba:8d:43:23:f0:a6:f7:
2e:86:37:5b:52:00:fa:31:f2:93:d3:29:c6:b0:8c:97:95:c8:
0b:d1:f4:c0:95:b9:58:49:7e:73:5a:94:0d:33:9e:3f:b2:5f:
09:b9:bd:ab
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Apr 15 13:57:33 2025 by rpki-client