Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/0d/3f3080-c190-4da6-8ab4-083e7e5fd6a5/1/uUPX5E03rFkQAmMZ8Qzdc5Z9l8o.mft
File: uUPX5E03rFkQAmMZ8Qzdc5Z9l8o.mft (raw, json)
Hash identifier: wLOPngsCPWvcHJdQAQ1NwUeMzgfjSes4N98W/4u9PQw=
Subject key identifier: A0:1D:30:A2:25:67:53:BC:1E:97:BE:B0:CB:BD:EF:27:57:3B:06:7D
Authority key identifier: B9:43:D7:E4:4D:37:AC:59:10:02:63:19:F1:0C:DD:73:96:7D:97:CA
Certificate issuer: /CN=b943d7e44d37ac5910026319f10cdd73967d97ca
Certificate serial: 019659153E3087A0D80DA0A742AEFF9B0184
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/uUPX5E03rFkQAmMZ8Qzdc5Z9l8o.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/0d/3f3080-c190-4da6-8ab4-083e7e5fd6a5/1/uUPX5E03rFkQAmMZ8Qzdc5Z9l8o.mft
Manifest number: 14E5
Signing time: Mon 21 Apr 2025 16:01:26 +0000
Manifest this update: Mon 21 Apr 2025 16:01:26 +0000
Manifest next update: Tue 22 Apr 2025 16:01:26 +0000
Files and hashes: 1: uUPX5E03rFkQAmMZ8Qzdc5Z9l8o.crl (hash: WCagoGzkldwLHZCMM9sthCqm1tjapRHetxwnmQTILzE=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/0d/3f3080-c190-4da6-8ab4-083e7e5fd6a5/1/uUPX5E03rFkQAmMZ8Qzdc5Z9l8o.crl
rsync://rpki.ripe.net/repository/DEFAULT/0d/3f3080-c190-4da6-8ab4-083e7e5fd6a5/1/uUPX5E03rFkQAmMZ8Qzdc5Z9l8o.mft
rsync://rpki.ripe.net/repository/DEFAULT/uUPX5E03rFkQAmMZ8Qzdc5Z9l8o.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 22 Apr 2025 16:01:26 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:59:15:3e:30:87:a0:d8:0d:a0:a7:42:ae:ff:9b:01:84
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=b943d7e44d37ac5910026319f10cdd73967d97ca
Validity
Not Before: Apr 21 16:01:26 2025 GMT
Not After : Apr 22 16:01:26 2025 GMT
Subject: CN=a01d30a2256753bc1e97beb0cbbdef27573b067d
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b9:3c:84:bf:dc:d0:12:87:e7:f8:33:ce:06:01:
e6:6e:70:da:a1:f4:0d:35:5d:b3:2e:f0:df:eb:cf:
96:ed:b2:23:bf:fc:26:68:64:67:9c:7e:66:0a:95:
b4:b9:0b:90:a4:f6:be:64:3c:2c:80:7c:95:28:b2:
53:9e:c6:6b:2c:ab:1b:53:35:7d:6f:d3:dc:6b:3a:
35:ad:17:6c:45:86:9d:09:7c:85:7b:90:d6:f3:c4:
37:e9:c2:17:6f:95:1a:c4:d8:d4:aa:57:21:e3:41:
ff:e5:01:84:e7:bf:a0:97:c9:b6:8d:1a:c1:5f:fe:
c0:13:a1:30:36:3e:c3:5e:22:68:06:6a:a0:5e:56:
94:99:43:31:78:de:99:44:97:bd:18:95:4d:c2:ac:
9d:75:94:06:e4:0c:4b:c7:88:b8:d8:a1:fa:6c:d8:
64:ac:26:7a:cb:fd:4b:6f:f1:31:81:c9:4d:16:35:
56:d0:89:e2:14:de:6f:f7:b3:b2:af:74:3a:f8:63:
f4:42:aa:c7:e8:56:68:85:66:d6:72:af:15:27:d3:
6a:b5:f2:e0:cd:e3:b7:c6:6d:c4:86:e8:b0:23:a1:
02:ae:cf:0b:1c:51:d8:5a:1c:e2:21:08:ba:50:4b:
1a:de:19:f4:52:55:d6:38:b9:ea:11:d4:2d:e4:73:
52:7d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A0:1D:30:A2:25:67:53:BC:1E:97:BE:B0:CB:BD:EF:27:57:3B:06:7D
X509v3 Authority Key Identifier:
keyid:B9:43:D7:E4:4D:37:AC:59:10:02:63:19:F1:0C:DD:73:96:7D:97:CA
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/uUPX5E03rFkQAmMZ8Qzdc5Z9l8o.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/0d/3f3080-c190-4da6-8ab4-083e7e5fd6a5/1/uUPX5E03rFkQAmMZ8Qzdc5Z9l8o.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/0d/3f3080-c190-4da6-8ab4-083e7e5fd6a5/1/uUPX5E03rFkQAmMZ8Qzdc5Z9l8o.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
73:72:3d:e8:57:f9:eb:7f:11:11:da:20:b9:6d:3c:17:23:ee:
a0:1e:5a:3f:f5:3a:ae:fa:4e:31:d8:b7:ad:83:ea:5b:e9:a3:
cf:af:cc:5f:25:a7:f4:a0:15:91:19:8b:62:bf:e1:97:98:20:
cb:23:46:71:df:1c:41:25:72:e2:77:17:bc:f1:6e:e4:81:e3:
b2:59:e3:50:ff:83:66:a4:3d:a7:a6:24:c3:fa:4c:c7:4c:f6:
e3:1a:d4:c7:b4:63:07:98:59:25:f6:34:f7:4b:2e:41:6b:36:
60:be:35:e5:38:36:ca:9c:1f:c2:83:1a:4e:57:4d:7f:7d:e9:
17:16:16:f3:8b:39:17:9d:f3:6e:b7:24:f8:22:43:1d:c3:67:
c3:36:be:60:ea:bf:b8:cf:96:88:53:8c:3f:56:8f:0a:2d:27:
d7:22:fc:f0:15:2a:97:63:63:11:67:6b:f5:66:88:a6:c9:05:
3a:08:14:86:8e:ed:bb:98:f9:16:af:d4:d2:8d:ee:87:a2:6a:
1c:8a:80:1a:37:ab:93:3f:ff:ab:11:51:49:32:20:48:6c:82:
1f:9e:5e:7e:40:4b:bc:3a:60:c3:91:bd:8e:fc:a2:ba:2b:4d:
4a:20:bd:d6:c2:94:7f:00:5b:56:ca:d4:7c:bb:32:c2:75:73:
a8:9a:62:2d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 21 22:23:21 2025 by rpki-client