Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/30/dfab36-657f-4e02-8361-c2dcdc85e584/1/UMAG1kAe9C-lDiQJVQCy_a-tW6o.mft
File: UMAG1kAe9C-lDiQJVQCy_a-tW6o.mft (raw, json)
Hash identifier: U6BBk1XQObIhO7jI3INRQxy3fuvyKm9/CxvYMOrKujg=
Subject key identifier: 16:0D:7D:25:D0:F8:72:5D:FF:C0:26:7D:0B:64:D5:86:23:A5:DC:2A
Authority key identifier: 50:C0:06:D6:40:1E:F4:2F:A5:0E:24:09:55:00:B2:FD:AF:AD:5B:AA
Certificate issuer: /CN=50c006d6401ef42fa50e24095500b2fdafad5baa
Certificate serial: 019652DB9DB089DCDDE44022406216974A6C
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/UMAG1kAe9C-lDiQJVQCy_a-tW6o.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/30/dfab36-657f-4e02-8361-c2dcdc85e584/1/UMAG1kAe9C-lDiQJVQCy_a-tW6o.mft
Manifest number: 138D
Signing time: Sun 20 Apr 2025 11:00:46 +0000
Manifest this update: Sun 20 Apr 2025 11:00:46 +0000
Manifest next update: Mon 21 Apr 2025 11:00:46 +0000
Files and hashes: 1: UMAG1kAe9C-lDiQJVQCy_a-tW6o.crl (hash: e6FBnOYCy3RiGq4KkiVsCbLclygSujQN4U9KoxDhHqE=)
2: aB5qLxBq-ZJ28IdpSolQt0Q0EpY.roa (hash: bc8eoAS2+dKIaklTuGOiLICXLenwRiRFs+fwOsu+WJk=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/30/dfab36-657f-4e02-8361-c2dcdc85e584/1/UMAG1kAe9C-lDiQJVQCy_a-tW6o.crl
rsync://rpki.ripe.net/repository/DEFAULT/30/dfab36-657f-4e02-8361-c2dcdc85e584/1/UMAG1kAe9C-lDiQJVQCy_a-tW6o.mft
rsync://rpki.ripe.net/repository/DEFAULT/UMAG1kAe9C-lDiQJVQCy_a-tW6o.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 21 Apr 2025 11:00:46 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:52:db:9d:b0:89:dc:dd:e4:40:22:40:62:16:97:4a:6c
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=50c006d6401ef42fa50e24095500b2fdafad5baa
Validity
Not Before: Apr 20 11:00:46 2025 GMT
Not After : Apr 21 11:00:46 2025 GMT
Subject: CN=160d7d25d0f8725dffc0267d0b64d58623a5dc2a
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b9:bd:c4:1b:70:09:7e:c4:73:30:ce:cb:80:d7:
a8:71:d0:19:6b:80:63:46:b3:81:51:0d:57:05:72:
97:6d:f8:2b:12:4a:98:52:27:2b:62:6a:89:37:51:
57:78:11:3e:01:57:f2:9f:7c:b2:fa:c0:83:da:29:
da:57:ba:d4:c1:e4:08:53:23:91:ed:1d:c4:de:37:
1d:8a:39:25:a2:0c:ec:4c:d1:17:0b:68:b5:6e:7b:
1c:02:9b:17:ad:92:68:f2:07:28:52:e7:05:86:65:
d8:78:72:1d:65:b0:43:71:c8:c3:37:91:ae:07:ff:
b8:d9:49:e7:24:1c:51:44:7d:81:d9:37:8a:b9:47:
d5:14:0b:c3:04:ff:6b:d3:6b:2a:1a:e8:58:96:ea:
48:fe:4f:d6:04:55:ac:28:7a:e9:34:bb:e1:96:02:
c9:b6:ed:14:30:df:5c:48:f0:2d:75:19:75:64:f6:
55:6c:94:84:80:64:29:fe:7f:a0:57:9c:66:a0:a7:
0d:dd:93:ca:08:80:cc:f4:54:d3:0e:dc:34:d5:7e:
ae:25:ff:c4:ca:0e:7a:25:d8:37:e4:42:b0:bc:fe:
cf:f7:fd:57:ed:6f:4d:cf:90:c6:61:d3:64:d3:6b:
f2:3f:15:df:1c:57:d9:89:e9:ba:08:0c:2a:68:40:
34:81
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
16:0D:7D:25:D0:F8:72:5D:FF:C0:26:7D:0B:64:D5:86:23:A5:DC:2A
X509v3 Authority Key Identifier:
keyid:50:C0:06:D6:40:1E:F4:2F:A5:0E:24:09:55:00:B2:FD:AF:AD:5B:AA
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/UMAG1kAe9C-lDiQJVQCy_a-tW6o.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/30/dfab36-657f-4e02-8361-c2dcdc85e584/1/UMAG1kAe9C-lDiQJVQCy_a-tW6o.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/30/dfab36-657f-4e02-8361-c2dcdc85e584/1/UMAG1kAe9C-lDiQJVQCy_a-tW6o.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
37:65:bc:d6:b7:3e:a8:83:84:1e:ca:ee:d5:c7:58:20:ca:a8:
85:b9:1f:53:73:51:16:13:bf:e8:4d:35:28:15:b8:7e:ba:aa:
0b:5f:2f:42:f6:c7:e5:ac:16:53:29:ba:5c:d1:46:7a:9d:2b:
cb:cb:a4:99:77:46:a1:70:17:38:36:e8:9f:f6:7a:6c:1a:ef:
11:06:83:7f:14:f6:a6:d6:8d:d3:b9:0f:6f:a8:a0:eb:cc:4b:
e4:f7:49:15:e3:83:b7:75:1e:9f:8c:39:19:ff:8e:3b:08:e1:
b9:43:0c:6c:60:43:6b:31:e0:32:13:43:4b:df:f2:ec:aa:ac:
04:eb:97:70:68:be:af:99:e0:53:0b:b1:a0:34:61:dd:49:cd:
7b:a2:2e:5c:38:54:29:61:e1:6e:19:61:d6:10:ab:88:e2:f3:
42:5a:bb:7f:71:5e:18:99:d0:fb:ab:c3:9c:0f:03:fd:e9:9f:
45:5f:df:bc:ce:ed:9b:f6:95:78:24:7d:88:b3:eb:77:91:61:
04:d1:51:0b:0b:f9:10:57:e4:7c:3c:c9:51:3c:8a:4e:47:bb:
ad:8d:60:54:f1:80:4a:e5:c8:b7:0f:91:6e:7d:df:a6:df:83:
2e:b8:d1:38:19:8b:ae:be:ff:97:9b:d0:a9:fd:48:55:a3:36:
16:26:4e:fa
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Apr 20 20:13:20 2025 by rpki-client