Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/3e/34c5b2-b6e3-4b23-a609-16ed3cd0c72a/1/UJvGPmjJCTK0_CiZf8O_eN47N0M.mft
File: UJvGPmjJCTK0_CiZf8O_eN47N0M.mft (raw, json)
Hash identifier: 2rSX4KK996kzPPvCQzxPmuKO1+jSjyT9yY3seLS0WO0=
Subject key identifier: 42:62:C2:2A:3E:1F:2A:89:5B:11:38:06:2D:0F:74:6E:53:08:BA:B2
Authority key identifier: 50:9B:C6:3E:68:C9:09:32:B4:FC:28:99:7F:C3:BF:78:DE:3B:37:43
Certificate issuer: /CN=509bc63e68c90932b4fc28997fc3bf78de3b3743
Certificate serial: 01965500A49BCCDE293CEFA1B165D7AE3F4C
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/UJvGPmjJCTK0_CiZf8O_eN47N0M.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/3e/34c5b2-b6e3-4b23-a609-16ed3cd0c72a/1/UJvGPmjJCTK0_CiZf8O_eN47N0M.mft
Manifest number: 0E02
Signing time: Sun 20 Apr 2025 21:00:27 +0000
Manifest this update: Sun 20 Apr 2025 21:00:27 +0000
Manifest next update: Mon 21 Apr 2025 21:00:27 +0000
Files and hashes: 1: ObJhDt0bR9RsOYpUbmtSQ9Ak4UA.roa (hash: fWlwnR5udub/jBjYE7dCE3cjmbtmpThC5ul+o9DtvWQ=)
2: UJvGPmjJCTK0_CiZf8O_eN47N0M.crl (hash: EHA++bRzVP+9wNnmGL8kMPnkyMs5CzJxtM+OFyF8gJ8=)
3: jCClE4UcGhBO2O17hYmlu4VMdbE.roa (hash: xUf30JSF1caq3EkHup8JJIOwj8vWi588sMeLSXGvQtg=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/3e/34c5b2-b6e3-4b23-a609-16ed3cd0c72a/1/UJvGPmjJCTK0_CiZf8O_eN47N0M.crl
rsync://rpki.ripe.net/repository/DEFAULT/3e/34c5b2-b6e3-4b23-a609-16ed3cd0c72a/1/UJvGPmjJCTK0_CiZf8O_eN47N0M.mft
rsync://rpki.ripe.net/repository/DEFAULT/UJvGPmjJCTK0_CiZf8O_eN47N0M.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 21 Apr 2025 21:00:27 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:55:00:a4:9b:cc:de:29:3c:ef:a1:b1:65:d7:ae:3f:4c
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=509bc63e68c90932b4fc28997fc3bf78de3b3743
Validity
Not Before: Apr 20 21:00:27 2025 GMT
Not After : Apr 21 21:00:27 2025 GMT
Subject: CN=4262c22a3e1f2a895b1138062d0f746e5308bab2
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:f0:5c:a0:44:37:24:17:c4:93:4c:1f:60:1d:93:
be:ac:0a:45:2b:e3:0a:c8:81:7b:74:8b:85:92:33:
ce:d5:4b:0d:25:3a:e2:45:2d:89:30:9a:a2:8c:5b:
1b:65:7d:db:1c:c9:03:23:3a:55:8e:50:eb:0f:df:
94:23:19:40:e7:f8:a4:19:d0:c7:f9:8d:e8:08:6e:
bc:c5:23:df:dc:6e:ad:23:28:bd:7e:11:c1:ce:96:
33:1e:3c:25:96:b9:02:8c:2d:ef:2a:ff:14:95:fa:
51:e8:9f:76:ae:b1:d0:0c:6b:1c:90:d4:3c:44:c3:
d4:48:5a:5d:5e:cf:78:4e:b4:46:d5:22:87:a7:4c:
49:f5:c1:7a:28:7b:7e:e5:0d:09:10:fd:12:54:86:
90:1e:a4:ee:31:32:33:f1:d9:ec:12:05:89:7c:c4:
2b:b8:9c:ac:1a:7a:3d:4e:4f:5e:88:61:6a:d6:84:
e4:62:ec:a5:07:63:7c:b3:26:fd:ad:5f:0c:a7:d6:
ba:ea:aa:25:ba:38:99:41:70:dd:3c:6f:8b:10:f8:
18:a9:86:a0:cb:d5:2c:4c:91:20:d4:05:49:77:ee:
e7:6f:37:7a:22:dd:08:67:90:03:15:ed:72:04:71:
d5:a9:d8:de:e9:7a:78:87:7b:3e:1c:30:48:01:a4:
1a:1d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
42:62:C2:2A:3E:1F:2A:89:5B:11:38:06:2D:0F:74:6E:53:08:BA:B2
X509v3 Authority Key Identifier:
keyid:50:9B:C6:3E:68:C9:09:32:B4:FC:28:99:7F:C3:BF:78:DE:3B:37:43
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/UJvGPmjJCTK0_CiZf8O_eN47N0M.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/3e/34c5b2-b6e3-4b23-a609-16ed3cd0c72a/1/UJvGPmjJCTK0_CiZf8O_eN47N0M.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/3e/34c5b2-b6e3-4b23-a609-16ed3cd0c72a/1/UJvGPmjJCTK0_CiZf8O_eN47N0M.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
3f:b1:82:cc:df:4f:0c:2b:e9:18:4d:73:bf:75:48:c6:14:6d:
e4:f6:ab:4b:f7:cd:0b:bd:27:27:6e:ee:05:ae:74:7c:35:3f:
62:e9:e7:11:84:dc:90:f7:29:73:a3:f5:ee:94:9f:96:2b:60:
1a:17:ac:14:b4:dd:d5:cb:94:0a:27:f4:f5:b5:36:14:f8:e8:
b6:a8:c0:9c:a0:c4:52:69:02:f1:7c:f2:af:1b:f7:74:23:01:
d1:d4:67:d5:d0:86:4f:b3:a7:80:cd:24:df:e8:ef:46:08:c3:
79:19:2c:fa:81:d0:37:c0:e3:47:59:f8:cc:c1:93:e9:cb:8a:
21:e0:d7:6e:93:b6:03:f1:f7:27:47:18:45:80:68:62:cd:3d:
e5:6f:05:69:d6:92:be:ad:74:79:2b:ac:67:a2:0e:ba:29:d3:
ae:af:f1:b8:7d:b1:f5:5d:e1:6d:ff:06:82:ad:c0:f1:f5:7e:
5a:78:3e:d1:ff:6f:56:9d:3f:1e:1a:3d:38:43:6e:3e:af:04:
57:63:e6:7f:e2:2d:05:4a:7d:95:1b:3e:34:3a:9a:a2:2d:0a:
b3:a5:22:46:66:4f:c2:31:96:08:01:e4:4a:49:47:7f:70:68:
5e:35:54:b9:57:6f:28:dc:94:1d:ec:9d:47:82:28:de:a0:97:
18:1a:76:3d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 21 04:06:39 2025 by rpki-client