Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/3f/03d0e2-a49e-4371-b21c-5015e1208119/1/UqZcYoSDp1Zoi7FYwoq3wNR94nw.mft
File: UqZcYoSDp1Zoi7FYwoq3wNR94nw.mft (raw, json)
Hash identifier: 5WQ2KLaxgjrmxGxLPyxd5DXMS4BOmKlVQ4yNcKiZNzM=
Subject key identifier: 66:CB:0A:76:D0:D5:24:F7:E5:8C:F8:A4:15:DC:7F:4A:C1:A8:D6:0A
Authority key identifier: 52:A6:5C:62:84:83:A7:56:68:8B:B1:58:C2:8A:B7:C0:D4:7D:E2:7C
Certificate issuer: /CN=52a65c628483a756688bb158c28ab7c0d47de27c
Certificate serial: 01960866CAFD5705C298E141844D7AA356DC
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/UqZcYoSDp1Zoi7FYwoq3wNR94nw.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/3f/03d0e2-a49e-4371-b21c-5015e1208119/1/UqZcYoSDp1Zoi7FYwoq3wNR94nw.mft
Manifest number: 02A8
Signing time: Sun 06 Apr 2025 00:01:16 +0000
Manifest this update: Sun 06 Apr 2025 00:01:16 +0000
Manifest next update: Mon 07 Apr 2025 00:01:16 +0000
Files and hashes: 1: UqZcYoSDp1Zoi7FYwoq3wNR94nw.crl (hash: 7h8IWz4bMEsQkNLp4lx9G9LQRQ18emdR6PhbrzXlk2g=)
2: tqDHXiS7i5dxh3CeCoDJkGQqezg.roa (hash: l6w/oRDzimMT8gSmQ7FtqRNlVcpqgstHkEfCIU2SJhE=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/3f/03d0e2-a49e-4371-b21c-5015e1208119/1/UqZcYoSDp1Zoi7FYwoq3wNR94nw.crl
rsync://rpki.ripe.net/repository/DEFAULT/3f/03d0e2-a49e-4371-b21c-5015e1208119/1/UqZcYoSDp1Zoi7FYwoq3wNR94nw.mft
rsync://rpki.ripe.net/repository/DEFAULT/UqZcYoSDp1Zoi7FYwoq3wNR94nw.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 06 Apr 2025 22:00:49 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:08:66:ca:fd:57:05:c2:98:e1:41:84:4d:7a:a3:56:dc
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=52a65c628483a756688bb158c28ab7c0d47de27c
Validity
Not Before: Apr 6 00:01:16 2025 GMT
Not After : Apr 7 00:01:16 2025 GMT
Subject: CN=66cb0a76d0d524f7e58cf8a415dc7f4ac1a8d60a
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ac:11:e5:dd:ec:9f:67:4a:51:68:a1:18:7d:9d:
37:00:37:04:9a:65:eb:0e:29:e2:f8:bf:aa:9c:5d:
bc:fa:16:1d:89:bc:0b:f3:06:b7:62:b2:e8:fa:b4:
a4:d4:84:8e:3d:45:5a:b7:74:70:c0:98:53:39:35:
8b:6f:bd:37:cd:03:a6:b0:a5:f7:81:b0:2f:fd:5f:
6a:cc:50:1e:e8:ea:bf:64:65:36:9e:5f:f0:3b:3a:
c1:d2:51:b7:9b:63:ef:9a:cf:4a:87:cf:81:69:7f:
32:dd:8f:ea:6d:c6:f1:f4:f7:51:51:ac:15:e6:df:
77:a0:0e:40:46:55:2d:59:1e:e5:01:94:24:a9:b2:
15:08:ae:70:4b:09:d3:15:fc:2d:ca:de:78:33:40:
1c:32:bf:3a:de:ea:94:18:2a:23:b1:cc:bf:a2:dd:
7d:00:86:df:5d:8d:0b:88:76:25:96:7c:b1:00:87:
85:48:eb:d1:a3:4f:45:b1:56:99:c0:10:4a:1a:62:
c9:40:42:a3:94:96:df:0f:11:b6:d4:bf:c9:f1:7f:
12:65:92:c6:a5:22:18:b3:f8:b9:51:03:c8:a4:49:
ee:fe:0b:c0:8e:bb:47:02:fb:07:5d:fc:b6:c5:aa:
43:f7:13:28:90:e3:8e:d5:cc:29:7c:d5:a8:6e:26:
21:ad
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
66:CB:0A:76:D0:D5:24:F7:E5:8C:F8:A4:15:DC:7F:4A:C1:A8:D6:0A
X509v3 Authority Key Identifier:
keyid:52:A6:5C:62:84:83:A7:56:68:8B:B1:58:C2:8A:B7:C0:D4:7D:E2:7C
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/UqZcYoSDp1Zoi7FYwoq3wNR94nw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/3f/03d0e2-a49e-4371-b21c-5015e1208119/1/UqZcYoSDp1Zoi7FYwoq3wNR94nw.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/3f/03d0e2-a49e-4371-b21c-5015e1208119/1/UqZcYoSDp1Zoi7FYwoq3wNR94nw.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
64:f0:60:a5:9e:48:79:2a:1b:72:70:91:0c:36:46:6f:bd:7a:
ee:5c:3a:b9:51:a4:92:35:c0:6b:37:88:f8:7e:eb:cc:ee:ad:
ba:a7:c0:06:a4:d5:f0:1a:e4:6f:df:30:a5:1e:38:1e:fd:b8:
95:72:af:1b:5c:4d:54:a2:af:a3:88:2a:65:0a:90:a8:9e:5d:
9f:75:8b:bd:ce:73:7f:d5:8d:82:0f:ed:44:6b:26:fe:f7:4b:
72:c8:2c:ed:da:76:4e:a2:51:7e:87:e6:8d:37:dc:c7:5a:5b:
92:30:7c:98:13:fb:27:d7:bd:3e:8a:b9:c9:45:67:2b:fe:f7:
e4:39:00:8c:ef:6e:6b:ba:cf:fb:5d:23:39:2c:fa:11:c0:eb:
e2:ca:d4:47:dd:7a:24:5e:cb:2e:25:bc:55:aa:6e:72:65:08:
8e:eb:b4:fb:63:3b:d5:74:a6:f3:58:82:00:dd:3b:df:9b:d1:
70:d5:8a:dc:9a:54:8f:c7:e1:e5:e4:fe:c0:17:98:94:40:b6:
65:32:2e:ab:64:4b:33:84:dc:af:41:73:be:ca:5f:73:69:f1:
d5:8e:37:e5:19:b7:51:5f:83:e0:42:8e:c6:61:98:ea:db:da:
5e:c1:a9:f4:8d:1a:a3:0e:2b:61:3a:0b:12:0c:c7:af:b8:9c:
3d:07:ac:4a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Apr 6 05:54:20 2025 by rpki-client