Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/54/acfcb6-d78a-448a-a761-dd3b4f8381c4/1/UJ33KNG0ZjQFSXLSlF_aWAc7V2I.mft
File: UJ33KNG0ZjQFSXLSlF_aWAc7V2I.mft (raw, json)
Hash identifier: erQaVf0giWjuRJ3unkipM83GiIV4N/c6xItZW2/43js=
Subject key identifier: C0:BC:32:4D:C9:B4:18:CD:63:C6:A2:53:F9:63:98:3E:1E:1D:E5:5F
Authority key identifier: 50:9D:F7:28:D1:B4:66:34:05:49:72:D2:94:5F:DA:58:07:3B:57:62
Certificate issuer: /CN=509df728d1b46634054972d2945fda58073b5762
Certificate serial: 01963C53832DE0E6FBE25E395939E5162BA6
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/UJ33KNG0ZjQFSXLSlF_aWAc7V2I.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/54/acfcb6-d78a-448a-a761-dd3b4f8381c4/1/UJ33KNG0ZjQFSXLSlF_aWAc7V2I.mft
Manifest number: 14F5
Signing time: Wed 16 Apr 2025 02:00:28 +0000
Manifest this update: Wed 16 Apr 2025 02:00:28 +0000
Manifest next update: Thu 17 Apr 2025 02:00:28 +0000
Files and hashes: 1: ESRRBuPxkFpgbvZAxR8IDZJapd4.roa (hash: fCF3gX9WpLCGv/7JJRZ5dUsdJiPQCU2D4419eMUm0Lw=)
2: PbHlg7ScZeHhyNVnOAfVfDkj0UQ.roa (hash: cTb4Y7y4+1yzCxetjTY01rGPBaGcJj2ddHFrkZyJApU=)
3: UJ33KNG0ZjQFSXLSlF_aWAc7V2I.crl (hash: AUsj7xt4ahpKut/0DAYVCbAd2oFHUhaj8OxpMfHnUQo=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/54/acfcb6-d78a-448a-a761-dd3b4f8381c4/1/UJ33KNG0ZjQFSXLSlF_aWAc7V2I.crl
rsync://rpki.ripe.net/repository/DEFAULT/54/acfcb6-d78a-448a-a761-dd3b4f8381c4/1/UJ33KNG0ZjQFSXLSlF_aWAc7V2I.mft
rsync://rpki.ripe.net/repository/DEFAULT/UJ33KNG0ZjQFSXLSlF_aWAc7V2I.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 17 Apr 2025 02:00:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:3c:53:83:2d:e0:e6:fb:e2:5e:39:59:39:e5:16:2b:a6
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=509df728d1b46634054972d2945fda58073b5762
Validity
Not Before: Apr 16 02:00:28 2025 GMT
Not After : Apr 17 02:00:28 2025 GMT
Subject: CN=c0bc324dc9b418cd63c6a253f963983e1e1de55f
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:f4:10:86:58:89:37:f0:64:8f:a7:a2:1f:a6:50:
e5:00:be:28:db:11:e4:37:a6:4d:68:16:65:21:5b:
ef:5e:fa:c0:21:6e:62:0c:1e:08:28:c4:1e:36:48:
7a:6c:10:13:9e:35:fe:5e:67:fd:4b:f3:a1:ea:0e:
df:a5:4c:2b:d4:95:b3:8e:2e:7b:c1:40:19:88:61:
dd:20:2c:04:49:dd:29:a2:b9:fd:2f:9f:20:ed:a1:
fd:67:6e:ca:d4:cf:dd:57:3a:cd:e4:bc:6e:3f:27:
07:1a:fe:e0:a0:9f:f0:c1:af:ff:0f:4a:ed:38:7f:
53:d0:cc:a1:0b:28:ea:ef:46:ea:2c:1e:a6:16:a4:
6c:43:c4:da:76:97:9f:17:02:be:2e:1b:7d:f3:13:
49:6f:78:5e:39:11:21:72:bc:ac:b0:4d:05:88:59:
e1:b3:64:df:b5:b5:95:f3:74:42:78:15:6f:e1:60:
37:36:a3:c8:48:ba:5f:84:3c:38:a2:c1:1f:ff:45:
6d:40:86:96:0d:b1:8a:4c:9a:69:ba:5b:3a:6c:2e:
8d:24:33:14:37:dc:5a:aa:92:f9:41:c8:e3:1e:b0:
ac:a3:67:94:06:e3:1b:cc:c9:d8:eb:62:07:04:1a:
9d:ba:7f:b8:d0:43:fd:b5:5a:7b:38:63:9d:c6:e3:
00:c3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C0:BC:32:4D:C9:B4:18:CD:63:C6:A2:53:F9:63:98:3E:1E:1D:E5:5F
X509v3 Authority Key Identifier:
keyid:50:9D:F7:28:D1:B4:66:34:05:49:72:D2:94:5F:DA:58:07:3B:57:62
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/UJ33KNG0ZjQFSXLSlF_aWAc7V2I.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/54/acfcb6-d78a-448a-a761-dd3b4f8381c4/1/UJ33KNG0ZjQFSXLSlF_aWAc7V2I.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/54/acfcb6-d78a-448a-a761-dd3b4f8381c4/1/UJ33KNG0ZjQFSXLSlF_aWAc7V2I.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
50:cf:9c:bb:53:24:7e:64:4b:3c:ce:91:62:fe:06:28:28:35:
66:93:72:99:dd:60:89:c3:1d:80:51:df:76:d8:a2:a8:e5:bc:
40:92:78:fa:17:dc:ce:b9:80:56:f9:ea:b6:e4:53:28:ba:68:
70:5e:29:16:5d:57:d5:0e:f4:e6:8e:0c:57:b2:e0:a8:7b:9c:
cd:45:9c:cf:96:d9:60:fd:d2:82:55:83:2b:bf:a0:b3:06:54:
25:97:cc:29:c3:cb:60:17:46:06:06:89:42:47:f3:ca:a3:39:
5d:d0:3d:64:ba:22:dc:3e:8f:3d:d6:76:9e:cc:b9:95:4d:d0:
fa:41:e7:74:e2:a9:ee:93:f4:72:20:e2:15:f1:b3:44:73:39:
64:8e:50:2a:c6:83:59:f9:f5:2a:8f:0e:eb:02:01:50:58:14:
7d:d7:dd:46:00:9e:f8:c6:ba:7a:f0:3a:58:92:f5:22:2d:ef:
c3:54:02:a8:5f:66:09:19:eb:ab:d6:61:5d:64:35:e9:07:6a:
dd:53:fc:2c:87:32:fb:12:2d:bf:0d:76:bd:73:12:75:d7:0b:
b7:25:35:eb:14:0d:82:a3:fc:70:d2:88:37:0f:0a:a3:42:ea:
52:02:73:9f:d9:bd:3e:c6:6c:54:46:2b:9f:3c:9b:59:e1:42:
03:ea:31:ec
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Apr 16 09:17:45 2025 by rpki-client