Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/6d/cbecf4-bced-4d83-bfca-b4a181cd40f6/1/UNGBlrKfYOhdhxLeQDmlMc_BqzE.mft
File: UNGBlrKfYOhdhxLeQDmlMc_BqzE.mft (raw, json)
Hash identifier: /P/zZt4F9q5zY41p6zlqYSJy55IKTALlSbuAG3K5uPc=
Subject key identifier: 3F:88:42:D9:5D:30:12:81:E7:C4:46:51:C4:4F:58:C6:23:E2:64:0F
Authority key identifier: 50:D1:81:96:B2:9F:60:E8:5D:87:12:DE:40:39:A5:31:CF:C1:AB:31
Certificate issuer: /CN=50d18196b29f60e85d8712de4039a531cfc1ab31
Certificate serial: 01960CE81EC8D56BF73755B130DEF87B9248
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/UNGBlrKfYOhdhxLeQDmlMc_BqzE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/6d/cbecf4-bced-4d83-bfca-b4a181cd40f6/1/UNGBlrKfYOhdhxLeQDmlMc_BqzE.mft
Manifest number: 1419
Signing time: Sun 06 Apr 2025 21:01:00 +0000
Manifest this update: Sun 06 Apr 2025 21:01:00 +0000
Manifest next update: Mon 07 Apr 2025 21:01:00 +0000
Files and hashes: 1: JFeh_aiDk1Wok6qKY5rdZc79lcM.roa (hash: IiPvuOe1hAgTKQ/1gSaTyCWI6qu/9T3lc3CvXjp3aSc=)
2: R9Y2UXc3gbnEBailiktj6_FjgwY.roa (hash: +zsIlSUqGQ4eDziRAsiUj/M3yVhmW5V6xkg2OmRBGMw=)
3: UNGBlrKfYOhdhxLeQDmlMc_BqzE.crl (hash: Ssiqb0z2uA+3eP0BehfzOj5zXRrh6nR3zE1l98b0QFI=)
4: zGd05-NZw-sJTwuBu02tPsH24pE.roa (hash: ofSwbMcGSKnZ4x4xLzhpGhAWtlZ8SB33VsUVqo3M7tU=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/6d/cbecf4-bced-4d83-bfca-b4a181cd40f6/1/UNGBlrKfYOhdhxLeQDmlMc_BqzE.crl
rsync://rpki.ripe.net/repository/DEFAULT/6d/cbecf4-bced-4d83-bfca-b4a181cd40f6/1/UNGBlrKfYOhdhxLeQDmlMc_BqzE.mft
rsync://rpki.ripe.net/repository/DEFAULT/UNGBlrKfYOhdhxLeQDmlMc_BqzE.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 07 Apr 2025 21:01:00 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:0c:e8:1e:c8:d5:6b:f7:37:55:b1:30:de:f8:7b:92:48
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=50d18196b29f60e85d8712de4039a531cfc1ab31
Validity
Not Before: Apr 6 21:01:00 2025 GMT
Not After : Apr 7 21:01:00 2025 GMT
Subject: CN=3f8842d95d301281e7c44651c44f58c623e2640f
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b1:5e:28:9f:12:a5:4f:db:05:db:97:0a:50:71:
d2:17:55:ed:4e:a0:9b:99:9b:83:b3:0c:29:4a:6f:
53:3d:58:4d:d1:de:a4:38:84:a0:e8:e7:e8:f2:51:
c1:13:32:94:86:0c:d1:35:16:7d:46:62:01:b7:f9:
8e:d5:ce:25:c6:3e:02:1f:6e:8c:4e:47:4f:e5:26:
bd:13:23:71:6c:66:09:82:8c:74:0a:cb:2c:8a:e2:
6d:81:bc:70:62:39:2d:e4:36:10:cc:b0:8c:ac:78:
c7:94:c7:81:f2:07:f7:55:64:a4:53:c5:62:ee:0a:
1b:94:96:7d:02:d1:51:77:1a:35:c4:96:49:5d:15:
f2:06:77:ed:07:6a:d6:56:d9:31:01:1f:b0:dd:d7:
73:29:d9:3e:a6:35:02:ce:36:1f:f3:52:40:50:13:
3d:2c:28:16:9f:d3:a9:85:22:a7:6d:b9:81:d8:88:
49:b9:7a:20:ce:df:59:cb:b5:8a:70:86:bd:4e:33:
2d:ac:62:a0:e8:ab:90:ea:76:2c:da:f4:fe:19:a0:
7a:c4:58:4b:9c:cc:9a:5f:e7:dc:59:89:dc:ea:fb:
1f:6c:6e:f2:61:95:86:b4:a1:c3:b3:da:4a:44:30:
b3:e7:5d:9c:ba:4e:a5:dd:a9:01:31:b5:87:8a:33:
bd:27
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
3F:88:42:D9:5D:30:12:81:E7:C4:46:51:C4:4F:58:C6:23:E2:64:0F
X509v3 Authority Key Identifier:
keyid:50:D1:81:96:B2:9F:60:E8:5D:87:12:DE:40:39:A5:31:CF:C1:AB:31
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/UNGBlrKfYOhdhxLeQDmlMc_BqzE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/6d/cbecf4-bced-4d83-bfca-b4a181cd40f6/1/UNGBlrKfYOhdhxLeQDmlMc_BqzE.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/6d/cbecf4-bced-4d83-bfca-b4a181cd40f6/1/UNGBlrKfYOhdhxLeQDmlMc_BqzE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
4a:26:8c:a4:7a:c5:4c:48:ff:4e:53:21:2e:f5:44:d6:c1:fd:
e7:2f:71:04:29:63:b0:77:28:3b:c5:a8:f2:44:47:2b:77:10:
27:a6:95:75:bd:e0:04:f9:30:25:1f:7f:59:b6:22:f9:52:6b:
6e:1b:28:c0:8b:a4:57:d7:5b:2b:e4:06:69:f3:6d:d9:e4:a7:
78:94:56:4b:c9:af:49:22:3a:36:ba:67:81:b2:5e:6e:8e:4a:
1c:3b:b1:fc:d8:a3:f2:cb:1a:99:43:ee:9c:2e:0d:da:36:ba:
b3:1a:2f:4d:a1:12:b4:5d:87:8b:ac:85:76:12:a9:e7:d4:56:
0a:8c:af:64:43:c6:86:10:ef:01:2b:6a:db:34:8b:67:ab:6e:
0e:94:e3:ee:5d:bf:d9:69:2c:ea:48:78:b7:e0:0c:7c:c2:dc:
4d:ce:4e:89:75:e7:78:85:69:5f:c5:c8:03:57:97:e0:c5:3d:
30:81:b0:15:30:04:ab:ef:6a:f2:a5:a9:48:65:6c:95:5f:ba:
b1:52:60:2a:50:a4:2a:35:bc:56:a7:2c:e8:82:41:4c:66:73:
8e:d3:32:84:5b:a6:07:02:1d:7f:ee:1e:df:54:09:ad:6d:dd:
ae:67:20:4c:e6:a8:51:87:bc:19:8a:b9:ab:0a:6c:e7:45:ae:
9b:8c:17:fc
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 7 06:46:10 2025 by rpki-client