Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/6f/01835f-504f-45bd-a052-714f9626d021/1/UCZMPwmDHM2IlxL0-rXFsb4MrVY.mft
File: UCZMPwmDHM2IlxL0-rXFsb4MrVY.mft (raw, json)
Hash identifier: GabfobC7//fzWYwjUdA1m5FRhVQ6OYjig/kuR6SQDbo=
Subject key identifier: 74:D4:BB:1F:34:47:77:0A:C8:43:AE:91:41:B1:78:FA:19:C8:DF:16
Authority key identifier: 50:26:4C:3F:09:83:1C:CD:88:97:12:F4:FA:B5:C5:B1:BE:0C:AD:56
Certificate issuer: /CN=50264c3f09831ccd889712f4fab5c5b1be0cad56
Certificate serial: 01965ACBC6EFC075C4EB0FFF3CFE6FAAB498
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/UCZMPwmDHM2IlxL0-rXFsb4MrVY.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/6f/01835f-504f-45bd-a052-714f9626d021/1/UCZMPwmDHM2IlxL0-rXFsb4MrVY.mft
Manifest number: 1503
Signing time: Tue 22 Apr 2025 00:00:26 +0000
Manifest this update: Tue 22 Apr 2025 00:00:26 +0000
Manifest next update: Wed 23 Apr 2025 00:00:26 +0000
Files and hashes: 1: 9m785MXZwp0BQtk_jk4fp9A4qB0.roa (hash: u+8J+4zJtWHS217NkWrzbcfb0E+Zj0l1Wu1mFSLU2lI=)
2: UCZMPwmDHM2IlxL0-rXFsb4MrVY.crl (hash: pdfE2f6nDC4SSOjBoW3BHiXQIzzcWdGcPPa2o9/VGWc=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/6f/01835f-504f-45bd-a052-714f9626d021/1/UCZMPwmDHM2IlxL0-rXFsb4MrVY.crl
rsync://rpki.ripe.net/repository/DEFAULT/6f/01835f-504f-45bd-a052-714f9626d021/1/UCZMPwmDHM2IlxL0-rXFsb4MrVY.mft
rsync://rpki.ripe.net/repository/DEFAULT/UCZMPwmDHM2IlxL0-rXFsb4MrVY.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 22 Apr 2025 19:00:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:5a:cb:c6:ef:c0:75:c4:eb:0f:ff:3c:fe:6f:aa:b4:98
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=50264c3f09831ccd889712f4fab5c5b1be0cad56
Validity
Not Before: Apr 22 00:00:26 2025 GMT
Not After : Apr 23 00:00:26 2025 GMT
Subject: CN=74d4bb1f3447770ac843ae9141b178fa19c8df16
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9e:fd:d0:1b:b4:d8:59:86:ce:41:74:c7:01:2b:
0e:e2:8f:4b:a3:ef:7e:e5:60:44:76:86:55:31:c6:
ed:f7:1e:31:ab:94:60:d5:6f:b3:ce:16:1b:6f:14:
91:7b:3b:ac:6b:8a:2d:6a:d7:1b:6b:5d:ae:e0:c3:
17:b0:eb:bd:b5:df:c0:97:e5:3b:18:95:a3:e5:77:
8f:e3:34:8c:e2:a4:84:98:31:c8:41:b5:4f:32:99:
60:e9:31:de:79:3f:92:0b:b4:ea:27:87:01:f7:cd:
d2:0d:b3:78:80:f8:70:eb:fb:20:aa:0f:8b:b4:ec:
23:0b:b6:22:1e:7d:a7:30:f3:37:6d:d4:c7:bf:5b:
76:a2:e8:32:bf:d3:ec:eb:64:80:a9:12:8b:60:77:
07:35:d5:92:bf:38:d3:ce:65:0d:a3:8b:ea:e2:1c:
e2:b8:ce:84:a0:fc:2c:cd:e8:f9:9f:fc:2f:34:0d:
f4:54:14:61:68:12:96:3c:80:57:bd:c6:98:38:3b:
d7:c1:29:c4:e6:12:ab:bc:bb:de:1b:e5:8d:60:17:
a1:67:b5:76:68:0b:c1:57:09:1c:ce:3f:b0:24:58:
13:fa:34:e7:b5:5c:91:95:d4:a5:d1:26:af:06:97:
59:04:87:67:1b:c0:15:92:c5:11:f6:13:fa:72:51:
c3:73
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
74:D4:BB:1F:34:47:77:0A:C8:43:AE:91:41:B1:78:FA:19:C8:DF:16
X509v3 Authority Key Identifier:
keyid:50:26:4C:3F:09:83:1C:CD:88:97:12:F4:FA:B5:C5:B1:BE:0C:AD:56
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/UCZMPwmDHM2IlxL0-rXFsb4MrVY.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/6f/01835f-504f-45bd-a052-714f9626d021/1/UCZMPwmDHM2IlxL0-rXFsb4MrVY.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/6f/01835f-504f-45bd-a052-714f9626d021/1/UCZMPwmDHM2IlxL0-rXFsb4MrVY.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
42:00:18:3a:a9:11:64:dd:2b:fd:25:6a:37:0f:e3:4f:f9:82:
e6:6e:c1:64:da:5b:d9:e4:b6:25:d9:d3:64:a8:b7:9e:b3:58:
93:c2:8b:77:92:45:38:61:1d:b4:02:04:7d:00:17:c3:1d:f2:
31:7e:b0:bb:b8:0c:16:99:3d:a4:74:bd:42:48:bb:0f:d8:86:
aa:69:fe:6c:78:09:ad:88:bc:f4:ea:12:10:16:58:4d:ee:8c:
b4:89:6e:3f:39:98:f7:52:b3:46:c1:f7:8b:61:66:12:ce:ad:
ec:d6:c4:e5:ea:d9:17:63:46:1a:0d:da:ea:55:fe:de:dc:a2:
15:2d:16:ae:03:11:bd:20:3b:61:06:c7:66:7a:c8:2c:fe:83:
28:55:a2:ac:c9:4d:34:75:7b:43:83:89:86:a6:ec:35:67:4e:
ea:19:be:20:79:05:0d:c2:87:1d:60:b3:0e:2f:4e:66:cc:71:
a3:80:b3:51:5e:bf:be:85:49:0c:bb:23:46:61:86:3b:01:75:
1d:59:de:b6:db:f5:bd:94:7f:72:b2:07:7c:76:f2:78:68:b3:
6a:a6:3e:b6:fe:6c:7d:eb:27:f3:8c:62:85:e3:71:d6:77:5c:
1b:e3:1f:5f:e4:0e:92:3a:f8:85:e2:f3:14:a1:a5:7e:c9:00:
a3:9f:45:2c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Apr 22 02:19:59 2025 by rpki-client