Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/74/e3d19f-28fb-45cb-afe0-f97ad3044e02/1/UuQA66N5CiRc2rS05nu01gu-e0A.mft
File: UuQA66N5CiRc2rS05nu01gu-e0A.mft (raw, json)
Hash identifier: TmShPIn4bZ4e/r40AQ3+1NKjka0W/k2DKlMCd8oEhs0=
Subject key identifier: 53:D9:8E:79:DE:A7:FA:76:34:63:31:BF:52:AF:2C:37:A6:77:41:0D
Authority key identifier: 52:E4:00:EB:A3:79:0A:24:5C:DA:B4:B4:E6:7B:B4:D6:0B:BE:7B:40
Certificate issuer: /CN=52e400eba3790a245cdab4b4e67bb4d60bbe7b40
Certificate serial: 01964B225215406A6757E9ADCD2A05FCFE3C
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/UuQA66N5CiRc2rS05nu01gu-e0A.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/74/e3d19f-28fb-45cb-afe0-f97ad3044e02/1/UuQA66N5CiRc2rS05nu01gu-e0A.mft
Manifest number: 0D4E
Signing time: Fri 18 Apr 2025 23:01:02 +0000
Manifest this update: Fri 18 Apr 2025 23:01:02 +0000
Manifest next update: Sat 19 Apr 2025 23:01:02 +0000
Files and hashes: 1: UuQA66N5CiRc2rS05nu01gu-e0A.crl (hash: vmS5QHfuQReMMqvhIJ5W0ndrjqfTtVN/KWxCWBNupv8=)
2: rtVpNZa3L_NWvprN4f-UPAZwfTo.roa (hash: 2HzqWuMhkSfDBFXNVGHFl9K4DvsafbSLLfoHlblLKUE=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/74/e3d19f-28fb-45cb-afe0-f97ad3044e02/1/UuQA66N5CiRc2rS05nu01gu-e0A.crl
rsync://rpki.ripe.net/repository/DEFAULT/74/e3d19f-28fb-45cb-afe0-f97ad3044e02/1/UuQA66N5CiRc2rS05nu01gu-e0A.mft
rsync://rpki.ripe.net/repository/DEFAULT/UuQA66N5CiRc2rS05nu01gu-e0A.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 19 Apr 2025 19:00:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:4b:22:52:15:40:6a:67:57:e9:ad:cd:2a:05:fc:fe:3c
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=52e400eba3790a245cdab4b4e67bb4d60bbe7b40
Validity
Not Before: Apr 18 23:01:02 2025 GMT
Not After : Apr 19 23:01:02 2025 GMT
Subject: CN=53d98e79dea7fa76346331bf52af2c37a677410d
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b7:ad:7c:d4:30:c3:5c:da:71:11:06:48:fc:5c:
8a:45:e6:fb:2f:bc:10:38:74:51:91:83:e2:ff:8c:
97:b3:e9:97:c8:d5:79:85:e2:1a:52:5c:58:88:03:
de:8c:2f:f4:bc:78:19:62:b7:b0:c9:fe:7a:e6:91:
33:f0:54:cb:e9:09:b5:ae:b5:f6:50:8f:2f:d5:01:
87:f1:d5:f6:b4:fe:c9:64:29:6b:9a:35:7d:33:c3:
56:7d:be:10:01:d1:5a:2e:3e:82:3e:c1:cf:40:54:
e7:5c:03:07:aa:aa:b0:d3:57:fb:88:54:c3:7d:26:
60:12:ed:f2:90:76:5e:26:df:2a:b5:20:0e:9f:df:
a4:83:82:2c:8c:2e:9b:c2:de:33:23:42:32:47:3e:
60:7f:89:3c:0c:93:f5:d2:ed:95:88:56:cf:d4:94:
81:31:1b:c8:10:1d:69:23:66:c0:1f:20:4f:09:52:
0e:a2:d1:e2:03:44:de:4d:d6:ad:7a:3c:9a:e3:eb:
dc:ba:43:c0:82:29:86:b6:00:36:99:f4:a1:e7:f1:
d8:b1:b2:8d:42:bf:5a:32:dc:15:2a:1f:93:c6:51:
a9:fe:2d:37:4b:ed:d2:3b:31:de:b6:70:f3:5d:fa:
85:00:17:8a:a5:85:17:fa:fa:4c:f6:64:89:20:2c:
16:eb
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
53:D9:8E:79:DE:A7:FA:76:34:63:31:BF:52:AF:2C:37:A6:77:41:0D
X509v3 Authority Key Identifier:
keyid:52:E4:00:EB:A3:79:0A:24:5C:DA:B4:B4:E6:7B:B4:D6:0B:BE:7B:40
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/UuQA66N5CiRc2rS05nu01gu-e0A.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/74/e3d19f-28fb-45cb-afe0-f97ad3044e02/1/UuQA66N5CiRc2rS05nu01gu-e0A.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/74/e3d19f-28fb-45cb-afe0-f97ad3044e02/1/UuQA66N5CiRc2rS05nu01gu-e0A.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
2e:7e:fe:79:83:7e:01:bf:2b:ad:1a:7c:e8:a2:f1:aa:24:eb:
93:35:07:ca:d2:3f:f4:b2:8b:72:ab:59:ef:9b:bf:7c:98:ac:
9b:3a:0e:2c:6c:d2:69:1e:17:7d:1d:18:0d:df:08:a6:64:17:
f3:d8:fd:df:f4:8f:09:56:b6:48:b4:b5:d3:02:10:67:16:6e:
ec:07:a5:06:1c:71:83:c7:9e:96:82:5d:8e:43:77:43:66:f4:
72:c5:74:35:e8:99:84:d4:52:f5:03:56:5e:d1:47:6e:04:3d:
e9:8a:c7:8f:d9:a9:41:bb:bc:d2:66:26:d2:ac:9f:89:55:0d:
aa:2f:82:ee:1c:8b:12:8f:55:31:c1:04:c5:8d:28:e0:1f:85:
9d:3e:ec:31:b7:4c:80:4e:eb:a4:a4:26:17:11:40:9f:6a:29:
26:2a:4e:19:84:5c:06:80:80:4f:4a:00:7f:7b:e8:fa:7f:56:
7e:e9:66:16:ba:63:44:57:1f:52:bd:6c:d1:5f:c1:e9:4d:85:
6a:b4:c4:b8:ae:d9:9d:e3:3c:77:82:8b:f8:84:11:88:9d:09:
dd:5a:57:01:a5:f1:b4:10:76:91:e7:35:a7:8e:d4:38:35:75:
1d:59:c1:22:8d:69:33:58:f4:4f:12:5d:d1:28:0c:3f:bf:2e:
b2:22:ea:0f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 19 02:28:26 2025 by rpki-client