Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/7c/cde790-4e3b-4a4e-b84c-556506702a57/1/UMXKBp6qqux3WtCk6jtHYFtyiiU.mft
File: UMXKBp6qqux3WtCk6jtHYFtyiiU.mft (raw, json)
Hash identifier: segv9jek7nMmTxxa5nDxnq4pAno+pnpdRzu587BYPgs=
Subject key identifier: 8E:CD:44:0A:F0:6B:F4:D2:4B:9F:4B:E2:27:6C:E2:06:24:A8:6B:11
Authority key identifier: 50:C5:CA:06:9E:AA:AA:EC:77:5A:D0:A4:EA:3B:47:60:5B:72:8A:25
Certificate issuer: /CN=50c5ca069eaaaaec775ad0a4ea3b47605b728a25
Certificate serial: 019659B919E72B5963CC40F4D55815EB06C3
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/UMXKBp6qqux3WtCk6jtHYFtyiiU.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/7c/cde790-4e3b-4a4e-b84c-556506702a57/1/UMXKBp6qqux3WtCk6jtHYFtyiiU.mft
Manifest number: 1452
Signing time: Mon 21 Apr 2025 19:00:25 +0000
Manifest this update: Mon 21 Apr 2025 19:00:25 +0000
Manifest next update: Tue 22 Apr 2025 19:00:25 +0000
Files and hashes: 1: FEtsoc8GhVwS-itqE7wFwW_E2l0.roa (hash: wzhGlUkDAVqaCjdqlX0sPOVL6b9f0X/6vMu8NbyqVQo=)
2: UMXKBp6qqux3WtCk6jtHYFtyiiU.crl (hash: 7kLKuWJLNHHRBxb5olaK/qtziT/kujRE7ImZnbjmVrE=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/7c/cde790-4e3b-4a4e-b84c-556506702a57/1/UMXKBp6qqux3WtCk6jtHYFtyiiU.crl
rsync://rpki.ripe.net/repository/DEFAULT/7c/cde790-4e3b-4a4e-b84c-556506702a57/1/UMXKBp6qqux3WtCk6jtHYFtyiiU.mft
rsync://rpki.ripe.net/repository/DEFAULT/UMXKBp6qqux3WtCk6jtHYFtyiiU.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 22 Apr 2025 19:00:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:59:b9:19:e7:2b:59:63:cc:40:f4:d5:58:15:eb:06:c3
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=50c5ca069eaaaaec775ad0a4ea3b47605b728a25
Validity
Not Before: Apr 21 19:00:25 2025 GMT
Not After : Apr 22 19:00:25 2025 GMT
Subject: CN=8ecd440af06bf4d24b9f4be2276ce20624a86b11
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ce:bb:12:c5:e5:c8:5f:92:95:86:19:d6:b9:88:
0a:38:ad:0b:fd:a7:12:6c:3d:45:81:52:62:f2:44:
a2:e3:cc:e4:6c:1e:1d:9c:46:90:40:f8:7a:f3:13:
4a:13:b6:b1:ac:c7:f8:16:d9:67:db:69:4f:c4:a1:
37:45:fa:fa:a0:09:1f:9b:b2:d5:2b:de:e4:74:46:
ca:b7:9c:8f:0d:5f:48:ff:34:3f:f2:66:18:91:cc:
79:81:3c:7f:99:91:77:98:86:64:8c:3e:68:88:e7:
7a:75:86:4c:31:d7:32:50:ec:14:26:6d:27:a9:b5:
6a:fa:e3:b2:db:36:65:ac:98:11:cb:49:c3:13:7f:
6f:24:cc:9d:46:35:dd:5c:49:6c:82:5f:b0:2a:a4:
3f:bb:5d:de:56:12:c0:41:07:88:5a:c5:d5:80:a4:
15:29:06:3a:ee:7c:41:48:23:07:2e:36:b2:6d:e3:
3e:21:e1:a2:09:92:db:c3:64:f8:ba:75:02:50:ac:
91:6e:fd:db:9c:28:e3:c6:5d:13:0e:4a:f6:8a:e8:
7a:80:cd:83:55:0f:f8:75:fa:76:54:6c:5b:83:1e:
b2:45:55:d6:fe:3f:f3:f0:17:93:77:43:59:a2:9a:
23:ac:67:ba:f5:dd:64:44:b8:1e:45:1f:8a:aa:ba:
88:b1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
8E:CD:44:0A:F0:6B:F4:D2:4B:9F:4B:E2:27:6C:E2:06:24:A8:6B:11
X509v3 Authority Key Identifier:
keyid:50:C5:CA:06:9E:AA:AA:EC:77:5A:D0:A4:EA:3B:47:60:5B:72:8A:25
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/UMXKBp6qqux3WtCk6jtHYFtyiiU.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/7c/cde790-4e3b-4a4e-b84c-556506702a57/1/UMXKBp6qqux3WtCk6jtHYFtyiiU.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/7c/cde790-4e3b-4a4e-b84c-556506702a57/1/UMXKBp6qqux3WtCk6jtHYFtyiiU.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
07:42:c7:f5:26:13:65:17:8f:0a:cc:38:7f:3b:ba:56:48:d8:
48:76:0a:d7:c4:19:1c:dc:f3:92:3c:bd:94:3b:19:96:34:f3:
1d:ec:a7:f9:04:84:57:00:83:79:12:64:67:c2:6e:66:e8:f0:
47:59:fa:00:ce:28:60:51:58:48:d7:44:47:d3:74:c0:54:e0:
d7:71:7b:02:44:5a:eb:f6:e8:30:a4:c7:62:4d:73:97:b7:fa:
c7:fe:5c:e1:07:5d:c9:18:94:ce:43:81:60:0f:c3:49:1b:d2:
86:17:53:a4:62:1a:dc:fc:55:bc:ca:bd:ca:4f:3b:cb:c4:f5:
5d:ca:67:10:79:6f:7b:36:e5:25:1e:1a:78:e7:23:31:b7:81:
6f:f2:de:2a:43:ea:5c:9d:c8:40:a0:b4:d5:76:f7:cc:94:72:
1e:a7:92:ce:24:78:d6:9b:f8:4d:fe:83:d1:1e:1f:6e:13:2b:
54:7e:bc:f8:50:da:f5:89:02:70:97:d8:31:87:85:ad:5b:59:
84:2b:bf:03:03:86:8d:e8:35:8d:b3:76:52:6a:e3:01:79:ab:
aa:7b:36:29:26:1c:97:4f:54:8e:5c:e1:e2:a3:f7:1d:7b:ab:
4f:db:ca:ca:68:db:3d:4b:d9:2c:05:48:66:d0:ec:64:fd:36:
67:d9:08:d4
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Apr 22 01:31:49 2025 by rpki-client