Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/90/76a60e-0d81-4c41-b889-91fc0f51ea07/1/UUtNPv-4vQsTNu68uCe3fhKeD28.mft
File: UUtNPv-4vQsTNu68uCe3fhKeD28.mft (raw, json)
Hash identifier: VZI/9pS/pPkwN4JUI34e1TlelmQPh47Ne5+c8vUMXPA=
Subject key identifier: DB:57:6B:01:40:EA:A8:B1:3A:3C:2B:72:84:FA:04:A0:12:A9:7B:96
Authority key identifier: 51:4B:4D:3E:FF:B8:BD:0B:13:36:EE:BC:B8:27:B7:7E:12:9E:0F:6F
Certificate issuer: /CN=514b4d3effb8bd0b1336eebcb827b77e129e0f6f
Certificate serial: 019654C9E1D98361980251D8AAAA8815DBF5
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/UUtNPv-4vQsTNu68uCe3fhKeD28.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/90/76a60e-0d81-4c41-b889-91fc0f51ea07/1/UUtNPv-4vQsTNu68uCe3fhKeD28.mft
Manifest number: 0969
Signing time: Sun 20 Apr 2025 20:00:38 +0000
Manifest this update: Sun 20 Apr 2025 20:00:38 +0000
Manifest next update: Mon 21 Apr 2025 20:00:38 +0000
Files and hashes: 1: DkmUUaZoynIEdlR9hMmyYSS3NfA.roa (hash: JaWDKrMwIijsWs6TG8arC0MUQjJ3dz0V76FJO19Gqec=)
2: UUtNPv-4vQsTNu68uCe3fhKeD28.crl (hash: DN3lHKdqeNGIf3uBcCTO6JJAGVl8MNz9oi4qG52qlmE=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/90/76a60e-0d81-4c41-b889-91fc0f51ea07/1/UUtNPv-4vQsTNu68uCe3fhKeD28.crl
rsync://rpki.ripe.net/repository/DEFAULT/90/76a60e-0d81-4c41-b889-91fc0f51ea07/1/UUtNPv-4vQsTNu68uCe3fhKeD28.mft
rsync://rpki.ripe.net/repository/DEFAULT/UUtNPv-4vQsTNu68uCe3fhKeD28.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 21 Apr 2025 20:00:38 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:54:c9:e1:d9:83:61:98:02:51:d8:aa:aa:88:15:db:f5
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=514b4d3effb8bd0b1336eebcb827b77e129e0f6f
Validity
Not Before: Apr 20 20:00:38 2025 GMT
Not After : Apr 21 20:00:38 2025 GMT
Subject: CN=db576b0140eaa8b13a3c2b7284fa04a012a97b96
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b1:35:4c:c9:e5:0c:88:c6:26:52:18:d5:52:0d:
91:53:df:f9:0b:64:ee:24:7c:46:dc:3b:1e:da:85:
65:35:46:08:8f:5c:e8:c2:0d:8e:f2:e0:48:ad:42:
f7:66:98:d1:3d:02:df:bf:83:b1:37:6e:68:68:f4:
85:b4:99:46:4a:06:31:00:e9:e5:fe:f0:79:1e:88:
1e:a1:62:de:4b:f9:94:9a:49:e5:e7:63:a3:60:59:
0e:d4:f0:9b:e6:e1:50:e8:ad:9f:a0:b6:d3:21:04:
eb:17:45:5b:7c:ce:88:48:bc:c5:ee:c9:68:bf:d4:
4b:d5:fe:1c:11:cd:6a:93:8c:58:b5:14:09:7b:94:
78:ef:ec:a5:17:f5:03:21:3e:35:fa:4a:f2:77:2d:
fd:cb:60:8a:b4:79:7d:51:a2:bf:fe:e6:d6:43:5a:
d6:01:b7:08:a4:3b:50:c5:ce:90:f6:9b:e7:1f:9d:
41:58:b3:59:79:93:44:c6:27:f1:03:f2:15:e8:cd:
83:6f:a8:68:8b:fc:65:5c:5c:49:02:4f:65:d5:e3:
0e:50:6f:b3:e1:ac:0b:cf:23:96:da:00:a1:b0:01:
07:86:ee:cf:1f:e0:10:51:2e:ef:61:af:30:2f:8b:
60:e3:6e:41:1c:21:30:84:43:42:d4:d3:ff:30:d6:
81:af
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
DB:57:6B:01:40:EA:A8:B1:3A:3C:2B:72:84:FA:04:A0:12:A9:7B:96
X509v3 Authority Key Identifier:
keyid:51:4B:4D:3E:FF:B8:BD:0B:13:36:EE:BC:B8:27:B7:7E:12:9E:0F:6F
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/UUtNPv-4vQsTNu68uCe3fhKeD28.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/90/76a60e-0d81-4c41-b889-91fc0f51ea07/1/UUtNPv-4vQsTNu68uCe3fhKeD28.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/90/76a60e-0d81-4c41-b889-91fc0f51ea07/1/UUtNPv-4vQsTNu68uCe3fhKeD28.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
42:f8:e4:89:87:e3:20:06:eb:31:58:f2:1e:c1:f4:13:0a:70:
c0:48:2e:ee:4b:62:39:87:f6:53:b6:4b:9c:b1:6e:ce:b3:8a:
7e:81:c8:35:82:67:7c:7d:5f:54:7e:01:d2:2e:7f:ef:7d:45:
cc:ca:02:08:c5:c4:45:3e:fa:4e:68:42:77:4e:ad:94:af:c2:
d5:d9:19:ec:53:67:b9:39:d3:c6:dd:4a:e6:fc:9a:38:5c:fa:
ac:59:3d:f5:b2:45:62:61:e7:e6:53:7c:65:b0:41:42:e5:4c:
70:eb:84:d8:a3:1e:60:1b:fb:41:81:d8:41:96:ef:ef:28:d7:
0d:be:3d:78:81:6b:c4:ef:ae:cd:f2:50:7b:ff:8d:d3:9e:f1:
29:1c:b0:6c:66:c9:89:f6:1a:94:96:64:2e:bf:30:42:cd:b0:
b1:d5:1f:bc:5a:bd:46:01:fb:3d:70:43:c7:21:98:75:62:97:
2b:50:a8:1e:9c:ec:59:3a:93:85:bf:ae:48:c7:85:7b:03:17:
56:51:e4:75:a9:6b:69:99:46:5c:82:f3:90:87:a0:6a:e5:a7:
72:0c:51:6f:93:7b:e9:de:3b:e1:5d:e4:f1:ec:9e:5d:62:25:
1d:3a:50:f6:53:34:81:f5:c6:aa:10:c0:41:bd:59:83:f5:8e:
e7:87:68:b3
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 21 04:06:37 2025 by rpki-client