Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/98/78c577-8f98-40b2-b01d-10777f9e3685/1/Uy0eQUJIGbzAzWN9juFB_qWF0A0.mft
File: Uy0eQUJIGbzAzWN9juFB_qWF0A0.mft (raw, json)
Hash identifier: Ej0kK038y0r4jbpBeLvXv+dPCIRBVGunfkHKg03U0a8=
Subject key identifier: FA:81:37:0C:4B:9F:07:DB:A1:FC:54:A8:0F:CF:8D:5E:AB:43:17:6B
Authority key identifier: 53:2D:1E:41:42:48:19:BC:C0:CD:63:7D:8E:E1:41:FE:A5:85:D0:0D
Certificate issuer: /CN=532d1e41424819bcc0cd637d8ee141fea585d00d
Certificate serial: 019656133647D63B9A290F266B8323A90C01
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Uy0eQUJIGbzAzWN9juFB_qWF0A0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/98/78c577-8f98-40b2-b01d-10777f9e3685/1/Uy0eQUJIGbzAzWN9juFB_qWF0A0.mft
Manifest number: 0C3D
Signing time: Mon 21 Apr 2025 02:00:21 +0000
Manifest this update: Mon 21 Apr 2025 02:00:21 +0000
Manifest next update: Tue 22 Apr 2025 02:00:21 +0000
Files and hashes: 1: NrO5uxpBltZKQFNCZNNHliY-rU8.roa (hash: H7ZqTQbit+ghJClKxAhoy+MVGNOjRvvuQLbti4QMTQs=)
2: Uy0eQUJIGbzAzWN9juFB_qWF0A0.crl (hash: 9KLFts9udc1ijd391QS0z2N2MBZDgsyXytwmB2e2sFc=)
3: isc6BCjToI_oFbMf0jYX-ynn-ak.roa (hash: XnxC31mu4h2nbud6+tfa/Ol2F+NbnVuQI1Ua6CJm+PY=)
4: xejR1HTIfQTs9ku3Ssof6e6AvFo.roa (hash: WqULQW85X208UyMTLcJvRmwxLauSYG2culO7l9VmGH4=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/98/78c577-8f98-40b2-b01d-10777f9e3685/1/Uy0eQUJIGbzAzWN9juFB_qWF0A0.crl
rsync://rpki.ripe.net/repository/DEFAULT/98/78c577-8f98-40b2-b01d-10777f9e3685/1/Uy0eQUJIGbzAzWN9juFB_qWF0A0.mft
rsync://rpki.ripe.net/repository/DEFAULT/Uy0eQUJIGbzAzWN9juFB_qWF0A0.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 22 Apr 2025 01:00:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:56:13:36:47:d6:3b:9a:29:0f:26:6b:83:23:a9:0c:01
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=532d1e41424819bcc0cd637d8ee141fea585d00d
Validity
Not Before: Apr 21 02:00:21 2025 GMT
Not After : Apr 22 02:00:21 2025 GMT
Subject: CN=fa81370c4b9f07dba1fc54a80fcf8d5eab43176b
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ec:e8:7a:91:86:61:a5:07:b4:99:be:b5:87:fb:
7d:c4:d5:3e:66:1b:fd:c1:0f:05:43:b2:f3:10:5f:
26:6e:02:9a:52:25:ac:f4:8c:9b:4c:35:67:05:c4:
c7:e3:d5:36:de:cc:b1:45:77:66:e9:b3:3a:48:a9:
3d:ed:49:58:c4:28:7e:65:cf:f6:be:ef:18:dc:0c:
ef:77:3e:04:bb:67:4a:2f:b3:77:b6:8d:92:92:13:
8b:32:d0:1f:dd:c2:ad:2c:d1:dc:71:15:4e:06:3b:
a2:8b:65:f6:16:df:a4:21:e9:55:ba:60:86:9c:13:
a0:5d:7f:9d:ec:b4:f3:37:c8:48:ca:8c:2f:75:4d:
3c:16:29:d0:b9:2e:d5:30:38:f0:04:c7:52:ef:cd:
3a:36:01:6c:52:55:05:94:9c:00:b1:bd:8d:7a:53:
cd:e7:e6:1f:e4:e7:64:31:34:1a:94:ef:95:e1:7d:
86:27:f9:bd:e5:a3:7c:a2:9b:b6:b9:15:4a:64:6d:
47:56:de:02:c7:e0:1e:56:33:e6:3d:25:38:28:26:
45:b8:c9:3f:96:da:90:4f:1f:03:65:bc:dc:65:42:
a6:ba:a8:96:41:18:3f:ec:1d:9b:f0:dd:4a:00:fd:
0b:7d:e5:ba:aa:72:bc:98:bd:cc:bc:46:60:b5:37:
45:d1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
FA:81:37:0C:4B:9F:07:DB:A1:FC:54:A8:0F:CF:8D:5E:AB:43:17:6B
X509v3 Authority Key Identifier:
keyid:53:2D:1E:41:42:48:19:BC:C0:CD:63:7D:8E:E1:41:FE:A5:85:D0:0D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Uy0eQUJIGbzAzWN9juFB_qWF0A0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/98/78c577-8f98-40b2-b01d-10777f9e3685/1/Uy0eQUJIGbzAzWN9juFB_qWF0A0.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/98/78c577-8f98-40b2-b01d-10777f9e3685/1/Uy0eQUJIGbzAzWN9juFB_qWF0A0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
39:5a:4a:d3:6d:c1:7b:80:af:60:6a:9f:54:69:ba:89:ba:83:
2c:c2:a1:d9:ef:a8:be:af:b9:18:df:2e:4b:ae:5c:f8:28:66:
78:d2:b5:e4:c2:b2:90:16:33:36:2d:a7:22:da:72:3c:dd:b2:
e5:29:30:ca:b1:f6:db:eb:b1:02:05:86:58:29:8a:6e:da:64:
09:46:c0:41:bb:97:9e:dd:4c:41:b8:a8:b7:cb:cc:cb:75:93:
0a:ce:da:b6:b7:77:2b:82:4f:ce:12:26:5e:51:b9:6e:37:48:
14:0e:8a:13:9c:43:3f:9f:68:2d:16:6d:98:fc:29:5d:8f:29:
ab:c7:c1:78:b2:2b:3f:c6:ce:da:35:5f:7c:d8:47:9d:67:f9:
81:76:0e:ba:a8:f4:0b:a0:d4:f8:8c:a0:f1:82:9a:8f:73:9b:
d6:9a:9f:41:9b:cd:3c:6b:27:c7:8c:a1:bf:82:e4:94:fd:fd:
1c:ed:29:bf:44:d5:ba:1b:66:70:4c:f9:ba:77:ff:d9:a2:42:
7a:a2:b4:77:31:03:52:2f:ed:06:2a:ed:6b:c0:7c:66:8a:67:
2d:79:ca:f1:82:79:14:59:77:08:c4:08:97:af:1f:0c:d6:b7:
01:2f:9e:d1:b1:e6:1f:ca:c3:b2:0f:9c:e5:e4:e1:e2:ee:d2:
48:8e:2e:ae
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 21 05:36:01 2025 by rpki-client