Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/9c/d5dd1a-7b59-4435-abdf-28d0f202e36d/1/UJ85HynZIHi6bix2-qL4rpRzQ-Y.mft
File: UJ85HynZIHi6bix2-qL4rpRzQ-Y.mft (raw, json)
Hash identifier: IpRSQibyt4dY1n9hkMO++fqjCFsXxS+mCzzvXEw4W9M=
Subject key identifier: 15:39:88:70:2A:B2:87:F1:A6:6C:0F:47:C0:40:2E:87:B2:58:A2:EE
Authority key identifier: 50:9F:39:1F:29:D9:20:78:BA:6E:2C:76:FA:A2:F8:AE:94:73:43:E6
Certificate issuer: /CN=509f391f29d92078ba6e2c76faa2f8ae947343e6
Certificate serial: 01965500E519011E2C458BB23DBD5E0A3684
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/UJ85HynZIHi6bix2-qL4rpRzQ-Y.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/9c/d5dd1a-7b59-4435-abdf-28d0f202e36d/1/UJ85HynZIHi6bix2-qL4rpRzQ-Y.mft
Manifest number: 14FD
Signing time: Sun 20 Apr 2025 21:00:43 +0000
Manifest this update: Sun 20 Apr 2025 21:00:43 +0000
Manifest next update: Mon 21 Apr 2025 21:00:43 +0000
Files and hashes: 1: UJ85HynZIHi6bix2-qL4rpRzQ-Y.crl (hash: GOvN/GQ+wf5yKqeVL9E9A+VG3UjfI5IZGyilivPvWPA=)
2: VIK5LfegEju3TUqgukYni1TBj7k.roa (hash: FcCMQfjXZEhJ1ZtbvXFYBrE4X/DK9/KBh+K8ZP9nlZ8=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/9c/d5dd1a-7b59-4435-abdf-28d0f202e36d/1/UJ85HynZIHi6bix2-qL4rpRzQ-Y.crl
rsync://rpki.ripe.net/repository/DEFAULT/9c/d5dd1a-7b59-4435-abdf-28d0f202e36d/1/UJ85HynZIHi6bix2-qL4rpRzQ-Y.mft
rsync://rpki.ripe.net/repository/DEFAULT/UJ85HynZIHi6bix2-qL4rpRzQ-Y.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 21 Apr 2025 21:00:43 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:55:00:e5:19:01:1e:2c:45:8b:b2:3d:bd:5e:0a:36:84
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=509f391f29d92078ba6e2c76faa2f8ae947343e6
Validity
Not Before: Apr 20 21:00:43 2025 GMT
Not After : Apr 21 21:00:43 2025 GMT
Subject: CN=153988702ab287f1a66c0f47c0402e87b258a2ee
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cb:6a:3e:f6:a1:1d:3a:3e:fd:3e:59:dd:4c:90:
b7:fd:40:e0:3a:a9:0e:f2:ad:57:d1:5a:eb:2e:13:
35:28:64:1a:93:fe:74:90:b7:76:2b:95:65:1b:7e:
9e:44:66:01:97:53:a4:a1:77:28:ba:de:95:cf:97:
83:53:8f:11:6c:8e:58:dd:45:f7:b1:f9:ed:bb:73:
7d:38:ea:d0:f7:f7:1c:4b:14:e9:31:df:63:fd:5a:
6d:a5:f2:26:a4:5e:74:9a:d4:7a:94:b6:86:60:2d:
3a:47:c3:e6:b9:b7:49:1d:ad:f4:aa:0e:a8:af:6d:
85:c7:8a:6e:c2:93:8f:13:bf:f1:24:77:f0:f7:32:
2f:97:4a:8f:05:eb:d7:f0:4e:da:f8:d6:50:76:97:
a9:16:de:fd:cf:07:f1:29:43:ca:e0:32:0d:a8:1e:
cd:23:06:cf:14:80:45:d8:15:21:a2:0b:3b:fc:84:
c1:42:68:07:f7:77:8f:9d:ce:8d:a7:a3:9f:87:96:
ee:15:a1:d9:37:70:c9:53:72:4b:51:5e:df:ee:51:
6c:28:6d:ac:0a:6f:bf:03:72:d0:94:ab:69:21:e5:
ab:05:23:6c:ba:96:08:2c:2a:2b:13:a2:0d:92:90:
3b:66:11:84:73:78:5f:4e:77:1a:39:06:13:b2:e8:
52:83
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
15:39:88:70:2A:B2:87:F1:A6:6C:0F:47:C0:40:2E:87:B2:58:A2:EE
X509v3 Authority Key Identifier:
keyid:50:9F:39:1F:29:D9:20:78:BA:6E:2C:76:FA:A2:F8:AE:94:73:43:E6
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/UJ85HynZIHi6bix2-qL4rpRzQ-Y.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/9c/d5dd1a-7b59-4435-abdf-28d0f202e36d/1/UJ85HynZIHi6bix2-qL4rpRzQ-Y.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/9c/d5dd1a-7b59-4435-abdf-28d0f202e36d/1/UJ85HynZIHi6bix2-qL4rpRzQ-Y.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
23:cf:7b:5b:d9:91:d5:61:b1:89:20:e8:ec:ee:b0:7d:12:01:
bd:e5:ad:cc:d8:4e:5b:ca:a0:25:78:d5:0f:89:9e:69:2a:b7:
1a:1f:cd:70:79:47:ab:9a:c8:ef:19:5a:c9:b3:1c:1f:b0:f1:
03:7d:44:99:1e:cd:2a:16:59:d3:c0:27:3b:b9:21:2e:52:48:
03:38:89:d8:0a:fe:b3:55:3e:2d:3f:a0:0a:ad:1d:8a:43:62:
8c:4d:a9:dd:c0:6c:de:c9:4b:f3:ab:7f:87:1a:0d:32:32:6b:
cd:75:c8:b7:92:6c:40:24:9c:d5:1c:4f:68:89:90:e0:bf:c4:
e4:1e:02:2c:5a:9d:15:5b:17:ef:f5:f7:de:6a:50:e9:96:47:
49:ba:27:8a:22:e4:c0:98:8a:cb:09:dd:65:f2:3a:fb:49:f4:
7c:db:86:47:e0:2f:52:fc:7e:d9:83:d2:79:76:ba:6c:05:5b:
be:bc:dd:b8:ed:f7:d9:38:c8:0e:8f:e8:28:04:ea:c8:2d:bf:
e7:5a:0a:58:f1:88:e5:10:47:ef:dc:02:f6:77:7d:e2:64:c4:
89:d6:4f:53:a3:90:29:0d:b8:93:49:45:7b:40:17:50:fa:53:
f6:dd:59:6f:62:ba:42:a8:5e:15:9f:22:31:78:a9:c6:66:cc:
04:0b:fc:22
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 21 04:12:50 2025 by rpki-client