Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b0/d2cec5-b245-4547-a9cd-f6c644c94608/1/c_umgtacHRBwjte2rqojLuibkB0.mft
File: c_umgtacHRBwjte2rqojLuibkB0.mft (raw, json)
Hash identifier: 4C4kYhNsVJibZDyAYa5udbsJ/wzh1nA1U/xv+Vmn/ZM=
Subject key identifier: 5D:CF:FE:0A:49:C3:11:6A:5B:6C:3A:A3:95:18:5F:73:07:A8:8F:52
Authority key identifier: 73:FB:A6:82:D6:9C:1D:10:70:8E:D7:B6:AE:AA:23:2E:E8:9B:90:1D
Certificate issuer: /CN=73fba682d69c1d10708ed7b6aeaa232ee89b901d
Certificate serial: 019650485455F074220AD438FBE093875C9D
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/c_umgtacHRBwjte2rqojLuibkB0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/b0/d2cec5-b245-4547-a9cd-f6c644c94608/1/c_umgtacHRBwjte2rqojLuibkB0.mft
Manifest number: 0E3A
Signing time: Sat 19 Apr 2025 23:00:39 +0000
Manifest this update: Sat 19 Apr 2025 23:00:39 +0000
Manifest next update: Sun 20 Apr 2025 23:00:39 +0000
Files and hashes: 1: VFafoaVO2bN0O_eWCA7NRDo9AQI.roa (hash: ZCSixYQYQeBNPNi+wxPK+CWr+k+nO4o0D+w9LRSwgUE=)
2: c_umgtacHRBwjte2rqojLuibkB0.crl (hash: ojyoT8o+1on6p+dl/lI2Nt65WLqBkCsv3gSD3BtnPpA=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/b0/d2cec5-b245-4547-a9cd-f6c644c94608/1/c_umgtacHRBwjte2rqojLuibkB0.crl
rsync://rpki.ripe.net/repository/DEFAULT/b0/d2cec5-b245-4547-a9cd-f6c644c94608/1/c_umgtacHRBwjte2rqojLuibkB0.mft
rsync://rpki.ripe.net/repository/DEFAULT/c_umgtacHRBwjte2rqojLuibkB0.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 20 Apr 2025 22:00:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:50:48:54:55:f0:74:22:0a:d4:38:fb:e0:93:87:5c:9d
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=73fba682d69c1d10708ed7b6aeaa232ee89b901d
Validity
Not Before: Apr 19 23:00:39 2025 GMT
Not After : Apr 20 23:00:39 2025 GMT
Subject: CN=5dcffe0a49c3116a5b6c3aa395185f7307a88f52
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:aa:81:5b:60:38:20:de:e7:45:c1:15:8e:3e:66:
7e:23:4d:cf:06:7e:c9:1d:e8:12:69:3e:90:4f:1f:
a8:e2:76:02:ae:d4:30:1e:98:e2:34:ae:42:00:9e:
3e:d1:e8:58:93:43:2f:d5:d4:9b:87:09:4a:27:90:
a5:8e:40:42:de:48:db:1d:cb:04:96:a9:7d:9f:5b:
5e:91:46:e1:6d:21:dc:11:33:cc:23:80:57:14:f4:
a7:20:96:5c:8e:6c:06:f9:4a:88:73:54:35:3a:cc:
01:6e:2b:5a:4a:0c:81:0a:19:cc:1b:25:01:3f:f1:
9d:61:ed:d7:f9:33:e5:e8:f1:d3:68:f6:2c:08:f3:
18:92:fa:96:e9:af:81:8e:24:6b:25:55:eb:01:44:
a7:ad:be:24:be:f5:00:36:c6:eb:c5:fa:fe:cb:e9:
87:91:71:f9:9f:6d:5f:d4:05:d5:4f:4f:10:6a:6f:
5a:bc:9b:57:4c:be:b4:5b:59:19:57:45:b7:20:85:
79:65:48:5d:42:f2:39:94:25:e1:05:ed:c4:b1:14:
82:49:c7:a1:2a:88:5d:38:91:72:ef:95:77:76:6d:
16:2c:f3:c0:6b:f4:5c:35:a8:0a:45:48:82:89:f9:
39:d7:7d:ac:b9:89:a5:6e:6e:a2:12:a9:29:b1:4a:
41:09
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
5D:CF:FE:0A:49:C3:11:6A:5B:6C:3A:A3:95:18:5F:73:07:A8:8F:52
X509v3 Authority Key Identifier:
keyid:73:FB:A6:82:D6:9C:1D:10:70:8E:D7:B6:AE:AA:23:2E:E8:9B:90:1D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/c_umgtacHRBwjte2rqojLuibkB0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b0/d2cec5-b245-4547-a9cd-f6c644c94608/1/c_umgtacHRBwjte2rqojLuibkB0.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/b0/d2cec5-b245-4547-a9cd-f6c644c94608/1/c_umgtacHRBwjte2rqojLuibkB0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
a0:14:94:05:c1:71:54:52:0e:c8:d2:c0:3b:3d:71:d3:d0:e6:
0a:b2:2d:7c:97:84:05:9a:6e:64:86:39:29:59:41:3e:7d:0b:
d4:4d:06:62:68:1b:04:17:01:4a:e7:59:28:17:34:be:23:ee:
c7:91:e2:d8:69:a6:76:9c:c6:8e:72:53:6e:f7:2e:a2:e4:ab:
93:05:d1:f4:3d:54:57:38:c8:c6:81:38:21:fa:1b:fb:f1:ab:
11:30:30:98:a5:95:ab:cc:4b:e9:9a:d7:7d:4a:40:70:4e:a1:
51:22:11:03:33:58:2e:06:25:25:1a:30:cd:cd:09:49:24:a0:
28:e5:43:67:70:0b:7d:f7:f9:5a:06:c9:68:8c:eb:be:a9:a5:
01:95:1b:b7:30:86:51:84:3b:33:34:23:24:91:0e:fb:53:bc:
54:73:c1:86:56:d4:90:c4:df:b4:cc:cd:ca:f4:30:77:c0:5c:
1d:34:e3:a6:6d:37:ea:fc:9c:14:94:66:91:6a:e9:a9:c3:92:
b1:d7:58:67:30:d0:8e:47:63:fa:c9:a1:f6:a7:de:e6:2d:24:
f7:7e:48:32:8a:ff:2f:72:15:03:04:83:6c:6d:91:cc:08:73:
d3:f7:4b:dd:39:45:0f:b3:4f:89:c1:25:f9:45:5c:98:6d:47:
53:f9:71:3c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Apr 20 05:01:56 2025 by rpki-client