Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/09/1f75cb-c7b9-4529-bdaf-46c7974bd18a/1/UYqkmTdA34rTjZLMDBByNObfoFw.mft
File: UYqkmTdA34rTjZLMDBByNObfoFw.mft (raw, json)
Hash identifier: exKxdw+sFdv+El69adL5qZs/4N054BPNFx5A2Ysby2U=
Subject key identifier: A6:14:B8:BD:44:51:BB:4A:10:F3:92:4B:91:FD:1A:0C:DB:04:14:19
Authority key identifier: 51:8A:A4:99:37:40:DF:8A:D3:8D:92:CC:0C:10:72:34:E6:DF:A0:5C
Certificate issuer: /CN=518aa4993740df8ad38d92cc0c107234e6dfa05c
Certificate serial: 0196556E90CB23FC4CE471B7217BF0DA88DF
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/UYqkmTdA34rTjZLMDBByNObfoFw.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/09/1f75cb-c7b9-4529-bdaf-46c7974bd18a/1/UYqkmTdA34rTjZLMDBByNObfoFw.mft
Manifest number: 14FB
Signing time: Sun 20 Apr 2025 23:00:31 +0000
Manifest this update: Sun 20 Apr 2025 23:00:31 +0000
Manifest next update: Mon 21 Apr 2025 23:00:31 +0000
Files and hashes: 1: UYqkmTdA34rTjZLMDBByNObfoFw.crl (hash: AU3nExRsjKN1BgpbCE0yX+EBWHuAWs3r20/CfpUWLmg=)
2: v6sZNB7vHuDSmuOPiFQ5RwhcXZU.roa (hash: HNoyOAlUbidKG0QWi+a4Ll+NOheRAU20lbJrFUIG14k=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/09/1f75cb-c7b9-4529-bdaf-46c7974bd18a/1/UYqkmTdA34rTjZLMDBByNObfoFw.crl
rsync://rpki.ripe.net/repository/DEFAULT/09/1f75cb-c7b9-4529-bdaf-46c7974bd18a/1/UYqkmTdA34rTjZLMDBByNObfoFw.mft
rsync://rpki.ripe.net/repository/DEFAULT/UYqkmTdA34rTjZLMDBByNObfoFw.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 21 Apr 2025 16:00:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:55:6e:90:cb:23:fc:4c:e4:71:b7:21:7b:f0:da:88:df
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=518aa4993740df8ad38d92cc0c107234e6dfa05c
Validity
Not Before: Apr 20 23:00:31 2025 GMT
Not After : Apr 21 23:00:31 2025 GMT
Subject: CN=a614b8bd4451bb4a10f3924b91fd1a0cdb041419
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e4:34:63:2e:bd:a6:bb:f0:c1:cb:16:8a:d0:d7:
45:a8:9a:6e:86:7e:b2:e9:9b:4f:f5:62:36:52:0e:
da:3b:a5:4f:69:e0:82:ad:8f:eb:09:f1:1c:6b:60:
6e:f1:21:88:17:c1:f9:91:d5:b8:69:6d:2d:e7:cb:
ed:59:52:b6:4e:67:de:fc:d2:2d:eb:ef:da:77:75:
aa:cd:27:9d:ce:c7:89:16:6e:0d:a9:84:9d:b0:60:
d6:5b:3f:93:e8:b7:91:aa:89:e5:89:0a:df:8c:f5:
d2:d9:74:c5:56:cb:f0:07:0b:fc:7f:28:f0:cd:32:
06:e9:96:ad:07:d0:9c:fe:d6:59:5d:90:cd:b4:b4:
b3:3a:46:fd:fe:94:12:e4:e4:82:f4:36:46:70:5f:
e0:70:ce:6a:26:bb:33:b7:95:5c:ae:ee:1e:8b:ea:
82:01:46:73:5c:aa:59:b3:d5:12:93:5f:06:5a:ee:
62:7e:e1:10:17:f2:d9:90:35:a4:3e:fb:f1:da:8b:
65:61:7c:55:a3:5b:36:6b:4c:0b:ee:eb:28:1c:90:
39:40:0c:56:3d:2a:57:fa:6d:87:1d:06:c7:c2:b3:
55:a5:c2:32:17:4a:d5:da:4b:d0:67:88:d5:28:ed:
cd:2a:a4:fe:68:97:a6:fe:e6:c0:36:ac:61:71:e9:
4e:1f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A6:14:B8:BD:44:51:BB:4A:10:F3:92:4B:91:FD:1A:0C:DB:04:14:19
X509v3 Authority Key Identifier:
keyid:51:8A:A4:99:37:40:DF:8A:D3:8D:92:CC:0C:10:72:34:E6:DF:A0:5C
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/UYqkmTdA34rTjZLMDBByNObfoFw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/09/1f75cb-c7b9-4529-bdaf-46c7974bd18a/1/UYqkmTdA34rTjZLMDBByNObfoFw.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/09/1f75cb-c7b9-4529-bdaf-46c7974bd18a/1/UYqkmTdA34rTjZLMDBByNObfoFw.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
4e:c6:bb:61:62:76:80:0a:f3:ae:22:b9:18:35:86:c5:94:c3:
89:b6:dc:84:b8:1e:aa:4c:4c:28:43:59:76:4b:dd:98:a5:51:
68:c2:bd:28:de:47:e7:e7:c4:33:f2:fb:03:53:c0:47:fc:37:
d7:d5:fa:38:70:4f:4c:36:5e:3a:7e:1a:d6:b8:e0:dc:a5:a9:
78:15:7f:f9:e6:35:f1:7e:78:e7:6e:5c:2b:08:13:c0:a4:a5:
dd:cf:c6:38:56:bc:6a:fd:19:7f:8b:ba:75:0a:ac:73:24:45:
f1:63:1e:39:60:9c:61:1b:5c:48:72:84:04:c2:e3:ae:90:29:
b7:85:cf:a9:a0:e9:b7:5d:b9:c2:ab:7c:87:ed:31:df:d0:40:
dc:03:38:29:2d:90:6b:68:b3:84:92:55:2d:85:50:a0:2a:e7:
8d:3c:85:75:ce:4f:1f:78:a2:b2:7c:50:8d:ea:c7:04:19:77:
9c:db:4b:1c:07:66:f6:e8:00:06:8d:32:67:6d:c8:d5:31:8e:
22:49:43:7b:c8:55:d0:c0:0d:31:5c:e4:48:5e:9f:2e:da:51:
cc:11:11:51:4b:68:42:bb:8a:d6:e1:a8:d4:c4:c0:dc:9e:5e:
fb:50:7c:5d:61:f8:eb:33:2d:17:93:18:2a:5e:4b:64:c3:2f:
eb:49:67:cc
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 21 01:30:44 2025 by rpki-client