Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/1d/94d485-5d19-46bc-b336-faafe478bdce/1/UVGCTBK9Pir3qYdSSnozqPGdgec.mft
File: UVGCTBK9Pir3qYdSSnozqPGdgec.mft (raw, json)
Hash identifier: LCRZwm3tz4k0T5+4vdHP2TkV0R2zd5et3rYFMtbb9YI=
Subject key identifier: F2:12:8F:09:24:1C:90:0A:D2:87:B7:09:25:6B:80:B3:38:2F:E0:51
Authority key identifier: 51:51:82:4C:12:BD:3E:2A:F7:A9:87:52:4A:7A:33:A8:F1:9D:81:E7
Certificate issuer: /CN=5151824c12bd3e2af7a987524a7a33a8f19d81e7
Certificate serial: 0196059CB12CD6174E9BD10A632C186D656D
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/UVGCTBK9Pir3qYdSSnozqPGdgec.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/1d/94d485-5d19-46bc-b336-faafe478bdce/1/UVGCTBK9Pir3qYdSSnozqPGdgec.mft
Manifest number: 0368
Signing time: Sat 05 Apr 2025 11:01:17 +0000
Manifest this update: Sat 05 Apr 2025 11:01:17 +0000
Manifest next update: Sun 06 Apr 2025 11:01:17 +0000
Files and hashes: 1: UVGCTBK9Pir3qYdSSnozqPGdgec.crl (hash: Be9enYDxZTxB0CV8StDq97aL2mq/3ooSl/I5+BoeaJE=)
2: hoKUli4aEbPshio3YAyMPjWDD2I.roa (hash: LNDSOjwwI6zC2MtTLAkS/ZIKuOM2hHGHi/FcaWDSdts=)
3: tUM5Da4MUfst5wIsOOsmpEfOGwE.roa (hash: MdmE8eHJCOCphCmCHkgM1nje81dzkujZLukjT6aTqIc=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/1d/94d485-5d19-46bc-b336-faafe478bdce/1/UVGCTBK9Pir3qYdSSnozqPGdgec.crl
rsync://rpki.ripe.net/repository/DEFAULT/1d/94d485-5d19-46bc-b336-faafe478bdce/1/UVGCTBK9Pir3qYdSSnozqPGdgec.mft
rsync://rpki.ripe.net/repository/DEFAULT/UVGCTBK9Pir3qYdSSnozqPGdgec.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 06 Apr 2025 11:01:17 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:05:9c:b1:2c:d6:17:4e:9b:d1:0a:63:2c:18:6d:65:6d
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=5151824c12bd3e2af7a987524a7a33a8f19d81e7
Validity
Not Before: Apr 5 11:01:17 2025 GMT
Not After : Apr 6 11:01:17 2025 GMT
Subject: CN=f2128f09241c900ad287b709256b80b3382fe051
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d3:fa:49:a7:44:59:43:01:c5:df:da:a9:e2:93:
21:d0:06:45:81:27:15:f0:8a:9b:37:a3:bb:12:e0:
c4:91:ad:7a:b4:fa:ce:59:39:1f:9a:c6:35:46:5f:
3d:d1:9a:29:f6:2e:1f:63:79:9c:08:53:eb:b8:ce:
0f:97:e9:e0:fd:c5:8c:1a:b0:b1:17:c6:20:c1:62:
a9:fe:07:6c:ba:72:28:4f:a0:46:44:61:a9:7e:dc:
1c:a3:20:fb:e9:3b:cb:e0:7e:db:72:d2:53:31:16:
ae:9a:3a:5e:be:de:23:2e:7d:13:f4:3f:d9:a0:03:
66:48:f7:7e:60:56:32:59:93:d7:f5:15:89:0c:79:
aa:4f:9d:02:9d:e6:82:7e:ef:67:f4:14:f2:8e:b4:
18:f6:dd:ae:f8:aa:1f:5d:bd:13:ef:fc:1a:95:e9:
ef:93:9d:10:16:49:0c:e2:13:ff:e7:02:1d:dd:80:
5d:52:77:94:21:53:92:45:c1:24:da:37:82:e8:51:
c5:fb:99:15:3d:9a:4c:ac:50:d0:d5:af:17:4b:4b:
3c:72:a2:36:2b:39:de:39:0a:c5:fe:6f:60:40:c1:
5b:04:a5:26:80:45:32:28:3a:fd:00:9e:9e:84:97:
47:4a:bb:72:dd:f2:4f:ca:a1:54:20:8b:ac:4a:01:
3e:7f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F2:12:8F:09:24:1C:90:0A:D2:87:B7:09:25:6B:80:B3:38:2F:E0:51
X509v3 Authority Key Identifier:
keyid:51:51:82:4C:12:BD:3E:2A:F7:A9:87:52:4A:7A:33:A8:F1:9D:81:E7
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/UVGCTBK9Pir3qYdSSnozqPGdgec.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/1d/94d485-5d19-46bc-b336-faafe478bdce/1/UVGCTBK9Pir3qYdSSnozqPGdgec.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/1d/94d485-5d19-46bc-b336-faafe478bdce/1/UVGCTBK9Pir3qYdSSnozqPGdgec.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
23:07:ba:cb:c6:44:9c:16:30:4c:ed:59:7c:4f:5c:bd:06:40:
52:a9:f4:af:1f:44:ee:4a:17:bb:54:c6:c0:1a:a2:0d:63:c3:
15:78:13:bd:d7:5c:8c:1d:33:4a:c6:51:5e:6a:33:4b:df:a1:
4a:b2:70:04:ef:af:32:d0:8f:7e:89:bd:8b:11:84:64:c6:7a:
02:7e:7b:4a:14:69:92:81:ef:f8:f8:cc:10:b5:67:17:cd:17:
53:7b:23:1c:0f:af:50:48:3e:29:e6:51:73:ad:b4:6e:80:46:
1f:e1:6d:db:45:e0:3a:33:94:9b:19:3b:dd:c8:d8:cc:73:d4:
d4:f4:fe:44:c7:01:79:df:23:a1:94:03:1d:c9:2e:5c:f0:74:
e3:dc:3c:d2:3f:0d:20:fd:e0:b8:c6:73:b2:4e:c7:ce:b7:50:
a1:89:2c:a2:56:e7:62:ed:9a:3f:1a:54:0d:a2:a3:c9:1c:22:
21:cc:89:10:36:f6:9d:3b:31:97:c7:6f:1f:88:6d:f9:58:19:
48:26:2b:b4:a6:dc:5b:96:78:6a:39:3f:6e:81:f0:77:1c:c4:
2a:e4:08:0d:f4:86:a9:ff:f2:bf:04:20:c8:80:be:53:88:5a:
12:67:ba:ca:a4:00:30:bd:fb:5e:db:db:7f:c6:8d:f6:bf:90:
fe:63:14:74
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 5 16:45:29 2025 by rpki-client