Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/23/c62d00-ffa8-43be-a2bd-7bd9e5f467ad/1/UWJgaJQlhs6VcCEDusiZ0j_PckI.mft
File: UWJgaJQlhs6VcCEDusiZ0j_PckI.mft (raw, json)
Hash identifier: LtZE+DJU6cL3SqVWhuPqfsXv6QIZwOjmMd2kx7wf0R0=
Subject key identifier: 4A:94:68:0A:D7:20:EF:F8:23:A6:9F:4A:B0:50:4C:70:94:5C:96:2A
Authority key identifier: 51:62:60:68:94:25:86:CE:95:70:21:03:BA:C8:99:D2:3F:CF:72:42
Certificate issuer: /CN=51626068942586ce95702103bac899d23fcf7242
Certificate serial: 0196451F9D8766F9839B7C2D19A3BB2AE98F
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/UWJgaJQlhs6VcCEDusiZ0j_PckI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/23/c62d00-ffa8-43be-a2bd-7bd9e5f467ad/1/UWJgaJQlhs6VcCEDusiZ0j_PckI.mft
Manifest number: 14F7
Signing time: Thu 17 Apr 2025 19:00:21 +0000
Manifest this update: Thu 17 Apr 2025 19:00:21 +0000
Manifest next update: Fri 18 Apr 2025 19:00:21 +0000
Files and hashes: 1: FAtymmkCe6OSJEcPV_Hsc91u3dE.roa (hash: aLoKF1mAozJf+kgQkDeGL4QfI5DgmXzGdTqo0LToX+c=)
2: UWJgaJQlhs6VcCEDusiZ0j_PckI.crl (hash: 2PuOm6N73z9yFiw9JcOI/qjNw9I5IZL5Sw1cxQbalr0=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/23/c62d00-ffa8-43be-a2bd-7bd9e5f467ad/1/UWJgaJQlhs6VcCEDusiZ0j_PckI.crl
rsync://rpki.ripe.net/repository/DEFAULT/23/c62d00-ffa8-43be-a2bd-7bd9e5f467ad/1/UWJgaJQlhs6VcCEDusiZ0j_PckI.mft
rsync://rpki.ripe.net/repository/DEFAULT/UWJgaJQlhs6VcCEDusiZ0j_PckI.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 18 Apr 2025 16:00:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:45:1f:9d:87:66:f9:83:9b:7c:2d:19:a3:bb:2a:e9:8f
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=51626068942586ce95702103bac899d23fcf7242
Validity
Not Before: Apr 17 19:00:21 2025 GMT
Not After : Apr 18 19:00:21 2025 GMT
Subject: CN=4a94680ad720eff823a69f4ab0504c70945c962a
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:95:3f:79:d7:f6:da:bd:2e:44:ed:a5:c9:99:04:
47:fb:23:e8:c5:09:dd:af:de:d8:f6:8c:3e:f4:fe:
1a:fc:cd:22:e2:c0:d4:e9:6b:98:e2:bd:61:a0:14:
7c:46:08:bb:38:ac:a6:df:76:77:e5:c5:24:d0:a7:
38:79:fc:9f:b2:59:e5:90:45:aa:89:2c:61:f3:9b:
d1:d1:34:0e:59:02:31:67:e6:1e:f7:50:82:a4:c1:
4e:f8:c4:db:08:3e:10:33:d6:d3:9d:0d:0e:db:42:
5e:80:e8:c0:a4:4c:b3:36:fd:ec:f0:e6:90:f6:ce:
c8:98:7f:d9:e7:ee:2c:26:b7:6d:ce:1e:3b:af:21:
07:1e:8a:40:c2:96:50:c0:ae:6d:14:e9:32:52:e4:
0f:19:48:e0:76:83:a1:f2:00:8d:f0:3e:4b:71:f0:
fc:97:83:6a:db:ef:b2:30:a9:38:82:07:9e:c8:0e:
87:dc:53:45:76:5b:d5:be:ad:6c:a4:85:50:3b:37:
e5:53:cb:f7:6f:b4:4f:e5:95:3f:a1:09:29:58:29:
a2:2d:58:15:77:eb:ee:e9:00:cb:db:11:b5:91:f3:
82:1e:63:82:ef:69:42:58:f7:5d:8c:c4:25:e9:dd:
0c:7f:73:76:d5:01:32:de:39:98:7f:af:c7:8c:5a:
18:8b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
4A:94:68:0A:D7:20:EF:F8:23:A6:9F:4A:B0:50:4C:70:94:5C:96:2A
X509v3 Authority Key Identifier:
keyid:51:62:60:68:94:25:86:CE:95:70:21:03:BA:C8:99:D2:3F:CF:72:42
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/UWJgaJQlhs6VcCEDusiZ0j_PckI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/23/c62d00-ffa8-43be-a2bd-7bd9e5f467ad/1/UWJgaJQlhs6VcCEDusiZ0j_PckI.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/23/c62d00-ffa8-43be-a2bd-7bd9e5f467ad/1/UWJgaJQlhs6VcCEDusiZ0j_PckI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
59:5a:33:9c:b2:48:88:3d:af:5d:4a:dc:e8:14:da:cc:55:0b:
40:fc:a4:be:09:40:02:30:10:66:b9:ad:28:60:ce:a2:aa:a3:
48:ff:dc:b1:ba:59:c8:77:04:c0:26:63:69:d1:11:7b:9a:6d:
b2:40:f4:da:0c:dd:28:d6:ae:a4:c6:4e:60:4e:81:95:c8:b3:
e7:f7:4c:26:8e:43:4b:7d:10:f5:b3:10:72:ed:f5:51:92:52:
31:31:df:12:64:32:b9:2f:f7:6a:30:87:bc:3a:09:6a:62:da:
16:5f:8d:91:ff:87:f2:8e:20:db:34:6b:99:b1:29:bb:70:90:
65:f2:12:d5:d1:30:1e:28:e1:7e:26:a9:c2:d3:d0:34:40:e0:
f1:88:43:d2:a3:98:3e:7c:44:db:fd:c2:8f:bd:54:e0:33:76:
1e:88:f4:19:02:24:da:8d:df:c7:54:f3:8f:5b:75:4d:fe:53:
17:93:a8:4f:5d:af:be:b4:f1:66:3e:8d:d9:fa:91:03:d0:39:
01:75:bb:31:42:f4:aa:85:a0:a4:7f:5d:43:ad:7d:97:70:b9:
6b:4b:7e:f4:eb:b8:b2:72:7f:6b:43:20:5a:22:be:09:57:3d:
b1:4d:07:d0:02:cc:e5:d1:4d:e5:02:4d:dc:3d:67:4a:11:e9:
b6:40:91:29
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Apr 17 23:47:04 2025 by rpki-client