Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/26/0408f7-76a2-49c7-a022-deb44b869d19/1/UuQfSAbOSPw5iEI4Hy_74EspSBg.mft
File: UuQfSAbOSPw5iEI4Hy_74EspSBg.mft (raw, json)
Hash identifier: JlqlX312mK++JAvMd7gxalZtG6aiftcDvW7A0A+Z9+g=
Subject key identifier: 67:DF:AE:BB:BD:83:D8:83:53:79:9B:DF:31:5C:D6:3C:88:BF:78:58
Authority key identifier: 52:E4:1F:48:06:CE:48:FC:39:88:42:38:1F:2F:FB:E0:4B:29:48:18
Certificate issuer: /CN=52e41f4806ce48fc398842381f2ffbe04b294818
Certificate serial: 019652DBA5E0FD04D35DDFCC7080A79D3E49
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/UuQfSAbOSPw5iEI4Hy_74EspSBg.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/26/0408f7-76a2-49c7-a022-deb44b869d19/1/UuQfSAbOSPw5iEI4Hy_74EspSBg.mft
Manifest number: 0D04
Signing time: Sun 20 Apr 2025 11:00:48 +0000
Manifest this update: Sun 20 Apr 2025 11:00:48 +0000
Manifest next update: Mon 21 Apr 2025 11:00:48 +0000
Files and hashes: 1: UuQfSAbOSPw5iEI4Hy_74EspSBg.crl (hash: HL5UuUdQ1w+WvuF/KRk/YQdsAzyCk5VXLIU4AYL3Rlg=)
2: cd3Fhp7JGsQY29OycLGqygOY3q4.roa (hash: me8X+W4/R2BKpOObqALFckuX9m9FcIwz7m42eap8tCk=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/26/0408f7-76a2-49c7-a022-deb44b869d19/1/UuQfSAbOSPw5iEI4Hy_74EspSBg.crl
rsync://rpki.ripe.net/repository/DEFAULT/26/0408f7-76a2-49c7-a022-deb44b869d19/1/UuQfSAbOSPw5iEI4Hy_74EspSBg.mft
rsync://rpki.ripe.net/repository/DEFAULT/UuQfSAbOSPw5iEI4Hy_74EspSBg.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 21 Apr 2025 11:00:48 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:52:db:a5:e0:fd:04:d3:5d:df:cc:70:80:a7:9d:3e:49
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=52e41f4806ce48fc398842381f2ffbe04b294818
Validity
Not Before: Apr 20 11:00:48 2025 GMT
Not After : Apr 21 11:00:48 2025 GMT
Subject: CN=67dfaebbbd83d88353799bdf315cd63c88bf7858
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c5:8a:5c:fa:50:00:25:13:05:52:87:05:ee:4a:
db:19:d7:50:78:f8:94:41:77:2c:5c:77:b1:7e:81:
ae:1b:cf:b0:81:c2:86:29:b8:df:37:5a:d5:a0:1a:
f3:de:35:06:80:29:d8:af:4d:aa:aa:93:50:74:03:
12:bc:99:43:07:69:5d:05:55:56:b0:1d:03:48:ae:
02:b7:50:25:8a:43:17:2e:35:9d:c5:ef:fa:28:e4:
2b:79:7e:73:5f:61:19:e8:68:0b:24:ba:e0:96:df:
15:20:cd:b1:ec:a2:a2:0b:34:fc:b4:a2:d2:6a:73:
04:44:06:5e:d7:e9:24:0c:d3:bd:e2:36:48:d6:de:
49:fd:82:d8:b4:f9:58:c2:2e:31:b0:40:da:6d:10:
25:6a:de:0c:11:0c:18:95:2b:e6:a4:37:4e:37:d7:
95:78:c9:18:d0:17:4f:df:1e:f0:8a:ab:09:ed:5e:
6d:21:95:3e:10:79:69:7d:a6:f6:b2:32:f3:1b:15:
f5:90:7e:e8:74:03:a7:bc:e3:91:33:e7:f1:8b:ef:
4b:77:fd:84:5b:19:2e:33:a7:44:24:5a:c9:8b:b8:
fe:b7:9f:45:24:20:0a:30:ce:4c:aa:e3:db:0d:27:
4b:f3:aa:e1:9c:a4:eb:43:a6:61:53:d1:a1:78:bb:
78:a9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
67:DF:AE:BB:BD:83:D8:83:53:79:9B:DF:31:5C:D6:3C:88:BF:78:58
X509v3 Authority Key Identifier:
keyid:52:E4:1F:48:06:CE:48:FC:39:88:42:38:1F:2F:FB:E0:4B:29:48:18
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/UuQfSAbOSPw5iEI4Hy_74EspSBg.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/26/0408f7-76a2-49c7-a022-deb44b869d19/1/UuQfSAbOSPw5iEI4Hy_74EspSBg.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/26/0408f7-76a2-49c7-a022-deb44b869d19/1/UuQfSAbOSPw5iEI4Hy_74EspSBg.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
a7:e1:93:69:06:a6:ce:ac:e5:d4:c3:11:db:6d:0f:ab:85:ba:
b6:66:ee:73:a0:56:a3:5f:c5:96:15:92:b5:e8:6f:89:bb:fb:
22:e4:34:37:1e:29:a9:21:a9:b1:1b:e1:e7:6c:5f:cf:08:08:
ca:78:ee:10:58:20:93:a3:b5:63:74:fc:cd:a7:00:bf:75:fa:
51:8c:bc:67:87:fc:85:42:3f:0b:85:de:07:be:80:19:c7:15:
59:62:c3:4f:01:fa:29:f7:02:c7:43:b1:15:9d:27:b7:27:26:
0b:9a:0f:f3:9c:e0:ac:d8:f2:45:38:cc:4d:3a:06:c1:5f:d7:
33:23:3e:c5:db:1e:6f:d4:92:f8:d0:5a:34:61:5b:c0:32:dc:
f7:f6:d3:e7:da:44:0c:db:3b:82:48:28:0b:38:fa:6a:95:d7:
3d:08:c9:b2:e1:c3:fb:14:d2:df:a4:d9:6e:64:10:c3:d4:ff:
3c:76:bc:5b:4a:94:ce:2d:76:d9:ee:fa:dc:9b:d6:82:6a:9a:
c2:17:1c:25:07:ec:25:cb:34:48:ce:e8:59:83:03:d4:66:46:
0f:b2:6e:9d:a9:6a:67:b3:fc:ec:e4:41:eb:f1:7a:3f:1e:71:
fc:ee:64:fc:f7:b4:06:34:76:60:e0:fc:d1:7f:cf:cb:a4:61:
03:19:38:f7
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Apr 20 18:54:39 2025 by rpki-client