Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/26/1faa3e-884c-445f-845d-79b3db659dfc/1/UYje2s3CQLSy94bxI0LgqD2K6A8.mft
File: UYje2s3CQLSy94bxI0LgqD2K6A8.mft (raw, json)
Hash identifier: wKwpCgnQ0cuL0xipyh+cXs3AfXgCuQfLpmKm/KdkLYE=
Subject key identifier: 8D:13:09:12:6B:3D:9F:D6:77:EF:F2:B6:1E:F8:3B:EA:9E:2F:69:1E
Authority key identifier: 51:88:DE:DA:CD:C2:40:B4:B2:F7:86:F1:23:42:E0:A8:3D:8A:E8:0F
Certificate issuer: /CN=5188dedacdc240b4b2f786f12342e0a83d8ae80f
Certificate serial: 01965011C7D3A10DFD341A057D36CDFB69AC
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/UYje2s3CQLSy94bxI0LgqD2K6A8.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/26/1faa3e-884c-445f-845d-79b3db659dfc/1/UYje2s3CQLSy94bxI0LgqD2K6A8.mft
Manifest number: 1504
Signing time: Sat 19 Apr 2025 22:01:04 +0000
Manifest this update: Sat 19 Apr 2025 22:01:04 +0000
Manifest next update: Sun 20 Apr 2025 22:01:04 +0000
Files and hashes: 1: 7qvgIj3jypWMSKFnvSypb6eNA_Y.roa (hash: MROlFsFZhg7uUHfqBSW5TAr927G+FcG0aizwMj7xAAs=)
2: UYje2s3CQLSy94bxI0LgqD2K6A8.crl (hash: NIwzBFRbRG/fdqAU9Aj1rKIXvXIFLL4FNQmit4z1Ing=)
3: VzEuM4wQpuwbT-xJ7bC1xNm7YDc.roa (hash: Pz1SZUH98WHk5LHtbhA9Ppfrk48GkT05UG0eFHMTuIU=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/26/1faa3e-884c-445f-845d-79b3db659dfc/1/UYje2s3CQLSy94bxI0LgqD2K6A8.crl
rsync://rpki.ripe.net/repository/DEFAULT/26/1faa3e-884c-445f-845d-79b3db659dfc/1/UYje2s3CQLSy94bxI0LgqD2K6A8.mft
rsync://rpki.ripe.net/repository/DEFAULT/UYje2s3CQLSy94bxI0LgqD2K6A8.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 20 Apr 2025 16:41:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:50:11:c7:d3:a1:0d:fd:34:1a:05:7d:36:cd:fb:69:ac
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=5188dedacdc240b4b2f786f12342e0a83d8ae80f
Validity
Not Before: Apr 19 22:01:04 2025 GMT
Not After : Apr 20 22:01:04 2025 GMT
Subject: CN=8d1309126b3d9fd677eff2b61ef83bea9e2f691e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a0:8e:aa:90:21:a2:29:4b:3a:8e:c5:d8:a7:20:
81:03:07:e8:f8:45:01:ce:cd:27:e6:e8:f2:20:1f:
ea:7a:f8:53:a9:dc:3d:ff:fe:13:ae:8e:b2:44:64:
ab:ee:84:d4:1f:4e:75:13:51:9b:8a:84:8a:7f:b2:
90:06:3a:52:08:c2:19:fc:aa:8f:27:f6:14:1a:86:
e6:10:2c:a4:4c:ac:d7:3a:01:fb:81:32:2c:65:19:
83:85:ef:4d:3f:1f:0f:84:03:98:3f:b8:0b:48:d3:
32:d2:ea:f9:45:57:e2:db:cb:83:3d:61:20:7a:3d:
a1:23:60:59:39:f5:6e:1c:72:5d:89:bd:8e:d6:7d:
7f:a9:23:32:7e:d3:71:4e:a6:ea:0f:f4:8a:a3:d5:
27:92:14:ef:2d:83:fc:ea:cd:8c:fb:a5:3b:c1:21:
9e:ac:e0:ef:3c:ea:9f:5a:56:1e:4f:17:91:ab:70:
f4:08:d9:25:e9:e9:d4:c9:37:87:20:d8:30:f5:a9:
c2:d6:bf:7a:74:e5:fa:2a:08:4f:a4:c7:15:6b:33:
34:b2:99:6d:b8:c5:f2:46:a1:5d:bd:dc:af:fa:9c:
96:d4:ba:bd:98:84:f7:e5:d0:38:2f:18:87:6f:d8:
c7:8d:9a:bc:20:9d:4c:b2:64:75:10:6a:15:2b:7e:
45:ed
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
8D:13:09:12:6B:3D:9F:D6:77:EF:F2:B6:1E:F8:3B:EA:9E:2F:69:1E
X509v3 Authority Key Identifier:
keyid:51:88:DE:DA:CD:C2:40:B4:B2:F7:86:F1:23:42:E0:A8:3D:8A:E8:0F
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/UYje2s3CQLSy94bxI0LgqD2K6A8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/26/1faa3e-884c-445f-845d-79b3db659dfc/1/UYje2s3CQLSy94bxI0LgqD2K6A8.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/26/1faa3e-884c-445f-845d-79b3db659dfc/1/UYje2s3CQLSy94bxI0LgqD2K6A8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
38:fa:8a:f1:df:2a:9a:67:7c:ff:15:37:0f:de:e4:9b:52:ee:
e2:71:b3:11:59:13:4b:fa:57:eb:b0:97:8f:f9:d8:fa:8b:d5:
ea:98:05:b9:99:a3:63:cd:5d:0d:87:eb:6e:db:5e:01:0b:e0:
b2:66:fc:74:d6:72:46:54:a4:58:a7:ce:1a:3f:0d:5e:e4:46:
c3:13:cc:1d:62:9a:8c:15:19:75:be:6e:e6:c6:85:85:09:68:
21:3d:24:05:8f:14:c6:37:e4:c7:79:f6:64:a4:d0:91:1a:42:
b9:a1:39:8d:57:0a:d8:c7:fd:84:cf:3f:58:33:c6:ad:ea:96:
f2:26:99:b0:68:1b:86:4a:69:3c:36:3c:00:80:f3:dd:17:58:
92:00:79:4a:36:4f:fb:4d:67:06:95:cb:39:3c:08:69:ca:67:
28:92:96:6a:7b:55:a4:c0:3e:08:95:61:f9:fb:62:3c:fc:69:
b7:72:24:95:ab:03:25:cf:ef:d5:9f:71:ac:ef:b0:c6:c2:04:
33:2d:66:ec:bb:15:55:40:77:cb:a2:e3:b8:9d:1f:39:c0:2e:
7a:ee:62:58:42:90:f9:1b:54:26:4b:47:d1:8c:21:bf:e6:06:
3e:d6:38:e8:94:fb:90:19:0f:dc:0a:da:93:48:ed:74:70:e0:
28:d9:2f:41
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Apr 20 02:05:07 2025 by rpki-client