Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/2b/02c568-91ee-485d-99a2-59bce319c1cb/1/UiEH7Qe1rA2CadcinZ_Syg4yZYs.mft
File: UiEH7Qe1rA2CadcinZ_Syg4yZYs.mft (raw, json)
Hash identifier: nRLoEDYdtaBxyJ5B8tWBytWQHwwsnli2Zk4pAcUXb+0=
Subject key identifier: C8:59:EE:14:DF:34:36:04:AE:F3:68:7A:77:53:1E:44:67:A6:44:C8
Authority key identifier: 52:21:07:ED:07:B5:AC:0D:82:69:D7:22:9D:9F:D2:CA:0E:32:65:8B
Certificate issuer: /CN=522107ed07b5ac0d8269d7229d9fd2ca0e32658b
Certificate serial: 019652A4682B22A695D49E56803415615AA3
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/UiEH7Qe1rA2CadcinZ_Syg4yZYs.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/2b/02c568-91ee-485d-99a2-59bce319c1cb/1/UiEH7Qe1rA2CadcinZ_Syg4yZYs.mft
Manifest number: 124C
Signing time: Sun 20 Apr 2025 10:00:28 +0000
Manifest this update: Sun 20 Apr 2025 10:00:28 +0000
Manifest next update: Mon 21 Apr 2025 10:00:28 +0000
Files and hashes: 1: UiEH7Qe1rA2CadcinZ_Syg4yZYs.crl (hash: YcLXE1YRjuIAiM4i6xUqonpDidYZnMwrfjHR24kzRqU=)
2: pPpmoMPPkAZMgk578mv2D1Fr8uM.roa (hash: qW9ujgr+WoSkhUysMB2U0VypgGpVS4nEjVgMmS5X+c8=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/2b/02c568-91ee-485d-99a2-59bce319c1cb/1/UiEH7Qe1rA2CadcinZ_Syg4yZYs.crl
rsync://rpki.ripe.net/repository/DEFAULT/2b/02c568-91ee-485d-99a2-59bce319c1cb/1/UiEH7Qe1rA2CadcinZ_Syg4yZYs.mft
rsync://rpki.ripe.net/repository/DEFAULT/UiEH7Qe1rA2CadcinZ_Syg4yZYs.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 21 Apr 2025 07:00:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:52:a4:68:2b:22:a6:95:d4:9e:56:80:34:15:61:5a:a3
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=522107ed07b5ac0d8269d7229d9fd2ca0e32658b
Validity
Not Before: Apr 20 10:00:28 2025 GMT
Not After : Apr 21 10:00:28 2025 GMT
Subject: CN=c859ee14df343604aef3687a77531e4467a644c8
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b6:37:61:76:44:d2:0e:bd:17:10:b3:f7:27:c4:
dd:ea:30:70:17:1f:69:c8:a5:51:f6:f8:79:8e:b3:
3a:0e:5a:68:e4:cf:8f:44:e2:37:26:99:37:58:43:
d0:30:c0:68:63:11:f2:69:32:c0:c1:6b:3b:3f:e7:
73:fe:4e:97:bf:5a:8a:2a:7d:94:54:ad:34:91:91:
7c:eb:7b:d1:a1:27:2e:32:fc:1f:b4:c6:35:51:c6:
ee:1a:6b:99:3f:0f:7b:0c:be:0a:f5:41:01:fb:56:
d4:54:ea:85:65:97:71:9b:36:31:37:22:62:9c:8a:
cc:b6:f5:ad:ee:cb:18:9c:8d:19:61:73:2a:5e:d6:
33:3d:21:4e:97:15:7e:5d:a3:cd:a0:df:35:31:22:
53:1b:62:1b:85:12:2d:c0:e0:f9:f1:9a:bb:e9:09:
f9:24:d3:86:7e:a3:36:e6:9a:5e:07:2b:4f:01:90:
3c:ec:cb:cb:47:59:58:6c:3a:18:8f:4b:5e:8c:15:
4f:61:da:b5:b7:43:00:59:54:34:54:b8:48:ea:69:
e3:aa:f8:2b:fd:61:05:b7:62:20:bd:f0:c7:68:41:
a1:d6:26:74:80:05:3b:54:d1:bc:2e:3a:27:a4:a0:
46:30:39:4b:c0:f1:3d:1e:31:69:dd:f8:26:dc:57:
ec:e5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C8:59:EE:14:DF:34:36:04:AE:F3:68:7A:77:53:1E:44:67:A6:44:C8
X509v3 Authority Key Identifier:
keyid:52:21:07:ED:07:B5:AC:0D:82:69:D7:22:9D:9F:D2:CA:0E:32:65:8B
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/UiEH7Qe1rA2CadcinZ_Syg4yZYs.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/2b/02c568-91ee-485d-99a2-59bce319c1cb/1/UiEH7Qe1rA2CadcinZ_Syg4yZYs.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/2b/02c568-91ee-485d-99a2-59bce319c1cb/1/UiEH7Qe1rA2CadcinZ_Syg4yZYs.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
55:17:e5:c7:ee:3c:d1:bb:e5:00:af:fe:38:f8:77:8f:d7:a7:
1c:aa:c3:45:b7:b8:01:93:83:24:4a:10:05:ff:6a:23:11:54:
e7:d4:17:d3:b1:89:5d:bc:91:1f:fa:ab:60:90:11:5b:88:01:
3d:e6:40:20:47:29:c3:81:05:0a:03:0c:a9:ca:08:22:76:28:
3e:fc:bd:5d:ad:ad:21:ba:b7:58:19:ad:fe:f3:79:8d:9d:5c:
08:e8:b0:20:8f:f9:58:23:87:0b:a0:9d:87:66:09:1b:ab:37:
fc:14:d6:ad:2f:04:04:cc:45:86:16:b6:dc:58:27:80:df:c2:
ca:c4:b0:a0:f1:b5:5e:38:5b:ee:05:fd:24:b6:a7:19:a7:d9:
dd:0c:1e:52:28:0b:40:29:7f:6f:1c:7c:5d:1e:4a:db:0b:5f:
40:7e:80:3a:d7:aa:68:ca:0b:94:cd:ac:5d:58:b2:54:4c:39:
94:cc:52:83:e0:0a:18:59:14:3c:e7:c3:14:36:f6:9b:93:38:
1e:ac:dd:e7:c9:95:e2:42:54:bf:5d:6d:65:9a:4c:21:f4:c9:
2b:a8:3e:65:63:26:2d:4c:49:6e:f9:50:09:26:76:c2:f0:b8:
06:93:69:fb:30:ee:60:d0:00:a2:56:6f:21:ca:b0:16:1a:96:
34:d1:a6:da
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Apr 20 13:51:02 2025 by rpki-client