Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/32/252968-b8ba-4e19-84d7-3228286da601/1/UFbHUIQP5cAQOn9RAix87qj-lps.mft
File: UFbHUIQP5cAQOn9RAix87qj-lps.mft (raw, json)
Hash identifier: pndEe5jXMRWCxQV9VgKq7nuno9SmL5CXXAu+e6mLFDM=
Subject key identifier: B7:44:09:C3:1D:EA:96:C7:30:AE:30:C9:C4:5C:80:82:FC:70:A5:24
Authority key identifier: 50:56:C7:50:84:0F:E5:C0:10:3A:7F:51:02:2C:7C:EE:A8:FE:96:9B
Certificate issuer: /CN=5056c750840fe5c0103a7f51022c7ceea8fe969b
Certificate serial: 019611A0CFAA6E04A4498E3E86F5AFE8CFF2
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/UFbHUIQP5cAQOn9RAix87qj-lps.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/32/252968-b8ba-4e19-84d7-3228286da601/1/UFbHUIQP5cAQOn9RAix87qj-lps.mft
Manifest number: 14DA
Signing time: Mon 07 Apr 2025 19:01:13 +0000
Manifest this update: Mon 07 Apr 2025 19:01:13 +0000
Manifest next update: Tue 08 Apr 2025 19:01:13 +0000
Files and hashes: 1: Jv9Nh0xOPBNwvCj4qQsYimYMUWo.roa (hash: 8AwiF+JbJZD/dD5pedRyRTuhxKXhlfELIIZ2EaE0IKM=)
2: UFbHUIQP5cAQOn9RAix87qj-lps.crl (hash: N5vK+JR0mAYqJe3euqDjSESTnc+cr22b6+YAWEVdmI4=)
3: yXOU2r32sucGxB9-Z9ZhjZOhedM.roa (hash: vAVSTyHryWSEFu+zHv/t5/KHUJutcYo2/piybcJJ41A=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/32/252968-b8ba-4e19-84d7-3228286da601/1/UFbHUIQP5cAQOn9RAix87qj-lps.crl
rsync://rpki.ripe.net/repository/DEFAULT/32/252968-b8ba-4e19-84d7-3228286da601/1/UFbHUIQP5cAQOn9RAix87qj-lps.mft
rsync://rpki.ripe.net/repository/DEFAULT/UFbHUIQP5cAQOn9RAix87qj-lps.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 08 Apr 2025 14:28:50 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:11:a0:cf:aa:6e:04:a4:49:8e:3e:86:f5:af:e8:cf:f2
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=5056c750840fe5c0103a7f51022c7ceea8fe969b
Validity
Not Before: Apr 7 19:01:13 2025 GMT
Not After : Apr 8 19:01:13 2025 GMT
Subject: CN=b74409c31dea96c730ae30c9c45c8082fc70a524
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a6:bd:01:60:75:59:e5:1a:f5:7a:95:dd:da:32:
d1:a9:25:68:27:4c:bc:84:fc:92:4d:7f:34:03:20:
21:c3:d8:64:0e:22:1b:72:0b:c1:8c:ec:8d:6e:ff:
15:05:de:85:06:38:9d:5e:9d:67:b4:18:26:8c:34:
cc:00:f8:a0:8c:6d:6a:04:30:25:79:6f:7f:d6:d5:
ea:a9:35:04:bd:d0:b7:f6:d1:c6:d7:f8:00:75:3e:
1d:d8:f9:05:10:5f:f8:82:e7:5a:56:0f:0a:e8:01:
05:e4:06:a6:2b:8b:2d:91:cc:39:14:70:65:8e:81:
d9:58:76:50:b9:a5:d3:8e:54:b2:f1:8b:c7:95:ce:
0a:74:1c:16:af:e5:56:cc:b6:93:fb:be:9e:e4:6e:
34:1e:5b:3e:1d:75:06:99:0a:7a:fc:a9:8f:63:d7:
08:81:ba:1d:78:89:4c:b7:6a:2c:8b:69:aa:0d:4b:
b1:e7:0f:0b:d4:14:24:cb:82:55:08:1c:b1:6b:a3:
ba:e1:31:ad:64:49:6e:d7:ef:2e:3d:98:a3:e8:d9:
9f:dd:5f:e0:49:eb:d2:d5:82:e3:31:95:af:87:f0:
7a:43:0f:00:f9:c4:77:a2:5d:8f:ce:51:a7:5f:15:
8e:68:66:9e:bb:e5:37:f0:02:60:fc:11:a8:76:34:
f1:3f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B7:44:09:C3:1D:EA:96:C7:30:AE:30:C9:C4:5C:80:82:FC:70:A5:24
X509v3 Authority Key Identifier:
keyid:50:56:C7:50:84:0F:E5:C0:10:3A:7F:51:02:2C:7C:EE:A8:FE:96:9B
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/UFbHUIQP5cAQOn9RAix87qj-lps.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/32/252968-b8ba-4e19-84d7-3228286da601/1/UFbHUIQP5cAQOn9RAix87qj-lps.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/32/252968-b8ba-4e19-84d7-3228286da601/1/UFbHUIQP5cAQOn9RAix87qj-lps.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
0b:e4:61:62:bc:a8:ad:c4:bd:af:3c:33:2c:c9:d3:cb:53:f3:
81:55:46:08:fe:cb:4e:3e:42:8c:de:c6:d5:ef:c0:9f:35:06:
dc:61:7a:8f:7d:9a:a6:4b:f7:40:bf:9c:6b:8f:0a:a8:cc:25:
06:a2:7c:4d:bc:ec:45:97:e8:fd:4a:57:38:a8:9c:94:1d:88:
73:b7:71:36:e4:fc:1e:94:15:a9:cd:ca:0b:41:13:ac:80:bc:
7d:fc:1d:2d:9a:5d:f6:bf:e1:f3:e0:3e:bf:76:85:99:7e:db:
e8:48:e1:c0:2c:60:38:bf:2e:58:20:e7:1b:e8:bc:5e:7a:ea:
52:9a:46:c6:63:68:7a:42:8c:1b:2d:e7:cc:e6:5e:0f:ed:2e:
6b:89:2d:b9:fd:ec:00:a1:85:06:e6:fe:01:26:0b:10:e8:9e:
36:d6:32:3e:ad:8b:66:1b:7b:0a:b7:7c:b7:39:ef:81:ac:53:
a9:b1:d5:ee:1b:c5:a6:31:3b:e8:d3:2e:8b:b9:c8:8f:0a:d7:
5e:ed:94:58:ea:84:e0:97:1b:5d:37:79:4b:67:bc:ce:5f:99:
e6:b7:9b:c8:3b:3c:12:90:0a:26:0b:f5:98:b6:c8:4d:43:0f:
18:e6:74:ed:2c:18:2a:37:a0:d6:ad:4f:d5:62:8f:eb:b3:c3:
50:2d:15:84
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 7 22:38:41 2025 by rpki-client