Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/35/e2a2b2-ab3c-4afb-8987-dd63f215c434/1/UtZhqUjyvzSQ6J2CUvLMyHR85cc.mft
File: UtZhqUjyvzSQ6J2CUvLMyHR85cc.mft (raw, json)
Hash identifier: ZdkNAGRGDQt0PVRWKVZCJNLGviYJ53ybyKZoG9NcDqo=
Subject key identifier: 2B:4F:22:8A:A5:05:36:31:14:E0:85:96:C8:E4:CE:B0:07:8F:77:46
Authority key identifier: 52:D6:61:A9:48:F2:BF:34:90:E8:9D:82:52:F2:CC:C8:74:7C:E5:C7
Certificate issuer: /CN=52d661a948f2bf3490e89d8252f2ccc8747ce5c7
Certificate serial: 01958B8484B33A37EE61F84733FBC4E9CAC6
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/UtZhqUjyvzSQ6J2CUvLMyHR85cc.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/35/e2a2b2-ab3c-4afb-8987-dd63f215c434/1/UtZhqUjyvzSQ6J2CUvLMyHR85cc.mft
Manifest number: 1272
Signing time: Wed 12 Mar 2025 18:01:12 +0000
Manifest this update: Wed 12 Mar 2025 18:01:12 +0000
Manifest next update: Thu 13 Mar 2025 18:01:12 +0000
Files and hashes: 1: En0AxaNswsA9xI4lqkSKkt-F7C0.roa (hash: q8FwSEiSjvslMUXDVxvqWzOjw6rMu6h87zO4Dcum1yM=)
2: UtZhqUjyvzSQ6J2CUvLMyHR85cc.crl (hash: f+tH1bLrLieHYSvhTi2VZIQH/a6HPJUx95yHuMcRQ5Q=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/35/e2a2b2-ab3c-4afb-8987-dd63f215c434/1/UtZhqUjyvzSQ6J2CUvLMyHR85cc.crl
rsync://rpki.ripe.net/repository/DEFAULT/35/e2a2b2-ab3c-4afb-8987-dd63f215c434/1/UtZhqUjyvzSQ6J2CUvLMyHR85cc.mft
rsync://rpki.ripe.net/repository/DEFAULT/UtZhqUjyvzSQ6J2CUvLMyHR85cc.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 13 Mar 2025 18:01:12 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:95:8b:84:84:b3:3a:37:ee:61:f8:47:33:fb:c4:e9:ca:c6
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=52d661a948f2bf3490e89d8252f2ccc8747ce5c7
Validity
Not Before: Mar 12 18:01:12 2025 GMT
Not After : Mar 13 18:01:12 2025 GMT
Subject: CN=2b4f228aa505363114e08596c8e4ceb0078f7746
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b2:55:b0:5c:a4:56:4e:cb:09:56:46:6e:46:3e:
52:eb:b8:b9:2a:39:69:48:cb:b6:a2:a3:07:89:6f:
72:aa:e0:6a:cf:09:89:78:40:3c:52:3d:a2:86:b5:
ec:08:68:f6:35:a9:99:7b:e0:18:34:2e:b4:b9:3d:
5c:38:7a:ee:1c:88:92:3e:fc:2a:e4:8d:4a:b3:6a:
34:29:3b:29:63:15:32:d2:77:99:f3:8c:b1:e4:90:
d1:42:e2:4f:32:40:db:2f:3e:7e:fb:2b:47:58:9c:
22:45:f6:37:0d:a0:dd:9b:41:6e:9e:72:de:6b:26:
87:23:82:19:81:c2:9a:3a:ec:25:16:c9:e7:d7:61:
ce:72:a8:4d:9f:1f:23:21:2d:ff:82:ca:21:3e:5c:
36:af:11:7d:c3:c6:a0:94:ec:94:48:38:0b:49:84:
f8:75:34:e0:d1:b0:12:83:91:0c:91:b1:18:5f:34:
d5:00:bb:ba:1a:6c:7d:32:35:38:e2:64:75:f0:63:
c9:b5:12:be:11:f8:6b:49:8e:3a:fe:bd:4c:35:3e:
32:c6:de:93:f5:3d:7c:ac:5f:fe:3e:3e:cf:ca:07:
2a:e8:9a:da:82:a2:e6:ca:d1:95:5f:37:86:e6:3a:
f9:06:47:86:93:30:77:dd:c1:0d:0b:7b:42:16:a3:
26:d9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
2B:4F:22:8A:A5:05:36:31:14:E0:85:96:C8:E4:CE:B0:07:8F:77:46
X509v3 Authority Key Identifier:
keyid:52:D6:61:A9:48:F2:BF:34:90:E8:9D:82:52:F2:CC:C8:74:7C:E5:C7
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/UtZhqUjyvzSQ6J2CUvLMyHR85cc.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/35/e2a2b2-ab3c-4afb-8987-dd63f215c434/1/UtZhqUjyvzSQ6J2CUvLMyHR85cc.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/35/e2a2b2-ab3c-4afb-8987-dd63f215c434/1/UtZhqUjyvzSQ6J2CUvLMyHR85cc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
7e:a3:25:2b:a8:f7:05:d5:15:f7:1a:4a:68:45:88:99:59:ec:
9b:21:31:13:fb:d2:5a:4b:78:e7:64:9b:d1:c2:91:2a:ef:db:
a4:ab:fe:40:bf:e1:51:f9:71:bd:6f:d4:8b:ca:69:0f:af:32:
97:00:a8:66:43:db:1f:fa:9a:e2:45:32:8e:48:f2:35:15:5d:
c9:5d:a1:7a:5a:bf:95:b5:ac:b7:33:26:83:50:6c:2d:58:e8:
ef:de:9b:6d:48:0c:7d:a2:e4:5f:5e:7a:0c:92:70:f1:0b:e7:
93:08:3d:37:89:b7:65:2d:db:c1:ac:31:c4:15:8d:3a:3e:e4:
6f:13:68:04:72:17:4c:7d:0a:8b:a5:da:cd:33:f3:d3:a2:b2:
71:37:de:bc:5c:1e:79:c0:87:af:a5:9d:75:c1:4d:dd:15:87:
51:e7:0a:74:81:3a:d0:89:4e:3e:90:ff:1a:ee:3c:80:5f:6c:
39:46:b7:9c:0d:36:1f:93:83:d9:ab:97:12:73:17:07:a8:8e:
1d:92:b9:23:c3:0d:fc:fb:0a:f5:70:63:73:67:fe:09:23:ca:
76:78:e8:22:8e:62:d5:5e:c9:b4:68:41:c9:a5:8b:7b:8b:d7:
80:af:a7:df:34:ed:7b:47:40:f5:aa:cf:b6:80:3d:58:ef:b9:
48:7f:0c:de
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 13 02:17:09 2025 by rpki-client