Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/46/fbbf8d-2c43-429d-b5cd-fcc220644558/1/UpNDI1WBz0EEGQ2noMoXS5wNC9U.mft
File: UpNDI1WBz0EEGQ2noMoXS5wNC9U.mft (raw, json)
Hash identifier: 7VoAUShXnmB3pSuWxHM/G0DJr3Ws7o4uYkNEycUBvzE=
Subject key identifier: 4B:42:1C:09:FE:3B:51:17:B8:DD:85:D1:2E:FD:FB:B2:29:D4:A9:19
Authority key identifier: 52:93:43:23:55:81:CF:41:04:19:0D:A7:A0:CA:17:4B:9C:0D:0B:D5
Certificate issuer: /CN=529343235581cf4104190da7a0ca174b9c0d0bd5
Certificate serial: 01964632A6D1B3552F509527DFA937981111
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/UpNDI1WBz0EEGQ2noMoXS5wNC9U.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/46/fbbf8d-2c43-429d-b5cd-fcc220644558/1/UpNDI1WBz0EEGQ2noMoXS5wNC9U.mft
Manifest number: 0D56
Signing time: Fri 18 Apr 2025 00:00:46 +0000
Manifest this update: Fri 18 Apr 2025 00:00:46 +0000
Manifest next update: Sat 19 Apr 2025 00:00:46 +0000
Files and hashes: 1: 6O-rdAPfJL5ja0fsAq0cDrxpBv4.roa (hash: 6xTcUx7aYzPFSdoIn+1iA2U6ilYMmAiW4t3gwfarhms=)
2: UpNDI1WBz0EEGQ2noMoXS5wNC9U.crl (hash: boV5DbQoJnJnFzU5VeU5aVrEu1VxukWgG9QXyfcL59s=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/46/fbbf8d-2c43-429d-b5cd-fcc220644558/1/UpNDI1WBz0EEGQ2noMoXS5wNC9U.crl
rsync://rpki.ripe.net/repository/DEFAULT/46/fbbf8d-2c43-429d-b5cd-fcc220644558/1/UpNDI1WBz0EEGQ2noMoXS5wNC9U.mft
rsync://rpki.ripe.net/repository/DEFAULT/UpNDI1WBz0EEGQ2noMoXS5wNC9U.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 18 Apr 2025 16:00:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:46:32:a6:d1:b3:55:2f:50:95:27:df:a9:37:98:11:11
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=529343235581cf4104190da7a0ca174b9c0d0bd5
Validity
Not Before: Apr 18 00:00:46 2025 GMT
Not After : Apr 19 00:00:46 2025 GMT
Subject: CN=4b421c09fe3b5117b8dd85d12efdfbb229d4a919
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:93:9f:d0:51:be:4e:5e:f6:d3:95:8e:82:ba:99:
32:54:46:9b:f1:7b:31:0a:c1:ec:51:87:59:24:86:
bd:49:ac:b5:27:aa:bf:10:29:11:d1:33:ca:e8:92:
02:0c:60:79:d4:23:77:a5:fd:72:56:02:84:97:24:
b1:f4:03:56:c8:e6:36:78:f6:2b:0e:0d:ec:8d:3b:
d7:ca:0a:33:d9:5f:19:2c:a4:6e:d5:c0:bb:d8:6d:
96:f1:00:8e:7d:cf:34:f6:ea:c9:14:83:43:e3:08:
4c:27:db:c8:23:cd:94:0a:5f:86:73:f9:12:3a:b4:
2c:fc:bd:19:41:de:2c:ae:cd:47:8d:83:ff:7c:62:
7d:3f:6a:ad:3d:5b:6d:78:04:01:cb:48:e0:9c:08:
f2:68:5f:df:fb:54:95:cc:ec:bb:5a:df:8f:9f:2e:
c6:db:fd:f8:9a:0b:31:de:bd:c1:d9:5d:14:42:19:
ae:57:62:53:5d:d2:53:b3:f3:b9:7e:b3:b2:19:04:
54:4e:09:50:66:25:29:7d:af:27:cb:4d:e4:df:e1:
95:30:f1:5a:e6:ac:41:cf:88:0d:2b:ad:05:44:02:
5b:b9:d3:a1:df:40:f4:4d:70:54:ae:7a:d6:b0:5a:
30:0e:8f:8e:c7:6b:b4:2a:25:6e:5a:83:05:12:13:
5a:d5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
4B:42:1C:09:FE:3B:51:17:B8:DD:85:D1:2E:FD:FB:B2:29:D4:A9:19
X509v3 Authority Key Identifier:
keyid:52:93:43:23:55:81:CF:41:04:19:0D:A7:A0:CA:17:4B:9C:0D:0B:D5
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/UpNDI1WBz0EEGQ2noMoXS5wNC9U.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/46/fbbf8d-2c43-429d-b5cd-fcc220644558/1/UpNDI1WBz0EEGQ2noMoXS5wNC9U.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/46/fbbf8d-2c43-429d-b5cd-fcc220644558/1/UpNDI1WBz0EEGQ2noMoXS5wNC9U.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
40:4c:8a:93:2f:b1:c5:f5:50:94:45:05:25:16:74:8f:90:4e:
4f:8f:4c:29:3b:90:44:74:5f:0e:08:d4:99:05:25:c7:9e:09:
84:d4:18:f6:ff:0e:b7:08:ee:e2:48:d8:27:fd:70:df:e7:26:
ee:4c:39:55:b0:6d:ad:ec:cc:0b:88:6d:51:1d:13:ec:ad:8a:
de:e3:1d:92:46:57:a6:61:b4:56:70:c3:43:65:87:15:2a:94:
a8:87:51:cf:c8:fa:ea:9f:d4:c0:c9:83:c1:e9:d4:fd:2a:c2:
8b:a7:09:9d:c9:fb:dd:52:9d:ff:f7:61:dc:53:e9:17:83:56:
e5:b5:12:f0:d8:1a:4f:6e:62:78:53:d5:17:20:9e:c5:10:28:
18:7d:b6:58:00:a6:c8:57:65:33:cd:4e:22:5f:17:ce:f3:ed:
81:20:ea:fa:00:5c:5d:81:c2:f8:b3:96:9b:c2:71:34:89:73:
8c:dc:39:bd:b8:d8:e9:4b:0d:af:5a:e4:67:15:e9:16:35:68:
37:e9:ff:c3:3f:6c:fd:c9:7d:e9:5e:f1:ce:2c:a6:ad:93:e9:
8e:bd:5f:6b:dd:9e:4b:0d:f6:89:52:07:d4:04:fa:6b:08:53:
b1:a3:ab:f1:53:80:72:09:77:e0:56:83:4c:b0:fe:ca:f6:13:
8d:b0:e0:77
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 18 02:11:31 2025 by rpki-client