Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/47/4791e2-df25-4c7c-89df-76ec4acbb726/1/UeOaZ3aTuvt5JNbqhGl4z0xouMI.mft
File: UeOaZ3aTuvt5JNbqhGl4z0xouMI.mft (raw, json)
Hash identifier: cIivj+15nKVz9G1eX3XtebX4diTdBYyA0gNExLjxy1s=
Subject key identifier: 3C:6E:B8:DD:FD:DA:67:A2:5A:A3:B4:E4:12:93:49:E5:B1:C8:8C:72
Authority key identifier: 51:E3:9A:67:76:93:BA:FB:79:24:D6:EA:84:69:78:CF:4C:68:B8:C2
Certificate issuer: /CN=51e39a677693bafb7924d6ea846978cf4c68b8c2
Certificate serial: 01963B09F2557A230D6B9B80FC1F2BF5F2EE
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/UeOaZ3aTuvt5JNbqhGl4z0xouMI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/47/4791e2-df25-4c7c-89df-76ec4acbb726/1/UeOaZ3aTuvt5JNbqhGl4z0xouMI.mft
Manifest number: 1480
Signing time: Tue 15 Apr 2025 20:00:29 +0000
Manifest this update: Tue 15 Apr 2025 20:00:29 +0000
Manifest next update: Wed 16 Apr 2025 20:00:29 +0000
Files and hashes: 1: UeOaZ3aTuvt5JNbqhGl4z0xouMI.crl (hash: bajSy9pIiVL7A9TOsHkUcmpKY9evPs4INbfkGyxds6M=)
2: w9u-iq9HQmmSpA58usBGj5VWpns.roa (hash: ebZ703D4CGF85tWdcmJd8B3P1oiiNNvM6TpGRigzvuk=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/47/4791e2-df25-4c7c-89df-76ec4acbb726/1/UeOaZ3aTuvt5JNbqhGl4z0xouMI.crl
rsync://rpki.ripe.net/repository/DEFAULT/47/4791e2-df25-4c7c-89df-76ec4acbb726/1/UeOaZ3aTuvt5JNbqhGl4z0xouMI.mft
rsync://rpki.ripe.net/repository/DEFAULT/UeOaZ3aTuvt5JNbqhGl4z0xouMI.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 16 Apr 2025 15:22:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:3b:09:f2:55:7a:23:0d:6b:9b:80:fc:1f:2b:f5:f2:ee
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=51e39a677693bafb7924d6ea846978cf4c68b8c2
Validity
Not Before: Apr 15 20:00:29 2025 GMT
Not After : Apr 16 20:00:29 2025 GMT
Subject: CN=3c6eb8ddfdda67a25aa3b4e4129349e5b1c88c72
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:eb:e2:4d:74:19:ba:ae:33:8b:dc:ed:98:e0:04:
82:8e:ff:9d:85:32:ea:98:99:04:3b:a1:a2:60:ee:
7b:ee:d2:90:b3:e3:b4:67:2c:bb:c9:ba:0c:b6:e3:
db:68:29:e1:ea:48:1a:97:16:55:65:88:c5:db:38:
2c:dd:77:2c:1d:b4:1a:44:9b:31:70:53:da:61:23:
6e:89:e5:82:27:fa:19:1c:b7:b1:fb:f1:cc:3d:18:
10:83:39:8f:dd:02:cc:58:8a:a7:7b:e7:93:5c:e6:
bc:6d:61:cd:96:c6:86:c6:b4:ae:2c:e0:2d:78:95:
8a:d5:33:be:f8:87:48:82:39:34:c6:53:8b:f0:8d:
c0:36:a1:71:ae:7f:34:e4:95:a0:bb:81:c0:ee:55:
5c:f8:6f:ed:0f:21:1d:69:d7:d3:a7:59:29:95:a2:
cb:fc:7a:19:3a:ba:46:e0:ee:bc:be:8a:b2:4d:d9:
13:6a:71:66:7c:3a:39:6b:a4:2b:ca:47:0e:2a:b6:
f8:e8:f7:76:5b:1d:32:96:ec:25:de:4a:dc:b0:7b:
83:a6:df:96:fc:b6:83:7d:c8:90:80:47:fd:1b:d1:
42:ff:3d:03:9b:60:63:fe:13:aa:16:cc:a4:3a:ed:
ee:c7:e7:df:3f:94:41:70:0d:e8:69:62:86:e1:38:
46:6b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
3C:6E:B8:DD:FD:DA:67:A2:5A:A3:B4:E4:12:93:49:E5:B1:C8:8C:72
X509v3 Authority Key Identifier:
keyid:51:E3:9A:67:76:93:BA:FB:79:24:D6:EA:84:69:78:CF:4C:68:B8:C2
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/UeOaZ3aTuvt5JNbqhGl4z0xouMI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/47/4791e2-df25-4c7c-89df-76ec4acbb726/1/UeOaZ3aTuvt5JNbqhGl4z0xouMI.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/47/4791e2-df25-4c7c-89df-76ec4acbb726/1/UeOaZ3aTuvt5JNbqhGl4z0xouMI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
9c:fb:f8:55:12:07:b4:ed:10:12:e7:80:e2:67:83:2e:15:dc:
34:6a:7a:2d:20:b0:ce:33:45:dc:1e:3c:68:29:92:ea:b0:e1:
03:0f:de:b1:99:b7:47:07:b5:1c:74:c7:91:bc:3e:39:46:19:
f8:f0:d7:03:7d:c6:44:42:6b:f6:7a:29:91:82:46:44:07:c8:
d1:31:3b:71:f5:44:3e:cc:4b:31:db:d0:f4:1b:72:53:1d:f6:
78:bc:a8:ec:95:49:5e:b4:97:bf:87:12:ed:1a:09:75:12:35:
46:0e:83:73:48:31:08:78:b3:96:c6:ee:30:ff:64:bd:5e:fc:
e6:a5:34:05:ba:2f:d5:98:00:8d:fb:00:b3:15:2a:5a:4c:26:
03:c2:7c:ce:09:cd:2d:e0:90:d6:67:da:a2:95:84:5e:50:ad:
41:5c:b0:34:6d:9f:81:bd:c4:60:2f:af:31:2e:0d:7f:70:67:
4b:40:31:c6:f4:4a:68:e4:22:d2:9c:d2:e4:68:09:b1:8c:8b:
ab:31:bd:65:b3:8d:4b:b2:fe:c3:70:05:f9:1e:42:e9:b1:04:
b3:67:fc:95:72:9c:10:2b:3e:54:de:4f:68:37:4b:b3:e8:c1:
e2:e2:c2:c6:28:e3:2e:bd:4b:b5:87:5c:6d:2d:26:a8:5f:cf:
9e:04:55:9a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Apr 16 00:16:16 2025 by rpki-client