Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/4d/ff0a7d-dccd-47ce-b21d-14809c938b76/1/UJyPMqH0KB9xRjiV1UPHF5z3-Vk.mft
File: UJyPMqH0KB9xRjiV1UPHF5z3-Vk.mft (raw, json)
Hash identifier: E9EbOZALYaZjENSflMCRIQQL9bronhQfz0Un0VyMUE4=
Subject key identifier: 41:93:76:0D:47:A6:B7:5B:69:79:5A:92:42:CE:99:50:91:A2:52:80
Authority key identifier: 50:9C:8F:32:A1:F4:28:1F:71:46:38:95:D5:43:C7:17:9C:F7:F9:59
Certificate issuer: /CN=509c8f32a1f4281f71463895d543c7179cf7f959
Certificate serial: 0196406753D4C769B6C8FF8C28B2D5705DD2
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/UJyPMqH0KB9xRjiV1UPHF5z3-Vk.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/4d/ff0a7d-dccd-47ce-b21d-14809c938b76/1/UJyPMqH0KB9xRjiV1UPHF5z3-Vk.mft
Manifest number: 14E8
Signing time: Wed 16 Apr 2025 21:00:35 +0000
Manifest this update: Wed 16 Apr 2025 21:00:35 +0000
Manifest next update: Thu 17 Apr 2025 21:00:35 +0000
Files and hashes: 1: 1-qC_h0BMH68nwZM--m9RrJPfUSU.roa (hash: dGjZPTTJM5HpRM58D6GZPV5SzYmb4kq7Kyp7lE449Zo=)
2: UJyPMqH0KB9xRjiV1UPHF5z3-Vk.crl (hash: oZLoibiJUA/D64cKX0D0fX2bZW/GA0K8DHW0m01+thg=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/4d/ff0a7d-dccd-47ce-b21d-14809c938b76/1/UJyPMqH0KB9xRjiV1UPHF5z3-Vk.crl
rsync://rpki.ripe.net/repository/DEFAULT/4d/ff0a7d-dccd-47ce-b21d-14809c938b76/1/UJyPMqH0KB9xRjiV1UPHF5z3-Vk.mft
rsync://rpki.ripe.net/repository/DEFAULT/UJyPMqH0KB9xRjiV1UPHF5z3-Vk.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 17 Apr 2025 13:16:13 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:40:67:53:d4:c7:69:b6:c8:ff:8c:28:b2:d5:70:5d:d2
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=509c8f32a1f4281f71463895d543c7179cf7f959
Validity
Not Before: Apr 16 21:00:35 2025 GMT
Not After : Apr 17 21:00:35 2025 GMT
Subject: CN=4193760d47a6b75b69795a9242ce995091a25280
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a0:de:36:69:f8:4a:29:a9:f1:38:95:1e:4c:92:
79:ad:1e:68:87:99:40:cf:e7:b6:08:8a:ce:f5:67:
a1:7c:ca:05:28:32:4a:bc:31:15:a4:50:5d:5a:81:
92:13:95:c1:cc:4f:6d:e1:24:e5:d3:53:a8:a8:b6:
6e:fd:43:d9:83:b0:9d:f4:10:3e:af:27:bd:e7:b7:
28:7f:e3:8c:20:f4:11:e4:00:3b:2d:f0:f1:2e:39:
be:61:d2:0e:d6:77:da:ba:34:eb:d9:87:8b:be:24:
1d:d0:52:6d:32:80:c2:84:b9:ce:89:ef:43:42:d5:
00:73:67:ac:e2:bd:90:36:d8:93:06:51:9a:c0:5d:
6d:71:a3:74:90:17:ec:ce:25:27:95:9d:34:a7:6b:
dd:f1:07:12:8f:67:9b:5e:da:c8:68:75:6e:1b:52:
a9:24:8f:f7:24:4c:b9:65:f2:f7:80:14:e9:13:59:
24:7c:99:26:c3:31:2c:0b:8c:dd:43:07:7d:a9:7c:
95:22:4f:20:c3:06:fd:1c:31:d0:cd:f1:a6:e5:1b:
b8:ac:8c:09:48:1d:f8:20:64:39:60:cc:ec:18:a0:
73:81:b9:53:e0:00:b3:9a:11:28:e1:46:00:0e:14:
29:87:65:8b:61:1f:4e:1e:2e:39:48:f9:b9:07:c3:
60:e5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
41:93:76:0D:47:A6:B7:5B:69:79:5A:92:42:CE:99:50:91:A2:52:80
X509v3 Authority Key Identifier:
keyid:50:9C:8F:32:A1:F4:28:1F:71:46:38:95:D5:43:C7:17:9C:F7:F9:59
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/UJyPMqH0KB9xRjiV1UPHF5z3-Vk.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/4d/ff0a7d-dccd-47ce-b21d-14809c938b76/1/UJyPMqH0KB9xRjiV1UPHF5z3-Vk.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/4d/ff0a7d-dccd-47ce-b21d-14809c938b76/1/UJyPMqH0KB9xRjiV1UPHF5z3-Vk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
93:72:d1:15:a3:a8:b2:79:8c:e2:2d:f6:94:17:f8:8d:54:0a:
48:21:ed:64:26:82:29:4b:27:fe:1f:f2:d1:07:19:36:34:6d:
58:1e:18:20:68:8e:7f:76:72:35:0a:32:62:51:c5:1a:46:a5:
bb:99:82:0f:fa:69:a7:6a:6a:75:a5:bb:c8:9f:54:42:f1:f1:
14:50:ca:6c:42:96:11:c6:95:57:16:8b:45:00:f5:b7:fa:99:
9a:c9:dd:cb:90:61:46:52:01:d0:b4:86:81:43:72:d4:d9:0c:
bf:e7:9f:cd:0c:87:a3:b3:57:4f:55:ff:93:d9:3e:40:85:15:
47:6d:e6:73:9e:71:0c:20:d6:c7:ba:fe:5c:1d:79:71:dc:d6:
16:80:e1:37:1b:ff:8f:ef:5a:5f:74:bb:29:44:f2:81:75:16:
73:8c:df:8a:16:39:ca:9e:f8:a8:e2:7f:ff:5d:f4:c5:fb:34:
b3:bd:de:4b:d8:54:98:46:ac:c0:71:e0:23:e0:17:86:27:33:
cc:a2:56:3b:74:ca:bb:15:5f:4e:3c:6f:1b:bd:a5:7c:cf:fb:
b6:b0:5d:5a:c6:7d:88:cc:b0:8d:57:41:14:79:e3:c4:06:fc:
e7:c7:af:cd:6b:b3:c9:41:ed:db:6c:47:d5:89:a7:fc:3e:80:
f3:79:fe:28
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Apr 17 08:06:40 2025 by rpki-client