Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/4e/fadff6-5cc0-4694-9c62-1358c2b5d541/1/UjC2XWEW1LYNNv33tsbV5blUY54.mft
File: UjC2XWEW1LYNNv33tsbV5blUY54.mft (raw, json)
Hash identifier: YJEeJW5JpbP4tXdT/Zoa6xz1OTOJXQWyPA8xZfk69Nw=
Subject key identifier: E6:B3:46:D4:00:21:B3:7D:94:E9:FB:47:4B:F2:30:9C:2B:C1:83:55
Authority key identifier: 52:30:B6:5D:61:16:D4:B6:0D:36:FD:F7:B6:C6:D5:E5:B9:54:63:9E
Certificate issuer: /CN=5230b65d6116d4b60d36fdf7b6c6d5e5b954639e
Certificate serial: 01963FC2CA6006F9198CD1024D59C6AEA0B2
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/UjC2XWEW1LYNNv33tsbV5blUY54.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/4e/fadff6-5cc0-4694-9c62-1358c2b5d541/1/UjC2XWEW1LYNNv33tsbV5blUY54.mft
Manifest number: 14F5
Signing time: Wed 16 Apr 2025 18:00:52 +0000
Manifest this update: Wed 16 Apr 2025 18:00:52 +0000
Manifest next update: Thu 17 Apr 2025 18:00:52 +0000
Files and hashes: 1: UjC2XWEW1LYNNv33tsbV5blUY54.crl (hash: /F9HzMT+oSR0hJnEuWR2hd8N5WKdi6Dj0qiWtXYTmmM=)
2: owqBee_Kxd5YjUschPQUDNZf4Dw.roa (hash: ot8KQMk3wQ6FB25/lH0yWio9yVgR4a2T0TywwiUxMRc=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/4e/fadff6-5cc0-4694-9c62-1358c2b5d541/1/UjC2XWEW1LYNNv33tsbV5blUY54.crl
rsync://rpki.ripe.net/repository/DEFAULT/4e/fadff6-5cc0-4694-9c62-1358c2b5d541/1/UjC2XWEW1LYNNv33tsbV5blUY54.mft
rsync://rpki.ripe.net/repository/DEFAULT/UjC2XWEW1LYNNv33tsbV5blUY54.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 17 Apr 2025 18:00:52 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:3f:c2:ca:60:06:f9:19:8c:d1:02:4d:59:c6:ae:a0:b2
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=5230b65d6116d4b60d36fdf7b6c6d5e5b954639e
Validity
Not Before: Apr 16 18:00:52 2025 GMT
Not After : Apr 17 18:00:52 2025 GMT
Subject: CN=e6b346d40021b37d94e9fb474bf2309c2bc18355
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:aa:f2:57:3f:14:54:06:7e:38:c5:fe:7b:43:2c:
4e:24:1a:2d:2c:9b:66:8c:62:20:17:2f:b0:3e:ab:
f8:b0:f5:0a:c8:57:1e:cf:cc:7f:51:fc:c4:3f:6f:
e7:3f:b2:6c:be:05:1c:f9:60:1a:ee:3c:99:a0:8b:
36:7a:67:89:fd:f0:fb:46:e7:9e:3c:36:83:2f:a4:
9a:b0:c5:ea:d0:27:fa:72:e7:bd:06:db:ce:ce:9c:
81:14:6a:93:f8:61:ba:d0:d5:8d:55:27:fb:6b:7e:
08:ef:2d:59:e9:3a:a8:69:4e:b2:1b:b0:73:72:be:
e4:e7:be:37:a7:98:e9:24:35:06:7f:83:44:64:bc:
fc:4c:0e:0b:a8:4d:2a:0c:27:9d:fb:b9:6e:fb:f1:
e2:0d:27:03:d9:de:de:2a:95:6e:ac:96:a3:4e:b7:
6c:fc:89:cf:77:9c:8c:ff:60:9a:f6:2a:99:93:3d:
65:e8:ef:bd:c9:4b:d8:7b:fe:be:42:26:f8:9d:63:
1f:9d:95:7a:79:a7:d1:c8:c2:0e:ba:22:2d:82:fa:
7e:27:dd:a8:54:ac:1a:47:e2:a1:c7:20:4b:f4:ae:
90:9d:ad:c3:71:53:56:40:81:d2:f2:32:43:ae:8c:
9c:40:a3:47:54:ef:dd:82:a4:da:a1:e1:ba:ca:90:
57:d7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E6:B3:46:D4:00:21:B3:7D:94:E9:FB:47:4B:F2:30:9C:2B:C1:83:55
X509v3 Authority Key Identifier:
keyid:52:30:B6:5D:61:16:D4:B6:0D:36:FD:F7:B6:C6:D5:E5:B9:54:63:9E
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/UjC2XWEW1LYNNv33tsbV5blUY54.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/4e/fadff6-5cc0-4694-9c62-1358c2b5d541/1/UjC2XWEW1LYNNv33tsbV5blUY54.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/4e/fadff6-5cc0-4694-9c62-1358c2b5d541/1/UjC2XWEW1LYNNv33tsbV5blUY54.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
50:24:4f:18:44:8e:84:be:ea:42:b4:88:c8:88:4e:09:97:89:
cb:88:63:6e:6e:ba:4c:af:1b:38:85:ae:c8:6c:27:e5:70:27:
78:5e:6f:5a:48:5e:ca:e7:50:37:36:b5:91:db:90:67:d1:3f:
e9:c5:f9:a4:1b:b7:f9:32:81:60:c0:9a:b2:fa:66:db:66:38:
8e:d9:de:a4:25:4a:ec:82:9c:bb:4c:ce:ad:35:ad:13:6f:35:
9f:98:6b:c4:32:1a:f1:6b:5e:a5:4c:3c:91:fe:ff:ba:0c:5f:
cc:31:7b:8f:fa:83:36:cb:4a:e9:db:10:80:71:35:8b:3f:21:
03:d0:bd:19:7d:2f:4a:63:73:b9:99:14:3d:48:f5:3a:75:19:
59:9b:02:0f:83:97:98:ab:b4:80:f3:16:ad:1e:b5:03:40:d0:
f0:a5:23:8c:0f:d9:51:ce:c9:53:56:ca:b5:0a:2c:6d:5e:99:
2e:bd:a2:48:a5:08:5a:33:5c:4b:3c:b4:b2:46:30:f9:fd:58:
9f:74:6a:76:82:32:bb:56:52:2e:d6:0a:d5:10:bb:a9:de:41:
4d:3c:44:a9:ee:93:cf:8f:00:1e:7e:14:93:08:36:28:45:1b:
f2:34:7e:59:13:f5:c4:0e:e1:dc:85:78:e7:79:c7:49:22:5b:
94:da:93:c9
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Apr 17 01:46:09 2025 by rpki-client