Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/58/24f509-ec2c-486d-9b01-09d8e493c1f9/1/UvlBFzVkoJt8-O_dmHVhQmKn3WE.mft
File: UvlBFzVkoJt8-O_dmHVhQmKn3WE.mft (raw, json)
Hash identifier: LwnaJGvnl12bgAjvenqZ+9ye/OWQQXGOaLncYRTZK+U=
Subject key identifier: 3E:6D:11:6A:D4:0C:21:7A:34:6E:AA:D0:16:B2:59:06:46:51:80:D2
Authority key identifier: 52:F9:41:17:35:64:A0:9B:7C:F8:EF:DD:98:75:61:42:62:A7:DD:61
Certificate issuer: /CN=52f941173564a09b7cf8efdd9875614262a7dd61
Certificate serial: 01962A4E57DFD48EAD32A29A0DCB495BE76B
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/UvlBFzVkoJt8-O_dmHVhQmKn3WE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/58/24f509-ec2c-486d-9b01-09d8e493c1f9/1/UvlBFzVkoJt8-O_dmHVhQmKn3WE.mft
Manifest number: 0BCE
Signing time: Sat 12 Apr 2025 14:01:39 +0000
Manifest this update: Sat 12 Apr 2025 14:01:39 +0000
Manifest next update: Sun 13 Apr 2025 14:01:39 +0000
Files and hashes: 1: UvlBFzVkoJt8-O_dmHVhQmKn3WE.crl (hash: OIQem04E9UWM9phAq5HxnYdZ8rVMt7XVoyToOHg1B9s=)
2: XcVo6Gcf-l3iWhZzeOaaEzufuDw.roa (hash: Q8U31mISF8PJJ4X9+WRd+NF2mJCwrseuFFyVkfpjEQE=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/58/24f509-ec2c-486d-9b01-09d8e493c1f9/1/UvlBFzVkoJt8-O_dmHVhQmKn3WE.crl
rsync://rpki.ripe.net/repository/DEFAULT/58/24f509-ec2c-486d-9b01-09d8e493c1f9/1/UvlBFzVkoJt8-O_dmHVhQmKn3WE.mft
rsync://rpki.ripe.net/repository/DEFAULT/UvlBFzVkoJt8-O_dmHVhQmKn3WE.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 13 Apr 2025 14:00:59 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:2a:4e:57:df:d4:8e:ad:32:a2:9a:0d:cb:49:5b:e7:6b
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=52f941173564a09b7cf8efdd9875614262a7dd61
Validity
Not Before: Apr 12 14:01:39 2025 GMT
Not After : Apr 13 14:01:39 2025 GMT
Subject: CN=3e6d116ad40c217a346eaad016b25906465180d2
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:f0:b5:e3:61:7a:a9:b8:56:60:e8:eb:93:72:70:
2a:22:0f:75:b6:3b:9b:75:79:dc:ca:03:25:55:06:
39:61:09:8c:ef:ca:96:b4:fa:68:3f:56:19:57:1b:
b4:ed:47:48:1a:7a:df:0c:d4:7e:09:c7:48:6b:18:
c2:95:de:8c:6c:86:75:a8:1e:a3:07:29:c3:92:99:
7a:9f:2c:74:c1:9c:9d:82:ac:0c:0c:eb:92:46:48:
7a:4d:cf:ae:3a:a9:ff:cf:f2:9b:3e:1a:73:be:76:
b1:39:cd:cf:a9:36:73:c2:67:d7:24:d9:10:5f:ac:
1b:df:dc:10:06:7d:1b:e7:aa:c2:ad:30:31:88:cf:
cf:60:33:76:1a:f2:5f:57:29:b1:b1:e8:b9:e6:67:
63:68:a6:71:52:a8:dc:57:07:89:2b:9c:ae:c8:c2:
db:a7:8f:c2:4f:fa:52:0a:54:9c:eb:be:d2:ea:f8:
9d:9b:55:00:a2:f8:23:c0:29:a9:af:23:ed:65:d7:
aa:db:27:bb:cb:a5:b7:c8:8a:12:0b:dc:80:aa:80:
58:a3:91:2d:a0:d7:9c:bf:8c:25:34:04:4a:71:a2:
c0:f8:00:af:42:3d:6d:1e:be:9f:42:9b:ac:af:58:
96:ef:f2:d5:37:01:61:f0:12:9c:40:8b:48:83:14:
59:61
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
3E:6D:11:6A:D4:0C:21:7A:34:6E:AA:D0:16:B2:59:06:46:51:80:D2
X509v3 Authority Key Identifier:
keyid:52:F9:41:17:35:64:A0:9B:7C:F8:EF:DD:98:75:61:42:62:A7:DD:61
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/UvlBFzVkoJt8-O_dmHVhQmKn3WE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/58/24f509-ec2c-486d-9b01-09d8e493c1f9/1/UvlBFzVkoJt8-O_dmHVhQmKn3WE.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/58/24f509-ec2c-486d-9b01-09d8e493c1f9/1/UvlBFzVkoJt8-O_dmHVhQmKn3WE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
4a:d6:61:a4:9b:cb:d5:ba:a2:da:ad:7e:99:72:df:a5:db:e2:
39:3c:19:ce:32:75:31:0d:6c:3d:cd:58:72:8d:a5:75:ad:07:
f4:97:44:75:2c:1b:bd:28:c8:23:8a:73:d9:ea:93:59:b3:da:
1f:dd:17:51:6e:72:0f:fc:6f:f3:1c:d9:23:08:43:ec:cb:36:
30:f5:47:a9:ac:e2:98:50:2d:d4:c3:7d:18:4c:7e:e5:46:51:
53:13:24:33:d3:44:65:97:73:30:39:71:a1:82:7c:59:63:34:
64:52:b3:d8:72:ec:df:4d:ee:9c:c1:0e:13:a4:f8:4f:05:dd:
7a:93:cc:af:23:8c:de:f3:05:c9:75:09:18:fe:6c:54:3c:07:
98:8b:7b:ea:2c:9d:92:1c:67:4c:da:11:cc:c9:fd:1b:76:8e:
4e:bb:53:56:b5:90:89:c5:05:7f:c3:ba:c1:81:64:fc:d4:81:
76:54:2e:26:f9:43:61:be:e8:1a:29:b4:10:41:03:d9:cb:04:
6d:8b:27:f1:4e:12:98:24:20:1f:ec:52:d4:8c:ea:8e:e2:1c:
3a:77:0a:63:cc:68:ea:83:70:df:bb:92:21:66:75:cc:f4:f0:
67:b4:35:2e:68:50:9c:cd:ce:b1:79:60:ff:d1:1c:bf:c0:fb:
f7:e4:d3:9f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 12 18:34:33 2025 by rpki-client