Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/5f/31fd16-6d00-4d09-a8d4-c1d6c8f319c1/1/UQzngdsNx-T59JQUWileTMsSHK4.mft
File: UQzngdsNx-T59JQUWileTMsSHK4.mft (raw, json)
Hash identifier: QZJiNo5JgSbmZRGjm8BGdKqMb+ZhV8dfUpPOlbTD0EU=
Subject key identifier: 5B:32:99:61:84:EE:29:24:2C:5A:E6:72:62:C7:DF:27:EF:6D:84:58
Authority key identifier: 51:0C:E7:81:DB:0D:C7:E4:F9:F4:94:14:5A:29:5E:4C:CB:12:1C:AE
Certificate issuer: /CN=510ce781db0dc7e4f9f494145a295e4ccb121cae
Certificate serial: 019652A46E18760E9EFE2A380CC96C8D04B2
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/UQzngdsNx-T59JQUWileTMsSHK4.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/5f/31fd16-6d00-4d09-a8d4-c1d6c8f319c1/1/UQzngdsNx-T59JQUWileTMsSHK4.mft
Manifest number: 031B
Signing time: Sun 20 Apr 2025 10:00:29 +0000
Manifest this update: Sun 20 Apr 2025 10:00:29 +0000
Manifest next update: Mon 21 Apr 2025 10:00:29 +0000
Files and hashes: 1: 7spEQVqcL4vrSpVaVj2ZHbdCXAk.roa (hash: fpYq7eNAV/2Q3SZsPHHqVIOf+rVV6huCrpQyiQCeASw=)
2: UQzngdsNx-T59JQUWileTMsSHK4.crl (hash: NLOr9lT/7Woy06GtFpmDbMD/bhvO8/8TeyJU2MpiGWs=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/5f/31fd16-6d00-4d09-a8d4-c1d6c8f319c1/1/UQzngdsNx-T59JQUWileTMsSHK4.crl
rsync://rpki.ripe.net/repository/DEFAULT/5f/31fd16-6d00-4d09-a8d4-c1d6c8f319c1/1/UQzngdsNx-T59JQUWileTMsSHK4.mft
rsync://rpki.ripe.net/repository/DEFAULT/UQzngdsNx-T59JQUWileTMsSHK4.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 21 Apr 2025 07:00:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:52:a4:6e:18:76:0e:9e:fe:2a:38:0c:c9:6c:8d:04:b2
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=510ce781db0dc7e4f9f494145a295e4ccb121cae
Validity
Not Before: Apr 20 10:00:29 2025 GMT
Not After : Apr 21 10:00:29 2025 GMT
Subject: CN=5b32996184ee29242c5ae67262c7df27ef6d8458
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:99:d8:1b:3e:3b:90:c7:d7:00:5e:30:44:16:30:
3d:7e:57:bc:27:4d:aa:46:99:22:41:3e:65:30:10:
1a:0b:17:65:48:73:9f:32:aa:f0:d6:9e:fc:13:fe:
4c:be:06:c3:2d:6d:f6:62:19:51:56:aa:6b:72:ba:
4b:f7:e3:6f:85:86:d8:e3:30:2e:02:80:a8:e6:ab:
ff:18:d1:3c:dc:f9:d3:99:30:b7:db:9b:ad:73:54:
98:ed:79:06:19:af:90:9f:f5:fe:a9:22:af:30:79:
a8:d5:c1:68:d5:6e:ef:b0:89:f9:7c:a8:11:c8:10:
35:dd:e2:2f:e6:79:89:da:e7:08:1d:6d:7d:92:1f:
fa:b0:a7:90:4b:9e:4b:94:a1:da:0b:7d:92:00:f6:
76:ed:26:9c:ca:af:19:f7:22:19:fd:14:c3:c9:ae:
f6:ec:fa:dd:60:5b:fa:73:84:7d:33:d9:19:59:cb:
5c:56:2b:81:65:77:0b:01:8d:45:1a:9b:1a:49:b9:
41:b8:46:30:89:08:4a:59:10:f2:10:44:69:b9:52:
9d:35:0c:82:e1:91:0e:79:6c:df:98:8e:ba:cd:b0:
e0:60:f6:a1:7f:aa:5f:3a:56:5a:cb:13:40:ce:18:
8b:51:cf:f8:e5:aa:50:1d:f7:d2:62:aa:00:66:07:
db:a1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
5B:32:99:61:84:EE:29:24:2C:5A:E6:72:62:C7:DF:27:EF:6D:84:58
X509v3 Authority Key Identifier:
keyid:51:0C:E7:81:DB:0D:C7:E4:F9:F4:94:14:5A:29:5E:4C:CB:12:1C:AE
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/UQzngdsNx-T59JQUWileTMsSHK4.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5f/31fd16-6d00-4d09-a8d4-c1d6c8f319c1/1/UQzngdsNx-T59JQUWileTMsSHK4.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/5f/31fd16-6d00-4d09-a8d4-c1d6c8f319c1/1/UQzngdsNx-T59JQUWileTMsSHK4.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
53:04:33:a8:2a:60:83:9b:36:c9:11:ed:46:bf:10:fb:51:83:
47:f6:8c:09:3e:a8:51:a2:d5:59:91:1c:73:7b:a3:f0:cb:e5:
b8:08:02:60:3d:5f:cc:61:e4:e3:14:8e:e3:64:f5:a4:d0:11:
f0:81:da:0a:24:4d:f3:33:6e:d6:7b:94:8c:2b:09:ba:c5:c6:
72:f7:be:62:96:b6:4f:27:be:62:c3:a1:81:f6:2e:3b:27:1a:
c2:fb:91:35:d4:8b:7d:fb:cf:bb:6d:0a:38:b9:4f:60:65:f1:
69:52:0e:bd:42:a7:b0:45:59:7f:11:07:39:0c:bb:3d:84:ea:
bd:ca:c7:c1:92:71:99:d1:b0:14:6d:0c:5d:d9:c0:d6:26:a3:
ea:06:9b:c6:33:3b:13:d4:7f:70:bd:b5:b8:8f:ea:7c:16:64:
91:80:ff:2b:1a:e2:c4:7d:66:f7:fe:a3:79:d1:23:09:0a:f3:
0c:6b:7f:2c:82:9d:80:53:ce:2d:09:65:4f:f4:29:9f:5a:69:
d4:f0:68:ce:ac:3d:4d:a1:88:f2:f2:6e:a3:38:86:09:44:14:
e4:56:c0:4e:92:0d:c8:e6:40:d5:60:bc:c6:9f:ff:2f:f7:40:
b7:22:eb:a5:f6:25:7e:2f:53:64:f6:3c:02:34:d5:31:94:b6:
eb:ec:cb:f9
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Apr 20 12:14:58 2025 by rpki-client