Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/60/0005b2-d28b-4bf9-9bce-cd81fc580f47/1/UCcYumg5OXxsV-ztbVCVcers7d8.mft
File: UCcYumg5OXxsV-ztbVCVcers7d8.mft (raw, json)
Hash identifier: SURNIIWliI70G5psVUw84Bzjs/aANln8kHs3ZPCL7L0=
Subject key identifier: BA:70:CA:B1:13:CF:FB:07:1D:9D:0B:5C:7E:FD:4C:F9:CA:07:1F:52
Authority key identifier: 50:27:18:BA:68:39:39:7C:6C:57:EC:ED:6D:50:95:71:EA:EC:ED:DF
Certificate issuer: /CN=502718ba6839397c6c57eced6d509571eaeceddf
Certificate serial: 01963F546CD465ECCE26D3E24C7BFF4096CD
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/UCcYumg5OXxsV-ztbVCVcers7d8.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/60/0005b2-d28b-4bf9-9bce-cd81fc580f47/1/UCcYumg5OXxsV-ztbVCVcers7d8.mft
Manifest number: 14F3
Signing time: Wed 16 Apr 2025 16:00:19 +0000
Manifest this update: Wed 16 Apr 2025 16:00:19 +0000
Manifest next update: Thu 17 Apr 2025 16:00:19 +0000
Files and hashes: 1: UCcYumg5OXxsV-ztbVCVcers7d8.crl (hash: pb3R+LlvgWLfvZQdrw+nNjCMdF2SOnhrEkW/fQ7Wl2U=)
2: WtJONoz3Ixt7CeZPRU-hgtKyWKs.roa (hash: otXlAL96Q2eQ0JoFnviTH8lX7JlMAqHtqXMBKNXMq+c=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/60/0005b2-d28b-4bf9-9bce-cd81fc580f47/1/UCcYumg5OXxsV-ztbVCVcers7d8.crl
rsync://rpki.ripe.net/repository/DEFAULT/60/0005b2-d28b-4bf9-9bce-cd81fc580f47/1/UCcYumg5OXxsV-ztbVCVcers7d8.mft
rsync://rpki.ripe.net/repository/DEFAULT/UCcYumg5OXxsV-ztbVCVcers7d8.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 17 Apr 2025 16:00:19 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:3f:54:6c:d4:65:ec:ce:26:d3:e2:4c:7b:ff:40:96:cd
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=502718ba6839397c6c57eced6d509571eaeceddf
Validity
Not Before: Apr 16 16:00:19 2025 GMT
Not After : Apr 17 16:00:19 2025 GMT
Subject: CN=ba70cab113cffb071d9d0b5c7efd4cf9ca071f52
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b5:3f:aa:85:4c:ae:27:5b:b8:33:86:1f:5c:86:
a6:85:6a:52:1d:83:3c:9c:a6:be:47:1e:3d:fc:02:
a8:94:3f:8c:2f:ad:4c:32:ea:30:22:58:76:21:fc:
c9:8d:38:90:d2:b2:00:1e:d7:28:e1:0a:bf:90:42:
6f:75:40:60:97:c1:22:6a:b7:d6:07:92:1e:9d:4f:
4c:f3:0d:64:e8:c9:53:79:40:b4:07:25:bf:ad:31:
11:d6:2c:3f:33:55:83:75:7a:da:d5:c7:a4:32:7c:
36:b9:99:97:44:84:7a:cb:e4:0e:de:94:90:98:9c:
df:40:4c:15:31:dd:d5:d7:38:9e:20:55:9f:c5:d9:
a4:5b:20:08:d6:9c:4d:84:84:aa:a3:5b:6b:a6:c0:
76:fb:62:3b:d5:d4:4f:5a:8b:6a:91:d5:f0:00:e8:
66:f0:75:f4:90:9c:2a:f1:5e:5a:21:d4:06:40:ba:
48:fe:51:17:15:08:f9:0c:5d:10:bd:f5:61:fd:f2:
23:d2:76:f2:e4:68:ff:d4:f5:f1:f8:bb:78:53:d2:
01:de:51:c5:5b:d8:78:27:7f:af:6b:3a:08:fc:e3:
47:5f:9b:47:99:64:17:b3:51:98:b8:a6:0d:b0:2d:
1e:bf:04:e8:5e:cc:c2:d2:a2:44:70:cd:0a:18:ca:
9d:2d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
BA:70:CA:B1:13:CF:FB:07:1D:9D:0B:5C:7E:FD:4C:F9:CA:07:1F:52
X509v3 Authority Key Identifier:
keyid:50:27:18:BA:68:39:39:7C:6C:57:EC:ED:6D:50:95:71:EA:EC:ED:DF
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/UCcYumg5OXxsV-ztbVCVcers7d8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/60/0005b2-d28b-4bf9-9bce-cd81fc580f47/1/UCcYumg5OXxsV-ztbVCVcers7d8.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/60/0005b2-d28b-4bf9-9bce-cd81fc580f47/1/UCcYumg5OXxsV-ztbVCVcers7d8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
90:9c:0d:6b:2f:47:15:9e:a6:56:1c:14:57:9d:b8:65:17:ac:
ee:b6:2d:2a:69:f9:47:c0:30:77:3d:fe:9a:e0:af:aa:00:23:
8d:29:c2:12:ad:9d:5b:55:3d:e4:7b:5b:1d:9c:f0:e7:15:08:
4e:67:90:6f:98:c2:67:a6:c3:97:1c:0f:fc:74:fd:ad:b3:a3:
e3:57:1b:09:45:3e:a6:a9:80:21:a1:de:21:b0:43:33:1e:2d:
ef:e5:a0:5f:17:b6:12:89:be:c8:46:ed:7a:2b:47:bd:e7:90:
19:0b:46:bc:c9:88:1f:3d:bf:21:a6:0c:84:23:9b:a3:47:0a:
35:26:94:d5:71:00:fa:e5:00:31:48:99:a9:13:56:94:3c:b7:
16:20:63:e0:89:b9:15:52:b0:72:ed:f7:60:f5:37:03:24:4b:
0d:de:db:3f:9d:60:bc:9e:5a:6f:7d:96:1d:65:6c:87:3d:49:
2b:c1:61:77:c1:ef:99:58:f5:c2:ac:03:09:ad:e2:06:e1:d9:
7e:81:85:dc:ef:4d:aa:2d:1c:a9:ea:9c:56:2f:fc:20:0d:3e:
c4:59:a5:19:b5:a9:1c:01:18:d5:8f:1d:15:c6:8a:18:73:58:
07:3e:0b:03:ad:33:d2:07:ab:b9:fa:86:37:b3:dd:a3:3a:e0:
a8:88:dc:3f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Apr 17 02:37:46 2025 by rpki-client