Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/62/8ec96d-d61c-46ac-bf54-65135cf2f815/1/UpIxske_9ltMY0GQfs1eq6f5ypI.mft
File: UpIxske_9ltMY0GQfs1eq6f5ypI.mft (raw, json)
Hash identifier: z8z7SiqYlaxUIk4LSly79cNnDKHJF2sxxpsg51AQjlg=
Subject key identifier: 10:BD:0D:DD:F7:18:ED:F1:3B:4C:D7:DF:B8:E4:10:E5:11:47:8F:41
Authority key identifier: 52:92:31:B2:47:BF:F6:5B:4C:63:41:90:7E:CD:5E:AB:A7:F9:CA:92
Certificate issuer: /CN=529231b247bff65b4c6341907ecd5eaba7f9ca92
Certificate serial: 019658A67D4FC480645B7809353197C56AA6
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/UpIxske_9ltMY0GQfs1eq6f5ypI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/62/8ec96d-d61c-46ac-bf54-65135cf2f815/1/UpIxske_9ltMY0GQfs1eq6f5ypI.mft
Manifest number: 1503
Signing time: Mon 21 Apr 2025 14:00:28 +0000
Manifest this update: Mon 21 Apr 2025 14:00:28 +0000
Manifest next update: Tue 22 Apr 2025 14:00:28 +0000
Files and hashes: 1: QNtVQ4uRD5YHVKeiIuOtvfCNd7w.roa (hash: h1eiwnIox6CJN2eOBBfQEHdpOKWR/C6Oxeaya2ntIbQ=)
2: UpIxske_9ltMY0GQfs1eq6f5ypI.crl (hash: ehjboxc44gV85M9BtqJeosx+w+t3Zn6hIFSy2YMdzWk=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/62/8ec96d-d61c-46ac-bf54-65135cf2f815/1/UpIxske_9ltMY0GQfs1eq6f5ypI.crl
rsync://rpki.ripe.net/repository/DEFAULT/62/8ec96d-d61c-46ac-bf54-65135cf2f815/1/UpIxske_9ltMY0GQfs1eq6f5ypI.mft
rsync://rpki.ripe.net/repository/DEFAULT/UpIxske_9ltMY0GQfs1eq6f5ypI.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 22 Apr 2025 10:00:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:58:a6:7d:4f:c4:80:64:5b:78:09:35:31:97:c5:6a:a6
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=529231b247bff65b4c6341907ecd5eaba7f9ca92
Validity
Not Before: Apr 21 14:00:28 2025 GMT
Not After : Apr 22 14:00:28 2025 GMT
Subject: CN=10bd0dddf718edf13b4cd7dfb8e410e511478f41
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a0:33:eb:81:0f:41:66:e9:a0:7d:6d:7b:0a:4d:
20:da:22:45:cb:eb:ba:a1:8e:3d:6e:9d:79:a4:ed:
a0:88:5c:b3:d8:24:d1:89:6b:76:32:70:50:47:dd:
a7:ce:7d:6e:9a:7a:0b:c7:52:03:7f:8f:2a:31:af:
89:60:58:75:ee:29:d3:42:db:b2:80:b8:b8:75:f0:
66:05:e8:d0:68:11:4a:01:60:05:8e:06:bd:49:f1:
2a:ae:fc:44:a4:b7:80:3c:49:c3:53:f8:97:0e:92:
78:2d:bd:3c:83:73:1f:5c:6e:ba:95:d4:b4:27:a9:
bb:d5:78:84:ac:d5:56:a2:81:90:30:40:e8:a5:12:
b1:7d:19:88:0b:2a:06:a4:36:e7:f2:68:23:18:70:
c8:f2:aa:ab:9b:4a:4a:fe:8a:1b:e4:f6:b6:99:4f:
b8:eb:e2:eb:6c:97:f8:e2:77:32:bd:05:b3:4b:71:
10:2f:66:58:08:8a:aa:02:01:3e:f6:31:76:4e:92:
80:16:69:8b:77:0d:a0:2d:87:fd:e5:67:0b:3e:00:
31:ca:7b:ec:62:dc:4f:37:92:3c:3b:9f:12:2e:30:
31:2b:a5:6c:c4:3e:49:f8:f9:d4:72:a8:bc:68:d1:
37:20:48:e6:a0:1a:28:d5:a5:81:a6:20:01:73:12:
07:a7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
10:BD:0D:DD:F7:18:ED:F1:3B:4C:D7:DF:B8:E4:10:E5:11:47:8F:41
X509v3 Authority Key Identifier:
keyid:52:92:31:B2:47:BF:F6:5B:4C:63:41:90:7E:CD:5E:AB:A7:F9:CA:92
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/UpIxske_9ltMY0GQfs1eq6f5ypI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/62/8ec96d-d61c-46ac-bf54-65135cf2f815/1/UpIxske_9ltMY0GQfs1eq6f5ypI.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/62/8ec96d-d61c-46ac-bf54-65135cf2f815/1/UpIxske_9ltMY0GQfs1eq6f5ypI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
67:b2:41:a8:26:71:0c:7d:de:ee:f4:74:24:41:5f:86:bd:57:
23:62:8d:ec:19:56:68:3a:51:e4:4b:7e:47:cc:97:25:38:a6:
a5:82:b2:3a:1e:d7:16:c2:c2:ac:5f:0f:ea:04:8b:46:2b:b3:
5d:b6:fd:a5:51:be:35:78:70:9b:b1:74:f9:16:e0:bc:1f:e0:
53:87:5b:f3:c5:43:58:79:85:9a:4a:84:3d:37:a0:ef:68:fb:
5f:72:df:31:06:11:e3:f3:fb:ce:f2:fe:b6:06:ee:3b:28:e8:
50:35:bc:64:28:9e:23:19:48:1a:08:84:05:a7:b1:7a:aa:1e:
75:08:01:5a:ce:49:66:0f:85:1f:73:e1:0b:e5:5a:3d:9c:8d:
8b:30:6a:b5:54:77:c2:25:cc:9e:5e:96:b3:49:4a:e6:62:e3:
ec:fa:a7:5a:9a:c1:d5:a8:49:aa:98:22:88:0c:c0:e6:36:ca:
7b:5b:0c:41:c0:34:10:20:40:58:eb:4d:3e:e1:38:e7:0e:27:
45:ee:d8:79:e2:fc:d9:18:36:42:ef:59:31:73:c7:ac:5f:b9:
6f:db:01:c4:17:59:ba:ce:46:f1:43:91:9f:f4:9b:1e:1a:8f:
f6:2c:66:a5:e9:b8:d8:dd:a7:4b:6d:33:7a:32:24:c8:39:16:
2a:4b:55:6a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 21 19:22:53 2025 by rpki-client