Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/64/53d924-4dbd-4501-bfb3-840f09ed48d5/1/UrDyNFHcBfp-z50etB3T0TdWRTs.mft
File: UrDyNFHcBfp-z50etB3T0TdWRTs.mft (raw, json)
Hash identifier: nNWNCUWgo9B0n07NHF2CDXsXwno20C7xeay5cxAZ9Wk=
Subject key identifier: E5:1D:D6:27:E8:96:60:28:E2:CC:79:2F:A0:2B:23:85:59:BA:59:3E
Authority key identifier: 52:B0:F2:34:51:DC:05:FA:7E:CF:9D:1E:B4:1D:D3:D1:37:56:45:3B
Certificate issuer: /CN=52b0f23451dc05fa7ecf9d1eb41dd3d13756453b
Certificate serial: 01962B2A1A2FE7FC29173359383F43CB064F
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/UrDyNFHcBfp-z50etB3T0TdWRTs.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/64/53d924-4dbd-4501-bfb3-840f09ed48d5/1/UrDyNFHcBfp-z50etB3T0TdWRTs.mft
Manifest number: 14E5
Signing time: Sat 12 Apr 2025 18:01:41 +0000
Manifest this update: Sat 12 Apr 2025 18:01:41 +0000
Manifest next update: Sun 13 Apr 2025 18:01:41 +0000
Files and hashes: 1: UrDyNFHcBfp-z50etB3T0TdWRTs.crl (hash: DQct29pqJjh1ASvANAZyAwGqcSf6z0XDPnR8qsp31zE=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/64/53d924-4dbd-4501-bfb3-840f09ed48d5/1/UrDyNFHcBfp-z50etB3T0TdWRTs.crl
rsync://rpki.ripe.net/repository/DEFAULT/64/53d924-4dbd-4501-bfb3-840f09ed48d5/1/UrDyNFHcBfp-z50etB3T0TdWRTs.mft
rsync://rpki.ripe.net/repository/DEFAULT/UrDyNFHcBfp-z50etB3T0TdWRTs.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 13 Apr 2025 18:01:41 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:2b:2a:1a:2f:e7:fc:29:17:33:59:38:3f:43:cb:06:4f
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=52b0f23451dc05fa7ecf9d1eb41dd3d13756453b
Validity
Not Before: Apr 12 18:01:41 2025 GMT
Not After : Apr 13 18:01:41 2025 GMT
Subject: CN=e51dd627e8966028e2cc792fa02b238559ba593e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b7:ba:e6:79:d5:fb:13:b2:cb:6f:fc:65:9c:0e:
ec:b3:71:ca:da:61:92:39:75:2b:8c:55:1b:a8:2a:
9e:6f:b9:51:9e:ea:44:af:28:8b:1d:60:01:bf:fd:
ed:03:49:31:c2:64:eb:78:c6:63:92:1d:ef:03:3e:
29:f8:55:7d:90:7e:55:e0:95:6b:d6:13:bd:1f:8c:
e3:a8:68:51:6f:d8:99:6e:1d:10:89:50:a2:21:b5:
fc:c9:7d:7b:e0:b8:bc:f4:b2:da:24:5f:1b:07:b5:
b2:1c:be:c3:dc:5c:79:75:72:1a:08:68:bb:17:d3:
d2:1a:d8:bc:de:71:70:de:fe:55:d8:c8:e9:72:a0:
30:a2:4a:68:1f:8f:b5:96:1b:dc:23:6a:63:5e:83:
20:01:b1:db:d2:51:05:68:42:99:cb:11:fe:ec:23:
03:ef:23:03:c1:9a:a1:36:a3:d4:ae:00:c5:44:dc:
39:74:1b:f3:cb:b1:73:ef:ad:d9:68:0c:91:28:65:
dd:ea:76:bd:16:04:08:6d:39:8f:93:ba:6c:7b:69:
c4:05:b7:a3:93:e7:56:3c:ec:ef:0f:78:05:91:07:
11:eb:1f:1f:81:70:ed:c1:69:b0:4b:7e:32:d7:9f:
28:06:da:a5:61:1c:d3:6d:f9:b2:60:c2:23:fe:b2:
bf:b5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E5:1D:D6:27:E8:96:60:28:E2:CC:79:2F:A0:2B:23:85:59:BA:59:3E
X509v3 Authority Key Identifier:
keyid:52:B0:F2:34:51:DC:05:FA:7E:CF:9D:1E:B4:1D:D3:D1:37:56:45:3B
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/UrDyNFHcBfp-z50etB3T0TdWRTs.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/64/53d924-4dbd-4501-bfb3-840f09ed48d5/1/UrDyNFHcBfp-z50etB3T0TdWRTs.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/64/53d924-4dbd-4501-bfb3-840f09ed48d5/1/UrDyNFHcBfp-z50etB3T0TdWRTs.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
25:2d:6e:fe:be:3c:72:73:f8:43:4e:34:38:f2:94:d7:31:3f:
69:c0:86:3c:fe:48:0d:ee:e7:8e:4b:5a:0b:e4:7b:83:91:23:
73:b7:1d:ed:c6:ca:b8:87:ea:ff:66:68:8c:73:18:b3:45:a7:
c9:14:ed:a7:6d:7a:3e:5a:c4:d6:20:18:55:1e:36:f1:94:7c:
94:3b:3f:00:c4:d3:76:b7:e2:c1:4c:b7:29:14:84:9a:6e:a0:
ac:40:19:1a:c1:f3:86:5f:d6:e0:fb:e9:31:70:2a:0a:77:a0:
0a:8a:ac:d2:c9:e4:bc:5d:d3:4a:86:79:7e:34:7e:f7:c4:18:
36:dd:ba:08:3e:df:ed:36:90:43:54:0d:5d:ca:e8:0c:66:e1:
5c:5d:26:79:e3:80:47:a7:04:29:f5:05:bb:07:71:82:47:db:
0b:27:45:8b:e5:eb:ec:01:4a:b3:79:20:0f:44:e4:67:75:59:
4e:aa:1c:60:7f:63:2c:a8:7f:be:15:9a:6b:af:ea:2b:23:11:
e5:77:e9:4a:1c:72:86:0b:fd:db:7f:48:67:4a:5d:23:7e:3c:
15:b9:c1:be:f8:ec:8b:21:61:11:57:8c:f0:9a:c4:d1:49:9c:
68:ff:a2:8e:4a:3d:ff:3a:d9:f5:5c:3b:1e:1c:5f:76:ff:31:
e8:4a:88:bd
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Apr 13 04:03:51 2025 by rpki-client