Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/64/deca0e-dd4c-44ef-bf77-05dbe3df98f6/1/UIqaCKvvdNzFEAT0-uAmbWIDleM.mft
File: UIqaCKvvdNzFEAT0-uAmbWIDleM.mft (raw, json)
Hash identifier: Z3v4Bf92iOEhRmKKncMZOKK+CbC4XGjEYQ+NuEgoChw=
Subject key identifier: 23:BE:32:65:93:D2:84:58:C2:F9:A3:51:08:9B:84:0A:6A:61:96:5D
Authority key identifier: 50:8A:9A:08:AB:EF:74:DC:C5:10:04:F4:FA:E0:26:6D:62:03:95:E3
Certificate issuer: /CN=508a9a08abef74dcc51004f4fae0266d620395e3
Certificate serial: 019623702663C813ED93D11B4E001906E6DC
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/UIqaCKvvdNzFEAT0-uAmbWIDleM.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/64/deca0e-dd4c-44ef-bf77-05dbe3df98f6/1/UIqaCKvvdNzFEAT0-uAmbWIDleM.mft
Manifest number: 0CD8
Signing time: Fri 11 Apr 2025 06:01:14 +0000
Manifest this update: Fri 11 Apr 2025 06:01:14 +0000
Manifest next update: Sat 12 Apr 2025 06:01:14 +0000
Files and hashes: 1: 8CmFhnWxaCeDeglOctNQZC1ZN84.roa (hash: mRPJMJZCvcTnlYvn8UFVdthp3gWoolEvhKxuWOWcGDk=)
2: UIqaCKvvdNzFEAT0-uAmbWIDleM.crl (hash: c17QeIGKjlSNEt1pNW8vvLH8j1WX578378t49WMHzEc=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/64/deca0e-dd4c-44ef-bf77-05dbe3df98f6/1/UIqaCKvvdNzFEAT0-uAmbWIDleM.crl
rsync://rpki.ripe.net/repository/DEFAULT/64/deca0e-dd4c-44ef-bf77-05dbe3df98f6/1/UIqaCKvvdNzFEAT0-uAmbWIDleM.mft
rsync://rpki.ripe.net/repository/DEFAULT/UIqaCKvvdNzFEAT0-uAmbWIDleM.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 12 Apr 2025 02:00:31 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:23:70:26:63:c8:13:ed:93:d1:1b:4e:00:19:06:e6:dc
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=508a9a08abef74dcc51004f4fae0266d620395e3
Validity
Not Before: Apr 11 06:01:14 2025 GMT
Not After : Apr 12 06:01:14 2025 GMT
Subject: CN=23be326593d28458c2f9a351089b840a6a61965d
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c4:0b:61:c3:29:cb:8f:26:f4:e3:f2:6f:c7:97:
2c:70:76:00:4f:23:65:81:27:05:e1:ee:b5:98:08:
2d:0c:1a:fd:eb:c0:dc:cb:92:a6:2a:03:53:0f:93:
5d:f1:5e:d4:66:57:dc:e0:da:44:ac:34:64:a2:4f:
8a:41:95:87:5b:32:07:b1:78:61:f9:20:9f:2a:10:
0d:17:50:fa:45:0a:6f:b2:5b:c9:9c:a2:26:d7:8f:
50:43:37:fa:26:11:12:d8:3c:ec:42:40:58:d5:0a:
d2:c8:37:9e:19:ae:58:2e:e8:62:e3:75:93:49:24:
b4:e9:10:3b:a2:93:fc:74:5f:b7:c7:51:13:69:1a:
54:01:2e:c5:c3:6e:f0:e4:bb:ef:03:79:9c:04:01:
1e:cd:af:9a:50:ff:44:c5:e0:85:42:6f:d7:ab:fb:
f3:97:3c:49:ba:8d:38:f2:41:f4:f5:bd:17:36:75:
64:b6:da:bd:44:9f:e9:58:e5:49:76:aa:1d:99:67:
10:b8:4c:52:ae:b2:41:c0:ff:15:3a:85:77:47:ba:
49:0a:39:60:f3:57:ac:fa:61:b7:38:38:b2:35:ac:
d2:26:d7:3e:5a:26:bf:34:69:fd:2d:fd:87:82:d0:
17:32:74:ad:a9:43:67:27:6a:d8:bf:05:8c:bc:8d:
10:19
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
23:BE:32:65:93:D2:84:58:C2:F9:A3:51:08:9B:84:0A:6A:61:96:5D
X509v3 Authority Key Identifier:
keyid:50:8A:9A:08:AB:EF:74:DC:C5:10:04:F4:FA:E0:26:6D:62:03:95:E3
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/UIqaCKvvdNzFEAT0-uAmbWIDleM.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/64/deca0e-dd4c-44ef-bf77-05dbe3df98f6/1/UIqaCKvvdNzFEAT0-uAmbWIDleM.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/64/deca0e-dd4c-44ef-bf77-05dbe3df98f6/1/UIqaCKvvdNzFEAT0-uAmbWIDleM.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
2a:9b:1a:6c:c1:f0:ec:29:49:d1:ad:89:88:56:c9:e4:63:f1:
df:19:01:fd:5c:24:cc:6c:70:51:e3:f0:6d:b7:d0:9d:0c:89:
43:47:83:c9:8d:d1:d6:cb:40:82:31:e5:00:3c:5f:ef:ee:b6:
62:f1:ca:90:ee:81:4e:9a:e7:0a:f1:09:4d:70:ef:42:f5:50:
77:64:81:4e:78:2c:90:8f:06:68:d6:42:55:dd:34:0c:b3:25:
e0:df:11:38:aa:a0:79:98:e6:b6:e9:00:92:3a:6c:78:ef:9e:
92:14:43:db:a9:5c:46:3d:b5:01:a2:94:7f:45:c6:06:47:0f:
36:46:d7:50:a1:2f:ae:0e:c2:e0:db:2c:87:5c:c0:9a:5b:67:
bc:4a:ad:85:01:fc:ad:3f:41:58:16:98:e1:ed:71:8e:86:8f:
da:e7:41:df:75:8e:59:94:96:41:3c:50:23:47:79:11:8c:96:
5e:4f:dd:43:96:2d:5f:1f:48:95:d9:71:65:35:8b:19:79:69:
c3:05:20:04:85:8d:7e:8d:47:13:40:cd:70:bd:b5:4b:0f:68:
2f:d6:87:40:50:3a:64:c5:37:53:3e:b1:48:49:2b:fa:7c:af:
b2:bb:33:5a:e5:cf:f2:d4:07:c0:6c:9d:9c:e1:7a:b8:48:35:
19:b8:02:3d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 11 10:49:16 2025 by rpki-client