Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/75/5289c4-02b5-465e-8cbd-773732652f4f/1/Up-6tRcaXLIvbFTxCzostttRcj4.mft
File: Up-6tRcaXLIvbFTxCzostttRcj4.mft (raw, json)
Hash identifier: x/J36Ps/BZmUnlz9BFG/nq1d6UTPRWpfC14CaPcHvOk=
Subject key identifier: 28:20:D5:86:7F:C7:D9:FA:78:86:AB:E6:FC:2E:B8:54:16:F0:16:E7
Authority key identifier: 52:9F:BA:B5:17:1A:5C:B2:2F:6C:54:F1:0B:3A:2C:B6:DB:51:72:3E
Certificate issuer: /CN=529fbab5171a5cb22f6c54f10b3a2cb6db51723e
Certificate serial: 019647EA0136A72ADC5F2E1662BE620A65F8
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Up-6tRcaXLIvbFTxCzostttRcj4.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/75/5289c4-02b5-465e-8cbd-773732652f4f/1/Up-6tRcaXLIvbFTxCzostttRcj4.mft
Manifest number: 0F6C
Signing time: Fri 18 Apr 2025 08:00:39 +0000
Manifest this update: Fri 18 Apr 2025 08:00:39 +0000
Manifest next update: Sat 19 Apr 2025 08:00:39 +0000
Files and hashes: 1: FrmVEYuDa9xtluHCEQ99gg4ezxk.roa (hash: ROrbhIKSviaPzDwOSSegQp+fGjZAnP/YBP5hACLrt+g=)
2: Up-6tRcaXLIvbFTxCzostttRcj4.crl (hash: O8WgOpou1w+0BzJf23l7y17e7lqMdUVGkkR57XaEPv0=)
3: qi3rhjz0p_JIDWgNBHnC01nOTzc.roa (hash: sI4mLt9OaWWXoU75bYS+ZomsMcCTUVq/R9FP0uAoyas=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/75/5289c4-02b5-465e-8cbd-773732652f4f/1/Up-6tRcaXLIvbFTxCzostttRcj4.crl
rsync://rpki.ripe.net/repository/DEFAULT/75/5289c4-02b5-465e-8cbd-773732652f4f/1/Up-6tRcaXLIvbFTxCzostttRcj4.mft
rsync://rpki.ripe.net/repository/DEFAULT/Up-6tRcaXLIvbFTxCzostttRcj4.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 19 Apr 2025 08:00:39 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:47:ea:01:36:a7:2a:dc:5f:2e:16:62:be:62:0a:65:f8
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=529fbab5171a5cb22f6c54f10b3a2cb6db51723e
Validity
Not Before: Apr 18 08:00:39 2025 GMT
Not After : Apr 19 08:00:39 2025 GMT
Subject: CN=2820d5867fc7d9fa7886abe6fc2eb85416f016e7
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8e:9c:17:a6:49:43:04:1e:df:19:54:f2:c9:ef:
0f:a3:1e:55:81:2e:dc:f3:70:fb:0d:55:ba:b0:6a:
58:ab:67:d3:38:57:5c:89:9a:ea:af:b0:2c:78:0a:
27:53:cb:05:7e:07:b2:f0:a9:0f:40:4c:0f:81:11:
34:bb:bb:85:5c:10:56:2a:75:4b:24:75:b7:fe:66:
f4:34:2a:54:35:62:2b:43:14:0f:7c:f6:c8:36:08:
b1:a8:59:00:79:9a:bd:fb:c5:c0:bb:ad:5e:fa:50:
d4:04:61:a2:e4:23:a3:c4:a4:f8:04:81:a6:38:46:
fb:2f:be:3f:f8:9d:e0:bc:a4:10:d0:f7:dc:54:42:
ba:52:cf:d2:dd:0f:5f:85:6f:fd:a8:4c:d4:63:dc:
1a:cc:95:6d:c5:9e:39:15:6e:ea:a5:0e:eb:77:bc:
8c:58:92:2b:fb:61:e4:53:64:0b:f3:2f:3d:38:84:
4b:b4:69:41:fe:95:e4:0c:12:69:dc:a0:5c:7b:5b:
54:1f:cb:26:92:5b:a0:93:e3:c5:b0:cf:d9:32:b2:
18:86:a9:80:03:77:b7:84:74:0c:0a:34:64:13:43:
f5:83:8f:de:4b:49:6a:dc:19:4f:70:c8:4e:6e:59:
be:24:03:e5:ae:9f:02:e5:ac:43:40:d9:d7:32:23:
29:9f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
28:20:D5:86:7F:C7:D9:FA:78:86:AB:E6:FC:2E:B8:54:16:F0:16:E7
X509v3 Authority Key Identifier:
keyid:52:9F:BA:B5:17:1A:5C:B2:2F:6C:54:F1:0B:3A:2C:B6:DB:51:72:3E
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Up-6tRcaXLIvbFTxCzostttRcj4.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/75/5289c4-02b5-465e-8cbd-773732652f4f/1/Up-6tRcaXLIvbFTxCzostttRcj4.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/75/5289c4-02b5-465e-8cbd-773732652f4f/1/Up-6tRcaXLIvbFTxCzostttRcj4.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
2d:70:51:d2:2f:57:0f:54:d9:6e:46:a3:59:45:01:b9:54:64:
1f:4b:80:7a:ae:2f:15:a0:e2:58:8c:e8:a1:8f:c8:34:63:1e:
dc:e0:fb:4d:87:bd:1c:01:ae:55:2e:9e:28:40:aa:9b:a0:4f:
67:a3:22:a0:6a:23:56:68:24:41:de:aa:46:4e:6c:d0:6f:ad:
61:03:36:4e:a4:db:d1:aa:76:5d:b3:42:36:0e:9b:39:0f:37:
7c:53:f1:a1:51:62:43:4d:f0:3c:60:bb:54:fd:2e:56:6f:b4:
f8:1d:ac:41:c0:81:d9:bd:89:22:35:6d:e5:0d:90:e5:e0:7e:
83:26:11:4a:23:b0:8b:d7:aa:ab:2e:41:ca:25:98:1b:11:ec:
d0:9c:2e:50:3c:33:55:ad:d7:24:fb:1b:0d:dd:ca:7b:a7:04:
df:42:58:4e:1a:a6:d1:ca:82:28:41:e1:33:20:b5:84:ab:bc:
e4:7b:d9:1c:ee:97:48:24:9b:f1:37:e4:fd:1f:6b:f5:46:7c:
49:ab:12:21:71:f8:46:5b:81:d6:80:b0:33:90:1f:30:3c:fd:
8e:f5:06:a3:cc:ef:2e:06:5f:26:fe:cf:65:01:58:fe:1c:c3:
7b:0c:11:d3:36:ce:bd:f3:90:52:4e:1f:25:d1:d6:de:a8:ac:
b1:52:9a:01
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 18 14:59:22 2025 by rpki-client