
Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/75/6ed434-cd51-4152-aa43-056bae27288e/1/UH5YKtyTadqK6F3ZNXQBIwgcfu0.mft
File: UH5YKtyTadqK6F3ZNXQBIwgcfu0.mft (raw, json)
Hash identifier: k8ULRdiomqDtEqZVwHBIY+he/o6ELljwXgnG3rKMiQ0=
Subject key identifier: 97:02:3E:30:6D:67:B0:17:73:5F:EA:41:FB:25:7B:BF:B1:32:AB:4E
Authority key identifier: 50:7E:58:2A:DC:93:69:DA:8A:E8:5D:D9:35:74:01:23:08:1C:7E:ED
Certificate issuer: /CN=507e582adc9369da8ae85dd935740123081c7eed
Certificate serial: 0196138F69433CACC4EF7E0216B6A7EC37EA
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/UH5YKtyTadqK6F3ZNXQBIwgcfu0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/75/6ed434-cd51-4152-aa43-056bae27288e/1/UH5YKtyTadqK6F3ZNXQBIwgcfu0.mft
Manifest number: 0796
Signing time: Tue 08 Apr 2025 04:01:27 +0000
Manifest this update: Tue 08 Apr 2025 04:01:27 +0000
Manifest next update: Wed 09 Apr 2025 04:01:27 +0000
Files and hashes: 1: 44dYsozRYENf4ubTHCTQ7hNPzoo.roa (hash: 9g/dOiyadhvu9EEQPUkgGuJzL/QnwS0iPrR2k3LdJdM=)
2: Akrk9AV522kb6SaYDeM3WfYPO7o.roa (hash: ZHsHEgFgctqjdlPRyjI2Dyt+c3//fPJCvQgY9mUz8Ck=)
3: UH5YKtyTadqK6F3ZNXQBIwgcfu0.crl (hash: b0tqOhRaE4lChBaR37EOcMSAxZNQ8C1I6BrBCBaSLwE=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/75/6ed434-cd51-4152-aa43-056bae27288e/1/UH5YKtyTadqK6F3ZNXQBIwgcfu0.crl
rsync://rpki.ripe.net/repository/DEFAULT/75/6ed434-cd51-4152-aa43-056bae27288e/1/UH5YKtyTadqK6F3ZNXQBIwgcfu0.mft
rsync://rpki.ripe.net/repository/DEFAULT/UH5YKtyTadqK6F3ZNXQBIwgcfu0.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 08 Apr 2025 23:00:49 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:13:8f:69:43:3c:ac:c4:ef:7e:02:16:b6:a7:ec:37:ea
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=507e582adc9369da8ae85dd935740123081c7eed
Validity
Not Before: Apr 8 04:01:27 2025 GMT
Not After : Apr 9 04:01:27 2025 GMT
Subject: CN=97023e306d67b017735fea41fb257bbfb132ab4e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a8:66:91:2f:a6:45:02:4b:74:df:72:09:a5:46:
7b:d5:28:25:51:aa:bb:78:d6:f2:39:b9:4f:f5:9b:
b5:f4:b5:2c:71:8c:bc:9b:7c:5d:75:c1:ce:3a:2c:
49:82:02:90:b9:2a:a8:63:9c:2f:68:c6:78:99:8b:
bb:58:d5:b0:70:7d:6e:7c:f4:6e:4e:8e:2e:f6:29:
0a:3c:ff:c0:15:ac:0d:f3:3d:5f:f7:6b:63:f2:a1:
3f:b1:61:b3:64:e1:22:16:26:49:6d:5f:ed:8c:28:
fc:91:dd:9c:48:66:4e:3c:9c:b5:d4:2f:72:8e:d0:
58:5a:f6:d9:8a:89:4a:14:bc:89:80:cb:da:a2:de:
ff:70:c8:87:f3:3b:d7:de:38:c4:c8:a0:95:a0:96:
52:78:11:21:59:50:ba:fc:8a:45:86:ce:54:4d:4e:
55:89:56:83:0c:fb:25:b5:1e:67:d8:3d:49:cf:23:
d8:c2:da:0b:dd:3c:d7:0a:37:96:4b:56:8f:93:7d:
2c:ee:21:70:5b:3b:88:17:f3:02:e2:d0:05:43:57:
98:d4:37:a9:f2:e4:92:91:94:67:10:ff:4a:b3:2b:
4c:a5:07:64:e4:3f:e2:27:59:40:10:78:e1:b4:cb:
09:0f:68:07:56:8c:c8:24:e3:df:81:e4:1f:98:14:
24:c1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
97:02:3E:30:6D:67:B0:17:73:5F:EA:41:FB:25:7B:BF:B1:32:AB:4E
X509v3 Authority Key Identifier:
keyid:50:7E:58:2A:DC:93:69:DA:8A:E8:5D:D9:35:74:01:23:08:1C:7E:ED
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/UH5YKtyTadqK6F3ZNXQBIwgcfu0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/75/6ed434-cd51-4152-aa43-056bae27288e/1/UH5YKtyTadqK6F3ZNXQBIwgcfu0.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/75/6ed434-cd51-4152-aa43-056bae27288e/1/UH5YKtyTadqK6F3ZNXQBIwgcfu0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
05:46:1f:09:4a:bd:ea:97:ea:77:89:ad:fe:2a:3f:20:85:83:
3c:fd:b6:b3:10:2d:ab:53:b5:65:a0:12:0a:d4:a5:89:f3:dc:
29:ed:20:fe:6f:20:b9:59:33:4b:08:c7:64:ed:cf:8b:7d:74:
d4:e5:70:ec:07:b3:c4:fe:8f:88:56:41:ab:00:b8:3a:32:24:
32:64:bc:26:6c:67:60:ad:b9:69:9d:c6:44:a6:05:61:d1:d8:
2b:77:47:98:89:da:01:a6:91:42:e6:ca:e9:c0:db:02:23:a2:
bb:5a:44:22:ec:d0:31:0a:df:89:b7:a8:e4:99:96:1a:57:b4:
04:d5:01:1f:98:00:be:40:6e:00:3f:4a:45:15:11:1d:e4:d3:
3d:99:07:e6:d6:fb:6a:43:92:ca:af:24:f2:2e:6d:e7:a8:a3:
34:6a:19:f7:fa:6c:26:49:cc:e7:da:94:39:57:c1:48:53:f8:
7e:4e:63:0c:ed:a9:de:6c:c3:f6:53:25:1f:49:35:c7:62:ae:
5b:fa:95:ee:ad:02:42:98:4b:ec:f6:7b:3d:eb:f3:55:19:22:
95:db:0f:5f:20:83:17:e7:6f:71:cf:dc:47:ff:30:65:d0:eb:
92:72:55:ce:e2:8c:a7:80:49:4b:8e:79:7e:f9:e2:d7:4b:a1:
db:87:f8:5e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Apr 8 07:41:42 2025 by rpki-client