Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/8d/d0edd5-6087-4be1-b36f-ab3dd5dc6709/1/UPLWshZg-tH2Di350L18bM-VwxE.mft
File: UPLWshZg-tH2Di350L18bM-VwxE.mft (raw, json)
Hash identifier: DVpQXJt0AWH2GaavkBGQo6LAnSw+Fq/dS8ZGEd5RFeA=
Subject key identifier: 27:5F:81:91:4B:64:2B:5A:4C:DB:25:ED:B4:DA:09:CC:9A:F3:AC:D4
Authority key identifier: 50:F2:D6:B2:16:60:FA:D1:F6:0E:2D:F9:D0:BD:7C:6C:CF:95:C3:11
Certificate issuer: /CN=50f2d6b21660fad1f60e2df9d0bd7c6ccf95c311
Certificate serial: 01964CD965FA42FC7D2B9426349D956451E3
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/UPLWshZg-tH2Di350L18bM-VwxE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/8d/d0edd5-6087-4be1-b36f-ab3dd5dc6709/1/UPLWshZg-tH2Di350L18bM-VwxE.mft
Manifest number: 1500
Signing time: Sat 19 Apr 2025 07:00:37 +0000
Manifest this update: Sat 19 Apr 2025 07:00:37 +0000
Manifest next update: Sun 20 Apr 2025 07:00:37 +0000
Files and hashes: 1: UPLWshZg-tH2Di350L18bM-VwxE.crl (hash: 6Y96AEElpduSmqMPOTu8jtMzcyOG6ZwJhNifoC2LRkc=)
2: jj41_vdc1pJ7_jJ7Qj3huwsGvCw.roa (hash: kWywwuZ3gFN5QXplJTXTCIOtPpLw0Ezkefc6voJQkFs=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/8d/d0edd5-6087-4be1-b36f-ab3dd5dc6709/1/UPLWshZg-tH2Di350L18bM-VwxE.crl
rsync://rpki.ripe.net/repository/DEFAULT/8d/d0edd5-6087-4be1-b36f-ab3dd5dc6709/1/UPLWshZg-tH2Di350L18bM-VwxE.mft
rsync://rpki.ripe.net/repository/DEFAULT/UPLWshZg-tH2Di350L18bM-VwxE.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 20 Apr 2025 04:00:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:4c:d9:65:fa:42:fc:7d:2b:94:26:34:9d:95:64:51:e3
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=50f2d6b21660fad1f60e2df9d0bd7c6ccf95c311
Validity
Not Before: Apr 19 07:00:37 2025 GMT
Not After : Apr 20 07:00:37 2025 GMT
Subject: CN=275f81914b642b5a4cdb25edb4da09cc9af3acd4
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:af:c1:64:1c:53:17:81:1d:66:0a:fb:f3:e0:05:
62:d1:eb:a0:d4:f6:88:b2:8c:fa:38:88:24:da:da:
a1:06:40:a4:35:f5:a5:54:f2:e5:a4:e8:ac:22:d3:
00:e0:22:64:5f:30:76:3c:10:76:fa:31:ac:13:c6:
8c:4c:1d:c6:71:df:66:22:3f:d5:09:a0:2c:1e:e7:
cf:f0:a0:6d:f4:32:9b:af:86:5d:25:a7:a7:2d:d1:
af:f9:77:b9:3c:2d:bc:70:50:71:4e:0b:38:b8:2e:
89:38:90:6e:72:a8:0d:b3:05:2e:9a:85:5e:6a:8f:
97:4a:4d:3a:32:ec:82:67:39:8d:b2:5f:0f:c5:c8:
89:29:8f:63:38:6a:84:40:08:7f:69:bb:75:79:49:
1f:12:26:2e:54:1d:fc:b0:8b:fd:64:56:6f:24:5c:
ac:f7:5e:27:a6:1d:d1:b3:9c:c1:4f:80:3e:44:24:
43:05:0f:1f:a4:44:02:f5:6f:22:22:ed:e1:e2:37:
c3:63:f9:dd:1e:65:14:70:0b:be:46:a7:42:5f:9e:
c4:ff:90:b5:37:8d:47:80:5f:6d:e7:a8:a6:cb:d4:
ee:62:ce:48:b4:ae:c2:c2:a0:31:1d:2a:77:14:9e:
71:d7:ee:8f:91:01:1b:5f:91:2b:e3:e7:a9:de:26:
70:5f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
27:5F:81:91:4B:64:2B:5A:4C:DB:25:ED:B4:DA:09:CC:9A:F3:AC:D4
X509v3 Authority Key Identifier:
keyid:50:F2:D6:B2:16:60:FA:D1:F6:0E:2D:F9:D0:BD:7C:6C:CF:95:C3:11
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/UPLWshZg-tH2Di350L18bM-VwxE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/8d/d0edd5-6087-4be1-b36f-ab3dd5dc6709/1/UPLWshZg-tH2Di350L18bM-VwxE.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/8d/d0edd5-6087-4be1-b36f-ab3dd5dc6709/1/UPLWshZg-tH2Di350L18bM-VwxE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
47:f5:c2:b2:37:d8:e0:42:f6:bf:6d:3c:70:ba:59:5a:88:9a:
13:e6:f2:cb:bf:54:72:6a:2d:8a:fa:2b:c3:c9:62:a3:4f:1e:
e3:27:b4:16:bf:b5:77:9d:83:37:0a:6d:9d:aa:66:35:1e:e6:
c9:ee:4c:90:6f:f9:39:25:2e:e3:eb:71:29:ea:73:3a:1c:91:
93:58:09:d2:da:be:f9:4d:79:6d:10:d1:05:e7:26:0c:74:6d:
68:6c:be:ca:fe:1a:92:aa:8b:9e:b0:03:be:01:71:bf:a4:3d:
61:30:ba:dc:e7:cd:29:50:0a:6f:b4:b3:85:31:23:ac:56:ad:
43:a9:54:54:9d:54:ab:c7:22:a9:14:28:47:ae:2b:cd:f1:07:
ad:53:00:6b:dc:97:06:45:f8:61:36:a1:cc:c2:d3:7e:6a:93:
2c:fa:2e:35:f8:21:fb:25:51:ee:a4:0d:3f:d0:5b:81:32:19:
a8:10:11:24:17:3c:69:9c:0c:58:25:c4:96:7c:0e:62:e0:60:
c1:56:e9:c1:c1:72:fa:0b:24:cc:2b:28:ff:ab:6f:bb:bb:e3:
7e:2e:11:b5:05:c8:ff:7a:9a:8b:81:67:dc:fe:7e:6c:09:e1:
2a:81:47:9f:e7:46:6c:bc:cc:98:ad:e1:c6:0f:d7:b3:56:5a:
96:e9:14:fd
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 19 12:25:01 2025 by rpki-client