Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/92/71a748-b2bc-4728-9ef0-a69cd9d15e31/1/UeWR5UkD0vnqhAoUaVW6NFnjPqE.mft
File: UeWR5UkD0vnqhAoUaVW6NFnjPqE.mft (raw, json)
Hash identifier: 52eVr4vdAI0WpZZsk4HkmHIrFV58YyhkhzgDBfnc4JQ=
Subject key identifier: 8E:8A:36:2D:A5:46:42:5F:14:D8:1C:3D:63:56:9C:94:D8:9D:7D:45
Authority key identifier: 51:E5:91:E5:49:03:D2:F9:EA:84:0A:14:69:55:BA:34:59:E3:3E:A1
Certificate issuer: /CN=51e591e54903d2f9ea840a146955ba3459e33ea1
Certificate serial: 01964D7E61936CB52EB7B30959E5184A7DE5
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/UeWR5UkD0vnqhAoUaVW6NFnjPqE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/92/71a748-b2bc-4728-9ef0-a69cd9d15e31/1/UeWR5UkD0vnqhAoUaVW6NFnjPqE.mft
Manifest number: 118C
Signing time: Sat 19 Apr 2025 10:00:50 +0000
Manifest this update: Sat 19 Apr 2025 10:00:50 +0000
Manifest next update: Sun 20 Apr 2025 10:00:50 +0000
Files and hashes: 1: UeWR5UkD0vnqhAoUaVW6NFnjPqE.crl (hash: M0XXrDtt6eWbXYb7qNQq6rCYUywXEiiXzEAZsFx54YM=)
2: mh18CeMUKX0D009-9mGv8SAvgKs.roa (hash: zVhE4BkupXg5srZAaYXqVFIMgkPQ0zgGIp7W/596OI8=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/92/71a748-b2bc-4728-9ef0-a69cd9d15e31/1/UeWR5UkD0vnqhAoUaVW6NFnjPqE.crl
rsync://rpki.ripe.net/repository/DEFAULT/92/71a748-b2bc-4728-9ef0-a69cd9d15e31/1/UeWR5UkD0vnqhAoUaVW6NFnjPqE.mft
rsync://rpki.ripe.net/repository/DEFAULT/UeWR5UkD0vnqhAoUaVW6NFnjPqE.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 20 Apr 2025 04:00:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:4d:7e:61:93:6c:b5:2e:b7:b3:09:59:e5:18:4a:7d:e5
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=51e591e54903d2f9ea840a146955ba3459e33ea1
Validity
Not Before: Apr 19 10:00:50 2025 GMT
Not After : Apr 20 10:00:50 2025 GMT
Subject: CN=8e8a362da546425f14d81c3d63569c94d89d7d45
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:be:01:7b:2d:d1:ab:ee:ec:b3:56:08:a7:9a:45:
64:cb:bd:47:a0:be:f0:fd:d7:ad:79:d8:0f:d5:4e:
d2:b3:99:61:c2:a1:e5:27:3e:a0:29:63:0a:ae:53:
10:37:94:0b:2d:8a:fa:d7:2f:e6:4a:03:b1:94:72:
bd:2a:5e:0f:62:d8:f9:e4:38:e2:96:c3:62:24:e2:
00:3a:89:30:ab:9e:3f:0f:ee:0a:c7:96:00:c0:13:
75:ea:e8:bd:24:5d:85:23:e7:87:f2:a6:42:ed:99:
8a:25:b0:5f:af:51:e5:ea:61:63:45:6d:1f:f0:03:
2c:b9:ef:12:d3:d3:12:c7:e1:97:03:17:7d:12:53:
52:01:ae:b6:33:e4:30:9a:b6:74:13:42:f3:0a:14:
85:64:e7:7c:1d:82:3d:50:e9:a0:3c:6f:6b:b5:9f:
a1:06:3e:fd:e2:ce:3b:77:5b:87:c0:fd:cf:ba:00:
af:d8:2c:28:db:c9:a2:19:c3:7f:37:af:2b:d9:96:
fa:cd:7a:81:43:9a:a8:30:27:e9:ce:ce:c9:47:05:
0d:10:f6:61:b4:2f:5d:f9:39:e2:6a:55:73:44:f4:
c6:23:f5:d5:02:e1:d7:7e:a6:0f:fb:de:d4:bf:d9:
68:c6:d9:b7:b3:9a:d8:ae:39:b4:18:ea:b2:40:a6:
86:7d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
8E:8A:36:2D:A5:46:42:5F:14:D8:1C:3D:63:56:9C:94:D8:9D:7D:45
X509v3 Authority Key Identifier:
keyid:51:E5:91:E5:49:03:D2:F9:EA:84:0A:14:69:55:BA:34:59:E3:3E:A1
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/UeWR5UkD0vnqhAoUaVW6NFnjPqE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/92/71a748-b2bc-4728-9ef0-a69cd9d15e31/1/UeWR5UkD0vnqhAoUaVW6NFnjPqE.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/92/71a748-b2bc-4728-9ef0-a69cd9d15e31/1/UeWR5UkD0vnqhAoUaVW6NFnjPqE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
0b:62:9b:58:9a:2b:81:57:65:5e:2b:d4:e0:4d:5c:5e:f7:91:
61:99:bc:fb:c0:96:06:78:51:55:35:4b:d1:4f:9d:ba:11:1f:
34:f8:24:fa:8e:b1:0e:32:48:3f:3d:5d:5a:95:25:7d:27:e4:
5d:0a:03:da:3a:10:70:99:51:42:03:cf:fa:27:e4:a4:17:35:
bd:7b:f3:b7:db:20:1c:19:c4:b3:fd:32:87:cf:12:c8:4e:e0:
fc:b2:a7:39:05:85:be:0a:f2:10:ff:15:75:81:c6:55:17:62:
c1:b5:a9:04:d7:26:0e:80:f7:2f:d5:73:bf:c8:6f:7f:3e:62:
f2:d4:69:1d:fe:c3:d2:4a:d0:e9:0c:da:04:49:0b:64:af:e8:
75:c3:fd:34:d0:c9:5d:59:02:ae:01:d7:56:27:73:63:88:83:
b9:83:83:31:15:15:cf:11:54:08:c3:46:33:6c:6d:b5:5b:3e:
32:43:78:26:75:00:07:18:d7:c3:9d:ea:a4:8c:c9:bf:bd:1e:
6f:5d:1b:52:8f:41:af:e2:30:22:88:4e:9a:66:a8:7c:03:89:
c2:f9:7e:4b:b4:b9:6f:70:51:c8:21:18:6d:47:ec:2d:1d:2f:
2b:74:d2:79:78:2a:bb:b1:c2:55:0a:35:79:f3:43:65:73:e7:
31:ca:2c:98
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 19 12:31:13 2025 by rpki-client