Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/92/f9dd1c-317b-41c1-8fcb-7d9eabee15ac/1/UxZZCg6vSN8rGuI7nVWenKwlmX4.mft
File: UxZZCg6vSN8rGuI7nVWenKwlmX4.mft (raw, json)
Hash identifier: tzWCySujoNUZ3jQvd/baGg+HvznoxZx4t20OmG4kORU=
Subject key identifier: 20:B5:0B:F6:D7:27:97:CB:A8:65:06:9A:70:B9:62:CA:D2:5B:B1:F3
Authority key identifier: 53:16:59:0A:0E:AF:48:DF:2B:1A:E2:3B:9D:55:9E:9C:AC:25:99:7E
Certificate issuer: /CN=5316590a0eaf48df2b1ae23b9d559e9cac25997e
Certificate serial: 019648C55DC5E31C46BB551EEC7698987E3A
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/UxZZCg6vSN8rGuI7nVWenKwlmX4.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/92/f9dd1c-317b-41c1-8fcb-7d9eabee15ac/1/UxZZCg6vSN8rGuI7nVWenKwlmX4.mft
Manifest number: 14F8
Signing time: Fri 18 Apr 2025 12:00:16 +0000
Manifest this update: Fri 18 Apr 2025 12:00:16 +0000
Manifest next update: Sat 19 Apr 2025 12:00:16 +0000
Files and hashes: 1: IwWglmhS5Zmc1TAwKCoGnND82Hg.roa (hash: yxdnz39K/r0yEcsRsb6jG3Fu9Th+zv6+zwScMkcw/2k=)
2: Slwbbwyy2R4DXhMszcmZSafHRLM.roa (hash: hGzmzAgGBljAorRZaTCZ/rFSgBsMkWs+ukGHvQ5mFco=)
3: UxZZCg6vSN8rGuI7nVWenKwlmX4.crl (hash: +PpEGpGZ0k6PR4qCOcA00/GCjjY6zW6OphLUPvXMLnQ=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/92/f9dd1c-317b-41c1-8fcb-7d9eabee15ac/1/UxZZCg6vSN8rGuI7nVWenKwlmX4.crl
rsync://rpki.ripe.net/repository/DEFAULT/92/f9dd1c-317b-41c1-8fcb-7d9eabee15ac/1/UxZZCg6vSN8rGuI7nVWenKwlmX4.mft
rsync://rpki.ripe.net/repository/DEFAULT/UxZZCg6vSN8rGuI7nVWenKwlmX4.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 19 Apr 2025 09:37:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:48:c5:5d:c5:e3:1c:46:bb:55:1e:ec:76:98:98:7e:3a
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=5316590a0eaf48df2b1ae23b9d559e9cac25997e
Validity
Not Before: Apr 18 12:00:16 2025 GMT
Not After : Apr 19 12:00:16 2025 GMT
Subject: CN=20b50bf6d72797cba865069a70b962cad25bb1f3
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bf:38:8d:9b:f5:2d:80:f1:0b:6b:7a:9d:3c:7f:
f4:67:28:5a:8d:c2:d1:83:7f:7f:1a:d9:9d:37:03:
74:18:05:92:84:3c:2e:1e:d3:30:03:ad:61:cf:c7:
fd:78:6b:4a:95:d6:00:58:5f:2e:52:1d:a5:84:4c:
47:2d:c1:83:4d:a9:ac:7b:b6:6a:70:e6:1c:98:0a:
c7:b9:cd:85:0c:bf:08:b8:1c:ab:5e:79:39:44:45:
1b:d7:f0:96:c3:8e:86:56:b1:05:d3:eb:8f:c4:b2:
0c:2a:28:9e:ee:cd:c6:c7:a5:eb:9b:f1:21:4e:65:
82:e2:d9:35:1e:c6:f9:41:2a:2f:8e:d5:1b:b7:11:
e8:99:89:49:5e:4a:9b:79:b6:38:cd:0c:67:3e:ae:
0a:20:c4:d7:bd:d3:6e:91:cd:f4:e8:2e:dd:da:33:
75:bf:f5:76:bc:29:b8:08:6c:9f:ac:13:ff:9f:9a:
1e:13:60:b4:84:97:c1:16:82:af:fe:3e:1e:6a:f6:
3e:19:22:44:d5:ec:de:19:cf:00:35:90:7a:cf:db:
df:18:11:74:bb:64:c3:87:29:91:6e:6f:f6:94:cf:
31:db:19:43:f8:f8:7b:e6:69:54:0b:c3:8e:b3:6c:
3a:bb:03:af:c3:76:b6:dc:db:da:e5:c1:98:49:32:
7a:8d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
20:B5:0B:F6:D7:27:97:CB:A8:65:06:9A:70:B9:62:CA:D2:5B:B1:F3
X509v3 Authority Key Identifier:
keyid:53:16:59:0A:0E:AF:48:DF:2B:1A:E2:3B:9D:55:9E:9C:AC:25:99:7E
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/UxZZCg6vSN8rGuI7nVWenKwlmX4.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/92/f9dd1c-317b-41c1-8fcb-7d9eabee15ac/1/UxZZCg6vSN8rGuI7nVWenKwlmX4.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/92/f9dd1c-317b-41c1-8fcb-7d9eabee15ac/1/UxZZCg6vSN8rGuI7nVWenKwlmX4.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
90:cb:96:c3:f6:d6:fc:b9:da:9e:d7:fc:18:e2:0b:7d:f0:69:
84:d7:16:d3:5a:3f:e2:c7:0f:a9:c4:70:14:19:fa:00:f9:cb:
33:8f:7a:c1:2e:db:0f:8c:7c:cd:ee:88:ea:22:b0:43:e8:fd:
4a:76:34:2b:17:d3:7d:76:63:35:0d:64:f6:93:1a:91:41:de:
cb:63:a3:42:6f:07:0d:e6:2b:e7:fd:d2:1d:26:80:8b:a9:d5:
5f:18:cf:7d:42:84:a6:2d:33:cb:dd:2f:8a:1e:bf:e6:e2:57:
77:13:06:58:04:9d:a4:26:a9:28:97:0f:bf:4b:fb:2b:72:af:
9b:28:9e:ac:2c:31:ef:1a:a4:4e:11:d3:69:66:cd:b1:0b:87:
5c:19:3a:f3:1a:ec:1d:ea:5f:22:79:1b:e1:97:b2:6b:c8:ae:
86:59:40:33:99:c1:2a:52:1e:f1:b1:61:69:0e:1d:b4:b9:d3:
99:1a:b5:ba:4d:ec:3d:04:11:fb:9e:53:2f:b2:8e:8f:f3:26:
2e:82:a3:52:8e:1c:ff:bb:65:be:50:ab:4f:2d:54:1d:df:9c:
93:45:55:72:94:ea:11:5b:02:01:5a:15:d3:1d:b7:88:8b:5f:
e4:21:25:6b:fc:19:9e:ab:91:55:31:2a:e6:98:3f:cb:90:f1:
dd:81:31:77
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 18 15:03:00 2025 by rpki-client