Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/96/6633d5-8676-4ec4-a3fc-c536df5c274e/1/UkPe10WwX0A46YP7nXjt9W8lE0Y.mft
File: UkPe10WwX0A46YP7nXjt9W8lE0Y.mft (raw, json)
Hash identifier: O8rZTrgoPicRDm/9S6A4PNs4r+syfkzkXJzVw1VJ6YE=
Subject key identifier: B1:91:1E:64:82:C7:C6:78:D3:9A:6C:EB:10:35:E7:3C:6D:12:49:E9
Authority key identifier: 52:43:DE:D7:45:B0:5F:40:38:E9:83:FB:9D:78:ED:F5:6F:25:13:46
Certificate issuer: /CN=5243ded745b05f4038e983fb9d78edf56f251346
Certificate serial: 019653EE34932B06305BADB669C5522C9847
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/UkPe10WwX0A46YP7nXjt9W8lE0Y.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/96/6633d5-8676-4ec4-a3fc-c536df5c274e/1/UkPe10WwX0A46YP7nXjt9W8lE0Y.mft
Manifest number: 14FE
Signing time: Sun 20 Apr 2025 16:00:41 +0000
Manifest this update: Sun 20 Apr 2025 16:00:41 +0000
Manifest next update: Mon 21 Apr 2025 16:00:41 +0000
Files and hashes: 1: 9KIEF6YT58EHXPaFJx0hCikFN2Q.roa (hash: gXNOJl2HxXybXStfdvJd6JQXiN8rjiGWYmTvUH/aOB8=)
2: UkPe10WwX0A46YP7nXjt9W8lE0Y.crl (hash: +eUIwHMWkknvIYy0q3t00nihVIcvQNYHyrey8b+t+L4=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/96/6633d5-8676-4ec4-a3fc-c536df5c274e/1/UkPe10WwX0A46YP7nXjt9W8lE0Y.crl
rsync://rpki.ripe.net/repository/DEFAULT/96/6633d5-8676-4ec4-a3fc-c536df5c274e/1/UkPe10WwX0A46YP7nXjt9W8lE0Y.mft
rsync://rpki.ripe.net/repository/DEFAULT/UkPe10WwX0A46YP7nXjt9W8lE0Y.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 21 Apr 2025 16:00:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:53:ee:34:93:2b:06:30:5b:ad:b6:69:c5:52:2c:98:47
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=5243ded745b05f4038e983fb9d78edf56f251346
Validity
Not Before: Apr 20 16:00:41 2025 GMT
Not After : Apr 21 16:00:41 2025 GMT
Subject: CN=b1911e6482c7c678d39a6ceb1035e73c6d1249e9
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a1:10:91:a9:3b:a1:12:a4:e7:29:ea:2b:03:aa:
95:b7:6b:4c:27:20:2a:5e:d5:72:0d:0d:40:3a:02:
66:35:c1:5d:c7:c0:a8:bf:b4:1f:42:57:e7:74:05:
9e:fc:d5:ef:43:49:91:7e:4d:71:7e:30:06:73:27:
5a:4f:9b:3a:3d:c2:8c:7c:80:e7:bc:70:26:3c:55:
1b:68:d3:50:eb:26:25:ee:6c:c8:a7:83:3a:30:20:
40:db:cd:39:b4:02:dd:9a:5f:41:44:96:b1:47:c7:
d8:98:ce:79:b6:b5:15:a4:ab:27:8a:87:e3:2f:4b:
46:8e:80:79:2c:fc:b6:88:97:4b:80:c2:fa:d7:03:
bd:e1:cd:32:7a:4a:f0:54:a5:2b:b7:7b:d8:81:50:
ae:d5:ed:66:6e:33:c4:79:d1:c9:db:a2:a1:55:1f:
b6:67:78:27:d0:2f:ad:8e:d6:b4:7b:43:01:2a:e4:
67:12:0a:df:79:78:29:c5:bd:2d:1c:f3:16:68:22:
72:5a:73:65:a6:c6:6f:a8:5f:45:32:6d:58:7c:98:
93:0e:d0:e1:c2:74:6b:bf:53:e2:fe:8b:68:9c:4f:
16:2b:d8:62:02:b6:1b:d0:22:aa:22:62:c3:a2:f1:
f5:c9:8a:3a:73:cc:9c:1b:45:da:93:88:2b:45:33:
d3:45
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B1:91:1E:64:82:C7:C6:78:D3:9A:6C:EB:10:35:E7:3C:6D:12:49:E9
X509v3 Authority Key Identifier:
keyid:52:43:DE:D7:45:B0:5F:40:38:E9:83:FB:9D:78:ED:F5:6F:25:13:46
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/UkPe10WwX0A46YP7nXjt9W8lE0Y.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/96/6633d5-8676-4ec4-a3fc-c536df5c274e/1/UkPe10WwX0A46YP7nXjt9W8lE0Y.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/96/6633d5-8676-4ec4-a3fc-c536df5c274e/1/UkPe10WwX0A46YP7nXjt9W8lE0Y.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
61:e2:72:96:3a:c6:33:5f:b9:4d:92:47:42:7b:a9:98:d0:b3:
97:6b:c1:ff:4d:48:83:ff:08:d8:07:5b:ab:8b:ab:b3:13:37:
c3:c8:27:1e:7b:28:92:9d:d5:ed:e6:1e:2b:b1:12:75:d1:bc:
47:46:a8:c2:59:d0:c9:d1:2d:b5:d4:d9:01:23:64:97:c6:86:
8d:90:a1:13:35:9b:97:3a:79:b8:eb:33:54:df:c3:d3:b4:06:
c0:01:8f:9a:62:a7:d9:9d:61:47:d4:e5:35:06:58:5f:07:17:
17:e2:9c:84:90:ea:c8:ff:33:4f:5f:0f:24:14:67:22:a1:91:
69:3f:c8:43:cf:34:94:ed:84:98:d7:81:28:01:9e:75:d6:5d:
bd:ac:3f:bf:36:cb:e9:4c:c5:b7:16:1d:13:ff:8d:78:7b:d0:
f1:8e:66:5c:0d:9e:cf:44:e8:b6:54:e1:b5:f2:63:b1:5b:56:
cd:d1:d1:47:51:95:6b:9c:13:f2:ee:ad:43:7d:6b:f3:ae:86:
18:04:f0:d8:d0:61:67:cc:ee:f1:03:57:f7:80:d3:4c:16:48:
4b:eb:d4:84:5c:eb:3d:81:52:c4:85:ed:40:42:73:a4:98:e3:
e0:31:e1:15:3f:f4:c9:97:ab:ca:73:b4:c1:f4:3c:6a:77:ab:
88:a4:1f:f7
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Apr 20 22:47:15 2025 by rpki-client