Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/9f/9b1d85-7198-4af6-a632-d0cfe43016de/1/UkEeUtq30L4mdDE7a10udL0RNg4.mft
File: UkEeUtq30L4mdDE7a10udL0RNg4.mft (raw, json)
Hash identifier: eQWsVC5JwsSztfxil8YkILB8Ey/j4I4qKCpOr2al6e8=
Subject key identifier: 8E:24:D8:8B:88:BA:BE:12:5C:95:57:3A:CA:E0:68:52:73:B4:AB:FF
Authority key identifier: 52:41:1E:52:DA:B7:D0:BE:26:74:31:3B:6B:5D:2E:74:BD:11:36:0E
Certificate issuer: /CN=52411e52dab7d0be2674313b6b5d2e74bd11360e
Certificate serial: 019650114F7F9DEB04E8D6B563CF82402BF4
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/UkEeUtq30L4mdDE7a10udL0RNg4.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/9f/9b1d85-7198-4af6-a632-d0cfe43016de/1/UkEeUtq30L4mdDE7a10udL0RNg4.mft
Manifest number: 0CF1
Signing time: Sat 19 Apr 2025 22:00:33 +0000
Manifest this update: Sat 19 Apr 2025 22:00:33 +0000
Manifest next update: Sun 20 Apr 2025 22:00:33 +0000
Files and hashes: 1: UkEeUtq30L4mdDE7a10udL0RNg4.crl (hash: /zBAytSBSrTqEEU30/uVsw2hL4P6JFwUffDiJE9sbvU=)
2: vkVOKzv8_S2fkG1izpq7kTixdUE.roa (hash: piMEcgAOMMddSvNaBzKcgAojln/bHlikM4A3Z6HENXY=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/9f/9b1d85-7198-4af6-a632-d0cfe43016de/1/UkEeUtq30L4mdDE7a10udL0RNg4.crl
rsync://rpki.ripe.net/repository/DEFAULT/9f/9b1d85-7198-4af6-a632-d0cfe43016de/1/UkEeUtq30L4mdDE7a10udL0RNg4.mft
rsync://rpki.ripe.net/repository/DEFAULT/UkEeUtq30L4mdDE7a10udL0RNg4.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 20 Apr 2025 16:41:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:50:11:4f:7f:9d:eb:04:e8:d6:b5:63:cf:82:40:2b:f4
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=52411e52dab7d0be2674313b6b5d2e74bd11360e
Validity
Not Before: Apr 19 22:00:33 2025 GMT
Not After : Apr 20 22:00:33 2025 GMT
Subject: CN=8e24d88b88babe125c95573acae0685273b4abff
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:91:ca:ff:39:e4:c0:75:44:9e:34:f3:e9:7f:91:
9a:85:7a:ed:3b:b8:37:12:f2:eb:99:b5:e5:b5:79:
75:db:47:50:5d:17:f3:e2:ea:81:d5:e2:90:58:70:
77:ab:fb:85:73:a9:68:c7:3a:a9:23:a4:dd:24:b4:
6a:cb:d8:bf:26:aa:d2:c2:b7:b0:f1:be:8d:83:fc:
d2:20:85:3a:5c:cf:b8:12:ab:7e:a5:37:4a:52:ec:
0a:8d:e3:2c:e1:ee:c2:c3:bf:26:ca:24:65:74:35:
dd:9b:31:a2:43:1b:da:4f:e8:84:27:68:38:55:b6:
63:68:cc:da:75:9a:94:39:9f:a4:29:30:54:33:4a:
eb:ae:5b:da:13:44:89:06:80:30:28:a4:b5:5e:c4:
c7:60:3d:d2:e3:87:ef:49:42:99:b6:a9:a2:0a:2c:
82:1f:17:93:55:b4:55:2c:1f:d2:21:3d:44:e2:bf:
d5:57:e4:ec:2e:ca:cd:19:89:1b:bb:03:73:16:df:
c0:7f:ae:e8:13:a6:0c:e6:e1:c6:17:f4:cf:ec:76:
c5:17:56:37:f6:16:56:8f:e0:52:b5:44:43:da:7f:
e8:23:e5:f0:58:59:5c:fa:44:b7:12:8e:24:82:e6:
f3:60:02:5a:8b:cb:89:f6:bf:6f:75:42:bd:e0:00:
ec:9d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
8E:24:D8:8B:88:BA:BE:12:5C:95:57:3A:CA:E0:68:52:73:B4:AB:FF
X509v3 Authority Key Identifier:
keyid:52:41:1E:52:DA:B7:D0:BE:26:74:31:3B:6B:5D:2E:74:BD:11:36:0E
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/UkEeUtq30L4mdDE7a10udL0RNg4.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/9f/9b1d85-7198-4af6-a632-d0cfe43016de/1/UkEeUtq30L4mdDE7a10udL0RNg4.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/9f/9b1d85-7198-4af6-a632-d0cfe43016de/1/UkEeUtq30L4mdDE7a10udL0RNg4.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
3e:f0:05:a2:b5:95:55:d1:36:62:79:3c:95:f5:14:d2:5e:6f:
34:95:0f:7a:e3:85:97:2c:d3:04:72:fc:d9:28:4a:77:70:5f:
6e:c5:27:2f:0b:ee:30:1f:28:dd:1b:f9:be:00:79:62:f0:03:
f4:2d:69:dd:f3:8a:e9:23:fb:d6:f3:7c:74:bb:21:24:fa:5d:
2e:40:c1:5a:d4:29:4a:3f:01:8f:66:a2:14:be:c8:ec:c8:ce:
c8:d2:d7:24:64:78:4b:41:7b:b0:33:7e:d4:a6:56:bb:fa:e1:
38:6e:87:74:23:d2:cb:d3:88:d1:3b:61:0b:fa:6d:66:44:a4:
29:45:30:14:48:7a:2e:66:f1:ed:85:6d:9d:1f:0d:8a:ad:ae:
82:6a:21:ad:44:f3:9b:72:75:1c:08:c8:84:68:c8:ed:a2:75:
84:19:08:99:1a:0b:a5:f4:82:4b:ba:06:22:e4:68:6b:3a:38:
8c:12:9d:51:c0:98:a4:4d:e2:b6:35:39:2b:aa:b3:c1:be:a4:
be:5b:e4:1d:a3:08:73:ba:13:22:65:ab:21:0f:5e:f4:20:59:
d3:8d:37:8e:6f:c6:59:c6:93:2a:74:8e:5a:b7:b2:b3:1d:99:
ea:9b:3b:31:12:df:a5:74:bb:f6:b2:77:8c:f8:52:d6:12:e5:
3d:12:67:a5
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Apr 20 02:51:35 2025 by rpki-client