Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/a4/60f9ac-053a-4689-b081-3a3a9f0242b8/1/UpylpuXWdCHz8s0hE4y3BwSFCVU.mft
File: UpylpuXWdCHz8s0hE4y3BwSFCVU.mft (raw, json)
Hash identifier: Ch8XZ8VKVh74CJWOXeZsBLbBgiprQpWEDP+5QoO+qis=
Subject key identifier: 5B:68:D8:83:AF:46:C9:1A:AA:27:0E:D4:39:4B:AB:AC:7F:A7:DE:52
Authority key identifier: 52:9C:A5:A6:E5:D6:74:21:F3:F2:CD:21:13:8C:B7:07:04:85:09:55
Certificate issuer: /CN=529ca5a6e5d67421f3f2cd21138cb70704850955
Certificate serial: 01958B16A57859E1AA812A84196FDA2E88D5
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/UpylpuXWdCHz8s0hE4y3BwSFCVU.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/a4/60f9ac-053a-4689-b081-3a3a9f0242b8/1/UpylpuXWdCHz8s0hE4y3BwSFCVU.mft
Manifest number: 1429
Signing time: Wed 12 Mar 2025 16:01:12 +0000
Manifest this update: Wed 12 Mar 2025 16:01:12 +0000
Manifest next update: Thu 13 Mar 2025 16:01:12 +0000
Files and hashes: 1: 5DYNtQhmHm5xId84-qYm__d0Jxg.roa (hash: M0kddqhlCcHa9Skioom20ixZlz/BFkuuxsQkLcWGHLA=)
2: UpylpuXWdCHz8s0hE4y3BwSFCVU.crl (hash: KL6HpqNpyukMn33nGrJjf/V0E0Ehu4yVyv/dHaYSw9s=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/a4/60f9ac-053a-4689-b081-3a3a9f0242b8/1/UpylpuXWdCHz8s0hE4y3BwSFCVU.crl
rsync://rpki.ripe.net/repository/DEFAULT/a4/60f9ac-053a-4689-b081-3a3a9f0242b8/1/UpylpuXWdCHz8s0hE4y3BwSFCVU.mft
rsync://rpki.ripe.net/repository/DEFAULT/UpylpuXWdCHz8s0hE4y3BwSFCVU.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 13 Mar 2025 16:01:12 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:95:8b:16:a5:78:59:e1:aa:81:2a:84:19:6f:da:2e:88:d5
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=529ca5a6e5d67421f3f2cd21138cb70704850955
Validity
Not Before: Mar 12 16:01:12 2025 GMT
Not After : Mar 13 16:01:12 2025 GMT
Subject: CN=5b68d883af46c91aaa270ed4394babac7fa7de52
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b1:1c:0c:7f:16:5e:3b:9e:d3:36:de:cd:a5:72:
aa:3d:bd:7c:7d:79:d6:07:48:e8:8a:cc:e7:4d:e9:
36:b8:38:8e:14:3c:ee:8c:8c:ba:f0:04:10:a0:d7:
c8:fc:c2:c3:14:40:30:6a:09:3d:92:5b:7a:f9:76:
9e:8a:0b:52:43:3b:1d:82:88:5a:5a:11:7d:44:4c:
7a:e5:ed:41:4a:b7:91:bf:1c:3a:20:8f:8d:2c:86:
39:69:76:6f:0c:ba:37:08:e5:c5:83:a9:2a:19:9e:
4d:2d:fd:2e:95:51:11:79:cb:bb:49:62:cc:f3:b8:
92:7f:12:42:e4:8e:5e:4f:37:4d:d8:96:24:39:96:
ec:7e:11:47:ed:11:77:97:da:16:66:4d:84:a1:d7:
14:8c:8c:24:28:0c:6b:98:61:84:84:08:31:9a:dc:
91:57:42:11:f7:3d:4c:4c:f9:22:32:de:88:71:1a:
4f:df:99:f2:a2:ce:70:3c:27:e5:d8:bd:01:05:a0:
04:cd:2f:4d:9b:7a:b7:44:52:d3:17:23:b0:73:2e:
42:92:e3:6c:30:31:dc:71:dc:8b:bb:a6:f6:ae:ae:
3f:92:3b:1f:4b:74:8b:18:cb:33:d9:ee:55:09:85:
f7:3e:cf:d1:71:63:72:4d:33:fe:de:bd:20:c3:50:
c8:91
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
5B:68:D8:83:AF:46:C9:1A:AA:27:0E:D4:39:4B:AB:AC:7F:A7:DE:52
X509v3 Authority Key Identifier:
keyid:52:9C:A5:A6:E5:D6:74:21:F3:F2:CD:21:13:8C:B7:07:04:85:09:55
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/UpylpuXWdCHz8s0hE4y3BwSFCVU.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a4/60f9ac-053a-4689-b081-3a3a9f0242b8/1/UpylpuXWdCHz8s0hE4y3BwSFCVU.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/a4/60f9ac-053a-4689-b081-3a3a9f0242b8/1/UpylpuXWdCHz8s0hE4y3BwSFCVU.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
0d:50:52:83:79:25:17:70:d3:94:32:e3:85:33:48:2a:8f:dc:
6b:1a:16:05:1b:ca:55:4c:a0:56:90:ae:70:1a:8f:af:db:55:
45:4b:82:c0:99:b5:87:a3:e0:c6:dd:e5:77:87:e7:67:b6:2d:
cb:32:31:1c:aa:28:5c:f8:f5:b4:ca:cc:5b:db:f8:8b:2d:7d:
e6:e3:62:95:a1:40:81:4f:28:01:67:c6:50:2b:3b:2c:26:c1:
3c:5c:85:bf:84:10:98:30:8e:bb:89:78:67:d2:52:36:4d:0a:
1c:d9:27:ff:d9:95:88:89:42:e9:b2:ed:5f:51:96:e8:4e:19:
d4:32:5e:85:cc:ca:71:3c:c3:4e:a4:d2:76:49:d6:ab:cb:ed:
ed:e5:35:0b:52:4e:54:ef:a8:31:1a:8f:c7:ad:68:d8:2e:89:
34:b9:3b:81:ac:82:bb:ce:72:31:45:89:c5:47:40:07:05:48:
87:5b:1c:ca:b6:11:4e:e1:f7:d6:8e:fc:57:8d:70:2d:e8:b8:
23:40:3c:f3:59:bf:2c:74:bb:b6:7e:1b:fd:5c:74:73:b7:79:
97:30:92:d1:98:ab:1d:75:0c:2a:fd:1c:5a:95:ff:fd:36:75:
43:45:ab:9f:3b:4d:c0:6a:19:fa:b5:ba:af:9f:e3:57:08:4b:
54:59:aa:0d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 13 02:39:22 2025 by rpki-client