Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/a4/60f9ac-053a-4689-b081-3a3a9f0242b8/1/UpylpuXWdCHz8s0hE4y3BwSFCVU.mft
File: UpylpuXWdCHz8s0hE4y3BwSFCVU.mft (raw, json)
Hash identifier: ozEQ0PO/tSF/UMCZbFJGiXM1BV+UTH3kO1O7zLt25sU=
Subject key identifier: 2D:44:D6:E6:55:C6:E9:9A:F8:C7:93:BC:AB:A3:A3:CD:E7:BE:67:A3
Authority key identifier: 52:9C:A5:A6:E5:D6:74:21:F3:F2:CD:21:13:8C:B7:07:04:85:09:55
Certificate issuer: /CN=529ca5a6e5d67421f3f2cd21138cb70704850955
Certificate serial: 019655DCE9312CA1528F00B6AE4FBEF8E68C
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/UpylpuXWdCHz8s0hE4y3BwSFCVU.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/a4/60f9ac-053a-4689-b081-3a3a9f0242b8/1/UpylpuXWdCHz8s0hE4y3BwSFCVU.mft
Manifest number: 1492
Signing time: Mon 21 Apr 2025 01:01:02 +0000
Manifest this update: Mon 21 Apr 2025 01:01:02 +0000
Manifest next update: Tue 22 Apr 2025 01:01:02 +0000
Files and hashes: 1: 5DYNtQhmHm5xId84-qYm__d0Jxg.roa (hash: M0kddqhlCcHa9Skioom20ixZlz/BFkuuxsQkLcWGHLA=)
2: UpylpuXWdCHz8s0hE4y3BwSFCVU.crl (hash: og/hbXGHv8WlDpH0R6pPLAwL/XjIRtnbbKRbGNYDpGg=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/a4/60f9ac-053a-4689-b081-3a3a9f0242b8/1/UpylpuXWdCHz8s0hE4y3BwSFCVU.crl
rsync://rpki.ripe.net/repository/DEFAULT/a4/60f9ac-053a-4689-b081-3a3a9f0242b8/1/UpylpuXWdCHz8s0hE4y3BwSFCVU.mft
rsync://rpki.ripe.net/repository/DEFAULT/UpylpuXWdCHz8s0hE4y3BwSFCVU.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 22 Apr 2025 01:00:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:55:dc:e9:31:2c:a1:52:8f:00:b6:ae:4f:be:f8:e6:8c
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=529ca5a6e5d67421f3f2cd21138cb70704850955
Validity
Not Before: Apr 21 01:01:02 2025 GMT
Not After : Apr 22 01:01:02 2025 GMT
Subject: CN=2d44d6e655c6e99af8c793bcaba3a3cde7be67a3
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c3:c0:58:e0:39:f8:43:4d:34:f2:5c:97:f7:13:
68:86:50:be:38:0e:12:87:2c:74:62:c8:4c:3d:34:
0c:39:a0:48:7c:ce:dc:57:f7:ee:fb:99:45:d0:8c:
c5:41:d4:55:f0:83:5a:88:d3:c0:47:a0:ac:c6:f7:
fa:ae:b3:fc:a5:37:96:f3:c3:d4:b0:b0:05:a7:b9:
ab:9d:d1:3c:0c:78:7d:f8:72:ce:02:78:d3:a5:c2:
66:96:80:66:25:16:a0:62:60:c3:41:40:e7:16:e2:
1f:7a:35:39:23:2c:c2:05:bf:e5:85:9d:f1:07:15:
35:f4:c4:b7:48:02:50:c0:b9:9a:59:f6:fa:0c:4a:
3a:2c:c5:d0:46:99:15:14:54:d8:92:ea:0e:54:06:
47:58:71:1d:b3:6b:d6:95:21:f2:45:c2:2a:31:aa:
86:18:bc:47:9b:30:d8:37:3a:8b:38:69:4f:dd:88:
de:08:1c:f9:f6:65:8a:65:0d:21:df:8b:2f:7b:77:
c0:35:40:5b:a8:d4:1c:6b:3c:25:8f:0a:82:9b:a4:
43:58:39:47:b3:05:b3:e5:3f:e5:82:48:bc:b6:4c:
0f:3b:46:d0:f6:0e:64:04:a3:62:2e:63:43:88:08:
ad:97:55:30:7c:8e:1e:08:8f:e5:b1:25:c4:f9:e0:
ca:4f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
2D:44:D6:E6:55:C6:E9:9A:F8:C7:93:BC:AB:A3:A3:CD:E7:BE:67:A3
X509v3 Authority Key Identifier:
keyid:52:9C:A5:A6:E5:D6:74:21:F3:F2:CD:21:13:8C:B7:07:04:85:09:55
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/UpylpuXWdCHz8s0hE4y3BwSFCVU.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a4/60f9ac-053a-4689-b081-3a3a9f0242b8/1/UpylpuXWdCHz8s0hE4y3BwSFCVU.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/a4/60f9ac-053a-4689-b081-3a3a9f0242b8/1/UpylpuXWdCHz8s0hE4y3BwSFCVU.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
5e:d8:ae:53:d2:f8:cc:f5:d6:34:bf:0e:de:e3:c5:b7:d8:9a:
6f:7c:af:44:6e:df:a2:41:c1:75:3b:a8:dd:d2:76:b2:f9:c0:
f9:cf:23:60:b3:a1:db:6d:b0:06:f1:ec:22:49:1f:84:b4:b8:
d3:71:00:14:de:33:63:bb:48:65:33:1a:58:eb:5e:f0:dd:ed:
e6:57:5c:8a:c6:10:a3:36:ee:a4:59:40:58:1b:87:8f:83:2c:
9f:c7:a1:62:88:7d:17:1a:70:2f:57:a4:95:24:eb:4f:23:36:
28:bc:aa:6a:89:71:51:c8:39:93:5d:93:4f:aa:16:5d:7c:91:
21:87:9f:35:4f:e1:fa:b7:54:2c:dc:6a:31:56:95:ed:b3:e8:
fa:b2:6c:ec:ed:ac:c5:41:88:ae:94:91:b5:c5:b3:0a:e1:3a:
a5:fb:60:b3:1b:b0:07:13:17:ab:b1:85:ac:ca:f8:99:3a:28:
eb:cc:cc:a1:97:9b:7d:90:16:2d:dd:6e:64:ec:7c:30:02:fb:
53:d8:da:a1:e7:ff:a4:86:2d:8e:e9:66:2d:e4:47:88:fb:9a:
05:ea:4f:66:ef:96:25:8d:0d:f6:1c:e7:e7:74:0d:e7:7f:e7:
9b:f2:18:39:75:b0:30:40:65:9d:77:06:7c:3d:08:a6:04:ba:
14:f7:3a:69
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 21 10:43:55 2025 by rpki-client