Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/a9/8d58e4-88f6-4aed-ba43-7ae6359d3110/1/UxKdBI3rLgv2InE5mgkLkBAWCzk.mft
File: UxKdBI3rLgv2InE5mgkLkBAWCzk.mft (raw, json)
Hash identifier: egWkbiv+Ur2UhDK1Gp5HvR1x8GNLd99yU96Behp5BRE=
Subject key identifier: 2A:60:D2:90:B4:1A:84:51:DA:0A:F4:35:47:90:FF:E5:52:E8:75:23
Authority key identifier: 53:12:9D:04:8D:EB:2E:0B:F6:22:71:39:9A:09:0B:90:10:16:0B:39
Certificate issuer: /CN=53129d048deb2e0bf62271399a090b9010160b39
Certificate serial: 01961E8076AD197CEB12F8E23A3C44BD6194
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/UxKdBI3rLgv2InE5mgkLkBAWCzk.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/a9/8d58e4-88f6-4aed-ba43-7ae6359d3110/1/UxKdBI3rLgv2InE5mgkLkBAWCzk.mft
Manifest number: 04B3
Signing time: Thu 10 Apr 2025 07:00:57 +0000
Manifest this update: Thu 10 Apr 2025 07:00:57 +0000
Manifest next update: Fri 11 Apr 2025 07:00:57 +0000
Files and hashes: 1: UxKdBI3rLgv2InE5mgkLkBAWCzk.crl (hash: AZI5gP/ljqr4Lcvpwso2Ix+ZShfob7C/Aov1ydLbKQM=)
2: iV0Wv5wAAAuwTZ0gWPXcPSbfCnc.roa (hash: LNWcJcYvVHSoTAScNXiZdlhb/qYL7H8xTSxcF3h+E20=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/a9/8d58e4-88f6-4aed-ba43-7ae6359d3110/1/UxKdBI3rLgv2InE5mgkLkBAWCzk.crl
rsync://rpki.ripe.net/repository/DEFAULT/a9/8d58e4-88f6-4aed-ba43-7ae6359d3110/1/UxKdBI3rLgv2InE5mgkLkBAWCzk.mft
rsync://rpki.ripe.net/repository/DEFAULT/UxKdBI3rLgv2InE5mgkLkBAWCzk.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 11 Apr 2025 07:00:57 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:1e:80:76:ad:19:7c:eb:12:f8:e2:3a:3c:44:bd:61:94
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=53129d048deb2e0bf62271399a090b9010160b39
Validity
Not Before: Apr 10 07:00:57 2025 GMT
Not After : Apr 11 07:00:57 2025 GMT
Subject: CN=2a60d290b41a8451da0af4354790ffe552e87523
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cb:6a:9e:13:ff:6e:e0:40:db:d2:26:e6:ed:17:
f0:61:e0:09:d5:07:13:6d:10:17:92:65:a4:ce:0f:
9a:07:91:0c:cd:ba:7e:0b:c7:32:91:c8:09:33:a4:
2c:c8:38:5c:44:a2:b9:81:96:2d:56:48:ab:62:39:
80:c3:65:b5:27:80:d1:13:f3:f0:67:33:14:c7:dc:
35:56:28:c8:c0:9a:d5:82:de:26:12:3a:fe:6f:5a:
04:08:89:79:81:42:a9:49:9d:c1:c5:a0:74:f9:ae:
16:2f:ad:c9:e0:38:52:14:6d:c3:82:92:77:9f:08:
7b:ac:a7:d1:dc:88:21:04:52:1c:64:17:62:68:72:
3f:89:2a:9f:52:4c:65:9e:e5:2d:6f:db:33:6d:7d:
1d:6d:24:06:d5:61:c1:b5:38:68:36:de:e2:d5:80:
c8:9c:48:28:d4:8e:7a:72:c1:51:81:e3:c5:fb:43:
19:50:1a:4b:c7:12:c8:8e:2e:96:5c:70:63:87:48:
fc:61:72:57:cb:92:e6:ab:ec:44:9c:54:eb:62:4f:
54:f3:13:23:f2:e9:24:61:19:ca:12:1e:ce:3f:37:
64:d9:f1:8b:b8:83:13:2b:0e:2e:85:76:d1:72:0a:
da:f4:da:80:b0:d6:2e:67:7c:42:eb:fb:ae:8c:36:
ef:f7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
2A:60:D2:90:B4:1A:84:51:DA:0A:F4:35:47:90:FF:E5:52:E8:75:23
X509v3 Authority Key Identifier:
keyid:53:12:9D:04:8D:EB:2E:0B:F6:22:71:39:9A:09:0B:90:10:16:0B:39
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/UxKdBI3rLgv2InE5mgkLkBAWCzk.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a9/8d58e4-88f6-4aed-ba43-7ae6359d3110/1/UxKdBI3rLgv2InE5mgkLkBAWCzk.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/a9/8d58e4-88f6-4aed-ba43-7ae6359d3110/1/UxKdBI3rLgv2InE5mgkLkBAWCzk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
39:af:a3:11:d3:1b:30:5a:16:db:01:91:1e:e7:90:4e:a5:a3:
8c:d8:f0:62:14:85:e7:d2:d7:81:73:12:95:06:f7:cd:e1:51:
e9:40:99:53:b0:ba:22:5c:91:29:d8:84:60:d3:a4:f3:60:14:
e7:56:95:69:78:a5:60:5f:aa:e7:db:a5:84:66:09:73:31:a1:
92:67:6a:ee:96:fc:f1:37:a3:64:9d:c4:a1:d3:0c:e8:cf:4c:
29:32:3f:e8:80:bc:17:1b:d6:b5:d8:a0:d0:ab:1c:cd:34:11:
82:35:ed:76:45:c8:c9:b6:f0:7c:53:ad:9a:00:85:bb:b2:8c:
94:6d:5e:6c:2a:f6:49:0f:ae:2f:4c:0a:7e:4d:01:2f:ab:9b:
39:48:4d:69:5c:0f:70:3e:ed:19:7d:42:54:96:d9:72:d5:ad:
92:38:7e:35:41:f5:c5:22:74:be:9d:b9:cc:2f:ac:bc:a9:4a:
bf:1d:d3:b5:53:96:bc:c9:17:cf:4f:bf:0b:b9:92:cf:e9:da:
ce:ad:4f:6c:3d:43:67:7b:76:00:d5:65:6c:9c:fd:d0:be:39:
f8:fe:98:1e:95:fc:39:54:a9:1f:2e:d3:b2:ff:b5:15:cf:e8:
87:3d:fd:4c:24:6c:2d:f5:d7:6a:65:ad:e4:7a:b5:5e:8c:ac:
ad:06:3a:00
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Apr 10 11:08:42 2025 by rpki-client