Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ab/6e0ed3-eb01-44f7-8d54-39d9e0962440/1/ucic-t1R9Nkhuz0MVfkxNmOnHMQ.mft
File: ucic-t1R9Nkhuz0MVfkxNmOnHMQ.mft (raw, json)
Hash identifier: bXhHCQxdG5AUjl2I52BuUrn0/YtlDGN4R/OyMl4OycM=
Subject key identifier: 7C:9E:D1:CB:BB:2A:B7:F3:C9:FC:F2:C6:69:AC:56:B0:AB:4D:BA:16
Authority key identifier: B9:C8:9C:FA:DD:51:F4:D9:21:BB:3D:0C:55:F9:31:36:63:A7:1C:C4
Certificate issuer: /CN=b9c89cfadd51f4d921bb3d0c55f9313663a71cc4
Certificate serial: 01965425064C1BB4A518DBED4CE5B9E924E3
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/ucic-t1R9Nkhuz0MVfkxNmOnHMQ.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ab/6e0ed3-eb01-44f7-8d54-39d9e0962440/1/ucic-t1R9Nkhuz0MVfkxNmOnHMQ.mft
Manifest number: 14FD
Signing time: Sun 20 Apr 2025 17:00:34 +0000
Manifest this update: Sun 20 Apr 2025 17:00:34 +0000
Manifest next update: Mon 21 Apr 2025 17:00:34 +0000
Files and hashes: 1: im_xjRz8P6HBxQJyvuA2N4KfaPQ.roa (hash: PEZegDXuxI9++oLKtHN5JJ1N3bKD7cnT7mW6YuzzJI8=)
2: ucic-t1R9Nkhuz0MVfkxNmOnHMQ.crl (hash: lkGqpCZtf05GHxa6eF/euQUxlUlaHaM0+yLGT9xmFug=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/ab/6e0ed3-eb01-44f7-8d54-39d9e0962440/1/ucic-t1R9Nkhuz0MVfkxNmOnHMQ.crl
rsync://rpki.ripe.net/repository/DEFAULT/ab/6e0ed3-eb01-44f7-8d54-39d9e0962440/1/ucic-t1R9Nkhuz0MVfkxNmOnHMQ.mft
rsync://rpki.ripe.net/repository/DEFAULT/ucic-t1R9Nkhuz0MVfkxNmOnHMQ.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 21 Apr 2025 16:00:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:54:25:06:4c:1b:b4:a5:18:db:ed:4c:e5:b9:e9:24:e3
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=b9c89cfadd51f4d921bb3d0c55f9313663a71cc4
Validity
Not Before: Apr 20 17:00:34 2025 GMT
Not After : Apr 21 17:00:34 2025 GMT
Subject: CN=7c9ed1cbbb2ab7f3c9fcf2c669ac56b0ab4dba16
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ad:c7:69:45:e9:76:c4:2a:af:be:f1:7a:1d:5b:
b1:76:b2:f4:67:68:ab:82:00:33:db:2c:bf:75:51:
0d:8f:d9:78:4f:75:f3:9a:31:de:29:46:0d:21:51:
9d:43:0d:49:2e:33:32:eb:72:89:4f:9b:c8:3c:28:
5e:33:30:1d:53:41:5c:cf:4a:9c:44:ab:d5:2f:d5:
a8:1f:68:e5:a8:ed:9f:c3:85:70:41:7a:e6:0f:df:
d0:90:d8:2a:f2:d1:2e:00:bd:b9:67:73:aa:75:c2:
ef:06:3c:2e:c5:91:c2:17:ce:19:05:cc:bd:86:1e:
68:2b:3e:9b:97:b1:f3:07:3e:b8:4b:ed:19:8d:77:
5c:29:37:4f:bb:c4:3e:76:7d:b7:79:65:5b:57:24:
2a:a3:06:ed:7c:48:17:cd:ca:11:d1:bb:4e:51:c2:
2b:e6:ba:a6:e6:cf:e8:3b:52:72:60:8a:49:31:1b:
ac:48:75:30:ac:c4:89:89:72:e7:f3:e7:07:bc:fa:
c6:b6:69:56:0c:84:c3:72:93:c6:c3:84:05:f9:f4:
a5:1d:d0:44:43:26:ef:82:e5:8f:23:4c:e0:75:30:
6f:8e:ff:5c:58:0c:3a:48:70:a9:8e:15:75:16:a6:
14:6a:c6:31:ac:77:e3:20:70:f9:17:d8:b0:62:0d:
ce:c5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
7C:9E:D1:CB:BB:2A:B7:F3:C9:FC:F2:C6:69:AC:56:B0:AB:4D:BA:16
X509v3 Authority Key Identifier:
keyid:B9:C8:9C:FA:DD:51:F4:D9:21:BB:3D:0C:55:F9:31:36:63:A7:1C:C4
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ucic-t1R9Nkhuz0MVfkxNmOnHMQ.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ab/6e0ed3-eb01-44f7-8d54-39d9e0962440/1/ucic-t1R9Nkhuz0MVfkxNmOnHMQ.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/ab/6e0ed3-eb01-44f7-8d54-39d9e0962440/1/ucic-t1R9Nkhuz0MVfkxNmOnHMQ.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
89:be:06:76:e0:19:08:eb:22:2b:19:d7:32:5c:90:fc:33:ba:
19:54:de:ac:be:1d:6d:24:b8:ff:53:ab:48:df:10:59:f3:0b:
f5:0d:76:69:92:b9:28:c0:f3:a3:7d:f7:32:ec:35:d3:39:0f:
65:3a:26:ee:e9:df:dc:a1:eb:90:ec:6a:42:8c:29:a2:f7:f8:
76:ea:83:9a:dc:50:77:81:e7:75:93:e7:ce:11:4e:05:58:c4:
72:c0:6d:a9:50:91:0d:04:a2:ff:fd:bb:4f:c9:3c:85:86:a6:
2d:0d:fd:87:0a:ac:51:62:49:fc:bd:06:8d:b9:2d:bf:e0:da:
ae:0f:ac:5f:b5:7c:34:1f:7f:ce:cb:37:2d:a8:cc:56:fa:e4:
6d:04:37:3d:ef:f9:7a:a0:74:3f:18:20:b2:af:70:5a:90:08:
0b:c6:af:ba:3f:a9:45:37:a6:d9:ed:3f:f3:50:bf:b6:cc:7b:
07:3b:af:80:d6:e8:2d:de:4e:d1:c8:57:1d:fe:ce:4f:11:da:
8c:5c:b9:a9:f1:48:0f:69:5b:ee:89:e5:fb:97:ff:6d:b3:8e:
26:bc:1d:d4:a0:cb:9a:2f:e9:c0:35:4c:72:7f:70:f3:16:a8:
44:51:ad:24:d5:b1:b3:8f:78:25:05:5a:80:52:02:02:40:ae:
58:95:83:b5
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Apr 20 22:44:34 2025 by rpki-client