Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ba/1f7bad-e5dd-4e52-b0d4-8f5c9867e998/1/UA2xcVBSJTv1I_FAufVjehHV6a8.mft
File: UA2xcVBSJTv1I_FAufVjehHV6a8.mft (raw, json)
Hash identifier: 2DRzeZ6+mYaXxg14UL5+YxmOaiNpF7nFEIbXv/wuKP4=
Subject key identifier: 97:A7:82:81:1B:E3:AE:2D:3D:8F:08:EC:FA:00:CD:8F:4E:64:BF:74
Authority key identifier: 50:0D:B1:71:50:52:25:3B:F5:23:F1:40:B9:F5:63:7A:11:D5:E9:AF
Certificate issuer: /CN=500db1715052253bf523f140b9f5637a11d5e9af
Certificate serial: 019653127B24DA9CF95EA157BFC917054F45
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/UA2xcVBSJTv1I_FAufVjehHV6a8.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ba/1f7bad-e5dd-4e52-b0d4-8f5c9867e998/1/UA2xcVBSJTv1I_FAufVjehHV6a8.mft
Manifest number: 14FB
Signing time: Sun 20 Apr 2025 12:00:42 +0000
Manifest this update: Sun 20 Apr 2025 12:00:42 +0000
Manifest next update: Mon 21 Apr 2025 12:00:42 +0000
Files and hashes: 1: CYNP6vN-qElEU6kqxQQrlgtjw0E.roa (hash: 50zm/kAB1hENUbgpvzJQwq1lkvUVeWylyOULFWpoN/I=)
2: UA2xcVBSJTv1I_FAufVjehHV6a8.crl (hash: DwRedI94Z5o5EGD1Ee+miUG9koWZaIVdTTNDMZwYWHQ=)
3: pSWgXuERRm1Au1teAh3DmpY14k0.roa (hash: EnWqTAmFjlN0INK78CFEhUf7qBxCnt1KXQVV4wR/100=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/ba/1f7bad-e5dd-4e52-b0d4-8f5c9867e998/1/UA2xcVBSJTv1I_FAufVjehHV6a8.crl
rsync://rpki.ripe.net/repository/DEFAULT/ba/1f7bad-e5dd-4e52-b0d4-8f5c9867e998/1/UA2xcVBSJTv1I_FAufVjehHV6a8.mft
rsync://rpki.ripe.net/repository/DEFAULT/UA2xcVBSJTv1I_FAufVjehHV6a8.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 21 Apr 2025 12:00:42 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:53:12:7b:24:da:9c:f9:5e:a1:57:bf:c9:17:05:4f:45
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=500db1715052253bf523f140b9f5637a11d5e9af
Validity
Not Before: Apr 20 12:00:42 2025 GMT
Not After : Apr 21 12:00:42 2025 GMT
Subject: CN=97a782811be3ae2d3d8f08ecfa00cd8f4e64bf74
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bb:38:d9:78:04:9c:95:a3:9c:0c:7e:0f:da:9a:
a5:12:d1:35:f6:c8:fb:e9:d5:3d:cc:60:1d:90:dc:
8a:1e:dc:6c:a5:b7:d0:dc:c2:39:53:8e:40:cc:72:
69:cb:58:27:b1:44:16:e7:89:ad:1a:8d:63:34:ab:
75:82:5f:68:73:ee:d8:a9:2c:9f:46:a7:94:e4:99:
a2:a2:6a:24:c3:19:bb:a7:e0:c2:d5:4c:2e:1b:67:
5f:df:48:4a:08:55:76:30:0f:f3:be:7a:a0:c0:89:
ce:7d:97:43:32:80:0f:5d:21:29:6a:38:a8:f1:63:
e7:9d:15:5c:48:eb:54:72:5c:3c:e6:05:6f:82:78:
67:5f:1d:78:05:19:df:2a:cf:dd:b6:96:0d:ed:88:
9f:0f:09:bb:fe:0e:35:20:25:a4:89:b7:2f:f3:43:
95:2a:6f:ba:0c:c1:1b:dc:11:ce:99:27:13:2d:48:
ee:85:f9:c6:95:00:1b:a0:f2:9a:e8:40:75:81:93:
21:99:9c:6d:5f:68:1b:21:a9:08:8b:6c:40:ee:77:
13:31:66:6c:3f:73:22:08:7f:9a:8b:a9:ac:96:03:
fa:83:12:ea:1b:84:ee:8f:b0:61:f7:71:43:f4:4a:
13:d1:78:c8:86:2e:83:26:9c:0f:d2:06:92:dc:c4:
7a:b9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
97:A7:82:81:1B:E3:AE:2D:3D:8F:08:EC:FA:00:CD:8F:4E:64:BF:74
X509v3 Authority Key Identifier:
keyid:50:0D:B1:71:50:52:25:3B:F5:23:F1:40:B9:F5:63:7A:11:D5:E9:AF
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/UA2xcVBSJTv1I_FAufVjehHV6a8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ba/1f7bad-e5dd-4e52-b0d4-8f5c9867e998/1/UA2xcVBSJTv1I_FAufVjehHV6a8.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/ba/1f7bad-e5dd-4e52-b0d4-8f5c9867e998/1/UA2xcVBSJTv1I_FAufVjehHV6a8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
1c:66:f5:68:6b:59:96:fb:c7:a9:45:46:9c:7e:03:59:29:1d:
2c:d1:0e:86:70:65:0b:5f:0c:ab:bd:37:4f:97:d8:a6:3e:f0:
89:39:ca:77:ad:02:47:a8:d3:e8:ce:3a:10:1c:eb:08:95:37:
07:e9:79:58:be:ca:38:a5:db:78:72:d4:df:e6:d4:39:62:9f:
b7:16:44:41:dd:60:50:cb:40:9f:4b:61:ee:a8:e6:a2:29:24:
44:2c:b4:4b:04:2b:94:a5:75:fd:92:40:b1:12:2c:d8:ab:e8:
93:dc:d4:3d:36:fe:01:f3:61:bc:cf:72:74:b2:59:e6:4e:53:
f5:b8:4a:5b:e6:e8:b5:20:85:3a:40:d5:42:95:d3:99:27:17:
d3:3f:33:5d:92:72:fa:44:5a:2c:de:f2:b4:51:92:cc:2c:a4:
15:8b:6e:8c:ee:e7:15:30:f1:75:a0:4c:77:f1:54:f5:78:4f:
be:fe:b0:7c:88:c8:d2:80:ba:ff:ca:8d:91:3d:0e:59:4d:c0:
50:85:b1:cc:08:b2:bb:73:2b:a8:b1:37:58:a3:ce:1e:08:8b:
d2:0b:09:66:09:d3:03:f8:80:a5:2c:54:d1:68:51:25:af:e3:
54:a0:18:23:36:76:4b:85:3a:62:fd:fe:59:43:c3:42:5c:6c:
64:fd:a8:74
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Apr 20 20:25:29 2025 by rpki-client