Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ba/ef98e4-01e5-4b88-bbf1-0483d1c01b25/1/UlngAMmR948kP95ZgM1c72SUCeY.mft
File: UlngAMmR948kP95ZgM1c72SUCeY.mft (raw, json)
Hash identifier: 5d1heR+KpI5PeeUA/u/m846u2Tl0QSgkmOf3OmAUKkg=
Subject key identifier: EE:AB:49:D2:69:A1:1D:C3:A1:EF:71:5C:F9:DC:6B:BC:BE:3C:74:53
Authority key identifier: 52:59:E0:00:C9:91:F7:8F:24:3F:DE:59:80:CD:5C:EF:64:94:09:E6
Certificate issuer: /CN=5259e000c991f78f243fde5980cd5cef649409e6
Certificate serial: 019609E7896472B11052D1AF1A0559560E1E
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/UlngAMmR948kP95ZgM1c72SUCeY.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ba/ef98e4-01e5-4b88-bbf1-0483d1c01b25/1/UlngAMmR948kP95ZgM1c72SUCeY.mft
Manifest number: 089E
Signing time: Sun 06 Apr 2025 07:01:30 +0000
Manifest this update: Sun 06 Apr 2025 07:01:30 +0000
Manifest next update: Mon 07 Apr 2025 07:01:30 +0000
Files and hashes: 1: UlngAMmR948kP95ZgM1c72SUCeY.crl (hash: JHtxZhvs74yDIhl659rJ/ub2hQtzL1U0FJKHeJXKcXQ=)
2: sq5AEY7QJIys2vGMgSgXE7FeRjY.roa (hash: aCGTeZMaEctcz9l1gB+wzw0eDWMxaeU9DQux69bQvFE=)
3: uDBXK8T_CYBhR7j4qUX3KNaOzNA.roa (hash: l69OGXgxbADqBf3n8PsE9PC3wGQv9qukdYrOEUN64Sw=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/ba/ef98e4-01e5-4b88-bbf1-0483d1c01b25/1/UlngAMmR948kP95ZgM1c72SUCeY.crl
rsync://rpki.ripe.net/repository/DEFAULT/ba/ef98e4-01e5-4b88-bbf1-0483d1c01b25/1/UlngAMmR948kP95ZgM1c72SUCeY.mft
rsync://rpki.ripe.net/repository/DEFAULT/UlngAMmR948kP95ZgM1c72SUCeY.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 07 Apr 2025 07:00:49 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:09:e7:89:64:72:b1:10:52:d1:af:1a:05:59:56:0e:1e
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=5259e000c991f78f243fde5980cd5cef649409e6
Validity
Not Before: Apr 6 07:01:30 2025 GMT
Not After : Apr 7 07:01:30 2025 GMT
Subject: CN=eeab49d269a11dc3a1ef715cf9dc6bbcbe3c7453
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:dd:ba:f4:ea:9d:3e:42:25:ea:44:50:e0:b0:31:
dc:52:d9:da:74:35:3c:6d:4b:24:32:3d:42:1a:fb:
4c:99:93:91:7a:0a:dd:4e:a1:46:4f:be:79:ef:e2:
85:b0:fb:56:e5:c5:a0:38:15:37:b8:e6:a8:5a:d5:
4a:55:1e:93:ec:1f:50:74:7a:81:50:03:b3:e1:c3:
01:45:4c:3b:d4:6c:fc:81:ee:e5:26:15:29:a9:cb:
c4:09:53:f8:17:fb:f6:55:b8:4b:b5:eb:b8:70:b8:
c4:d4:fc:47:47:ff:e7:3a:ac:e7:f0:3a:e8:85:6a:
6e:3c:54:84:d7:18:aa:5b:f6:ed:d4:91:c7:7c:38:
d2:8c:f6:06:07:d2:5b:2c:1a:53:29:19:8a:5b:15:
42:d3:00:ba:00:87:01:37:30:f5:e0:eb:46:9e:d1:
ef:84:9a:cd:38:59:42:f3:ad:2c:23:dd:d9:c3:a3:
0e:0c:a0:bb:e1:19:80:bc:f8:a2:95:8b:6e:d8:97:
f7:ac:b2:19:ee:a9:46:da:d0:f9:72:10:14:86:e3:
21:a6:e7:48:7b:a1:be:3f:fb:27:71:30:16:fb:86:
b3:d4:ab:bd:80:00:24:ba:c9:ba:d9:11:8f:54:29:
5b:ec:59:1e:ea:dd:6f:26:5d:87:9a:8f:45:e6:8b:
4e:05
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
EE:AB:49:D2:69:A1:1D:C3:A1:EF:71:5C:F9:DC:6B:BC:BE:3C:74:53
X509v3 Authority Key Identifier:
keyid:52:59:E0:00:C9:91:F7:8F:24:3F:DE:59:80:CD:5C:EF:64:94:09:E6
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/UlngAMmR948kP95ZgM1c72SUCeY.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ba/ef98e4-01e5-4b88-bbf1-0483d1c01b25/1/UlngAMmR948kP95ZgM1c72SUCeY.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/ba/ef98e4-01e5-4b88-bbf1-0483d1c01b25/1/UlngAMmR948kP95ZgM1c72SUCeY.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
6f:86:53:10:c5:ab:05:67:d4:12:4e:82:1c:b3:de:dd:4e:2e:
91:44:4c:e6:8e:ae:f2:77:9c:8d:09:93:29:bc:f6:34:54:45:
71:81:04:ce:9c:b0:cb:a3:77:de:e9:c3:7d:3a:a5:82:6f:42:
66:1e:b4:5c:59:de:0d:98:56:f4:3c:44:22:e3:9c:78:0e:b7:
b8:f2:b8:f0:72:01:8d:1f:d0:d7:98:65:3b:dd:72:be:5d:9b:
71:68:dd:6f:7f:e6:fa:8a:9b:cf:30:81:69:00:0a:ad:8e:b4:
26:00:e4:04:a1:2b:ff:4c:30:da:2f:24:cc:57:00:24:9f:d5:
ed:a5:bc:52:b1:bc:c8:08:d3:8b:d1:f6:ae:fe:06:0f:de:5f:
a0:b0:e6:b9:f1:b2:d4:99:0a:7a:7f:81:3d:ca:83:b3:67:c0:
bb:60:c3:aa:29:fe:b8:43:10:41:cc:ad:7f:63:1d:51:87:ee:
b3:ec:b4:71:cc:cc:53:d1:56:e6:ce:6e:7d:32:45:73:c7:74:
ad:14:8f:c9:14:9a:ff:ce:46:2f:99:a3:84:26:d3:2c:2b:d7:
0e:7f:c5:23:fa:ac:4a:78:37:a9:2c:7d:3a:ab:c1:e4:5e:45:
cd:ef:a1:29:04:e1:a8:ec:7d:79:13:10:69:93:e9:aa:f4:39:
ad:1e:1f:e8
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Apr 6 11:47:16 2025 by rpki-client