Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/bf/fb04c8-7057-45b7-a34c-dcfc6a9e0dc7/1/Uez5urycprrpCFzikvscLMGNNE8.mft
File: Uez5urycprrpCFzikvscLMGNNE8.mft (raw, json)
Hash identifier: pFYjrIhrLiclK0Mkwj834JEUF4KAUWFj/zUuTXFSsu8=
Subject key identifier: 02:7C:50:E7:A4:0A:63:34:D7:3B:D4:1E:C8:16:03:F5:C8:CC:DF:38
Authority key identifier: 51:EC:F9:BA:BC:9C:A6:BA:E9:08:5C:E2:92:FB:1C:2C:C1:8D:34:4F
Certificate issuer: /CN=51ecf9babc9ca6bae9085ce292fb1c2cc18d344f
Certificate serial: 019649A1B215605CABB871C227AB5CA1F13A
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Uez5urycprrpCFzikvscLMGNNE8.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/bf/fb04c8-7057-45b7-a34c-dcfc6a9e0dc7/1/Uez5urycprrpCFzikvscLMGNNE8.mft
Manifest number: 1505
Signing time: Fri 18 Apr 2025 16:00:55 +0000
Manifest this update: Fri 18 Apr 2025 16:00:55 +0000
Manifest next update: Sat 19 Apr 2025 16:00:55 +0000
Files and hashes: 1: Uez5urycprrpCFzikvscLMGNNE8.crl (hash: wRPXzZUL4xA0qp8SBJBl2u90fAVhgMPdEY3IzxFyb3E=)
2: j2k6ZwwCoYdbRXccWL_N8jGmvQI.roa (hash: w7ebwT3KJy3faWUvy2fWfZ0lAeoGXL67yLrINDXPUpk=)
3: xxWFbF3tgwbzUuCNrDoHcp9Qoi0.roa (hash: nF/SPLRIzHvrKRFZBuGbHBJ7AWT0/rnH1yU0BqremkQ=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/bf/fb04c8-7057-45b7-a34c-dcfc6a9e0dc7/1/Uez5urycprrpCFzikvscLMGNNE8.crl
rsync://rpki.ripe.net/repository/DEFAULT/bf/fb04c8-7057-45b7-a34c-dcfc6a9e0dc7/1/Uez5urycprrpCFzikvscLMGNNE8.mft
rsync://rpki.ripe.net/repository/DEFAULT/Uez5urycprrpCFzikvscLMGNNE8.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 19 Apr 2025 14:20:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:49:a1:b2:15:60:5c:ab:b8:71:c2:27:ab:5c:a1:f1:3a
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=51ecf9babc9ca6bae9085ce292fb1c2cc18d344f
Validity
Not Before: Apr 18 16:00:55 2025 GMT
Not After : Apr 19 16:00:55 2025 GMT
Subject: CN=027c50e7a40a6334d73bd41ec81603f5c8ccdf38
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:db:19:ce:5e:e2:a1:c3:ed:fa:a2:9b:5a:8d:33:
55:93:ed:45:7e:57:07:3b:5c:a7:79:81:2b:93:ed:
cf:b7:f6:4b:f8:b9:29:10:33:ea:2e:01:19:00:24:
3e:b7:eb:3e:90:42:e9:a5:20:2b:e4:30:9a:45:e9:
e5:ef:ec:88:e6:9a:c7:8d:2e:3a:96:7d:80:5c:45:
d5:81:bc:fb:54:3e:33:67:7e:58:b3:50:84:79:e8:
c0:82:c0:aa:e0:8b:af:54:88:55:43:a7:aa:af:b4:
d4:3c:31:2c:ec:09:0f:aa:52:5e:ae:00:29:cb:b0:
e2:f9:bc:6b:7e:36:43:2e:34:a5:bd:af:f1:53:0a:
00:f1:75:e8:63:62:2e:58:45:23:b5:44:3e:79:c5:
a8:b0:39:80:8f:1e:7f:51:81:8e:48:09:36:e6:af:
de:4a:fc:67:d6:ca:7b:f9:28:f1:19:b7:c3:13:cf:
d2:10:c2:7d:be:14:25:3a:bf:23:f1:fa:27:6a:31:
3b:37:78:03:43:44:fb:ad:e1:96:9d:56:19:d3:36:
e7:f9:b7:45:28:fe:6e:e9:77:a0:c3:67:40:e6:91:
ea:cc:2e:08:79:73:65:d2:6f:cd:53:42:a4:0a:77:
7c:5e:6b:34:0e:6b:57:91:c7:98:38:58:bb:a0:9e:
ee:cb
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
02:7C:50:E7:A4:0A:63:34:D7:3B:D4:1E:C8:16:03:F5:C8:CC:DF:38
X509v3 Authority Key Identifier:
keyid:51:EC:F9:BA:BC:9C:A6:BA:E9:08:5C:E2:92:FB:1C:2C:C1:8D:34:4F
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Uez5urycprrpCFzikvscLMGNNE8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/bf/fb04c8-7057-45b7-a34c-dcfc6a9e0dc7/1/Uez5urycprrpCFzikvscLMGNNE8.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/bf/fb04c8-7057-45b7-a34c-dcfc6a9e0dc7/1/Uez5urycprrpCFzikvscLMGNNE8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
58:72:33:88:53:ca:98:27:8f:2f:98:40:d1:95:0c:10:1a:97:
a4:30:7e:cc:35:af:ea:0a:e7:cd:ae:71:5f:4f:70:a5:5e:ca:
43:68:ce:37:05:ed:47:6e:04:81:7e:3c:6a:47:74:ea:56:95:
e2:94:3e:f3:dd:ae:1d:5f:08:0e:34:d2:3b:fb:27:6a:a6:89:
c1:bf:e3:7a:cf:da:c9:54:3b:a4:65:5f:22:7d:82:3c:c8:bc:
78:00:e0:52:66:f1:4a:84:24:48:ef:5b:9a:d9:4f:33:37:f6:
2f:97:fc:49:64:1a:7c:b8:37:3e:92:dd:fc:27:21:a2:74:db:
28:3b:f1:ed:04:33:66:5a:38:95:3d:ba:79:cb:07:61:f5:ec:
31:d8:92:d7:68:85:b8:06:53:9c:74:6c:e7:d5:95:22:38:c0:
ab:c0:c9:05:8b:f7:d7:d7:c7:52:cc:9d:da:1e:37:8c:e3:86:
bd:93:97:35:b7:31:6f:00:cf:0c:a3:81:11:8d:7f:39:c5:23:
b0:38:a5:b6:a9:58:7e:9e:8d:2c:3e:c8:a2:8a:ff:27:09:8a:
73:47:dc:41:da:df:24:4d:de:ef:b9:89:27:c4:7d:ed:3f:29:
65:0f:cb:9f:3e:96:0e:c5:f8:79:b0:cb:91:92:f3:f3:1f:a6:
52:55:fb:36
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 18 23:36:43 2025 by rpki-client