Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c4/17c02b-d735-41ca-8229-0cddf79ee90f/1/UXM4bzZygYSqADsdljn-OcShKqk.mft
File: UXM4bzZygYSqADsdljn-OcShKqk.mft (raw, json)
Hash identifier: pvWt8KxxpvLN377jbTdZoUBcNDT3SqA2z+OA6lwDo4E=
Subject key identifier: 43:5B:FC:BF:D9:A5:09:90:6C:59:B5:64:EC:93:40:94:E9:20:53:25
Authority key identifier: 51:73:38:6F:36:72:81:84:AA:00:3B:1D:96:39:FE:39:C4:A1:2A:A9
Certificate issuer: /CN=5173386f36728184aa003b1d9639fe39c4a12aa9
Certificate serial: 01965493185EAA1F7E71DA50D1794A0FCD4B
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/UXM4bzZygYSqADsdljn-OcShKqk.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c4/17c02b-d735-41ca-8229-0cddf79ee90f/1/UXM4bzZygYSqADsdljn-OcShKqk.mft
Manifest number: 1461
Signing time: Sun 20 Apr 2025 19:00:48 +0000
Manifest this update: Sun 20 Apr 2025 19:00:48 +0000
Manifest next update: Mon 21 Apr 2025 19:00:48 +0000
Files and hashes: 1: UXM4bzZygYSqADsdljn-OcShKqk.crl (hash: qOU2vJvotSDl+syHrgE4zstwRw+FmFS/mDsKyjOKQYI=)
2: g6kbe_eW2XgI6YD7cyTnjFDylR0.roa (hash: VTjbXO0Nq4toGU1LGHuG65b5vXVgfgU9Ntfeo8aohYs=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/c4/17c02b-d735-41ca-8229-0cddf79ee90f/1/UXM4bzZygYSqADsdljn-OcShKqk.crl
rsync://rpki.ripe.net/repository/DEFAULT/c4/17c02b-d735-41ca-8229-0cddf79ee90f/1/UXM4bzZygYSqADsdljn-OcShKqk.mft
rsync://rpki.ripe.net/repository/DEFAULT/UXM4bzZygYSqADsdljn-OcShKqk.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 21 Apr 2025 16:00:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:54:93:18:5e:aa:1f:7e:71:da:50:d1:79:4a:0f:cd:4b
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=5173386f36728184aa003b1d9639fe39c4a12aa9
Validity
Not Before: Apr 20 19:00:48 2025 GMT
Not After : Apr 21 19:00:48 2025 GMT
Subject: CN=435bfcbfd9a509906c59b564ec934094e9205325
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a6:f6:08:42:5d:20:5c:c3:43:92:4e:41:35:42:
78:78:0f:df:fe:0c:e4:06:50:5b:78:c1:98:5f:d8:
bc:77:f8:82:4f:82:45:25:b7:61:74:11:d1:20:84:
cd:00:61:ec:80:28:68:ac:ae:43:ca:e9:05:08:41:
66:3b:4a:f1:99:7b:62:cd:1e:f0:56:68:04:49:4d:
48:a8:a8:d4:28:fb:30:05:61:31:56:48:cd:f1:7a:
8f:eb:27:6e:45:43:a1:ee:bf:28:84:a4:f8:0a:8b:
00:e5:45:9f:21:b7:70:6d:e1:ac:74:de:36:19:d5:
ac:5b:33:ad:6c:aa:15:89:38:e9:4d:f9:eb:ff:2b:
c0:cd:81:9e:6c:bf:ea:74:ba:73:bf:ac:b4:b4:f0:
2d:58:82:c6:3c:3a:9b:4a:0a:c5:a4:45:2b:1b:c2:
30:4e:98:60:bb:4e:49:35:ca:2f:2d:db:40:91:fb:
a4:7e:f2:e1:dd:7b:e1:b1:ef:d4:85:50:8d:f9:11:
69:99:d0:da:4a:d0:46:8c:d5:bf:fe:19:6e:e3:33:
09:b2:5c:b5:10:c8:89:af:53:36:17:1c:7f:9b:5a:
a2:4d:36:26:5c:0a:5e:89:8f:95:f9:d6:39:0d:f0:
93:bc:f6:a6:d9:9d:dc:da:2e:cd:56:a9:f5:81:74:
f7:cb
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
43:5B:FC:BF:D9:A5:09:90:6C:59:B5:64:EC:93:40:94:E9:20:53:25
X509v3 Authority Key Identifier:
keyid:51:73:38:6F:36:72:81:84:AA:00:3B:1D:96:39:FE:39:C4:A1:2A:A9
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/UXM4bzZygYSqADsdljn-OcShKqk.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c4/17c02b-d735-41ca-8229-0cddf79ee90f/1/UXM4bzZygYSqADsdljn-OcShKqk.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/c4/17c02b-d735-41ca-8229-0cddf79ee90f/1/UXM4bzZygYSqADsdljn-OcShKqk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
aa:bf:ea:87:e2:ed:a1:d1:33:00:6d:83:d2:d6:f8:6d:43:e0:
02:8e:cf:ec:00:46:1f:1f:3e:5a:2d:3e:51:ea:c2:03:e7:b6:
cd:17:fa:35:61:33:2e:1e:2b:69:2b:cd:14:d3:2a:c0:18:18:
d8:79:7b:2b:13:81:98:10:88:4e:89:19:c2:85:01:c2:70:1b:
5a:72:6e:a3:70:b0:43:8e:2c:7b:88:cb:04:cb:bc:9e:52:f9:
bf:06:63:79:f4:66:f9:12:ce:6f:14:98:8a:9c:29:b8:c5:84:
fa:a2:8e:5e:c5:b4:03:1a:8b:14:13:26:67:53:62:7f:b4:37:
37:9d:1b:3b:43:15:6d:21:60:40:8e:3e:c6:93:77:a7:19:31:
75:6c:5b:74:7f:47:d5:f2:c1:99:48:2b:16:31:18:99:b5:34:
90:25:79:40:dc:12:28:38:c5:67:82:d8:33:3f:c8:6d:5a:0a:
2b:f7:ca:ad:f7:93:87:26:9a:c1:4c:eb:f6:7b:ff:47:50:02:
f0:90:a6:45:fd:a5:33:0a:ee:02:19:28:a4:c2:7d:44:6b:4a:
dc:b1:2f:c0:1e:1f:6a:99:72:4b:69:d2:4a:c6:c8:cb:8b:db:
85:16:67:b3:f9:ee:6f:ba:ae:d2:74:cc:6f:45:28:bb:79:96:
f3:1e:94:da
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Apr 20 21:35:28 2025 by rpki-client