Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c8/f462dc-9e59-4e8d-9c6d-f46887df9863/1/UltwWpHbww7RDrciK3eXuDTgGGM.mft
File: UltwWpHbww7RDrciK3eXuDTgGGM.mft (raw, json)
Hash identifier: 5hACZzb7+76ZIAtIW4J6tmlU1Uj6IReDqai4ETOTFIA=
Subject key identifier: 71:65:03:68:7E:CD:2A:86:45:B3:ED:C4:72:13:BF:94:BD:56:70:7D
Authority key identifier: 52:5B:70:5A:91:DB:C3:0E:D1:0E:B7:22:2B:77:97:B8:34:E0:18:63
Certificate issuer: /CN=525b705a91dbc30ed10eb7222b7797b834e01863
Certificate serial: 01961020FB56A01B4284EE636672337D2EF8
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/UltwWpHbww7RDrciK3eXuDTgGGM.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c8/f462dc-9e59-4e8d-9c6d-f46887df9863/1/UltwWpHbww7RDrciK3eXuDTgGGM.mft
Manifest number: 14DD
Signing time: Mon 07 Apr 2025 12:01:59 +0000
Manifest this update: Mon 07 Apr 2025 12:01:59 +0000
Manifest next update: Tue 08 Apr 2025 12:01:59 +0000
Files and hashes: 1: CcJJz4LHqBfVmqebSCbbfSxazO4.roa (hash: NpYxNXz/TsGqoMRv+WmEIOF956M+rNYVRpeLiIuXSLs=)
2: DxImOx_LjbbW5qRqk68u0Cu1-sQ.roa (hash: ape7uiR4ZZbTkIG/kyNeBwlIHv8cWlil9k64NhQAZCk=)
3: O9n2W45IL4ZPQ7ySmP_wgMSjmM0.roa (hash: LHjzPi1frnVBcp5q4ol11nwZf0XWlDw2urze+/Pgr4A=)
4: UltwWpHbww7RDrciK3eXuDTgGGM.crl (hash: bUI1yAIkAiTu4+T/esVvo3MY+DSmkScop4DbEYND0sU=)
5: agSJfA3zW_tdhYtohVlsRja4TdQ.roa (hash: PReYJ3ClBU9KEfTUKtskQ1POrp0pAjooI8cTw1s1kyk=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/c8/f462dc-9e59-4e8d-9c6d-f46887df9863/1/UltwWpHbww7RDrciK3eXuDTgGGM.crl
rsync://rpki.ripe.net/repository/DEFAULT/c8/f462dc-9e59-4e8d-9c6d-f46887df9863/1/UltwWpHbww7RDrciK3eXuDTgGGM.mft
rsync://rpki.ripe.net/repository/DEFAULT/UltwWpHbww7RDrciK3eXuDTgGGM.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 08 Apr 2025 12:01:59 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:10:20:fb:56:a0:1b:42:84:ee:63:66:72:33:7d:2e:f8
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=525b705a91dbc30ed10eb7222b7797b834e01863
Validity
Not Before: Apr 7 12:01:59 2025 GMT
Not After : Apr 8 12:01:59 2025 GMT
Subject: CN=716503687ecd2a8645b3edc47213bf94bd56707d
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a5:ed:b7:6c:be:e0:23:69:d9:be:e7:89:27:f1:
a1:9d:c4:8e:0b:23:5f:18:3e:e4:43:5d:21:ef:21:
77:9d:98:49:3a:a3:f7:bc:89:02:1a:6e:49:bc:f2:
2c:d3:c2:a7:1c:53:1c:ef:82:e7:aa:6b:18:79:df:
fa:65:49:ee:fc:43:57:f7:26:83:88:cb:5e:8b:d3:
0d:e2:d8:21:08:0b:1d:2d:3e:97:aa:c9:55:ef:95:
32:8e:72:00:63:a7:6c:55:91:b2:90:56:1b:52:bc:
9b:e1:fb:89:78:de:4a:ce:6d:d4:d4:98:36:e7:9a:
1f:96:aa:d8:0a:40:8c:40:1a:0b:76:0a:85:b0:5c:
6e:1b:a0:07:d5:e2:01:de:6b:56:9a:67:54:6f:12:
49:38:4c:bf:d3:32:5a:5b:21:e8:81:0c:25:ae:03:
aa:10:77:e3:55:7d:d9:af:10:ab:c9:c3:79:0c:d5:
c2:3a:0e:60:fc:bd:bd:75:82:63:95:84:66:0d:b4:
a2:e3:38:e1:85:4e:42:3e:a4:ea:0f:82:96:4b:61:
4f:e7:3c:5a:9c:1c:ab:51:20:b7:fd:c3:35:7a:3a:
2d:2f:15:93:80:1a:f8:d3:17:3c:aa:34:ee:dd:bc:
4e:4d:7b:99:17:e1:09:8f:1e:d9:ea:41:00:72:60:
63:3b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
71:65:03:68:7E:CD:2A:86:45:B3:ED:C4:72:13:BF:94:BD:56:70:7D
X509v3 Authority Key Identifier:
keyid:52:5B:70:5A:91:DB:C3:0E:D1:0E:B7:22:2B:77:97:B8:34:E0:18:63
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/UltwWpHbww7RDrciK3eXuDTgGGM.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c8/f462dc-9e59-4e8d-9c6d-f46887df9863/1/UltwWpHbww7RDrciK3eXuDTgGGM.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/c8/f462dc-9e59-4e8d-9c6d-f46887df9863/1/UltwWpHbww7RDrciK3eXuDTgGGM.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
7e:8f:d2:33:e9:5d:30:c8:ca:ea:3e:bf:44:97:c8:7c:26:07:
d0:6c:d9:63:37:16:a9:8a:80:ce:fa:31:cb:1d:8c:99:c1:2c:
f8:c6:7c:fa:73:5c:96:98:77:98:bc:8b:44:8c:54:9a:ad:f5:
a7:b0:ac:0c:a4:c4:73:dc:ef:bb:64:a7:0a:29:1a:d9:73:c1:
61:93:60:83:b4:6c:79:6d:ff:4b:a4:28:ad:db:7c:6a:77:36:
16:58:02:f3:86:9e:c9:68:b0:d1:5d:9a:e6:87:8a:bd:2c:92:
18:c5:b9:30:85:79:9b:cb:2a:90:6e:62:05:cb:89:41:ff:16:
ac:50:dc:48:6a:7c:34:c7:9f:89:37:57:a9:7d:37:96:68:21:
90:b1:55:e6:16:65:92:ac:06:5e:58:a8:1c:ac:c4:38:82:8f:
31:51:3b:2c:00:dd:b0:fd:01:f2:3b:b3:61:c5:2a:3e:e6:46:
37:87:ba:3f:66:97:f7:bd:31:5a:f1:15:66:15:a6:89:dc:3b:
01:69:ce:87:55:ee:7f:ff:3a:32:56:c9:14:65:2e:30:43:16:
ff:96:2a:c6:cc:52:51:1a:fd:4b:90:ba:3e:e1:fc:1b:16:e6:
57:9e:cd:69:15:de:3b:99:78:a0:eb:51:a1:cf:0a:7a:05:16:
59:07:35:69
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 7 22:24:00 2025 by rpki-client