Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c9/01f736-af83-456c-8b45-5146ab7ea015/1/U1glzov1RBcCgvcgokhBQVaLDn0.mft
File: U1glzov1RBcCgvcgokhBQVaLDn0.mft (raw, json)
Hash identifier: VUv+c7Xoxhl3qqhkViZLbskjOwbMkdHyL1MIq9mk1i8=
Subject key identifier: 32:08:84:D4:62:AE:1A:16:C1:8C:D2:06:28:B9:56:EB:37:0D:D4:FA
Authority key identifier: 53:58:25:CE:8B:F5:44:17:02:82:F7:20:A2:48:41:41:56:8B:0E:7D
Certificate issuer: /CN=535825ce8bf544170282f720a2484141568b0e7d
Certificate serial: 01963AD3573959C811979EFDC041EF360A0A
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/U1glzov1RBcCgvcgokhBQVaLDn0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c9/01f736-af83-456c-8b45-5146ab7ea015/1/U1glzov1RBcCgvcgokhBQVaLDn0.mft
Manifest number: 14F3
Signing time: Tue 15 Apr 2025 19:00:51 +0000
Manifest this update: Tue 15 Apr 2025 19:00:51 +0000
Manifest next update: Wed 16 Apr 2025 19:00:51 +0000
Files and hashes: 1: U1glzov1RBcCgvcgokhBQVaLDn0.crl (hash: O4NiPHXPo4wBBUt6l+oaQNONosXJ2wPKdHBYLoYeVww=)
2: WX6sNrF92l686KdkTXPFkLfxe3U.roa (hash: Abr+DHAKxIPDGR7zdXI5jJnVVIXCf9i5JeUWk/vC2vA=)
3: WcSAU3UG3fbCDubUuAbDmN9BNXw.roa (hash: lUiGwZsu8aUjDmUrAqfxfzum4CcP/EsvidCuJT28td0=)
4: YsUzeXuKor8g8xJ2qQAIbZwuLdA.roa (hash: b8Dg+ptVU/0cD+fmDjz15R9Y3ThIrc8W4BKhqUm2GSI=)
5: tKMYskPULHrcExm9t_zqsBHITcI.roa (hash: R31NKmso4WbL0fd7lkKVeCkSUgER4Iw5rjhqu8nTNvA=)
6: vdc8LHeirosn85jHF2y6k4tZWpE.roa (hash: bWLLd9BGuNkbp8DQiZZnq80FzJLO4Q8aaegMFqU4oPI=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/c9/01f736-af83-456c-8b45-5146ab7ea015/1/U1glzov1RBcCgvcgokhBQVaLDn0.crl
rsync://rpki.ripe.net/repository/DEFAULT/c9/01f736-af83-456c-8b45-5146ab7ea015/1/U1glzov1RBcCgvcgokhBQVaLDn0.mft
rsync://rpki.ripe.net/repository/DEFAULT/U1glzov1RBcCgvcgokhBQVaLDn0.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 16 Apr 2025 15:22:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:3a:d3:57:39:59:c8:11:97:9e:fd:c0:41:ef:36:0a:0a
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=535825ce8bf544170282f720a2484141568b0e7d
Validity
Not Before: Apr 15 19:00:51 2025 GMT
Not After : Apr 16 19:00:51 2025 GMT
Subject: CN=320884d462ae1a16c18cd20628b956eb370dd4fa
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8b:64:06:e2:b5:60:74:95:fa:19:bb:2b:1e:db:
27:25:60:37:5f:16:a3:ae:8c:f6:ca:b7:42:f4:71:
66:32:4f:95:6b:57:6f:60:69:0d:04:d6:55:fb:b1:
27:22:48:62:97:e9:e9:be:9f:2b:86:28:80:46:bc:
04:cd:78:b1:58:71:0a:f5:7c:43:3e:87:78:63:5b:
40:78:9d:0a:3c:dc:3b:2b:61:24:e8:8f:1d:da:6a:
ca:23:a7:37:3a:8a:38:ce:76:cf:d7:d6:72:01:51:
e6:86:60:4c:e1:76:9b:9e:08:c4:39:3b:44:4e:c0:
cf:f7:d0:9c:76:96:f4:d1:dd:20:4c:19:88:ab:a1:
66:89:06:ef:19:39:53:91:1b:2d:ea:5e:1f:a7:7a:
48:00:a8:a5:aa:51:c9:4b:44:f3:13:b9:66:7b:06:
e9:be:cd:07:1e:f4:ee:ce:0d:2f:57:55:55:1a:17:
87:37:f2:70:0f:e7:24:f4:3c:ff:14:1a:11:d2:31:
85:b5:be:c1:1b:da:42:90:4e:e3:22:82:34:86:06:
8a:27:db:87:10:73:eb:54:f7:85:50:0e:4c:1d:49:
15:c0:d9:97:23:43:16:89:3a:4a:4f:0b:76:e9:8b:
2e:34:d3:e5:43:a5:a9:bc:a0:b4:0c:f8:ed:82:8c:
46:a5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
32:08:84:D4:62:AE:1A:16:C1:8C:D2:06:28:B9:56:EB:37:0D:D4:FA
X509v3 Authority Key Identifier:
keyid:53:58:25:CE:8B:F5:44:17:02:82:F7:20:A2:48:41:41:56:8B:0E:7D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/U1glzov1RBcCgvcgokhBQVaLDn0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c9/01f736-af83-456c-8b45-5146ab7ea015/1/U1glzov1RBcCgvcgokhBQVaLDn0.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/c9/01f736-af83-456c-8b45-5146ab7ea015/1/U1glzov1RBcCgvcgokhBQVaLDn0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
53:87:28:ea:4e:19:c3:48:31:18:9d:4b:19:f5:1a:48:1c:53:
25:83:60:83:33:58:05:67:b1:83:df:10:71:8f:24:47:03:05:
5c:e5:1d:80:30:e8:85:56:15:f5:a0:3c:5e:d6:83:d8:49:7d:
85:90:6c:5a:cd:43:52:0a:4f:7b:3b:0f:fe:0e:79:9a:42:15:
b1:12:b1:1b:51:6b:3f:f6:b1:89:9d:cb:00:e1:47:40:5e:75:
ff:35:7d:9c:d3:e4:45:c7:4a:f9:fe:88:c2:48:30:04:7f:92:
47:15:51:d2:e9:dd:a7:ea:b5:5d:67:d6:98:6e:b6:ae:05:2c:
db:ad:1f:8b:08:bb:5d:8c:94:5f:6e:0b:74:81:42:3c:6a:1a:
ee:0c:1c:b0:28:8c:02:77:e4:e5:b7:45:b0:4e:77:9d:60:88:
29:b5:e9:0e:06:37:cb:b5:5c:1a:b0:3b:33:ad:40:4f:c2:d8:
f0:8e:bd:b5:af:ad:c6:3e:03:56:c4:e6:2d:eb:8b:7c:b5:d7:
73:78:bd:b8:a4:95:d3:d2:78:aa:15:8c:e6:9a:80:f1:69:31:
7b:0e:90:f9:41:08:e8:06:c5:8d:c9:9a:4d:73:19:34:22:4d:
d8:a5:bf:55:44:1e:8a:5f:db:b6:64:6a:ac:2c:93:50:69:da:
fa:77:f1:11
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Apr 15 22:10:03 2025 by rpki-client