Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/dd/260cf2-8850-43f8-a7f2-9273fc016f7d/1/UmxhjRW7cS4-uuBqixgWl6XkB7g.mft
File: UmxhjRW7cS4-uuBqixgWl6XkB7g.mft (raw, json)
Hash identifier: wM+1d29S5YpZSiO10cms6Rey/PbqFtahakkaDVpWqHI=
Subject key identifier: A6:93:5E:A1:47:49:ED:DB:C8:13:9B:0B:4B:A4:4A:90:C4:04:E1:53
Authority key identifier: 52:6C:61:8D:15:BB:71:2E:3E:BA:E0:6A:8B:18:16:97:A5:E4:07:B8
Certificate issuer: /CN=526c618d15bb712e3ebae06a8b181697a5e407b8
Certificate serial: 019651917EF1BD4B14FCBE6E808AE53CFCC1
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/UmxhjRW7cS4-uuBqixgWl6XkB7g.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/dd/260cf2-8850-43f8-a7f2-9273fc016f7d/1/UmxhjRW7cS4-uuBqixgWl6XkB7g.mft
Manifest number: 13C6
Signing time: Sun 20 Apr 2025 05:00:11 +0000
Manifest this update: Sun 20 Apr 2025 05:00:11 +0000
Manifest next update: Mon 21 Apr 2025 05:00:11 +0000
Files and hashes: 1: 0fnHFCseCp-dowzjSO_W0ajo1TU.roa (hash: 6EWDnuvDaw8wNIkQ3MlMpyUilwRHG1UBmr10Bi9Kodc=)
2: UmxhjRW7cS4-uuBqixgWl6XkB7g.crl (hash: Q9CJTGiowi64m1n87j3SjLgfopUNzEkHmkL8y6JOfQ8=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/dd/260cf2-8850-43f8-a7f2-9273fc016f7d/1/UmxhjRW7cS4-uuBqixgWl6XkB7g.crl
rsync://rpki.ripe.net/repository/DEFAULT/dd/260cf2-8850-43f8-a7f2-9273fc016f7d/1/UmxhjRW7cS4-uuBqixgWl6XkB7g.mft
rsync://rpki.ripe.net/repository/DEFAULT/UmxhjRW7cS4-uuBqixgWl6XkB7g.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 21 Apr 2025 05:00:11 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:51:91:7e:f1:bd:4b:14:fc:be:6e:80:8a:e5:3c:fc:c1
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=526c618d15bb712e3ebae06a8b181697a5e407b8
Validity
Not Before: Apr 20 05:00:11 2025 GMT
Not After : Apr 21 05:00:11 2025 GMT
Subject: CN=a6935ea14749eddbc8139b0b4ba44a90c404e153
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a8:68:bf:1b:de:73:de:22:67:ea:2b:08:7f:68:
0d:e7:c1:34:b1:41:c2:cd:ba:1e:b6:e0:77:dd:f0:
32:a5:d1:41:bb:64:8a:bf:0b:f9:b5:8c:4e:53:06:
11:68:e6:16:68:b5:9f:23:57:56:87:ee:a9:6f:74:
af:cb:f0:90:7a:33:e3:a8:72:8e:e0:42:d6:e4:99:
2a:07:24:ea:b4:21:e9:83:d6:4e:00:1f:a8:75:98:
04:87:a3:38:aa:05:8f:3d:9a:ed:e0:ab:04:8c:79:
0b:51:77:bb:8c:4e:cf:ec:04:d5:d6:76:6e:5c:ac:
ad:03:f8:13:56:70:5a:a9:0e:f4:a7:80:40:f2:2f:
ed:5c:3e:fa:d2:df:84:74:6e:eb:27:73:c6:81:17:
59:38:8a:71:ed:f2:d4:bf:55:d1:97:a5:c8:bd:d4:
61:07:c9:47:d8:07:08:fe:2a:24:23:ca:a5:66:33:
4c:d9:fb:84:7d:70:83:27:57:9c:96:80:4f:bb:1d:
ac:4f:09:21:22:f4:47:f1:12:b8:6e:31:11:0a:83:
71:4a:f0:2a:dd:21:b5:86:28:fa:39:a3:e6:55:fd:
ae:80:45:04:80:1d:f0:46:19:61:15:26:a7:03:da:
bf:d6:bf:b9:b0:46:b1:73:8b:80:a7:e8:a0:c5:58:
12:49
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A6:93:5E:A1:47:49:ED:DB:C8:13:9B:0B:4B:A4:4A:90:C4:04:E1:53
X509v3 Authority Key Identifier:
keyid:52:6C:61:8D:15:BB:71:2E:3E:BA:E0:6A:8B:18:16:97:A5:E4:07:B8
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/UmxhjRW7cS4-uuBqixgWl6XkB7g.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/dd/260cf2-8850-43f8-a7f2-9273fc016f7d/1/UmxhjRW7cS4-uuBqixgWl6XkB7g.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/dd/260cf2-8850-43f8-a7f2-9273fc016f7d/1/UmxhjRW7cS4-uuBqixgWl6XkB7g.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
2c:bb:14:68:32:9e:0c:12:4a:c4:cb:50:c8:5b:69:4a:64:27:
14:c7:ba:59:2c:01:93:d0:d2:4b:d0:f3:46:17:c5:a9:d2:ef:
bc:48:4e:10:23:4e:81:4e:e7:a9:c1:26:97:83:77:a8:41:b6:
64:80:7d:13:2a:53:c4:d4:b0:b2:83:0c:7e:75:1d:bf:4b:8a:
c9:2d:28:d9:28:ee:a1:57:9b:ac:c9:3b:c3:4e:ec:73:cc:72:
e5:ad:d7:bc:96:17:0e:86:8c:9d:19:24:ed:69:04:17:50:10:
d3:d0:d1:9a:32:b9:10:db:a8:9a:d4:e4:b1:20:13:6f:96:c9:
eb:6d:b7:3b:b9:3d:4b:65:77:0d:6a:e1:ce:89:d0:fa:d3:ac:
97:a9:86:2e:63:3a:aa:51:32:31:af:30:8e:cc:92:3e:d3:56:
76:70:86:03:ff:66:cd:f5:52:78:1e:45:08:82:48:14:86:64:
25:d0:5a:29:aa:1c:b0:40:39:1e:9a:a6:9d:f6:ad:d9:80:78:
43:ce:22:8e:67:e3:6b:7d:91:89:11:7b:6e:2e:7f:00:fd:a6:
c7:a5:49:4c:a6:01:bd:22:03:70:b5:e3:32:ed:61:f4:7b:e4:
4e:5c:cd:10:9a:3a:9a:1b:35:a8:99:6f:2f:d1:37:7b:c9:1c:
cb:ea:71:3d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Apr 20 13:17:28 2025 by rpki-client