Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e0/47c2da-9c68-4f6f-9798-282fa2c01153/1/UFBG2nJq75m-uIowyKb67-dSB1M.mft
File: UFBG2nJq75m-uIowyKb67-dSB1M.mft (raw, json)
Hash identifier: 0aW7dvwCB0P1Ke+QA9iY8hjBAEFYOxl4KdKqqGBJRf8=
Subject key identifier: 39:88:1B:35:D8:0E:60:7E:9A:9E:9B:3A:B0:8F:96:18:33:B3:0A:1A
Authority key identifier: 50:50:46:DA:72:6A:EF:99:BE:B8:8A:30:C8:A6:FA:EF:E7:52:07:53
Certificate issuer: /CN=505046da726aef99beb88a30c8a6faefe7520753
Certificate serial: 019654C98F456F88FE65B9F87BD4D3F97547
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/UFBG2nJq75m-uIowyKb67-dSB1M.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/e0/47c2da-9c68-4f6f-9798-282fa2c01153/1/UFBG2nJq75m-uIowyKb67-dSB1M.mft
Manifest number: 0D7C
Signing time: Sun 20 Apr 2025 20:00:17 +0000
Manifest this update: Sun 20 Apr 2025 20:00:17 +0000
Manifest next update: Mon 21 Apr 2025 20:00:17 +0000
Files and hashes: 1: UFBG2nJq75m-uIowyKb67-dSB1M.crl (hash: lzqufVPrAoQooY1/jyMIviKtLMn83l0Tn/bHa3khhzA=)
2: jhae41lBxgum19Q0YmdVzc2ofw0.roa (hash: x1mZ5Yned7zFdt78wzWndyqBFeaTJjBaYlvrRS6j15I=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/e0/47c2da-9c68-4f6f-9798-282fa2c01153/1/UFBG2nJq75m-uIowyKb67-dSB1M.crl
rsync://rpki.ripe.net/repository/DEFAULT/e0/47c2da-9c68-4f6f-9798-282fa2c01153/1/UFBG2nJq75m-uIowyKb67-dSB1M.mft
rsync://rpki.ripe.net/repository/DEFAULT/UFBG2nJq75m-uIowyKb67-dSB1M.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 21 Apr 2025 20:00:17 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:54:c9:8f:45:6f:88:fe:65:b9:f8:7b:d4:d3:f9:75:47
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=505046da726aef99beb88a30c8a6faefe7520753
Validity
Not Before: Apr 20 20:00:17 2025 GMT
Not After : Apr 21 20:00:17 2025 GMT
Subject: CN=39881b35d80e607e9a9e9b3ab08f961833b30a1a
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c0:4a:45:6a:d2:2f:ee:0f:bf:62:12:6a:9e:d1:
5e:fe:3b:19:cb:ee:f7:6d:a6:9a:b8:6c:30:51:ff:
5d:31:0b:ec:9b:40:00:b6:c2:7e:6b:f0:84:fb:1f:
60:9f:f3:62:7d:82:7d:06:48:1f:4e:88:e5:54:5a:
a6:f2:b5:a8:d1:1c:2e:7e:18:9b:6f:cc:36:d5:b0:
2a:10:1e:89:f4:a7:84:df:4b:40:2e:c4:f0:2f:15:
20:6e:3e:11:04:6c:b3:88:19:2e:e0:26:99:f1:9e:
c0:89:a3:60:bd:1d:6c:c1:65:ff:70:87:1b:83:bc:
db:c8:ef:42:05:a3:4c:b6:b6:7a:36:88:db:d3:67:
8c:ce:aa:ed:82:7f:bd:b6:f2:9a:64:6e:a3:2d:c3:
12:77:13:78:a6:e6:f8:9b:fc:9b:8a:e0:29:7c:9b:
cd:fc:a1:e1:c3:9b:fa:cf:98:ee:dc:ea:09:87:5c:
ea:94:d7:7d:62:95:e5:ca:02:96:97:a1:aa:5a:46:
a9:6b:72:77:77:b8:c9:ec:14:b6:8e:9f:9b:9e:c7:
ae:bd:66:3b:91:38:4a:ea:16:23:b9:f0:25:16:03:
24:80:8f:e3:25:9e:44:4f:be:f0:13:b9:02:b5:02:
6b:4b:de:7d:15:12:89:6b:da:38:fe:9e:ae:13:15:
74:f9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
39:88:1B:35:D8:0E:60:7E:9A:9E:9B:3A:B0:8F:96:18:33:B3:0A:1A
X509v3 Authority Key Identifier:
keyid:50:50:46:DA:72:6A:EF:99:BE:B8:8A:30:C8:A6:FA:EF:E7:52:07:53
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/UFBG2nJq75m-uIowyKb67-dSB1M.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e0/47c2da-9c68-4f6f-9798-282fa2c01153/1/UFBG2nJq75m-uIowyKb67-dSB1M.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/e0/47c2da-9c68-4f6f-9798-282fa2c01153/1/UFBG2nJq75m-uIowyKb67-dSB1M.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
92:05:e6:dc:dc:45:5a:6c:ac:c8:d5:0b:a9:7b:a9:48:0b:cf:
a4:07:a4:ca:81:b7:92:9f:df:96:89:02:9e:06:cf:cc:32:a5:
e4:ca:cc:77:b1:ea:42:fb:ad:cc:cc:cf:17:11:b4:3b:c6:6b:
32:d8:08:fa:1c:e9:82:95:95:c8:e7:a7:fa:59:cd:71:03:26:
8d:2b:d0:5e:81:2a:4a:2e:54:c5:19:3e:66:b3:14:81:44:a7:
c5:f7:d4:2d:dc:19:b0:e5:e2:1c:47:38:2d:96:5f:b0:fc:94:
22:12:7a:99:f9:d9:3a:08:0e:24:9c:28:9d:23:43:d5:13:83:
94:50:1b:d0:18:fa:64:3b:7c:91:75:62:cf:85:14:1b:7e:4e:
15:18:3c:23:3a:fd:83:26:48:b0:41:11:9f:0c:f4:7f:7d:a9:
3e:fe:b8:f4:07:f4:0d:63:19:bb:94:eb:45:ee:78:0f:97:02:
c4:76:f7:5b:d5:fb:a5:51:c6:d2:2d:1f:3d:5f:ef:a1:24:59:
d4:f3:31:ec:7a:e4:65:51:cd:e2:c5:a1:95:01:27:c3:8c:fd:
1e:3a:e4:8b:89:8d:fd:79:c2:53:1e:e2:09:b0:cd:70:48:ce:
67:c9:c2:34:de:7e:ac:9a:a9:5c:2b:0d:63:09:d7:fd:08:ab:
aa:ae:a6:ea
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 21 05:33:29 2025 by rpki-client