Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e4/b4f49b-75e5-4864-908e-6a3df01a3236/1/UaDZglED2dpHYe-pGmDqLKdY0AM.mft
File: UaDZglED2dpHYe-pGmDqLKdY0AM.mft (raw, json)
Hash identifier: NXltkeeZSviujahQgAHW6FAEhSVXPIeDw9qw+iyKriM=
Subject key identifier: D0:93:E6:60:A1:92:D7:0E:AE:4D:87:DF:58:68:8F:CC:B2:B7:49:7A
Authority key identifier: 51:A0:D9:82:51:03:D9:DA:47:61:EF:A9:1A:60:EA:2C:A7:58:D0:03
Certificate issuer: /CN=51a0d9825103d9da4761efa91a60ea2ca758d003
Certificate serial: 019604C0916EE1BC983775EC2DDBE1885317
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/UaDZglED2dpHYe-pGmDqLKdY0AM.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/e4/b4f49b-75e5-4864-908e-6a3df01a3236/1/UaDZglED2dpHYe-pGmDqLKdY0AM.mft
Manifest number: 14D8
Signing time: Sat 05 Apr 2025 07:00:50 +0000
Manifest this update: Sat 05 Apr 2025 07:00:50 +0000
Manifest next update: Sun 06 Apr 2025 07:00:50 +0000
Files and hashes: 1: 66TcSNbBS48EyvLzXsLP_EU_XtE.roa (hash: mxP/fnqVDCctHj8c19Sszp5bbRYZ2HG/t1D6LTj1adg=)
2: 6y4imLI7mrPUCyC4ohAhkXPWZIs.roa (hash: 3goWR3fPUqFMR5Z8Kw7Vpz2bSo/rQ358QT4CHplZTiw=)
3: UaDZglED2dpHYe-pGmDqLKdY0AM.crl (hash: VpmrCIDZfW125Hd10OshUl1DhYd7pwRz1smyAgAQRmw=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/e4/b4f49b-75e5-4864-908e-6a3df01a3236/1/UaDZglED2dpHYe-pGmDqLKdY0AM.crl
rsync://rpki.ripe.net/repository/DEFAULT/e4/b4f49b-75e5-4864-908e-6a3df01a3236/1/UaDZglED2dpHYe-pGmDqLKdY0AM.mft
rsync://rpki.ripe.net/repository/DEFAULT/UaDZglED2dpHYe-pGmDqLKdY0AM.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 06 Apr 2025 07:00:50 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:04:c0:91:6e:e1:bc:98:37:75:ec:2d:db:e1:88:53:17
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=51a0d9825103d9da4761efa91a60ea2ca758d003
Validity
Not Before: Apr 5 07:00:50 2025 GMT
Not After : Apr 6 07:00:50 2025 GMT
Subject: CN=d093e660a192d70eae4d87df58688fccb2b7497a
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a9:c1:91:da:ed:bf:2c:62:94:a6:96:42:2c:6b:
d0:dc:4c:aa:6b:03:4c:e4:0d:af:41:40:99:d2:6f:
2a:83:d1:2d:f2:d7:58:fa:68:64:3c:50:95:db:d9:
c5:cf:23:a9:39:a2:53:8a:5a:89:f8:67:99:55:22:
ff:61:4e:a0:5b:6a:dd:91:ab:d5:19:ee:cd:c7:5a:
d9:0b:4f:ed:43:fc:4d:a3:9e:6e:8b:c9:e1:32:68:
7c:e4:4d:a7:b6:ee:27:f4:0d:67:dd:19:2e:c6:e0:
70:d8:25:d1:56:5a:c4:28:ca:92:cb:a1:b0:36:88:
7f:fb:c2:01:9f:40:6c:da:a2:26:3d:1c:2c:e1:95:
4a:94:40:6b:e9:5c:4d:d1:42:ae:84:63:35:28:43:
5b:d3:5a:29:18:49:07:92:c1:39:df:00:8c:81:ad:
d8:12:99:45:e7:42:66:0b:59:b8:ce:94:6a:dc:71:
72:82:04:e0:71:91:61:ab:b5:89:01:09:78:7a:66:
4e:cb:ea:19:1d:00:d9:a0:8b:26:24:95:06:99:fa:
44:8d:54:30:39:f6:12:84:16:7b:00:54:c9:05:87:
94:4b:bf:95:e9:e1:8d:70:de:9a:3b:ce:94:f9:07:
32:af:6c:8f:a1:57:f1:45:cc:e9:14:7a:1d:7c:ca:
cd:1d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D0:93:E6:60:A1:92:D7:0E:AE:4D:87:DF:58:68:8F:CC:B2:B7:49:7A
X509v3 Authority Key Identifier:
keyid:51:A0:D9:82:51:03:D9:DA:47:61:EF:A9:1A:60:EA:2C:A7:58:D0:03
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/UaDZglED2dpHYe-pGmDqLKdY0AM.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e4/b4f49b-75e5-4864-908e-6a3df01a3236/1/UaDZglED2dpHYe-pGmDqLKdY0AM.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/e4/b4f49b-75e5-4864-908e-6a3df01a3236/1/UaDZglED2dpHYe-pGmDqLKdY0AM.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
53:a6:71:9f:2f:3f:32:58:3c:eb:f5:2f:2f:7a:9f:23:53:b3:
3a:60:00:fb:2f:33:4d:ac:af:10:46:cf:b4:09:b2:0f:dc:60:
d7:26:12:78:30:0a:63:1b:c1:a2:f3:86:b5:38:d1:85:c4:ba:
84:b1:0c:c2:98:a6:ba:44:16:6e:58:e1:56:7a:6a:95:81:1c:
12:72:26:f5:f4:fe:b2:24:d2:8d:dd:56:5a:09:a4:d9:59:e8:
b6:fc:47:ca:fe:dc:cd:2a:60:0f:c7:58:7e:bc:6e:c7:0e:bb:
43:ba:5c:4b:50:ba:58:66:f5:b5:de:d8:e7:3a:9a:f9:d3:39:
8c:ae:06:13:e7:ab:7c:51:32:05:a6:9c:26:27:5d:c3:e1:03:
04:a3:a1:85:8a:f0:65:c7:29:d9:fd:57:86:bf:35:e7:96:e0:
44:77:5e:ae:17:06:f9:66:52:c1:bf:e6:36:cf:d5:b5:74:63:
53:8f:51:b0:bf:0f:e1:a7:58:c2:6f:02:9b:c1:c5:73:f3:a1:
4f:09:4b:61:ee:6a:9c:0a:84:89:77:be:09:7b:e7:4b:41:02:
6b:02:f8:35:5b:23:c4:15:f3:07:43:ee:29:06:8b:f4:8a:e9:
8c:b4:f0:22:0e:84:e3:2a:b0:c3:d5:f3:a9:01:80:e4:47:69:
00:d9:db:13
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 5 16:40:07 2025 by rpki-client