Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e7/fbd6c5-460e-44fc-b074-8bfdb969859c/1/UkE_LlWQcATFq2mJ3n7tFUNTWBE.mft
File: UkE_LlWQcATFq2mJ3n7tFUNTWBE.mft (raw, json)
Hash identifier: 2bY2zatdRiVHGDr1xL+cfLEmD43v78cA2PwS0gEL6Zs=
Subject key identifier: EC:2D:4B:CB:47:4A:54:32:8F:BF:B4:3F:C3:A6:76:AD:51:98:67:E9
Authority key identifier: 52:41:3F:2E:55:90:70:04:C5:AB:69:89:DE:7E:ED:15:43:53:58:11
Certificate issuer: /CN=52413f2e55907004c5ab6989de7eed1543535811
Certificate serial: 0195903DD5E91B3978ECD1D9A122350F836B
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/UkE_LlWQcATFq2mJ3n7tFUNTWBE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/e7/fbd6c5-460e-44fc-b074-8bfdb969859c/1/UkE_LlWQcATFq2mJ3n7tFUNTWBE.mft
Manifest number: 053F
Signing time: Thu 13 Mar 2025 16:02:06 +0000
Manifest this update: Thu 13 Mar 2025 16:02:06 +0000
Manifest next update: Fri 14 Mar 2025 16:02:06 +0000
Files and hashes: 1: UkE_LlWQcATFq2mJ3n7tFUNTWBE.crl (hash: CGe0uXhO7mG18UBfi6jQLxfhJSAMfNQGIkHYL8r0K/Y=)
2: pPr-RfjQ8TKLflLIUQw5yKTIFpY.roa (hash: oEBThZTfbjTX75q4IqjgPgOk7OlUAtwvGwGIzijgHts=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/e7/fbd6c5-460e-44fc-b074-8bfdb969859c/1/UkE_LlWQcATFq2mJ3n7tFUNTWBE.crl
rsync://rpki.ripe.net/repository/DEFAULT/e7/fbd6c5-460e-44fc-b074-8bfdb969859c/1/UkE_LlWQcATFq2mJ3n7tFUNTWBE.mft
rsync://rpki.ripe.net/repository/DEFAULT/UkE_LlWQcATFq2mJ3n7tFUNTWBE.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 14 Mar 2025 09:00:49 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:95:90:3d:d5:e9:1b:39:78:ec:d1:d9:a1:22:35:0f:83:6b
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=52413f2e55907004c5ab6989de7eed1543535811
Validity
Not Before: Mar 13 16:02:06 2025 GMT
Not After : Mar 14 16:02:06 2025 GMT
Subject: CN=ec2d4bcb474a54328fbfb43fc3a676ad519867e9
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b9:b8:19:7e:f5:7e:a7:0f:04:8d:21:ae:cf:3f:
ea:11:70:02:98:60:8a:20:48:be:74:6f:e7:03:2f:
f7:11:2e:d1:a8:40:9e:14:b5:ff:c3:76:05:c4:92:
86:99:d3:a8:b9:e4:45:25:8a:91:1b:57:76:a9:31:
40:f1:95:56:5b:31:e4:92:ea:ce:06:a3:17:84:e2:
a7:e4:22:8e:fd:4d:e1:79:be:df:0c:77:31:49:24:
03:1d:0b:c5:df:c3:a0:88:cd:1c:86:85:fe:ef:3b:
da:3a:6c:48:87:56:90:59:6a:75:4b:39:d4:af:c2:
a1:96:47:a5:3f:e6:14:a9:1a:db:c4:8f:8b:b5:0d:
7c:0e:0a:c6:27:99:02:41:a1:2e:8b:8b:bc:86:39:
47:1a:6e:78:08:3b:08:37:af:f9:b4:60:af:f8:ce:
8f:5d:71:73:3b:ef:39:84:50:b4:a3:1d:ab:c9:95:
b8:9b:69:0b:a4:d2:5e:bb:f3:aa:05:48:03:27:66:
80:bd:31:07:40:bc:ac:9c:23:1e:bb:09:12:ea:79:
29:ed:91:85:40:55:f2:63:aa:bc:e1:63:54:46:56:
34:ec:b0:04:13:af:31:c4:f2:b6:60:2b:c5:f4:e0:
1d:b7:0a:ae:af:c1:e9:1e:0e:94:47:f0:38:14:72:
64:1d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
EC:2D:4B:CB:47:4A:54:32:8F:BF:B4:3F:C3:A6:76:AD:51:98:67:E9
X509v3 Authority Key Identifier:
keyid:52:41:3F:2E:55:90:70:04:C5:AB:69:89:DE:7E:ED:15:43:53:58:11
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/UkE_LlWQcATFq2mJ3n7tFUNTWBE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e7/fbd6c5-460e-44fc-b074-8bfdb969859c/1/UkE_LlWQcATFq2mJ3n7tFUNTWBE.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/e7/fbd6c5-460e-44fc-b074-8bfdb969859c/1/UkE_LlWQcATFq2mJ3n7tFUNTWBE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
9b:cb:2b:29:b5:aa:b1:d5:1e:f8:1b:39:ad:4c:ea:1b:88:06:
2a:bd:14:17:f5:6a:0c:a3:d6:89:78:07:0c:f5:ee:ce:71:03:
7e:2b:3a:72:7a:f8:18:96:0b:a3:34:da:25:d6:bc:d5:ac:39:
c2:fb:c2:fb:8a:65:c7:d5:dc:07:87:8d:ba:2c:55:c0:20:d1:
6f:6b:b9:21:7b:da:04:1c:18:e7:ea:28:89:41:07:52:b6:b7:
4a:7b:b2:03:98:64:d2:2d:52:e9:db:f5:4c:da:24:51:a2:44:
08:75:9a:d7:fe:e0:d0:a5:af:d3:3c:44:e0:ea:cd:60:09:21:
f5:4f:da:53:d9:90:1e:ef:80:66:47:5e:7d:13:00:af:a7:59:
b3:46:53:8e:0e:55:97:cf:98:af:66:04:c7:79:3c:b2:71:d1:
1d:ed:e7:f3:ba:38:91:80:48:4e:e7:00:b0:3b:1d:01:13:ce:
09:13:52:cb:c4:e5:4b:72:cb:ac:70:3f:46:28:c8:30:db:24:
54:67:19:8b:df:08:1f:07:e0:a2:20:f1:4b:e8:75:ba:b9:f6:
cb:ea:2f:87:6e:88:3b:99:b2:fb:e0:55:ce:64:6e:2d:81:4a:
17:7a:83:b8:3e:6d:a3:69:65:0f:fa:fa:c0:62:e1:a2:41:29:
41:b3:2f:6a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 13 19:41:48 2025 by rpki-client