Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e9/d45193-b5fe-4e1d-8e42-ae5db6e1486d/1/UjhuUgR45iW-HWKC0hawWRL4OHQ.mft
File: UjhuUgR45iW-HWKC0hawWRL4OHQ.mft (raw, json)
Hash identifier: J9JIjUVxrjWQ37jZvHOgHXPPlkIj1WKUFc2b2mn6Tn8=
Subject key identifier: 12:39:74:F7:F2:43:83:94:DF:CB:53:24:CC:CC:7F:CA:FF:DD:36:21
Authority key identifier: 52:38:6E:52:04:78:E6:25:BE:1D:62:82:D2:16:B0:59:12:F8:38:74
Certificate issuer: /CN=52386e520478e625be1d6282d216b05912f83874
Certificate serial: 019658A6461201DE03CD133DC80F30F494BA
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/UjhuUgR45iW-HWKC0hawWRL4OHQ.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/e9/d45193-b5fe-4e1d-8e42-ae5db6e1486d/1/UjhuUgR45iW-HWKC0hawWRL4OHQ.mft
Manifest number: 0FCA
Signing time: Mon 21 Apr 2025 14:00:14 +0000
Manifest this update: Mon 21 Apr 2025 14:00:14 +0000
Manifest next update: Tue 22 Apr 2025 14:00:14 +0000
Files and hashes: 1: QuDe7YY_sSA1ZHkaY1YGA7fk4Sk.roa (hash: dBtp4ubeXafI3822xjxUQr/5SZeBaG519BE55zuoInI=)
2: UjhuUgR45iW-HWKC0hawWRL4OHQ.crl (hash: 8MAlsnoCNWl6BCGqaWfchvXeP4b7yI+Ut60zN2jg40I=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/e9/d45193-b5fe-4e1d-8e42-ae5db6e1486d/1/UjhuUgR45iW-HWKC0hawWRL4OHQ.crl
rsync://rpki.ripe.net/repository/DEFAULT/e9/d45193-b5fe-4e1d-8e42-ae5db6e1486d/1/UjhuUgR45iW-HWKC0hawWRL4OHQ.mft
rsync://rpki.ripe.net/repository/DEFAULT/UjhuUgR45iW-HWKC0hawWRL4OHQ.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 22 Apr 2025 10:00:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:58:a6:46:12:01:de:03:cd:13:3d:c8:0f:30:f4:94:ba
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=52386e520478e625be1d6282d216b05912f83874
Validity
Not Before: Apr 21 14:00:14 2025 GMT
Not After : Apr 22 14:00:14 2025 GMT
Subject: CN=123974f7f2438394dfcb5324cccc7fcaffdd3621
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:97:c6:f4:a7:74:98:e3:d1:01:12:1d:e1:e0:ae:
0b:6b:3b:f8:a8:2a:b5:a1:27:d4:cf:1f:41:8c:46:
f0:53:36:31:26:19:84:0b:93:52:65:48:46:45:9b:
b2:33:ed:73:ed:e9:24:d9:d6:d4:1f:a6:17:78:1f:
dc:5d:4c:fb:a2:95:47:64:72:d6:17:06:c0:2b:de:
15:b4:ee:99:46:5b:8f:a0:0e:52:20:ed:63:c5:3a:
a8:47:ca:b7:28:95:e2:3c:2e:fc:33:b6:a7:cb:45:
44:0a:3b:e3:b6:c0:79:5e:73:88:4d:68:ad:5d:cd:
0d:06:26:a0:e0:c9:bf:3a:03:39:00:af:b8:ed:70:
7a:3d:a8:7f:51:c1:8e:05:11:6c:86:4d:76:d4:a6:
ce:eb:ed:16:7b:15:6f:c2:52:aa:9e:ee:7a:83:51:
09:31:dc:ae:cc:e6:c9:6b:90:72:ac:7d:8b:bd:b4:
e6:2b:2c:2c:ce:ec:bd:15:89:10:e7:47:1d:e7:30:
07:f9:36:e7:1e:c1:dd:a0:a0:00:9b:a5:43:f8:1a:
a1:96:b7:be:42:07:2f:3f:6e:59:13:84:7d:fb:9e:
a2:ac:dd:98:60:cb:4f:27:bb:9e:c2:0d:f6:ef:ae:
fc:c4:35:aa:06:04:d1:5a:ec:5b:e4:0b:e6:7a:21:
64:b7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
12:39:74:F7:F2:43:83:94:DF:CB:53:24:CC:CC:7F:CA:FF:DD:36:21
X509v3 Authority Key Identifier:
keyid:52:38:6E:52:04:78:E6:25:BE:1D:62:82:D2:16:B0:59:12:F8:38:74
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/UjhuUgR45iW-HWKC0hawWRL4OHQ.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e9/d45193-b5fe-4e1d-8e42-ae5db6e1486d/1/UjhuUgR45iW-HWKC0hawWRL4OHQ.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/e9/d45193-b5fe-4e1d-8e42-ae5db6e1486d/1/UjhuUgR45iW-HWKC0hawWRL4OHQ.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
81:8e:5a:77:16:3c:77:92:0a:f2:4b:94:9a:21:c4:28:a4:24:
54:ea:38:8d:73:1b:67:68:af:09:d1:ab:36:cb:6b:2d:09:75:
69:a8:3d:fb:8f:ba:b6:68:fb:df:26:37:f1:7b:67:98:23:a4:
1d:a9:61:c5:9d:99:00:39:ad:e9:e0:01:2d:6f:a5:eb:44:4c:
68:70:ea:7f:64:71:1e:0b:66:4d:da:43:cd:b9:e4:f1:92:d9:
21:ae:a9:79:f8:17:f5:e8:33:91:88:67:bd:88:94:2f:ca:62:
fa:52:83:33:a6:57:2f:3e:6d:13:df:3d:04:1b:69:75:ff:15:
c4:11:7b:ae:44:f4:8f:38:85:e3:5a:a7:c1:f4:d9:6c:e0:03:
3c:d8:d4:9e:bc:ac:c0:b3:02:36:a6:64:8b:bf:a2:b5:c6:da:
db:f2:1d:0e:22:c4:a7:6f:d7:02:b0:fd:0f:ab:78:b1:21:7a:
eb:10:3c:2e:55:13:71:a4:2f:a7:83:b6:fa:f3:7e:20:72:8d:
a6:e0:71:ee:d1:fa:b0:99:05:83:46:15:da:45:b4:5b:50:2a:
39:a7:5f:da:e2:03:a2:b4:6c:78:ae:ad:6c:27:5b:c3:ce:da:
b4:69:40:cd:0f:73:e3:90:8f:2e:5e:2f:4e:77:dc:15:15:50:
a0:86:c7:78
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 21 20:04:57 2025 by rpki-client