Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ee/dfbaa2-4a27-4f3c-b9fc-fb01436a695f/1/UmJQW0iFgcLs11gqNOzlJjLj75Y.mft
File: UmJQW0iFgcLs11gqNOzlJjLj75Y.mft (raw, json)
Hash identifier: Jxh8UVtXqWxDCendmbtpw+IZ5Q4tTzHVOJpG0U2dXpY=
Subject key identifier: A0:65:31:95:6C:7D:D9:34:CE:4F:2C:FC:6F:50:5D:06:A1:D8:A4:EF
Authority key identifier: 52:62:50:5B:48:85:81:C2:EC:D7:58:2A:34:EC:E5:26:32:E3:EF:96
Certificate issuer: /CN=5262505b488581c2ecd7582a34ece52632e3ef96
Certificate serial: 01964DEBFB2838736A8A8DCDEC6327ECC035
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/UmJQW0iFgcLs11gqNOzlJjLj75Y.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ee/dfbaa2-4a27-4f3c-b9fc-fb01436a695f/1/UmJQW0iFgcLs11gqNOzlJjLj75Y.mft
Manifest number: 0DBB
Signing time: Sat 19 Apr 2025 12:00:32 +0000
Manifest this update: Sat 19 Apr 2025 12:00:32 +0000
Manifest next update: Sun 20 Apr 2025 12:00:32 +0000
Files and hashes: 1: UmJQW0iFgcLs11gqNOzlJjLj75Y.crl (hash: nNEW+P6hxvQUiOjmZ79t9k+3xoeJsKdQWUvIstAK5Ds=)
2: YoqdurND-upgcXWxAcpQuefPm64.roa (hash: /491Mi9Fi+bDxakeWh2wlNUupkb90wEk7U//uUYJllE=)
3: og6MrC5yBqZd-w_jdnPWOr9coG8.roa (hash: H6FCr41wgfYRZuN4iXgiEuTmqTBZgur449ahw2ZWyrE=)
4: zO99S-j_1FZSZc-d3wPOk_r9aws.roa (hash: fbkA7GRWdBwzPVsGQcjMlHBtp/6gNaDm1Z08rE3xQtM=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/ee/dfbaa2-4a27-4f3c-b9fc-fb01436a695f/1/UmJQW0iFgcLs11gqNOzlJjLj75Y.crl
rsync://rpki.ripe.net/repository/DEFAULT/ee/dfbaa2-4a27-4f3c-b9fc-fb01436a695f/1/UmJQW0iFgcLs11gqNOzlJjLj75Y.mft
rsync://rpki.ripe.net/repository/DEFAULT/UmJQW0iFgcLs11gqNOzlJjLj75Y.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 20 Apr 2025 07:26:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:4d:eb:fb:28:38:73:6a:8a:8d:cd:ec:63:27:ec:c0:35
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=5262505b488581c2ecd7582a34ece52632e3ef96
Validity
Not Before: Apr 19 12:00:32 2025 GMT
Not After : Apr 20 12:00:32 2025 GMT
Subject: CN=a06531956c7dd934ce4f2cfc6f505d06a1d8a4ef
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c8:f5:ed:e0:a4:a7:17:a5:0e:e1:b9:28:ff:5f:
64:81:5e:a5:40:ff:92:b7:ac:31:fc:66:1a:17:5e:
ba:66:95:79:a7:1b:4a:32:83:56:43:3d:38:02:20:
61:b9:99:c2:26:ba:7d:cd:5b:ea:34:ca:bd:a3:66:
b9:eb:47:97:2f:47:3a:31:76:a2:1e:ff:7e:3e:a3:
d9:0b:52:53:6e:35:d5:3b:92:12:8d:1b:b9:36:81:
19:98:bf:0c:fb:90:42:03:18:23:14:91:ee:ab:10:
59:a7:67:54:98:a1:70:7d:17:6a:5b:c8:e2:68:7c:
cd:13:5a:f3:81:f4:be:dd:ef:e6:f6:de:1e:0f:f4:
00:ef:81:c9:1d:de:88:3c:df:db:f8:58:64:5a:07:
67:fd:97:01:19:68:82:36:fc:3f:39:56:08:3a:3c:
48:8a:0b:56:74:ce:c4:db:c1:15:d7:dc:b8:13:15:
e7:fd:68:22:53:3e:0b:46:32:10:62:dc:e0:03:c7:
23:59:02:46:e2:dd:cd:39:e2:bc:dc:0d:e2:13:58:
40:08:86:d5:8b:77:ee:50:6c:37:b8:2a:22:58:7b:
46:2c:c6:45:c3:21:93:db:89:6c:21:ff:12:db:43:
26:5f:16:f2:af:a5:15:78:e2:b5:f5:64:5a:37:41:
6d:bb
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A0:65:31:95:6C:7D:D9:34:CE:4F:2C:FC:6F:50:5D:06:A1:D8:A4:EF
X509v3 Authority Key Identifier:
keyid:52:62:50:5B:48:85:81:C2:EC:D7:58:2A:34:EC:E5:26:32:E3:EF:96
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/UmJQW0iFgcLs11gqNOzlJjLj75Y.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ee/dfbaa2-4a27-4f3c-b9fc-fb01436a695f/1/UmJQW0iFgcLs11gqNOzlJjLj75Y.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/ee/dfbaa2-4a27-4f3c-b9fc-fb01436a695f/1/UmJQW0iFgcLs11gqNOzlJjLj75Y.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
20:30:ab:43:aa:98:66:2f:f9:77:c7:69:75:99:bc:30:53:1c:
66:f4:59:3d:83:31:f1:af:59:b1:99:8d:bb:86:5a:7d:be:6a:
75:aa:3d:43:24:a1:f0:bd:4d:b5:60:17:17:35:5b:e5:74:51:
0b:2d:16:38:5c:dc:2b:dd:d2:3f:99:5c:29:52:63:40:25:a3:
3c:88:21:3b:5d:c4:69:a2:99:db:35:cd:e3:ce:ea:46:e9:63:
00:e2:19:1d:4b:4a:b1:a9:d4:80:81:39:77:da:31:52:6c:48:
2d:04:22:49:fa:ab:e3:18:92:cf:93:13:91:09:0c:66:aa:b1:
25:5e:ca:3c:e1:31:6e:54:b7:b4:6a:9a:6d:fc:7a:d4:fc:97:
d2:4f:12:b3:32:b0:5b:b1:c4:39:b2:60:df:9e:af:f8:a9:bd:
9c:fb:b8:33:63:b7:a9:e5:aa:1b:af:01:fc:15:b5:01:df:6d:
3b:86:a0:21:37:5d:6f:ef:df:42:18:0d:60:8b:53:4a:16:4f:
40:99:69:f1:4f:08:e2:56:74:a7:1d:46:43:2a:84:6f:20:48:
7e:45:ac:6f:72:e6:2e:9e:9e:9d:3b:92:c2:46:98:65:74:11:
e2:a4:fb:25:fa:73:de:ab:e3:ec:a6:94:33:43:9e:25:0f:8b:
c6:3f:70:ea
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 19 15:48:57 2025 by rpki-client