Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f3/d68a35-b191-4197-ab78-f4c93601c859/1/unuTQCuSGNf2ErT5YmJwpxrmvi0.mft
File: unuTQCuSGNf2ErT5YmJwpxrmvi0.mft (raw, json)
Hash identifier: AxlM1XZBw+smkHRAVHuEy7Z14ElAV3UQqJza3Pcw6yc=
Subject key identifier: F7:F3:D5:43:16:E3:D7:F2:12:53:03:E8:77:0D:4C:6A:09:73:A5:C4
Authority key identifier: BA:7B:93:40:2B:92:18:D7:F6:12:B4:F9:62:62:70:A7:1A:E6:BE:2D
Certificate issuer: /CN=ba7b93402b9218d7f612b4f9626270a71ae6be2d
Certificate serial: 01965537A4F1EF562F1C0CC6916C0751087F
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/unuTQCuSGNf2ErT5YmJwpxrmvi0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/f3/d68a35-b191-4197-ab78-f4c93601c859/1/unuTQCuSGNf2ErT5YmJwpxrmvi0.mft
Manifest number: 1507
Signing time: Sun 20 Apr 2025 22:00:32 +0000
Manifest this update: Sun 20 Apr 2025 22:00:32 +0000
Manifest next update: Mon 21 Apr 2025 22:00:32 +0000
Files and hashes: 1: unuTQCuSGNf2ErT5YmJwpxrmvi0.crl (hash: DM5sb0TDVOaLyjnjy/6Zpj4I/flfAoducoyyPU4uNIE=)
2: vU-75r0gInbOCnxxQxxUry9G0nQ.roa (hash: AiFvk2ANcPHqNEPfHYWxiUIKCo2C9zQXm47cQDdAzO0=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/f3/d68a35-b191-4197-ab78-f4c93601c859/1/unuTQCuSGNf2ErT5YmJwpxrmvi0.crl
rsync://rpki.ripe.net/repository/DEFAULT/f3/d68a35-b191-4197-ab78-f4c93601c859/1/unuTQCuSGNf2ErT5YmJwpxrmvi0.mft
rsync://rpki.ripe.net/repository/DEFAULT/unuTQCuSGNf2ErT5YmJwpxrmvi0.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 21 Apr 2025 22:00:32 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:55:37:a4:f1:ef:56:2f:1c:0c:c6:91:6c:07:51:08:7f
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=ba7b93402b9218d7f612b4f9626270a71ae6be2d
Validity
Not Before: Apr 20 22:00:32 2025 GMT
Not After : Apr 21 22:00:32 2025 GMT
Subject: CN=f7f3d54316e3d7f2125303e8770d4c6a0973a5c4
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e2:52:1b:14:98:c2:af:3c:0f:8a:47:b4:2c:75:
63:5f:84:4b:8a:bf:ca:f3:14:c4:c9:9d:92:af:1f:
3b:17:02:4e:60:80:4d:01:9b:3e:ea:57:c2:e4:a8:
49:f4:9f:fd:b0:75:94:63:6c:1a:42:31:00:0d:29:
3e:21:66:2d:b5:b8:fb:58:12:f9:cb:f3:78:f0:22:
05:50:f2:0c:22:86:4f:21:81:d1:a6:68:f2:39:8d:
90:e9:85:c7:22:6e:84:a1:e9:59:91:ac:f9:de:2e:
4e:b2:f5:54:68:7a:f7:b0:2d:82:58:32:21:ea:f1:
b8:94:b7:c4:f0:3e:4c:36:b4:ea:8c:85:da:60:de:
a1:26:32:9f:e7:f7:c0:ce:16:22:98:1b:58:34:3a:
80:1e:e6:2c:12:20:e5:e8:ef:e2:a9:a5:28:58:ab:
81:9f:01:92:30:9c:e8:40:13:b6:da:6f:02:1a:d0:
44:5c:2d:be:c3:8d:e7:e9:7b:01:c9:36:54:e3:eb:
c0:6e:26:b4:23:d3:2d:b1:a0:2b:2e:f3:08:ff:f0:
62:7a:2a:41:9f:46:54:8f:c3:5e:2f:ba:1b:7c:a3:
90:e5:16:a3:87:ab:09:00:30:01:f5:b9:7b:b6:11:
04:ec:d8:d0:cf:2c:42:5b:fe:55:83:66:bb:42:f8:
90:81
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F7:F3:D5:43:16:E3:D7:F2:12:53:03:E8:77:0D:4C:6A:09:73:A5:C4
X509v3 Authority Key Identifier:
keyid:BA:7B:93:40:2B:92:18:D7:F6:12:B4:F9:62:62:70:A7:1A:E6:BE:2D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/unuTQCuSGNf2ErT5YmJwpxrmvi0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f3/d68a35-b191-4197-ab78-f4c93601c859/1/unuTQCuSGNf2ErT5YmJwpxrmvi0.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/f3/d68a35-b191-4197-ab78-f4c93601c859/1/unuTQCuSGNf2ErT5YmJwpxrmvi0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
33:72:c8:f1:38:7a:33:01:aa:18:97:27:46:a0:ae:a2:04:bf:
65:65:27:9e:d4:90:90:14:23:68:47:35:47:04:c9:39:bb:42:
0d:58:88:48:13:98:e6:d2:8b:e9:a3:f3:be:4e:a2:50:2a:fc:
c7:ca:af:c5:52:5e:44:f8:2e:91:a3:1b:a8:0f:af:42:ee:89:
52:c2:40:b0:98:c8:fe:a3:27:c7:6c:be:25:98:7e:fb:dc:05:
14:84:ad:0e:03:ca:b7:d6:7c:cd:8e:0b:93:9e:c6:5a:d1:26:
2a:f0:3e:be:43:3f:0b:82:04:ba:82:e5:38:d8:c4:85:c4:d0:
ff:6c:53:a3:20:c4:1f:f7:73:87:be:62:ac:0d:46:e9:1f:52:
60:ca:fe:5c:04:a2:92:31:b6:2c:9c:59:a9:12:d2:06:2f:2d:
a9:2d:66:db:a2:60:09:0c:ad:76:6a:ed:49:b0:ff:b2:a8:2b:
b0:52:19:57:49:6a:be:08:50:ff:bc:34:10:95:53:ca:64:9e:
41:29:9b:e1:aa:e9:9f:6f:0b:84:15:2d:58:96:f2:54:87:ce:
21:5e:ae:e2:be:c4:d3:56:17:63:06:ce:b7:dd:c1:ff:9e:94:
92:81:2a:af:3e:ba:c6:9f:9d:6c:c5:d0:4f:84:da:0c:7e:4b:
13:f7:89:5d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 21 05:39:17 2025 by rpki-client