Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/fd/5a7731-ef54-4501-86f4-98e9e2510bb6/1/UF4vLV5wk_-NQAOgK30-ExznChI.mft
File: UF4vLV5wk_-NQAOgK30-ExznChI.mft (raw, json)
Hash identifier: E3tY0It54Egp5uuhQvslv8HoD7WG8QfKhkCYX2morSw=
Subject key identifier: 37:A0:14:76:80:88:AE:3B:6C:3B:CA:76:61:35:C7:71:08:8C:A4:46
Authority key identifier: 50:5E:2F:2D:5E:70:93:FF:8D:40:03:A0:2B:7D:3E:13:1C:E7:0A:12
Certificate issuer: /CN=505e2f2d5e7093ff8d4003a02b7d3e131ce70a12
Certificate serial: 0196052ECAC2CD1850AEA42A91DA24E12F0C
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/UF4vLV5wk_-NQAOgK30-ExznChI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/fd/5a7731-ef54-4501-86f4-98e9e2510bb6/1/UF4vLV5wk_-NQAOgK30-ExznChI.mft
Manifest number: 0B64
Signing time: Sat 05 Apr 2025 09:01:14 +0000
Manifest this update: Sat 05 Apr 2025 09:01:14 +0000
Manifest next update: Sun 06 Apr 2025 09:01:14 +0000
Files and hashes: 1: DAprp1jU9mjWeTMQ4zqYWAlF99E.roa (hash: 5UCreSEQ0cD98yP9A7sen4+ZVnf4RJinEuGBlveuw0g=)
2: UF4vLV5wk_-NQAOgK30-ExznChI.crl (hash: E85uWsOGxVwASrscd8TiGuDqaTSoa0Gsngq5lriPKcs=)
3: hXGA3CK9ZAwFYqBy6sH4BYfgPYI.roa (hash: Va1I6zrYlRY0/ml2dWrjPscW8W1PrtSAiqy07YNUOfk=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/fd/5a7731-ef54-4501-86f4-98e9e2510bb6/1/UF4vLV5wk_-NQAOgK30-ExznChI.crl
rsync://rpki.ripe.net/repository/DEFAULT/fd/5a7731-ef54-4501-86f4-98e9e2510bb6/1/UF4vLV5wk_-NQAOgK30-ExznChI.mft
rsync://rpki.ripe.net/repository/DEFAULT/UF4vLV5wk_-NQAOgK30-ExznChI.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 06 Apr 2025 04:00:49 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:05:2e:ca:c2:cd:18:50:ae:a4:2a:91:da:24:e1:2f:0c
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=505e2f2d5e7093ff8d4003a02b7d3e131ce70a12
Validity
Not Before: Apr 5 09:01:14 2025 GMT
Not After : Apr 6 09:01:14 2025 GMT
Subject: CN=37a014768088ae3b6c3bca766135c771088ca446
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c1:ec:b8:1c:8b:b4:13:a0:eb:4b:b7:41:3e:19:
94:a0:a1:2c:e0:8c:2d:63:43:d7:56:b9:26:c1:b0:
66:75:6b:f6:f5:32:bb:bc:d8:59:ee:6d:56:7d:c1:
6c:8e:06:a6:c7:08:18:2a:fc:46:96:3a:32:76:11:
6c:54:e4:42:df:72:7e:de:32:c2:28:37:7e:f5:2c:
e9:3f:d6:d0:2c:32:e2:a7:df:8c:1b:64:a9:55:e9:
dc:4f:6a:f2:81:c6:89:bc:28:6e:04:a3:97:9f:e2:
82:30:25:a5:b0:64:c5:4b:96:ed:6b:d3:f2:f5:df:
e5:6b:f4:82:0d:18:3f:b6:44:00:3f:66:64:22:86:
8e:e3:2f:93:00:44:6f:fc:68:b5:fc:40:7b:e8:85:
ce:68:91:65:65:59:37:fa:d7:88:00:fa:5b:1a:86:
d1:a1:ae:13:53:20:c5:00:40:25:ab:64:a4:62:7f:
f3:74:52:37:be:fb:59:e9:12:a4:1d:80:ff:58:c0:
b9:b7:48:5a:3a:7d:0b:c3:44:23:00:f0:61:58:ee:
86:7a:6b:3e:a6:cc:b8:d3:cd:cb:2f:11:47:c2:5b:
81:91:1d:29:37:e3:09:1a:4a:de:8f:55:9a:cc:0e:
15:a4:ae:56:05:5a:1f:c9:1e:0a:13:e1:43:5f:21:
ba:63
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
37:A0:14:76:80:88:AE:3B:6C:3B:CA:76:61:35:C7:71:08:8C:A4:46
X509v3 Authority Key Identifier:
keyid:50:5E:2F:2D:5E:70:93:FF:8D:40:03:A0:2B:7D:3E:13:1C:E7:0A:12
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/UF4vLV5wk_-NQAOgK30-ExznChI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/fd/5a7731-ef54-4501-86f4-98e9e2510bb6/1/UF4vLV5wk_-NQAOgK30-ExznChI.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/fd/5a7731-ef54-4501-86f4-98e9e2510bb6/1/UF4vLV5wk_-NQAOgK30-ExznChI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
a8:69:fc:5b:e3:4f:26:55:dc:99:9c:b4:06:b6:a5:2a:cc:e1:
50:0e:c3:89:b6:96:8f:1a:07:c1:7a:04:3e:6c:58:8d:86:68:
a6:65:f4:be:68:fb:be:f9:c5:12:c6:85:9f:99:67:26:06:d5:
7e:a9:2e:7c:bd:b7:76:b8:4c:80:98:de:fc:24:73:fd:eb:48:
fb:66:27:e9:24:0c:77:f1:5d:29:26:ae:0a:d0:79:7e:b4:ac:
c4:a1:d4:dc:50:90:a0:fc:b6:6f:88:01:c7:62:33:bd:7d:01:
70:18:6d:34:c8:f3:5f:d0:89:19:cc:ba:62:9d:bf:c8:e3:9f:
b1:94:87:18:04:60:99:c2:97:b1:e0:3f:98:99:be:8c:a0:a8:
a0:b7:f6:dc:cb:42:09:f4:de:6a:91:fc:f8:48:e5:5e:d7:db:
15:bd:48:63:4f:52:3e:20:80:a1:e9:ce:cf:c5:8f:66:da:37:
1f:b6:89:26:dd:f7:d1:fc:5a:7b:ff:da:eb:c5:a5:1a:06:9f:
de:77:fb:38:96:90:22:ef:ad:d1:2f:7e:f9:1a:4b:41:c0:ae:
f9:7a:c3:cd:2a:81:4c:69:53:cb:5c:5b:62:84:53:a6:5b:c9:
62:8e:57:17:e6:1d:5d:65:88:b0:7c:f1:90:df:db:20:3e:9b:
51:99:21:90
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 5 10:44:06 2025 by rpki-client