Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/02/23d5c1-ac66-461f-900f-380885740d4a/1/UeFdozln1BRwqW1hQcg0DyJAWBw.mft
File: UeFdozln1BRwqW1hQcg0DyJAWBw.mft (raw, json)
Hash identifier: KOsAC1dFlZhGYVQ64zHRO17HYHarMaHxdvOcGTjtrSY=
Subject key identifier: 5C:1D:9C:26:31:DA:11:72:0B:4C:5D:60:53:0F:F9:58:CA:20:97:08
Authority key identifier: 51:E1:5D:A3:39:67:D4:14:70:A9:6D:61:41:C8:34:0F:22:40:58:1C
Certificate issuer: /CN=51e15da33967d41470a96d6141c8340f2240581c
Certificate serial: 019676E7D0767BD792477814093567CA6478
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/UeFdozln1BRwqW1hQcg0DyJAWBw.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/02/23d5c1-ac66-461f-900f-380885740d4a/1/UeFdozln1BRwqW1hQcg0DyJAWBw.mft
Manifest number: 1510
Signing time: Sun 27 Apr 2025 11:00:25 +0000
Manifest this update: Sun 27 Apr 2025 11:00:25 +0000
Manifest next update: Mon 28 Apr 2025 11:00:25 +0000
Files and hashes: 1: UeFdozln1BRwqW1hQcg0DyJAWBw.crl (hash: +KTwpWAyMtMMhXGA6HTRyBda8jDOx78qx3qFVI4XoQ8=)
2: gBYCWzo5jT_O6BTkSg1kyvPsFw4.roa (hash: +/mKf9OZ57+DTvZmgtnYONd6u+f9yDN0GFvCHTpFrgo=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/02/23d5c1-ac66-461f-900f-380885740d4a/1/UeFdozln1BRwqW1hQcg0DyJAWBw.crl
rsync://rpki.ripe.net/repository/DEFAULT/02/23d5c1-ac66-461f-900f-380885740d4a/1/UeFdozln1BRwqW1hQcg0DyJAWBw.mft
rsync://rpki.ripe.net/repository/DEFAULT/UeFdozln1BRwqW1hQcg0DyJAWBw.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 28 Apr 2025 11:00:25 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:76:e7:d0:76:7b:d7:92:47:78:14:09:35:67:ca:64:78
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=51e15da33967d41470a96d6141c8340f2240581c
Validity
Not Before: Apr 27 11:00:25 2025 GMT
Not After : Apr 28 11:00:25 2025 GMT
Subject: CN=5c1d9c2631da11720b4c5d60530ff958ca209708
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a3:f8:56:03:11:29:70:a7:f3:31:6d:1a:16:f2:
a5:6e:af:56:e3:bd:16:41:79:8a:fe:cd:c5:04:7a:
04:0e:d3:5a:f2:80:65:fc:ba:8d:16:95:4b:09:de:
ae:08:47:7c:bf:af:b4:d2:35:8c:19:57:64:e2:51:
b5:03:33:05:ec:97:7c:94:b1:c0:bf:e4:06:c0:82:
ae:4c:5e:ff:0d:ea:ac:b3:22:77:2c:e7:4f:8b:f6:
15:c2:77:c2:d3:8e:1b:62:3c:2d:1b:4e:5d:1e:cd:
79:53:2a:5f:f1:53:64:61:08:0f:f8:6b:ad:84:a9:
4b:f7:57:e4:e0:a2:76:88:76:13:4b:cf:3d:6a:91:
59:06:6c:55:67:e0:67:ff:a5:f5:04:92:67:43:3a:
c3:f7:d4:bc:3e:f5:c4:26:04:45:f0:9a:0a:86:da:
87:58:b0:01:b7:90:92:90:f1:19:c7:cc:5b:61:55:
43:59:44:59:fc:9f:39:7b:3e:96:92:c7:4b:16:11:
6a:46:c3:32:8d:02:f1:a8:8a:b5:28:0c:a3:ca:dd:
e9:a6:a4:14:25:0e:d5:4a:73:d7:d9:47:55:c9:f7:
c3:c4:86:14:b8:0f:a6:5e:46:70:3e:ec:60:eb:20:
ec:ea:df:5e:3f:70:a5:01:0a:0a:f3:1b:ef:f5:ed:
a9:e1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
5C:1D:9C:26:31:DA:11:72:0B:4C:5D:60:53:0F:F9:58:CA:20:97:08
X509v3 Authority Key Identifier:
keyid:51:E1:5D:A3:39:67:D4:14:70:A9:6D:61:41:C8:34:0F:22:40:58:1C
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/UeFdozln1BRwqW1hQcg0DyJAWBw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/02/23d5c1-ac66-461f-900f-380885740d4a/1/UeFdozln1BRwqW1hQcg0DyJAWBw.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/02/23d5c1-ac66-461f-900f-380885740d4a/1/UeFdozln1BRwqW1hQcg0DyJAWBw.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
25:57:5e:02:f8:4b:91:3a:0d:58:0c:63:1a:06:45:15:92:3b:
a9:6f:c8:fd:3a:97:bb:a3:12:e5:6b:94:28:d3:b2:a3:94:4e:
ef:b5:a7:c4:4b:b8:8a:1a:f1:99:7e:63:f8:a8:07:57:a4:d5:
7b:55:18:cf:cd:3a:96:1d:db:14:42:93:2a:49:a0:6e:6d:30:
a6:2f:f8:ba:d7:69:b7:58:35:84:b9:c4:79:98:7c:12:7e:d7:
36:91:13:62:3d:1a:91:3b:f8:93:dd:3b:0f:d4:9a:ea:e2:23:
34:b2:71:54:ed:04:b2:2f:f8:c7:a1:8b:6c:b5:f3:22:95:28:
83:f7:56:be:85:3b:36:5b:0c:8a:bc:81:6f:80:b4:d9:2f:50:
ce:fe:28:1d:2d:6f:1f:e6:d0:7c:d5:c4:17:bf:77:43:fe:54:
da:ab:90:2a:c2:0b:50:f8:c5:c1:c2:53:f2:b5:68:06:d9:f0:
13:70:b6:d8:6f:88:8d:c4:cf:68:b4:cd:38:40:c3:22:5e:df:
24:9b:4a:03:b6:85:93:e9:1c:32:a3:5d:9b:c9:71:9a:0f:9a:
c2:31:9f:a0:7f:86:01:ee:28:27:47:44:af:ab:14:7c:1d:cd:
59:f0:2f:36:17:09:95:6a:20:62:1f:76:8e:59:ba:e2:9d:b1:
6d:9f:70:7b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Apr 27 20:21:54 2025 by rpki-client