Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/03/d937e0-4277-4e6a-b593-46a880425799/1/UqqgphiMl6p0LMeG47cLyQnKxEw.mft
File: UqqgphiMl6p0LMeG47cLyQnKxEw.mft (raw, json)
Hash identifier: CxFSMcBa6XCJso2Oicj8rcA2ITExXqSJyh9PbmdtSuU=
Subject key identifier: CC:2C:2A:94:23:0A:8A:94:80:FE:07:53:F0:03:66:D4:E7:C6:A9:7C
Authority key identifier: 52:AA:A0:A6:18:8C:97:AA:74:2C:C7:86:E3:B7:0B:C9:09:CA:C4:4C
Certificate issuer: /CN=52aaa0a6188c97aa742cc786e3b70bc909cac44c
Certificate serial: 0196771E98168BCC386C90C4573351B8005C
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/UqqgphiMl6p0LMeG47cLyQnKxEw.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/03/d937e0-4277-4e6a-b593-46a880425799/1/UqqgphiMl6p0LMeG47cLyQnKxEw.mft
Manifest number: 1512
Signing time: Sun 27 Apr 2025 12:00:15 +0000
Manifest this update: Sun 27 Apr 2025 12:00:15 +0000
Manifest next update: Mon 28 Apr 2025 12:00:15 +0000
Files and hashes: 1: FUcDBcdERXDvpSpVVtQ0MRZq0uA.roa (hash: YuEo9I5eTH3VTcnkb3/qbWIdudFx1NiVz8otO9o9G9w=)
2: UqqgphiMl6p0LMeG47cLyQnKxEw.crl (hash: mtJ/d+vTy/T3ocMDnjDmShOIXaCtRLK4+P5Ixh45h3w=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/03/d937e0-4277-4e6a-b593-46a880425799/1/UqqgphiMl6p0LMeG47cLyQnKxEw.crl
rsync://rpki.ripe.net/repository/DEFAULT/03/d937e0-4277-4e6a-b593-46a880425799/1/UqqgphiMl6p0LMeG47cLyQnKxEw.mft
rsync://rpki.ripe.net/repository/DEFAULT/UqqgphiMl6p0LMeG47cLyQnKxEw.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 28 Apr 2025 07:29:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:77:1e:98:16:8b:cc:38:6c:90:c4:57:33:51:b8:00:5c
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=52aaa0a6188c97aa742cc786e3b70bc909cac44c
Validity
Not Before: Apr 27 12:00:15 2025 GMT
Not After : Apr 28 12:00:15 2025 GMT
Subject: CN=cc2c2a94230a8a9480fe0753f00366d4e7c6a97c
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b4:13:f4:b4:95:55:18:ae:a2:5a:be:c1:64:be:
4e:81:55:99:13:cd:3d:60:39:97:1d:d0:7c:ba:f3:
a6:c6:1b:4a:df:5b:1e:cf:11:11:cf:08:d8:b4:35:
30:15:f8:5f:ac:34:f3:1d:5a:a2:f5:dc:69:a8:f1:
0f:77:83:a0:d8:d2:53:aa:2f:34:c4:7c:5e:d3:d1:
aa:72:17:40:0c:d9:ce:95:a8:e8:e0:bd:12:aa:1b:
ca:4f:bb:a8:a7:84:32:b1:0f:75:ac:8e:4c:e3:9b:
0e:50:2e:1c:82:dd:d6:fa:66:6d:f2:bb:d2:00:f4:
2e:9b:27:28:ba:53:ae:56:d6:c5:cc:32:3c:ed:6c:
b2:d0:b6:8a:8b:78:bc:e9:7b:9c:65:eb:90:09:ed:
67:fc:06:b7:17:27:be:ba:33:af:9b:4a:f9:63:9c:
1e:a3:19:69:0c:98:16:5f:dd:5d:16:15:ef:7b:33:
0d:a7:65:1c:d8:72:62:cf:8f:74:df:92:d1:0c:9c:
97:86:81:55:12:5e:3c:53:df:52:23:b9:01:cf:b7:
ab:08:25:a6:fe:c0:37:63:03:5e:2f:43:fa:77:f5:
18:67:1c:49:08:ec:f1:5a:2e:6a:80:fa:7e:26:bf:
a9:c0:ed:a6:90:a9:95:f4:df:4e:7a:cf:82:92:67:
1f:23
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
CC:2C:2A:94:23:0A:8A:94:80:FE:07:53:F0:03:66:D4:E7:C6:A9:7C
X509v3 Authority Key Identifier:
keyid:52:AA:A0:A6:18:8C:97:AA:74:2C:C7:86:E3:B7:0B:C9:09:CA:C4:4C
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/UqqgphiMl6p0LMeG47cLyQnKxEw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/03/d937e0-4277-4e6a-b593-46a880425799/1/UqqgphiMl6p0LMeG47cLyQnKxEw.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/03/d937e0-4277-4e6a-b593-46a880425799/1/UqqgphiMl6p0LMeG47cLyQnKxEw.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
36:fb:d5:2b:e4:9b:13:ce:98:14:df:7e:c9:1d:da:b2:04:ec:
32:21:0c:7e:b4:b6:24:91:64:51:0d:d3:a5:b8:a3:9e:10:4b:
15:6d:9c:4c:25:7e:12:40:d3:ae:15:c0:32:00:f1:bf:82:04:
ea:d3:ab:8a:c0:ae:54:8f:98:02:9d:45:1f:6e:31:49:fd:bf:
03:46:c6:1a:89:4f:88:73:0a:95:8d:5f:aa:87:86:ed:65:a5:
ed:09:cd:ec:13:d4:5a:26:fb:2a:f4:2f:d1:31:74:7c:df:68:
08:35:c4:51:6a:d3:c0:c3:9e:b6:6c:c8:f5:30:8c:8d:39:82:
7b:7c:16:f3:99:7f:37:23:9f:8a:5d:53:87:f9:23:c5:36:3d:
54:a1:f8:0a:49:ce:20:4c:e1:d8:8f:73:86:69:09:60:0c:38:
9b:10:cf:07:2f:d2:a2:b5:52:68:a5:cc:99:1a:e4:67:c6:82:
6c:7e:b6:45:22:b1:94:7c:dc:fd:42:52:57:c9:1d:4e:77:c7:
4e:6a:15:13:25:cd:11:0c:9f:33:82:51:df:08:65:fb:44:89:
20:b1:4b:02:24:2a:7a:1b:49:70:e7:5e:5f:b7:fb:89:64:01:
92:2c:af:70:46:c4:bd:07:a8:8f:dd:80:cb:7b:47:d7:93:10:
1b:f8:2a:e7
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Apr 27 16:03:19 2025 by rpki-client