Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/09/1f75cb-c7b9-4529-bdaf-46c7974bd18a/1/UYqkmTdA34rTjZLMDBByNObfoFw.mft
File: UYqkmTdA34rTjZLMDBByNObfoFw.mft (raw, json)
Hash identifier: qEhMCt5L2ke7RelXn4K0zx3mi3AfO5ucODlD901osoo=
Subject key identifier: 66:B3:D1:B3:D0:21:AF:BE:16:18:59:9A:CA:9E:9D:DC:83:89:F8:25
Authority key identifier: 51:8A:A4:99:37:40:DF:8A:D3:8D:92:CC:0C:10:72:34:E6:DF:A0:5C
Certificate issuer: /CN=518aa4993740df8ad38d92cc0c107234e6dfa05c
Certificate serial: 01967FEAFED34CACD2A389AF99089FB0FA53
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/UYqkmTdA34rTjZLMDBByNObfoFw.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/09/1f75cb-c7b9-4529-bdaf-46c7974bd18a/1/UYqkmTdA34rTjZLMDBByNObfoFw.mft
Manifest number: 1511
Signing time: Tue 29 Apr 2025 05:00:29 +0000
Manifest this update: Tue 29 Apr 2025 05:00:29 +0000
Manifest next update: Wed 30 Apr 2025 05:00:29 +0000
Files and hashes: 1: UYqkmTdA34rTjZLMDBByNObfoFw.crl (hash: KLQ/PkBDWjozfzK2WQVgXfxGAtO8iAuM6WUCEfcxps4=)
2: v6sZNB7vHuDSmuOPiFQ5RwhcXZU.roa (hash: HNoyOAlUbidKG0QWi+a4Ll+NOheRAU20lbJrFUIG14k=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/09/1f75cb-c7b9-4529-bdaf-46c7974bd18a/1/UYqkmTdA34rTjZLMDBByNObfoFw.crl
rsync://rpki.ripe.net/repository/DEFAULT/09/1f75cb-c7b9-4529-bdaf-46c7974bd18a/1/UYqkmTdA34rTjZLMDBByNObfoFw.mft
rsync://rpki.ripe.net/repository/DEFAULT/UYqkmTdA34rTjZLMDBByNObfoFw.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 30 Apr 2025 05:00:29 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:7f:ea:fe:d3:4c:ac:d2:a3:89:af:99:08:9f:b0:fa:53
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=518aa4993740df8ad38d92cc0c107234e6dfa05c
Validity
Not Before: Apr 29 05:00:29 2025 GMT
Not After : Apr 30 05:00:29 2025 GMT
Subject: CN=66b3d1b3d021afbe1618599aca9e9ddc8389f825
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bd:b9:68:c9:c4:f7:51:c4:6f:08:40:9d:34:cf:
e6:19:66:3d:a4:2e:8e:72:6c:a7:91:31:53:57:6b:
e6:14:62:1e:a9:b6:c3:e1:aa:67:37:3c:38:68:e9:
32:1a:64:26:62:c2:d2:45:1f:81:93:50:f9:1f:64:
cf:1f:6e:29:bf:72:c0:8f:06:29:10:7e:98:c3:98:
79:d8:12:d6:0f:22:f2:56:be:cf:cf:80:df:ab:1c:
2e:cc:8a:31:18:04:22:ea:ef:fb:41:bd:f0:1c:0e:
39:4d:58:dd:41:3a:48:9a:5b:50:4e:6c:70:8c:b4:
12:3e:c3:58:aa:34:fe:0e:50:25:17:48:ad:ed:c4:
bc:af:f7:0d:ec:e2:9d:bb:03:4c:0f:fd:8b:d7:b9:
60:ff:e4:82:5b:f9:3b:74:13:1f:02:07:bf:8b:1d:
5d:6b:70:0a:ef:f7:04:8c:73:86:c2:37:ff:d5:86:
7f:20:8f:d4:e3:e4:e1:60:28:33:b6:b4:54:de:53:
d3:bc:cd:c3:12:be:b0:eb:9d:ca:42:89:71:1f:ec:
86:16:c6:f1:c6:18:c0:6d:6d:2c:19:8f:7c:3b:de:
6d:79:10:d5:75:5c:55:2b:21:ef:4f:82:46:d0:0d:
2c:e1:e4:88:89:bf:84:9d:9d:6b:89:7d:b2:43:1e:
ed:d1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
66:B3:D1:B3:D0:21:AF:BE:16:18:59:9A:CA:9E:9D:DC:83:89:F8:25
X509v3 Authority Key Identifier:
keyid:51:8A:A4:99:37:40:DF:8A:D3:8D:92:CC:0C:10:72:34:E6:DF:A0:5C
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/UYqkmTdA34rTjZLMDBByNObfoFw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/09/1f75cb-c7b9-4529-bdaf-46c7974bd18a/1/UYqkmTdA34rTjZLMDBByNObfoFw.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/09/1f75cb-c7b9-4529-bdaf-46c7974bd18a/1/UYqkmTdA34rTjZLMDBByNObfoFw.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
65:a8:a5:c7:11:f5:be:bc:87:3e:5a:b0:5c:5d:45:0e:81:ef:
34:bf:9d:3c:ae:13:bb:8f:ea:b6:5b:3c:75:1a:fe:4e:86:c6:
35:4c:3d:b4:20:b3:32:d2:1f:76:41:94:28:ca:99:af:7d:f5:
8f:ed:20:f4:8c:bd:b4:9f:9a:1e:61:e4:61:8c:59:bb:c7:bb:
0e:5f:62:cf:0f:10:6f:fd:d9:48:e4:3f:43:6a:7a:a2:4a:a9:
71:a0:a7:6a:e0:f0:36:d1:98:3e:13:8c:34:c7:26:3c:d8:af:
c1:62:98:e4:95:4d:c1:85:24:71:32:1f:e7:3b:23:68:fb:21:
bb:c9:cc:c4:8b:6f:d7:11:e2:76:1f:33:6f:c5:84:9b:61:eb:
4a:20:7e:fb:91:b8:38:ea:3a:1c:f0:86:9b:35:46:47:72:23:
48:9b:fd:9e:99:ed:26:12:6e:7e:a6:88:59:c3:d3:5a:f8:91:
3e:cb:32:20:38:17:45:ad:79:da:86:eb:c0:27:6b:9a:df:c6:
98:41:2e:85:d9:5e:51:5a:9b:e7:56:3e:cc:7b:a7:4a:63:cb:
1b:3e:82:78:f3:19:41:8a:82:fd:9e:dd:fd:a2:63:ce:34:19:
45:1e:15:39:51:58:17:f2:16:03:b8:7b:f5:c0:24:1e:69:3a:
fc:db:ab:ae
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Apr 29 16:21:26 2025 by rpki-client