Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/1f/dbddc8-4633-4acb-a978-b6f1f031721e/1/UNp8iuAVDrjJRte_HgXAQt32o9Q.mft
File: UNp8iuAVDrjJRte_HgXAQt32o9Q.mft (raw, json)
Hash identifier: FVPW/qJno7pHB5yKsEw21aQS9mAxRpNfa1Zy2SiDMtc=
Subject key identifier: 2C:36:D1:D5:4A:BB:6B:FE:8B:E1:1C:5D:04:75:8B:74:C3:EF:67:68
Authority key identifier: 50:DA:7C:8A:E0:15:0E:B8:C9:46:D7:BF:1E:05:C0:42:DD:F6:A3:D4
Certificate issuer: /CN=50da7c8ae0150eb8c946d7bf1e05c042ddf6a3d4
Certificate serial: 019675D50B1DADC1F8AFD2089B3B3E2640F9
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/UNp8iuAVDrjJRte_HgXAQt32o9Q.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/1f/dbddc8-4633-4acb-a978-b6f1f031721e/1/UNp8iuAVDrjJRte_HgXAQt32o9Q.mft
Manifest number: 07A9
Signing time: Sun 27 Apr 2025 06:00:18 +0000
Manifest this update: Sun 27 Apr 2025 06:00:18 +0000
Manifest next update: Mon 28 Apr 2025 06:00:18 +0000
Files and hashes: 1: TRZ-bXVpGuPzmHQA948WyQR5KOg.roa (hash: DS5TFuJAWuJAhwbXFziYJwVjw+lHGW5/W63yt+OmaIw=)
2: UNp8iuAVDrjJRte_HgXAQt32o9Q.crl (hash: HLz31vojF8WDn39Mwh6e02EpZlf1jblbtGmXSOiqWqo=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/1f/dbddc8-4633-4acb-a978-b6f1f031721e/1/UNp8iuAVDrjJRte_HgXAQt32o9Q.crl
rsync://rpki.ripe.net/repository/DEFAULT/1f/dbddc8-4633-4acb-a978-b6f1f031721e/1/UNp8iuAVDrjJRte_HgXAQt32o9Q.mft
rsync://rpki.ripe.net/repository/DEFAULT/UNp8iuAVDrjJRte_HgXAQt32o9Q.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 28 Apr 2025 05:00:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:75:d5:0b:1d:ad:c1:f8:af:d2:08:9b:3b:3e:26:40:f9
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=50da7c8ae0150eb8c946d7bf1e05c042ddf6a3d4
Validity
Not Before: Apr 27 06:00:18 2025 GMT
Not After : Apr 28 06:00:18 2025 GMT
Subject: CN=2c36d1d54abb6bfe8be11c5d04758b74c3ef6768
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a8:4e:3e:c2:1d:db:af:65:7b:1f:ca:20:4d:03:
27:80:1e:f6:5a:16:73:9d:ad:f1:9d:f8:33:9c:67:
23:cc:08:ea:3a:cd:06:77:18:ca:7c:65:17:32:8b:
8d:cb:28:b6:87:82:18:81:95:44:4d:c8:8e:23:f2:
ba:4a:1c:66:2b:91:7b:a6:d4:60:fe:3c:41:57:b5:
65:0a:5d:24:78:f9:69:74:83:9a:cd:6f:1e:23:ed:
0c:e5:37:bd:69:21:15:3a:55:4c:3c:52:87:91:1f:
88:89:a1:e8:fd:f5:06:86:d8:cb:8b:b6:07:8e:02:
31:0a:b1:c9:0d:3b:d5:c8:38:b9:6d:e3:16:b2:a1:
22:9a:bd:d2:dc:d4:8a:bb:96:4b:d5:37:0e:bc:f3:
e1:0b:85:11:86:4b:66:95:65:70:e5:54:bd:41:e7:
ec:f7:32:b7:85:80:da:d4:09:2a:c7:a6:94:b9:d3:
38:4d:ef:ac:c5:15:e8:23:09:ac:73:a0:cb:98:1f:
53:56:fb:44:71:62:ea:c4:6a:14:5b:eb:60:85:3a:
12:be:4f:00:30:d4:a3:68:4c:21:3f:c7:d2:d9:44:
7e:71:db:dd:6a:2a:dc:09:67:17:51:f9:0b:b7:68:
0a:5c:26:e6:1a:ff:db:2f:f3:4c:9d:e1:10:72:42:
4e:69
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
2C:36:D1:D5:4A:BB:6B:FE:8B:E1:1C:5D:04:75:8B:74:C3:EF:67:68
X509v3 Authority Key Identifier:
keyid:50:DA:7C:8A:E0:15:0E:B8:C9:46:D7:BF:1E:05:C0:42:DD:F6:A3:D4
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/UNp8iuAVDrjJRte_HgXAQt32o9Q.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/1f/dbddc8-4633-4acb-a978-b6f1f031721e/1/UNp8iuAVDrjJRte_HgXAQt32o9Q.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/1f/dbddc8-4633-4acb-a978-b6f1f031721e/1/UNp8iuAVDrjJRte_HgXAQt32o9Q.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
41:aa:ae:be:2e:34:5c:c8:ff:26:d9:19:34:2c:27:70:6c:0e:
0b:e3:10:1d:75:cd:8a:7c:53:f4:a9:5c:36:cd:e2:98:90:35:
93:50:e2:ec:92:b0:ea:b4:ad:fd:8d:56:96:66:4f:aa:57:0f:
4f:f4:81:7b:2c:c6:96:2b:83:bc:c8:e3:88:7f:bc:95:33:57:
17:ef:af:fd:e9:59:e7:25:8f:5e:49:db:f7:a5:cf:71:8f:8c:
f9:72:c9:8a:f9:5c:f0:96:bd:7e:52:95:73:05:33:71:94:f9:
6d:87:02:77:bc:2a:76:d2:e0:39:b3:37:e0:a7:66:a6:98:d2:
9b:08:73:09:05:2a:c1:17:81:1b:5a:e7:4f:df:1f:56:d0:7b:
71:d7:af:54:06:21:c7:8c:05:8f:a3:f8:3d:53:fe:a5:2c:02:
04:fb:83:ea:81:6e:87:2a:6c:e2:6b:e6:1d:12:21:f2:d3:94:
ca:f0:60:d0:cc:62:d6:71:97:e2:56:ae:0c:bb:c9:b8:b2:5b:
fb:ce:80:f3:b3:e4:0a:61:f8:3d:41:bb:80:1c:55:1a:b6:20:
05:b7:35:8f:e3:17:ce:a1:4c:bb:94:3e:d5:af:0c:d4:83:94:
d7:f6:25:1b:25:e0:08:47:39:ad:d1:67:a1:dd:4d:8a:c9:f1:
39:4f:49:8a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Apr 27 12:57:49 2025 by rpki-client