Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/21/b0cd2e-4864-4a34-82a5-e7c444346760/1/UGVstHd9FLXrJkxrAyyLo3VvKuU.mft
File: UGVstHd9FLXrJkxrAyyLo3VvKuU.mft (raw, json)
Hash identifier: iuM2vJAdwf/fLHAwI9moPvXiacvUtl2HWXJEpTP8btI=
Subject key identifier: 5A:5B:ED:7A:85:FB:9A:83:E7:08:B6:77:CF:D7:1F:93:DD:05:9F:5F
Authority key identifier: 50:65:6C:B4:77:7D:14:B5:EB:26:4C:6B:03:2C:8B:A3:75:6F:2A:E5
Certificate issuer: /CN=50656cb4777d14b5eb264c6b032c8ba3756f2ae5
Certificate serial: 01967CB30E66C09E23606BBE4166FA2E82A0
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/UGVstHd9FLXrJkxrAyyLo3VvKuU.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/21/b0cd2e-4864-4a34-82a5-e7c444346760/1/UGVstHd9FLXrJkxrAyyLo3VvKuU.mft
Manifest number: 0D2F
Signing time: Mon 28 Apr 2025 14:00:31 +0000
Manifest this update: Mon 28 Apr 2025 14:00:31 +0000
Manifest next update: Tue 29 Apr 2025 14:00:31 +0000
Files and hashes: 1: UGVstHd9FLXrJkxrAyyLo3VvKuU.crl (hash: oJmvedyWAhcZM/7o/u/8+L85iikw/kYQtan/8huOGnE=)
2: W9IaaIZmyaPXUAJrA0BcuxANo_U.roa (hash: pp8Xxh3yiPgDrFR6WEvs6TFsPiIHgqanQOCFWl/68Ug=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/21/b0cd2e-4864-4a34-82a5-e7c444346760/1/UGVstHd9FLXrJkxrAyyLo3VvKuU.crl
rsync://rpki.ripe.net/repository/DEFAULT/21/b0cd2e-4864-4a34-82a5-e7c444346760/1/UGVstHd9FLXrJkxrAyyLo3VvKuU.mft
rsync://rpki.ripe.net/repository/DEFAULT/UGVstHd9FLXrJkxrAyyLo3VvKuU.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 29 Apr 2025 14:00:31 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:7c:b3:0e:66:c0:9e:23:60:6b:be:41:66:fa:2e:82:a0
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=50656cb4777d14b5eb264c6b032c8ba3756f2ae5
Validity
Not Before: Apr 28 14:00:31 2025 GMT
Not After : Apr 29 14:00:31 2025 GMT
Subject: CN=5a5bed7a85fb9a83e708b677cfd71f93dd059f5f
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a9:1f:7a:e7:51:26:d3:ca:f6:c1:fd:85:af:a4:
2c:69:ec:1e:5d:26:86:cf:54:41:c0:5b:8e:bc:bb:
46:15:59:fa:9a:9f:46:b8:2d:ea:1c:f8:6b:99:2c:
c9:1e:99:cd:ec:68:b4:b7:e2:68:c1:ea:d4:b1:d9:
d2:fa:17:58:fa:80:1a:2b:ad:6c:d0:91:4a:1f:8e:
ba:be:f2:5e:e5:23:15:35:bd:9c:ac:d9:b1:43:ec:
f7:48:e5:69:2c:e6:ba:70:84:7d:4b:09:0c:56:e4:
ec:f8:a4:57:cc:db:15:43:3c:ab:7d:08:c5:15:ab:
a8:0c:41:dc:10:4a:63:b6:6f:93:f1:5c:5f:d1:8c:
19:bb:b7:88:19:cd:dc:28:ed:04:25:9e:ee:6b:bb:
ca:5b:a6:39:5a:d9:98:47:a7:0e:43:78:c7:e8:0e:
4f:1c:c8:cc:88:9f:44:41:d9:62:04:ec:3e:96:cb:
ae:9a:60:65:e1:c8:5b:ad:6d:44:ce:3a:a0:40:e2:
00:63:ad:27:40:3c:91:91:73:a1:89:38:68:7a:b0:
4c:3c:4c:b6:d7:36:ec:fa:32:c0:b3:62:02:1a:00:
82:6b:0b:42:83:de:da:ea:f1:3d:95:a3:30:f1:92:
ba:72:f2:01:14:ef:bf:81:c4:95:95:5d:2d:48:ac:
2f:37
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
5A:5B:ED:7A:85:FB:9A:83:E7:08:B6:77:CF:D7:1F:93:DD:05:9F:5F
X509v3 Authority Key Identifier:
keyid:50:65:6C:B4:77:7D:14:B5:EB:26:4C:6B:03:2C:8B:A3:75:6F:2A:E5
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/UGVstHd9FLXrJkxrAyyLo3VvKuU.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/21/b0cd2e-4864-4a34-82a5-e7c444346760/1/UGVstHd9FLXrJkxrAyyLo3VvKuU.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/21/b0cd2e-4864-4a34-82a5-e7c444346760/1/UGVstHd9FLXrJkxrAyyLo3VvKuU.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
38:c0:b6:ee:6e:02:87:38:d0:ab:c1:ad:2a:61:c4:44:f7:f2:
5f:e4:9a:f1:8f:2a:de:0d:d8:7b:65:63:31:b2:68:3e:74:84:
1e:a4:a0:cd:0f:cb:c4:5d:30:c2:4a:1e:be:49:04:26:3a:1f:
48:16:97:e8:25:73:cf:5d:a0:ec:18:84:b5:69:23:e3:b7:29:
11:e5:8b:82:56:60:14:71:1d:7e:2d:b3:06:e6:8b:c3:60:30:
d7:ef:e2:c2:6e:fb:6f:2d:a5:60:8c:da:ad:43:d5:21:cb:87:
3b:7b:a9:f7:0c:56:b0:2f:5e:c5:37:93:5f:e7:58:53:60:fc:
31:c4:a7:45:ef:40:fb:99:a7:2c:b5:bd:4f:c6:a6:90:e5:92:
76:82:e2:56:0c:d3:4e:97:3e:92:17:a6:c3:0f:9e:d9:01:33:
c5:1c:79:0f:60:82:f1:8c:cf:ef:40:f9:da:02:9b:64:92:0d:
cb:b7:a2:6a:1f:c9:af:04:d3:c1:6e:71:26:99:9f:1f:8c:0c:
93:e9:32:73:29:c7:73:7a:69:39:87:88:90:4c:69:d3:51:01:
4e:32:da:2b:d6:c1:1e:6c:c5:28:f5:87:90:2b:ed:3a:c2:7a:
87:39:2e:64:2f:0d:fb:d0:69:e5:37:4a:d1:37:fe:3f:6e:d4:
87:1a:54:ee
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 28 19:19:27 2025 by rpki-client