Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/26/0408f7-76a2-49c7-a022-deb44b869d19/1/UuQfSAbOSPw5iEI4Hy_74EspSBg.mft
File: UuQfSAbOSPw5iEI4Hy_74EspSBg.mft (raw, json)
Hash identifier: FR042kge2VvHL64vUSJkvzYxludRKRkkTgvX3QgGFEI=
Subject key identifier: 3B:49:DE:AC:5D:86:C2:25:16:8D:F4:93:D4:07:1B:9A:1E:5C:F8:1C
Authority key identifier: 52:E4:1F:48:06:CE:48:FC:39:88:42:38:1F:2F:FB:E0:4B:29:48:18
Certificate issuer: /CN=52e41f4806ce48fc398842381f2ffbe04b294818
Certificate serial: 0196759E968BC60F413749EE2DD8CDF5342A
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/UuQfSAbOSPw5iEI4Hy_74EspSBg.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/26/0408f7-76a2-49c7-a022-deb44b869d19/1/UuQfSAbOSPw5iEI4Hy_74EspSBg.mft
Manifest number: 0D16
Signing time: Sun 27 Apr 2025 05:00:49 +0000
Manifest this update: Sun 27 Apr 2025 05:00:49 +0000
Manifest next update: Mon 28 Apr 2025 05:00:49 +0000
Files and hashes: 1: UuQfSAbOSPw5iEI4Hy_74EspSBg.crl (hash: 9ut3CNl8doQc28DdtOhgLMwsgk/g4lkM9w1qxb+DiQQ=)
2: cd3Fhp7JGsQY29OycLGqygOY3q4.roa (hash: me8X+W4/R2BKpOObqALFckuX9m9FcIwz7m42eap8tCk=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/26/0408f7-76a2-49c7-a022-deb44b869d19/1/UuQfSAbOSPw5iEI4Hy_74EspSBg.crl
rsync://rpki.ripe.net/repository/DEFAULT/26/0408f7-76a2-49c7-a022-deb44b869d19/1/UuQfSAbOSPw5iEI4Hy_74EspSBg.mft
rsync://rpki.ripe.net/repository/DEFAULT/UuQfSAbOSPw5iEI4Hy_74EspSBg.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 28 Apr 2025 05:00:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:75:9e:96:8b:c6:0f:41:37:49:ee:2d:d8:cd:f5:34:2a
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=52e41f4806ce48fc398842381f2ffbe04b294818
Validity
Not Before: Apr 27 05:00:49 2025 GMT
Not After : Apr 28 05:00:49 2025 GMT
Subject: CN=3b49deac5d86c225168df493d4071b9a1e5cf81c
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:be:ae:36:1e:d9:2f:28:79:0d:f7:49:7d:06:fa:
64:20:cb:27:e7:d1:f8:bb:cb:e1:f4:42:49:35:52:
e2:57:3f:2e:4a:f2:24:db:0d:17:0d:10:02:e5:bb:
99:f5:b0:b1:07:79:f7:c4:30:cf:be:ef:c1:6c:db:
f5:00:92:fb:c4:d6:57:6f:21:cc:4a:f1:8b:21:78:
ac:d0:f9:22:39:6c:7a:80:e9:67:5a:95:ab:5d:e9:
e3:d9:70:c3:45:12:a2:33:cf:93:7d:74:7b:43:8c:
c2:17:dd:c7:4d:a9:af:71:d5:11:e3:fc:71:f8:19:
5f:79:a8:90:6c:a5:a2:26:fc:a4:69:11:6d:21:4d:
18:44:3f:27:ca:25:e8:9e:ab:9e:9b:d7:b1:75:e6:
cc:42:7c:2e:d7:80:ed:18:32:e5:40:b2:9b:69:98:
e6:4e:d0:68:f7:fe:e3:13:bf:7b:0b:b5:2c:a6:f9:
66:20:9b:4a:69:75:24:fc:16:df:10:04:69:7e:3a:
81:67:86:f6:a2:6c:5a:d4:e6:ee:98:30:04:21:80:
1b:64:db:e5:6e:e5:d5:d2:ad:86:d8:33:06:35:27:
85:08:87:2d:83:b4:73:1e:d3:d4:f6:6e:68:59:de:
67:a7:1d:86:e9:7a:c2:95:43:df:b8:18:71:df:f1:
b1:17
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
3B:49:DE:AC:5D:86:C2:25:16:8D:F4:93:D4:07:1B:9A:1E:5C:F8:1C
X509v3 Authority Key Identifier:
keyid:52:E4:1F:48:06:CE:48:FC:39:88:42:38:1F:2F:FB:E0:4B:29:48:18
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/UuQfSAbOSPw5iEI4Hy_74EspSBg.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/26/0408f7-76a2-49c7-a022-deb44b869d19/1/UuQfSAbOSPw5iEI4Hy_74EspSBg.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/26/0408f7-76a2-49c7-a022-deb44b869d19/1/UuQfSAbOSPw5iEI4Hy_74EspSBg.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
0d:2f:bb:b5:c8:cc:ee:0a:bd:8c:a0:1f:17:26:de:de:31:c6:
09:f5:2e:7e:0a:d5:dd:1b:c3:dd:5f:5d:ac:e4:9c:f4:81:83:
9a:12:d0:46:48:22:16:eb:83:5d:4d:2c:3e:bc:d9:db:14:3b:
0b:88:e0:d1:2b:c2:cc:cb:19:fb:e0:bd:cc:2a:bf:34:2c:67:
90:0a:a1:f0:ad:96:5d:a2:a3:9b:fc:bf:0b:09:da:a4:95:d1:
fd:2f:97:a1:de:c5:e6:2e:55:45:f5:86:64:9d:04:c1:d5:bf:
b7:0a:41:71:20:d1:25:3c:71:d7:80:29:8c:40:bf:89:43:f4:
ba:af:31:a7:ad:01:a9:44:48:a9:e7:5b:9a:04:8a:cc:96:91:
83:57:86:4c:2d:12:d2:b2:f5:1f:c5:1d:8b:27:96:75:f9:b9:
c8:be:45:29:01:cf:3b:75:62:66:a1:ce:70:02:c1:f7:a9:10:
32:cf:c9:47:a6:63:ad:c2:c4:17:b5:09:10:0e:92:98:87:f3:
31:6e:d0:4f:9a:1c:91:12:b2:a8:66:49:ed:9b:32:3f:86:49:
63:29:bc:9d:9c:ef:d2:8d:96:8d:0a:98:0f:48:97:24:17:66:
64:c1:fd:10:d1:15:58:d0:44:ab:31:ea:46:bb:17:d0:fb:ca:
6f:fc:0a:f6
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Apr 27 11:24:49 2025 by rpki-client