Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/28/806917-af6b-4e1e-8773-9ad035474114/1/UnFDjiPOkl5mwlmYEiG1toOi8I8.mft
File: UnFDjiPOkl5mwlmYEiG1toOi8I8.mft (raw, json)
Hash identifier: Ch04Zx2NGCgS90wLmOdx5xD+n04APWf0frURDYqOgHA=
Subject key identifier: AD:2F:EE:41:DE:44:96:F6:88:29:B9:3E:FD:B9:FE:6B:57:B8:E9:39
Authority key identifier: 52:71:43:8E:23:CE:92:5E:66:C2:59:98:12:21:B5:B6:83:A2:F0:8F
Certificate issuer: /CN=5271438e23ce925e66c259981221b5b683a2f08f
Certificate serial: 019679E9D3E7559C70C92D64F531E3AEAA5E
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/UnFDjiPOkl5mwlmYEiG1toOi8I8.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/28/806917-af6b-4e1e-8773-9ad035474114/1/UnFDjiPOkl5mwlmYEiG1toOi8I8.mft
Manifest number: 0A75
Signing time: Mon 28 Apr 2025 01:01:29 +0000
Manifest this update: Mon 28 Apr 2025 01:01:29 +0000
Manifest next update: Tue 29 Apr 2025 01:01:29 +0000
Files and hashes: 1: UnFDjiPOkl5mwlmYEiG1toOi8I8.crl (hash: 4jjO9jaQuQlrzo6VGZgXqNUSHpYp25UM3Q1dYOhUV4E=)
2: b23Ppzc40t1gh2jcC0tEEtTjq-Y.roa (hash: PLO31FJDvhLM1rCGRuVKcX7pZ7U9Xsy2KrFDiy0XrKY=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/28/806917-af6b-4e1e-8773-9ad035474114/1/UnFDjiPOkl5mwlmYEiG1toOi8I8.crl
rsync://rpki.ripe.net/repository/DEFAULT/28/806917-af6b-4e1e-8773-9ad035474114/1/UnFDjiPOkl5mwlmYEiG1toOi8I8.mft
rsync://rpki.ripe.net/repository/DEFAULT/UnFDjiPOkl5mwlmYEiG1toOi8I8.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 28 Apr 2025 23:00:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:79:e9:d3:e7:55:9c:70:c9:2d:64:f5:31:e3:ae:aa:5e
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=5271438e23ce925e66c259981221b5b683a2f08f
Validity
Not Before: Apr 28 01:01:29 2025 GMT
Not After : Apr 29 01:01:29 2025 GMT
Subject: CN=ad2fee41de4496f68829b93efdb9fe6b57b8e939
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d2:1d:9a:f4:a3:38:b2:42:44:50:3b:d1:71:54:
75:6d:af:3a:a9:89:e6:3a:12:7a:46:d0:c5:ca:86:
60:e5:0f:f8:18:b4:3d:cf:09:47:ee:d2:1c:7a:f2:
29:3c:f8:af:eb:b2:91:20:50:a3:dc:f1:a7:67:c7:
ed:7a:cf:ce:33:22:15:ed:ad:0b:8a:91:b3:98:7a:
de:c7:94:4e:7e:88:79:e3:10:77:bc:f0:98:5c:4c:
67:4c:d4:65:30:5b:24:c0:2e:b2:b5:f9:eb:0a:85:
fd:f6:ac:ab:bd:cc:64:7e:25:46:7d:53:96:7e:10:
75:bc:c0:d2:7c:6b:68:33:d1:73:41:5c:a6:4d:94:
7a:8f:24:bc:e9:ae:a9:de:c6:10:ff:39:dc:b9:9e:
93:ab:3b:c3:1f:db:f9:05:a9:79:63:fb:83:9d:00:
f3:87:df:f6:b6:81:3e:4a:b6:5b:b3:75:ce:a3:6d:
f2:80:d7:b7:94:60:fa:5e:ac:9e:87:ed:49:0c:f3:
39:37:f2:87:ed:f9:c8:3b:58:39:29:6d:89:4d:98:
9a:1a:f1:50:69:bd:e2:ff:ca:e0:14:f2:02:ef:fd:
a4:bc:40:fc:22:2c:01:e8:a0:45:36:8f:38:14:9d:
32:ea:5d:4c:13:e9:67:80:a1:f9:49:03:44:e9:74:
12:6d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
AD:2F:EE:41:DE:44:96:F6:88:29:B9:3E:FD:B9:FE:6B:57:B8:E9:39
X509v3 Authority Key Identifier:
keyid:52:71:43:8E:23:CE:92:5E:66:C2:59:98:12:21:B5:B6:83:A2:F0:8F
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/UnFDjiPOkl5mwlmYEiG1toOi8I8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/28/806917-af6b-4e1e-8773-9ad035474114/1/UnFDjiPOkl5mwlmYEiG1toOi8I8.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/28/806917-af6b-4e1e-8773-9ad035474114/1/UnFDjiPOkl5mwlmYEiG1toOi8I8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
2c:62:75:f8:1f:12:22:72:02:b5:da:1e:1b:b5:89:f4:be:b9:
f8:44:78:cc:f0:74:94:47:20:ed:fe:6a:d1:4a:f1:25:30:4f:
20:2e:1a:e7:97:57:93:ba:f8:11:7c:c5:31:f1:1c:3e:34:88:
b8:48:c1:bb:21:e2:4b:a4:42:8f:18:ce:b8:f7:f1:96:78:50:
3f:5c:8c:b5:e3:19:43:b4:7a:98:78:81:e9:6f:a1:2c:8d:d3:
d4:73:ca:a4:85:da:94:a3:9e:0d:3a:8f:00:da:25:1b:27:0e:
d0:67:96:cb:06:70:69:fe:b3:cc:ee:50:a1:3e:ec:38:2d:61:
4b:7e:a2:e3:ef:d4:6d:91:de:f8:86:b5:d2:3b:c9:4c:a0:ad:
be:6f:a6:8d:15:d2:fe:24:86:e3:0f:6e:d4:94:1c:23:a5:5c:
41:13:d2:23:1e:e5:c4:2d:73:df:13:c3:09:4b:86:cc:4d:b4:
fe:72:80:33:9c:de:7b:ec:23:d2:56:08:a0:15:20:50:79:08:
7e:53:b1:b8:d4:49:2a:15:c5:7f:59:5d:c1:00:da:25:41:1a:
5a:02:a4:b4:1d:aa:36:5f:1a:3e:4d:de:ad:4e:4e:0e:10:48:
0f:8b:5b:dc:8f:f9:d1:55:5f:e7:7b:7f:14:a9:08:32:17:f1:
6b:16:79:28
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 28 05:52:53 2025 by rpki-client