Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/2e/b5d3b8-bdbf-46fb-aa94-b14e599c0cc2/1/Ua7cV2vfVgC_5MR5A4X6ztxG8DQ.mft
File: Ua7cV2vfVgC_5MR5A4X6ztxG8DQ.mft (raw, json)
Hash identifier: zNzm4xLbEgek+/FV5i7e0u5N8dz2ENIBxHF2bhr3370=
Subject key identifier: 64:B8:88:1F:3A:5A:3C:00:46:EC:F1:73:1C:7B:88:BE:AD:66:F7:C2
Authority key identifier: 51:AE:DC:57:6B:DF:56:00:BF:E4:C4:79:03:85:FA:CE:DC:46:F0:34
Certificate issuer: /CN=51aedc576bdf5600bfe4c4790385facedc46f034
Certificate serial: 019676B0E9C85849DAD059448232BAF44882
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Ua7cV2vfVgC_5MR5A4X6ztxG8DQ.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/2e/b5d3b8-bdbf-46fb-aa94-b14e599c0cc2/1/Ua7cV2vfVgC_5MR5A4X6ztxG8DQ.mft
Manifest number: 1431
Signing time: Sun 27 Apr 2025 10:00:27 +0000
Manifest this update: Sun 27 Apr 2025 10:00:27 +0000
Manifest next update: Mon 28 Apr 2025 10:00:27 +0000
Files and hashes: 1: CNVq6hwjcvgKEJLlVTlQtSTBrJw.roa (hash: XXymanpZ2oFTMQyHo/xvD9pTSAOM/yLCZqhwlA0NOiw=)
2: Ua7cV2vfVgC_5MR5A4X6ztxG8DQ.crl (hash: OwZ4yuwMm38l6pIl/qe7RW6W79KKxZwvOttPEBDBGdg=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/2e/b5d3b8-bdbf-46fb-aa94-b14e599c0cc2/1/Ua7cV2vfVgC_5MR5A4X6ztxG8DQ.crl
rsync://rpki.ripe.net/repository/DEFAULT/2e/b5d3b8-bdbf-46fb-aa94-b14e599c0cc2/1/Ua7cV2vfVgC_5MR5A4X6ztxG8DQ.mft
rsync://rpki.ripe.net/repository/DEFAULT/Ua7cV2vfVgC_5MR5A4X6ztxG8DQ.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 28 Apr 2025 05:00:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:76:b0:e9:c8:58:49:da:d0:59:44:82:32:ba:f4:48:82
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=51aedc576bdf5600bfe4c4790385facedc46f034
Validity
Not Before: Apr 27 10:00:27 2025 GMT
Not After : Apr 28 10:00:27 2025 GMT
Subject: CN=64b8881f3a5a3c0046ecf1731c7b88bead66f7c2
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d2:69:94:7b:ba:e5:c1:c6:e8:19:3b:b8:19:d4:
28:bd:5b:a5:f1:26:87:e3:d2:42:86:b3:f5:84:ce:
8c:49:22:e9:13:cf:cd:d4:2d:b8:39:31:1d:a2:50:
0f:5f:d1:79:e1:b6:44:62:92:bc:2c:75:96:26:af:
e4:e8:da:9d:5f:ff:e8:c5:82:bf:84:d8:e0:7a:62:
03:ae:82:9a:b5:ec:29:59:58:2e:16:11:05:06:bb:
97:9a:44:2a:8f:55:ad:4b:85:f5:90:1f:da:13:7f:
b2:9b:d3:a5:03:15:57:1e:5e:ce:75:da:9c:0d:77:
98:bd:56:a8:84:1a:09:f2:d1:41:68:fc:64:4d:9c:
0a:6e:ca:6e:bc:df:d9:68:99:33:dc:39:44:f8:8c:
aa:64:12:51:7f:6d:a8:1d:f6:3f:5a:23:e4:84:81:
84:a8:19:ea:dc:38:e2:2b:50:7d:18:eb:53:ab:03:
e3:95:fe:91:b3:5b:11:d5:84:13:04:58:a6:c9:9c:
32:c8:dd:d7:94:a9:43:b6:45:19:db:77:2e:84:65:
64:4d:db:34:c1:a3:59:aa:8e:bb:a4:0c:4f:11:e1:
e6:42:b2:87:5c:2c:fc:c1:15:68:c3:00:f5:09:f7:
53:0a:03:d8:13:e9:47:e2:26:6f:38:b8:5b:1d:e7:
d5:47
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
64:B8:88:1F:3A:5A:3C:00:46:EC:F1:73:1C:7B:88:BE:AD:66:F7:C2
X509v3 Authority Key Identifier:
keyid:51:AE:DC:57:6B:DF:56:00:BF:E4:C4:79:03:85:FA:CE:DC:46:F0:34
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Ua7cV2vfVgC_5MR5A4X6ztxG8DQ.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/2e/b5d3b8-bdbf-46fb-aa94-b14e599c0cc2/1/Ua7cV2vfVgC_5MR5A4X6ztxG8DQ.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/2e/b5d3b8-bdbf-46fb-aa94-b14e599c0cc2/1/Ua7cV2vfVgC_5MR5A4X6ztxG8DQ.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
5f:19:70:ac:88:69:1e:5a:89:ff:d7:7a:ce:03:01:0f:1c:69:
51:b4:69:d4:3b:ac:b9:07:f4:29:3d:22:9e:d2:a9:f5:59:d3:
62:25:e0:1b:14:45:ff:31:f5:d4:2b:2b:20:cc:c7:e3:cd:88:
8f:8b:4a:fa:4a:36:ba:6e:d8:1f:be:b6:0d:c4:fd:e8:ae:ab:
f2:96:3f:6b:26:ca:4c:72:ee:de:b2:eb:92:17:13:59:b6:48:
e5:cd:e2:c3:3f:9a:91:f3:6f:51:88:36:44:50:17:8c:cb:84:
17:91:63:7f:54:77:10:27:aa:68:65:d0:c7:57:00:5c:f9:f7:
dd:d2:e3:2c:59:14:02:8f:1b:37:db:d6:a3:0e:c3:28:ca:d4:
ba:5a:08:f1:46:9a:af:0b:25:13:62:82:7b:08:cd:d5:29:6e:
0d:46:65:8d:4f:5b:2d:e7:2a:18:37:2d:97:92:ee:35:93:00:
fe:82:7b:40:af:63:22:f9:c0:c8:3d:0c:96:cc:4c:c3:23:39:
08:df:c0:28:b6:cf:92:7a:a2:90:49:fe:83:50:4e:9a:65:82:
02:69:c7:98:13:d7:ef:bc:39:ab:34:34:f4:7f:6a:82:98:37:
b6:ef:c8:79:cd:2f:ac:3a:20:fd:f9:23:3c:07:3b:a5:41:5b:
b9:76:87:19
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Apr 27 13:02:43 2025 by rpki-client