Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/32/252968-b8ba-4e19-84d7-3228286da601/1/UFbHUIQP5cAQOn9RAix87qj-lps.mft
File: UFbHUIQP5cAQOn9RAix87qj-lps.mft (raw, json)
Hash identifier: vFG1y4oIgQXsNQKKmSaYohnpS+oi84pfrfik4o3TzIw=
Subject key identifier: 6F:26:D3:ED:E9:3D:5A:1A:7D:44:E8:63:E6:9B:0A:68:B9:DC:20:8A
Authority key identifier: 50:56:C7:50:84:0F:E5:C0:10:3A:7F:51:02:2C:7C:EE:A8:FE:96:9B
Certificate issuer: /CN=5056c750840fe5c0103a7f51022c7ceea8fe969b
Certificate serial: 0196857F50B8E18F0EE44EA3A97D6B431ADC
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/UFbHUIQP5cAQOn9RAix87qj-lps.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/32/252968-b8ba-4e19-84d7-3228286da601/1/UFbHUIQP5cAQOn9RAix87qj-lps.mft
Manifest number: 1516
Signing time: Wed 30 Apr 2025 07:00:35 +0000
Manifest this update: Wed 30 Apr 2025 07:00:35 +0000
Manifest next update: Thu 01 May 2025 07:00:35 +0000
Files and hashes: 1: Jv9Nh0xOPBNwvCj4qQsYimYMUWo.roa (hash: 8AwiF+JbJZD/dD5pedRyRTuhxKXhlfELIIZ2EaE0IKM=)
2: UFbHUIQP5cAQOn9RAix87qj-lps.crl (hash: frmtR09j1u8ie6t/zJ6PLT732YT8y3jaIwqvypJbbJs=)
3: yXOU2r32sucGxB9-Z9ZhjZOhedM.roa (hash: vAVSTyHryWSEFu+zHv/t5/KHUJutcYo2/piybcJJ41A=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/32/252968-b8ba-4e19-84d7-3228286da601/1/UFbHUIQP5cAQOn9RAix87qj-lps.crl
rsync://rpki.ripe.net/repository/DEFAULT/32/252968-b8ba-4e19-84d7-3228286da601/1/UFbHUIQP5cAQOn9RAix87qj-lps.mft
rsync://rpki.ripe.net/repository/DEFAULT/UFbHUIQP5cAQOn9RAix87qj-lps.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 01 May 2025 07:00:35 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:85:7f:50:b8:e1:8f:0e:e4:4e:a3:a9:7d:6b:43:1a:dc
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=5056c750840fe5c0103a7f51022c7ceea8fe969b
Validity
Not Before: Apr 30 07:00:35 2025 GMT
Not After : May 1 07:00:35 2025 GMT
Subject: CN=6f26d3ede93d5a1a7d44e863e69b0a68b9dc208a
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b8:2e:a8:20:b6:04:c0:9f:c3:7a:d4:a9:43:94:
fa:43:a2:dd:bb:d9:62:54:3d:79:ba:80:1a:07:b8:
32:fe:36:5a:91:4a:25:f4:fb:aa:08:51:c0:20:56:
45:d3:ce:d5:3d:a2:5c:35:f6:03:48:75:42:d8:3a:
1f:38:6d:5f:dd:5d:6f:fd:24:03:5c:3d:d3:f2:92:
09:13:0c:8d:36:77:ec:29:28:12:24:37:2a:21:fa:
9d:0c:ef:26:96:ee:a2:d4:2d:27:80:1c:e1:ef:f4:
b3:1b:8e:da:43:ed:41:b7:bd:f3:1f:16:de:17:d4:
3e:6c:b3:08:c4:a9:6e:26:4b:f3:c3:c7:a0:ba:a3:
15:fe:ef:16:c1:01:d1:d5:36:b3:a7:55:ee:fe:b5:
e9:ec:d3:7b:07:61:28:67:b7:08:6b:b7:df:a3:52:
59:56:0a:f3:44:ed:e7:3c:26:04:8b:bc:e4:eb:ab:
ff:1e:77:77:66:ae:c0:dd:4c:b2:1a:39:a2:59:eb:
35:05:6f:ed:76:10:f0:8b:bd:9b:f5:24:03:76:82:
b1:15:c7:5d:47:27:a4:44:4b:b5:68:cb:49:7f:aa:
4f:c9:c2:26:51:f6:44:e9:e8:5a:e9:8c:c3:44:d8:
19:7d:f0:f1:63:58:2a:32:52:69:48:c2:cb:87:cd:
91:3f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
6F:26:D3:ED:E9:3D:5A:1A:7D:44:E8:63:E6:9B:0A:68:B9:DC:20:8A
X509v3 Authority Key Identifier:
keyid:50:56:C7:50:84:0F:E5:C0:10:3A:7F:51:02:2C:7C:EE:A8:FE:96:9B
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/UFbHUIQP5cAQOn9RAix87qj-lps.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/32/252968-b8ba-4e19-84d7-3228286da601/1/UFbHUIQP5cAQOn9RAix87qj-lps.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/32/252968-b8ba-4e19-84d7-3228286da601/1/UFbHUIQP5cAQOn9RAix87qj-lps.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
2e:0a:d4:8d:cb:89:2b:8d:00:a9:ef:ea:e3:61:64:1a:4d:77:
58:90:a1:3d:80:c1:2c:eb:d0:a6:30:f4:61:fe:b8:ba:57:6f:
fb:20:ba:00:8b:c6:d6:72:93:2e:ef:d2:72:08:af:7d:6f:44:
62:24:5a:fe:b2:86:03:b9:d2:d6:b2:9a:12:98:33:c4:de:6d:
1c:e6:9a:8a:9b:d0:07:4b:39:69:91:0d:13:29:05:2e:e8:31:
7f:2e:a9:aa:64:c2:12:ad:a7:6c:b1:48:60:48:ef:84:aa:09:
97:1e:8b:3d:50:d1:43:9f:47:e0:07:a4:26:01:16:e7:bc:a5:
a8:82:f8:2f:37:91:7d:fa:67:68:13:51:e2:c3:0c:2b:32:df:
98:29:36:21:2e:3d:20:74:fd:0c:08:da:8c:d5:34:1b:e9:29:
85:8b:63:6e:7c:74:e1:d9:32:6b:6f:59:7e:49:10:4e:eb:75:
a1:46:bf:4d:1a:a4:56:0c:68:91:38:53:df:7f:50:ae:05:17:
bc:c5:fb:46:2c:3b:dc:32:41:a0:4c:16:96:e4:5d:5c:ad:19:
a8:d5:22:7c:78:3e:0e:db:52:89:71:3a:bf:30:62:98:c8:37:
e8:c0:6f:92:eb:f9:39:18:14:a3:52:5f:a2:d2:9a:d1:41:93:
ab:6a:7c:be
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Apr 30 15:57:02 2025 by rpki-client