Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/3f/6207e8-eeb5-4334-8dfe-63799c026a57/1/UUdjGNcb9lj5qEX1SrJ72JmJJDc.mft
File: UUdjGNcb9lj5qEX1SrJ72JmJJDc.mft (raw, json)
Hash identifier: mq0HKEiL3uwxAj1LRO2aEqBt5N/MQd3a4/K6+6bbWNk=
Subject key identifier: A8:52:B4:7B:05:B4:B2:36:73:9D:2E:90:61:97:2C:25:28:3D:E9:1C
Authority key identifier: 51:47:63:18:D7:1B:F6:58:F9:A8:45:F5:4A:B2:7B:D8:99:89:24:37
Certificate issuer: /CN=51476318d71bf658f9a845f54ab27bd899892437
Certificate serial: 0196895C9A69D056EF7EDFDC105FE826B2CF
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/UUdjGNcb9lj5qEX1SrJ72JmJJDc.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/3f/6207e8-eeb5-4334-8dfe-63799c026a57/1/UUdjGNcb9lj5qEX1SrJ72JmJJDc.mft
Manifest number: 1519
Signing time: Thu 01 May 2025 01:01:09 +0000
Manifest this update: Thu 01 May 2025 01:01:09 +0000
Manifest next update: Fri 02 May 2025 01:01:09 +0000
Files and hashes: 1: EPpzGnxJ9r252oa5CpCAjLjJAgw.roa (hash: 9S/swt0ExX/3EIBGsHjHQcT/9v/asJqd/AUXI6MuTis=)
2: UUdjGNcb9lj5qEX1SrJ72JmJJDc.crl (hash: KNzogK52QVScXxht5tu1xnuAoo+aVKmhVJN1u/WsYBY=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/3f/6207e8-eeb5-4334-8dfe-63799c026a57/1/UUdjGNcb9lj5qEX1SrJ72JmJJDc.crl
rsync://rpki.ripe.net/repository/DEFAULT/3f/6207e8-eeb5-4334-8dfe-63799c026a57/1/UUdjGNcb9lj5qEX1SrJ72JmJJDc.mft
rsync://rpki.ripe.net/repository/DEFAULT/UUdjGNcb9lj5qEX1SrJ72JmJJDc.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 02 May 2025 01:01:09 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:89:5c:9a:69:d0:56:ef:7e:df:dc:10:5f:e8:26:b2:cf
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=51476318d71bf658f9a845f54ab27bd899892437
Validity
Not Before: May 1 01:01:09 2025 GMT
Not After : May 2 01:01:09 2025 GMT
Subject: CN=a852b47b05b4b236739d2e9061972c25283de91c
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d1:01:d7:46:ed:d0:01:5a:31:38:c0:69:63:bb:
ec:04:14:91:7a:61:0b:1f:f3:d5:cf:b8:90:d4:fe:
31:f5:82:6e:1d:99:a4:bf:cb:35:dc:04:63:17:d5:
c9:af:39:ca:7d:48:c2:7c:c4:e2:be:2c:d4:30:e6:
2c:f4:c5:6c:4e:2b:96:87:3c:85:9b:13:1d:04:bb:
e5:8a:8e:94:5d:01:7e:86:51:54:1d:85:64:64:4a:
90:55:bf:ee:12:44:09:a1:c2:09:31:29:53:4f:9a:
5c:53:49:e7:cf:a0:6e:aa:2c:d9:e5:b0:db:54:3a:
c9:99:50:f7:2d:25:0d:80:79:3e:c2:59:81:7c:93:
3d:86:23:a5:fc:a9:56:68:4d:23:93:0e:0d:2a:45:
a1:bc:d0:09:6d:2c:b7:ed:40:37:8b:93:9f:d9:3a:
19:ce:2c:93:55:46:9f:63:7d:51:c8:1d:6d:67:25:
e3:30:33:32:fe:63:53:c6:b5:9a:10:38:28:7d:d8:
c4:d1:8c:8d:76:e7:c8:48:58:22:c1:eb:d9:41:52:
58:ed:34:38:c3:21:e4:4f:43:61:ae:b7:72:05:e9:
ed:8c:e9:37:45:5d:f1:86:70:c0:33:fc:53:38:65:
c5:73:50:1c:7e:69:86:f9:dc:62:38:89:57:9e:7a:
e5:49
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A8:52:B4:7B:05:B4:B2:36:73:9D:2E:90:61:97:2C:25:28:3D:E9:1C
X509v3 Authority Key Identifier:
keyid:51:47:63:18:D7:1B:F6:58:F9:A8:45:F5:4A:B2:7B:D8:99:89:24:37
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/UUdjGNcb9lj5qEX1SrJ72JmJJDc.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/3f/6207e8-eeb5-4334-8dfe-63799c026a57/1/UUdjGNcb9lj5qEX1SrJ72JmJJDc.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/3f/6207e8-eeb5-4334-8dfe-63799c026a57/1/UUdjGNcb9lj5qEX1SrJ72JmJJDc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
c7:a1:82:fa:ab:41:a8:cc:4a:96:30:23:01:44:b4:c5:72:fa:
c1:9b:8a:57:e5:ec:84:47:bc:95:95:c7:57:6f:98:d4:1f:41:
3a:de:18:9e:d4:ab:7f:56:1e:23:a2:c6:12:68:a9:a5:0f:0f:
95:50:5d:5c:a4:b4:4c:42:4e:f7:7f:79:fd:50:d1:d2:4e:dc:
1d:74:fd:c8:04:e9:52:5d:9a:3a:46:a4:28:34:79:b2:60:f5:
a6:14:d7:7c:b7:7a:57:36:b0:99:b3:19:81:21:9f:b5:d6:36:
22:52:0f:b1:7f:af:fe:42:70:97:be:9f:31:a0:fa:a6:ce:e8:
92:13:c7:8f:3f:fb:55:50:33:18:5d:6c:67:ef:7e:ab:5d:d3:
52:09:06:fc:fc:56:3a:10:63:ab:bc:18:d4:36:32:41:f6:a7:
29:19:d4:b2:fe:b3:7f:79:de:94:a3:49:78:bc:b7:e0:b0:48:
4f:66:10:b9:5b:0c:44:de:d0:40:9c:06:f7:fc:48:78:fc:24:
bd:41:15:0e:71:e8:2d:bc:1a:dc:08:1d:44:15:80:45:97:af:
85:9d:c7:ec:1b:8a:55:2b:9d:fd:ae:13:46:83:1e:ca:f1:c0:
fc:8e:a9:af:b8:77:d2:af:30:55:7d:3b:0f:60:e1:99:e5:55:
01:45:a0:dc
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu May 1 11:17:11 2025 by rpki-client