Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/44/44124d-8b15-45b2-a5c1-7bc73eee1447/1/ubgTmZO-Zl87XQ9pCe8Fj6j5eSI.mft
File: ubgTmZO-Zl87XQ9pCe8Fj6j5eSI.mft (raw, json)
Hash identifier: 2nbLXvCNWattIX9zGzTvaOoUpF8CaToFNvpdHLrr9sU=
Subject key identifier: 26:A5:BF:A0:93:82:B3:0C:8F:A1:05:6E:8B:63:88:3E:B1:63:2D:58
Authority key identifier: B9:B8:13:99:93:BE:66:5F:3B:5D:0F:69:09:EF:05:8F:A8:F9:79:22
Certificate issuer: /CN=b9b8139993be665f3b5d0f6909ef058fa8f97922
Certificate serial: 01967755F942C28931906D18B774B480FAD4
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/ubgTmZO-Zl87XQ9pCe8Fj6j5eSI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/44/44124d-8b15-45b2-a5c1-7bc73eee1447/1/ubgTmZO-Zl87XQ9pCe8Fj6j5eSI.mft
Manifest number: 08DC
Signing time: Sun 27 Apr 2025 13:00:45 +0000
Manifest this update: Sun 27 Apr 2025 13:00:45 +0000
Manifest next update: Mon 28 Apr 2025 13:00:45 +0000
Files and hashes: 1: KdXGUsS6YFFnPjVjyeI04m93TdQ.roa (hash: F1EV3pD+ahdpl3VAKymIXnj+Wbddg7Ey2m0ZW8zB4L0=)
2: bkhY0JpEEO9e7LOCTStEAO3KiFg.roa (hash: nFRZrXuS6GoRY3BCOn9rQkEjbqjSmpEWfOS5j9kS+AQ=)
3: ubgTmZO-Zl87XQ9pCe8Fj6j5eSI.crl (hash: OwEVD4KOwXqvU74/0RFzy0HKFS0JFhI7zTcqSIRKDGQ=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/44/44124d-8b15-45b2-a5c1-7bc73eee1447/1/ubgTmZO-Zl87XQ9pCe8Fj6j5eSI.crl
rsync://rpki.ripe.net/repository/DEFAULT/44/44124d-8b15-45b2-a5c1-7bc73eee1447/1/ubgTmZO-Zl87XQ9pCe8Fj6j5eSI.mft
rsync://rpki.ripe.net/repository/DEFAULT/ubgTmZO-Zl87XQ9pCe8Fj6j5eSI.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 28 Apr 2025 07:29:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:77:55:f9:42:c2:89:31:90:6d:18:b7:74:b4:80:fa:d4
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=b9b8139993be665f3b5d0f6909ef058fa8f97922
Validity
Not Before: Apr 27 13:00:45 2025 GMT
Not After : Apr 28 13:00:45 2025 GMT
Subject: CN=26a5bfa09382b30c8fa1056e8b63883eb1632d58
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b5:8e:05:d1:1e:cb:7a:a7:ed:48:f3:22:36:96:
bf:88:6d:05:e2:49:b6:9c:d6:84:a6:da:91:57:0c:
f9:69:99:20:72:0d:d9:33:2d:43:a4:6e:fd:cd:0f:
99:b4:7c:bd:3b:a3:ed:30:99:33:b9:1b:0a:0c:89:
57:a4:59:11:b3:74:6d:1c:cc:4a:b1:1d:91:f3:39:
60:b8:46:9f:38:6b:09:45:ad:9c:4d:02:3d:14:72:
a8:4c:7b:4f:65:6b:0a:09:12:0e:52:93:ec:2b:59:
6c:97:5e:99:39:89:8e:17:71:97:1a:2c:d9:cb:c9:
32:e9:e4:e3:30:98:1a:0e:6d:18:48:f4:4d:70:87:
a7:50:39:24:89:9c:77:57:f7:f0:a6:51:ca:c6:03:
06:af:13:f5:5f:7e:62:94:1f:19:d2:d9:68:2f:02:
fb:9e:15:4c:7d:85:d8:82:8d:8f:ea:5b:f6:ec:5c:
3a:fa:05:5b:cd:20:b2:20:73:a2:6f:c5:69:0d:f6:
d0:9a:de:40:f2:65:00:07:12:68:de:dd:93:28:2f:
da:05:05:0c:a7:0c:2e:ac:02:8b:20:44:07:1d:e1:
f9:3d:e6:6f:52:e7:a0:ac:d1:7a:46:22:de:18:63:
2c:cf:80:a8:68:d8:b3:5e:0e:d0:d5:b5:25:0c:fa:
ff:89
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
26:A5:BF:A0:93:82:B3:0C:8F:A1:05:6E:8B:63:88:3E:B1:63:2D:58
X509v3 Authority Key Identifier:
keyid:B9:B8:13:99:93:BE:66:5F:3B:5D:0F:69:09:EF:05:8F:A8:F9:79:22
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ubgTmZO-Zl87XQ9pCe8Fj6j5eSI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/44/44124d-8b15-45b2-a5c1-7bc73eee1447/1/ubgTmZO-Zl87XQ9pCe8Fj6j5eSI.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/44/44124d-8b15-45b2-a5c1-7bc73eee1447/1/ubgTmZO-Zl87XQ9pCe8Fj6j5eSI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
90:a6:64:22:1e:c9:27:fa:de:b0:42:5d:b7:e7:69:6c:12:42:
76:1a:52:5d:10:4f:f4:11:d0:4e:6a:24:19:3c:0c:64:d8:3b:
b4:b6:9a:0e:70:01:cf:ae:2c:3b:fb:98:74:4a:4c:98:67:35:
e3:84:86:6d:56:09:61:cc:c6:77:64:77:a1:54:a3:ba:fc:5d:
74:11:a4:0c:d4:aa:3d:93:55:51:df:0a:26:94:c4:26:4c:34:
fb:06:d9:d3:d6:12:bd:88:b6:96:51:d5:4b:5f:70:bf:79:70:
05:94:78:02:31:ec:28:3a:f4:18:02:9b:42:ce:2f:a8:57:a6:
cb:01:e4:94:c1:a1:fc:0c:8c:77:b6:94:35:8a:1f:8a:d4:7e:
5c:ba:cc:71:61:e3:8c:c3:50:5c:e7:e5:38:7d:dc:65:a2:05:
89:53:9e:10:74:fd:f3:94:18:b5:74:6f:af:77:1a:03:f9:05:
c6:26:35:38:aa:bc:bf:38:71:ff:06:1f:f6:85:3f:ce:a6:93:
49:c8:78:14:72:ac:1b:8c:04:7c:85:2b:be:76:f7:ca:57:ca:
af:7c:d8:54:f4:1f:75:79:c2:ea:4d:a5:f2:f7:fc:b3:ac:be:
1d:15:02:65:ab:bf:33:2d:e5:01:dd:1f:43:28:55:b8:29:43:
54:c7:9e:33
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Apr 27 16:27:25 2025 by rpki-client