Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/46/fbbf8d-2c43-429d-b5cd-fcc220644558/1/UpNDI1WBz0EEGQ2noMoXS5wNC9U.mft
File: UpNDI1WBz0EEGQ2noMoXS5wNC9U.mft (raw, json)
Hash identifier: gqdm9z5/A2WyXUHcyJZgiCdYIKFLnSX1nQgAslUrcl4=
Subject key identifier: 67:56:BE:86:87:0D:9C:94:2D:DF:AC:B3:95:6C:B3:85:3C:06:8F:CF
Authority key identifier: 52:93:43:23:55:81:CF:41:04:19:0D:A7:A0:CA:17:4B:9C:0D:0B:D5
Certificate issuer: /CN=529343235581cf4104190da7a0ca174b9c0d0bd5
Certificate serial: 019680224D5D05D791E914AF0E4C7E6E1844
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/UpNDI1WBz0EEGQ2noMoXS5wNC9U.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/46/fbbf8d-2c43-429d-b5cd-fcc220644558/1/UpNDI1WBz0EEGQ2noMoXS5wNC9U.mft
Manifest number: 0D74
Signing time: Tue 29 Apr 2025 06:00:53 +0000
Manifest this update: Tue 29 Apr 2025 06:00:53 +0000
Manifest next update: Wed 30 Apr 2025 06:00:53 +0000
Files and hashes: 1: 6O-rdAPfJL5ja0fsAq0cDrxpBv4.roa (hash: 6xTcUx7aYzPFSdoIn+1iA2U6ilYMmAiW4t3gwfarhms=)
2: UpNDI1WBz0EEGQ2noMoXS5wNC9U.crl (hash: ja+72fUrBkaCoV5rR15JwQoXkGBi8TWYe6xIgVhvovs=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/46/fbbf8d-2c43-429d-b5cd-fcc220644558/1/UpNDI1WBz0EEGQ2noMoXS5wNC9U.crl
rsync://rpki.ripe.net/repository/DEFAULT/46/fbbf8d-2c43-429d-b5cd-fcc220644558/1/UpNDI1WBz0EEGQ2noMoXS5wNC9U.mft
rsync://rpki.ripe.net/repository/DEFAULT/UpNDI1WBz0EEGQ2noMoXS5wNC9U.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 30 Apr 2025 06:00:53 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:80:22:4d:5d:05:d7:91:e9:14:af:0e:4c:7e:6e:18:44
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=529343235581cf4104190da7a0ca174b9c0d0bd5
Validity
Not Before: Apr 29 06:00:53 2025 GMT
Not After : Apr 30 06:00:53 2025 GMT
Subject: CN=6756be86870d9c942ddfacb3956cb3853c068fcf
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bc:88:60:58:fc:a4:42:9c:2c:78:1d:40:ad:c7:
c1:6c:15:1e:7b:91:3c:ec:3a:3e:58:79:d5:e7:75:
85:ef:df:3c:24:a5:da:a0:1b:39:96:f7:56:e9:f8:
1f:1c:e6:a5:db:0c:61:45:6f:1f:59:ad:4e:8a:5f:
9a:96:49:a3:f7:ed:de:f8:4d:02:2c:b9:f9:63:86:
0e:da:33:0a:59:b2:34:35:21:b7:24:ae:24:2a:15:
57:e1:53:fc:23:f9:19:23:53:d4:94:e1:14:eb:af:
aa:12:7a:7d:4d:98:f8:12:49:6f:48:53:41:f7:fa:
cf:fc:2e:50:d4:4f:4d:17:c7:d4:a5:bf:d2:21:a1:
19:fb:05:73:55:46:75:f8:f5:e1:b4:ff:48:00:43:
20:23:4d:59:22:8e:6e:47:5d:15:1b:64:79:bc:26:
6c:fe:5d:63:11:77:43:2a:ee:bf:67:dd:5b:43:2e:
59:24:4d:41:40:dd:8e:45:d8:3e:f3:b6:05:f7:0c:
fd:ae:23:41:66:67:3b:38:1c:7a:c1:4d:54:cb:19:
83:d2:fc:c9:df:77:cc:a4:c8:d7:3f:fd:2d:40:01:
71:88:94:98:c5:7a:7c:d5:81:82:9b:6f:3f:83:d0:
2f:62:f8:18:68:43:c4:c8:2f:16:51:9b:41:29:ea:
73:1b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
67:56:BE:86:87:0D:9C:94:2D:DF:AC:B3:95:6C:B3:85:3C:06:8F:CF
X509v3 Authority Key Identifier:
keyid:52:93:43:23:55:81:CF:41:04:19:0D:A7:A0:CA:17:4B:9C:0D:0B:D5
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/UpNDI1WBz0EEGQ2noMoXS5wNC9U.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/46/fbbf8d-2c43-429d-b5cd-fcc220644558/1/UpNDI1WBz0EEGQ2noMoXS5wNC9U.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/46/fbbf8d-2c43-429d-b5cd-fcc220644558/1/UpNDI1WBz0EEGQ2noMoXS5wNC9U.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
02:60:8e:b1:ac:01:c1:b8:90:78:6e:92:f5:fc:70:80:8d:85:
56:9e:5a:f0:ea:cf:0a:ba:73:66:78:34:5f:28:89:d8:0b:64:
38:be:ae:1d:16:de:e1:4a:8d:07:9b:b9:92:20:c9:cf:6d:47:
6d:2f:8d:a2:8e:dc:50:f1:5a:ae:46:ca:e2:34:d6:98:59:19:
3a:77:3e:ba:01:57:a3:3f:da:cc:37:0c:a3:0e:00:00:83:6a:
59:4a:56:8d:45:a4:ce:bb:19:e7:5a:1a:2d:de:35:79:5e:f1:
02:f2:9b:c1:48:3a:f1:b8:b4:18:ea:bd:43:17:d9:8f:ec:c6:
89:44:20:7e:40:e0:ad:9e:fe:9f:0b:5c:c8:26:e5:13:d3:ca:
30:7d:ec:92:09:b5:fc:56:ec:af:e0:8b:ba:2d:0a:61:c1:64:
e1:b9:15:e1:bf:2f:15:0e:e8:ef:c0:f2:c3:54:77:e0:f7:9e:
50:aa:07:fb:a9:83:b8:c0:25:60:f0:24:87:29:4b:23:2a:c6:
84:11:92:33:0e:64:4b:89:45:aa:56:1c:1d:3b:bc:b0:73:1d:
aa:73:d7:b2:e5:16:8b:eb:fc:9c:b1:f9:c6:de:55:8d:60:1f:
8f:28:69:6e:32:f3:c5:12:45:10:68:d3:65:0a:b7:0c:32:fb:
d6:01:8c:53
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Apr 29 10:47:03 2025 by rpki-client