Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/4d/ff0a7d-dccd-47ce-b21d-14809c938b76/1/UJyPMqH0KB9xRjiV1UPHF5z3-Vk.mft
File: UJyPMqH0KB9xRjiV1UPHF5z3-Vk.mft (raw, json)
Hash identifier: 7Bh1B3vSDEVvrIOMePVW3KDuabYniMUUc3uNPJJIvP8=
Subject key identifier: EE:8C:AF:3E:49:71:AE:CB:38:E7:B4:BB:96:0D:C2:8B:BD:A6:4A:F8
Authority key identifier: 50:9C:8F:32:A1:F4:28:1F:71:46:38:95:D5:43:C7:17:9C:F7:F9:59
Certificate issuer: /CN=509c8f32a1f4281f71463895d543c7179cf7f959
Certificate serial: 0196767A5F2ABE7F702EAF7DEA219062A40A
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/UJyPMqH0KB9xRjiV1UPHF5z3-Vk.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/4d/ff0a7d-dccd-47ce-b21d-14809c938b76/1/UJyPMqH0KB9xRjiV1UPHF5z3-Vk.mft
Manifest number: 1504
Signing time: Sun 27 Apr 2025 09:00:53 +0000
Manifest this update: Sun 27 Apr 2025 09:00:53 +0000
Manifest next update: Mon 28 Apr 2025 09:00:53 +0000
Files and hashes: 1: 1-qC_h0BMH68nwZM--m9RrJPfUSU.roa (hash: dGjZPTTJM5HpRM58D6GZPV5SzYmb4kq7Kyp7lE449Zo=)
2: UJyPMqH0KB9xRjiV1UPHF5z3-Vk.crl (hash: +aGbubeGkjuc0Swoz+7CQjWXWFaIQqhcrPzeD7FR5RM=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/4d/ff0a7d-dccd-47ce-b21d-14809c938b76/1/UJyPMqH0KB9xRjiV1UPHF5z3-Vk.crl
rsync://rpki.ripe.net/repository/DEFAULT/4d/ff0a7d-dccd-47ce-b21d-14809c938b76/1/UJyPMqH0KB9xRjiV1UPHF5z3-Vk.mft
rsync://rpki.ripe.net/repository/DEFAULT/UJyPMqH0KB9xRjiV1UPHF5z3-Vk.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 28 Apr 2025 07:29:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:76:7a:5f:2a:be:7f:70:2e:af:7d:ea:21:90:62:a4:0a
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=509c8f32a1f4281f71463895d543c7179cf7f959
Validity
Not Before: Apr 27 09:00:53 2025 GMT
Not After : Apr 28 09:00:53 2025 GMT
Subject: CN=ee8caf3e4971aecb38e7b4bb960dc28bbda64af8
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c3:af:2c:0a:5f:08:77:88:87:31:a6:e1:6f:02:
9b:ae:c7:5e:f7:0d:51:cf:bb:48:7d:4b:8e:57:3d:
61:df:6f:a0:7e:f2:fc:cb:f1:05:39:7f:69:98:47:
83:bb:82:d5:7e:c0:59:81:af:6b:e7:b2:92:63:9a:
bb:ce:d9:08:75:99:4d:a9:3b:d6:73:c2:77:52:8b:
a2:10:e8:58:c6:fa:0f:d0:41:63:41:5e:82:27:b9:
23:ca:60:fd:e9:16:e3:e0:45:bb:69:41:b1:af:8e:
7b:df:fd:d4:7d:e2:d1:67:1e:ff:17:37:7b:1f:c1:
f1:15:20:ba:be:e9:13:a4:1a:d8:4c:d2:18:dd:23:
71:ac:45:19:57:e7:6a:ab:02:c8:03:9e:29:ff:72:
40:06:ae:5d:d7:81:7f:f2:7d:77:e5:07:c2:9f:62:
23:ee:21:c9:01:dc:66:f7:c8:f1:be:6f:d2:6a:c5:
fe:68:ec:43:11:29:b6:27:6c:79:13:69:d1:28:62:
c0:bd:08:10:d3:e2:a0:b7:dd:7c:5d:c6:da:20:9b:
ca:12:12:7c:19:6d:32:ca:43:a5:35:b3:d1:91:e6:
3d:2c:a3:6e:f2:52:b5:78:d0:88:30:df:08:c9:bb:
74:6f:f7:4c:b3:ef:e9:02:47:b1:70:01:bb:ff:cc:
56:cd
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
EE:8C:AF:3E:49:71:AE:CB:38:E7:B4:BB:96:0D:C2:8B:BD:A6:4A:F8
X509v3 Authority Key Identifier:
keyid:50:9C:8F:32:A1:F4:28:1F:71:46:38:95:D5:43:C7:17:9C:F7:F9:59
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/UJyPMqH0KB9xRjiV1UPHF5z3-Vk.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/4d/ff0a7d-dccd-47ce-b21d-14809c938b76/1/UJyPMqH0KB9xRjiV1UPHF5z3-Vk.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/4d/ff0a7d-dccd-47ce-b21d-14809c938b76/1/UJyPMqH0KB9xRjiV1UPHF5z3-Vk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
32:da:1b:c4:0d:cf:e5:ac:ef:9c:4e:e9:5a:ac:ec:ac:95:56:
ea:0a:d7:c6:b5:a8:dd:08:46:bd:20:bd:61:86:b7:ff:c9:8f:
21:da:ca:97:ca:62:eb:3c:a1:bf:0c:7f:db:a9:36:23:f0:74:
6b:cd:b6:45:61:f6:3d:b6:7b:64:7d:df:66:a6:7a:c0:52:22:
37:df:1f:79:87:84:2b:54:d0:e3:9c:ea:c2:79:b5:36:55:45:
3e:c5:59:61:88:b5:a5:5d:d0:ce:f6:48:e0:ff:44:4c:b0:b3:
f4:9c:7a:d5:06:3e:a5:43:75:77:0e:0e:9e:b9:d5:65:c9:0a:
90:43:18:ca:0a:77:a7:f9:4d:8e:46:77:c6:44:f3:9b:75:66:
88:ca:c6:b3:a6:ec:9f:5c:f3:fd:cd:1b:fb:76:65:9f:2e:0f:
2a:89:aa:4a:64:9f:0d:44:f4:1d:17:8c:9f:28:42:de:83:7f:
f9:bb:23:f6:2f:0c:b8:4e:bd:0e:c9:5a:6b:2b:d8:c4:df:fc:
2e:ec:5d:8f:27:c1:b6:96:4e:c8:ee:a5:1a:7e:6a:7a:f0:b2:
16:53:8b:30:75:c0:14:4d:7f:22:da:38:58:5f:c1:1b:79:9b:
50:0a:ba:45:76:df:54:ed:3a:01:53:db:8f:ca:5e:f0:ec:43:
d5:7e:a1:d6
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Apr 27 16:01:34 2025 by rpki-client