Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/50/6558ec-d568-4cb9-a03a-8366b164dd66/1/Ul7JPXynN0Sywfu23aZEk8KklcE.mft
File: Ul7JPXynN0Sywfu23aZEk8KklcE.mft (raw, json)
Hash identifier: Shz81sQ6xiQz6bU5BQzImzXI4K9qszPI3HXT2eD6p/I=
Subject key identifier: 8D:AA:2D:E7:86:26:9D:A0:C4:8B:89:F4:6D:93:A3:5D:8E:7D:38:69
Authority key identifier: 52:5E:C9:3D:7C:A7:37:44:B2:C1:FB:B6:DD:A6:44:93:C2:A4:95:C1
Certificate issuer: /CN=525ec93d7ca73744b2c1fbb6dda64493c2a495c1
Certificate serial: 01968C263D6D5D50F32DD1F9A82D4A94883E
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Ul7JPXynN0Sywfu23aZEk8KklcE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/50/6558ec-d568-4cb9-a03a-8366b164dd66/1/Ul7JPXynN0Sywfu23aZEk8KklcE.mft
Manifest number: 0379
Signing time: Thu 01 May 2025 14:00:38 +0000
Manifest this update: Thu 01 May 2025 14:00:38 +0000
Manifest next update: Fri 02 May 2025 14:00:38 +0000
Files and hashes: 1: 22DCbI9HvmzBDVGkxBm2WtXk528.roa (hash: 9ILpOZ8JHc5ka7qIZ58Ggk4y/F3lo6ZaZYJCwIqc3NU=)
2: Ul7JPXynN0Sywfu23aZEk8KklcE.crl (hash: YytTQPTDr1Mi2SFyznjS0Nnmikw/G/8aVNrB8HD8F9o=)
3: jeCifaYzZ5yF8G9Sciofq7w0n90.roa (hash: HV83fet9uguwCmg88F5Wp34425cNOk2TAaGpYDTRo7Q=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/50/6558ec-d568-4cb9-a03a-8366b164dd66/1/Ul7JPXynN0Sywfu23aZEk8KklcE.crl
rsync://rpki.ripe.net/repository/DEFAULT/50/6558ec-d568-4cb9-a03a-8366b164dd66/1/Ul7JPXynN0Sywfu23aZEk8KklcE.mft
rsync://rpki.ripe.net/repository/DEFAULT/Ul7JPXynN0Sywfu23aZEk8KklcE.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 02 May 2025 14:00:38 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:8c:26:3d:6d:5d:50:f3:2d:d1:f9:a8:2d:4a:94:88:3e
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=525ec93d7ca73744b2c1fbb6dda64493c2a495c1
Validity
Not Before: May 1 14:00:38 2025 GMT
Not After : May 2 14:00:38 2025 GMT
Subject: CN=8daa2de786269da0c48b89f46d93a35d8e7d3869
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c9:48:c1:39:ba:17:53:e4:be:74:1f:a7:17:8b:
df:4b:93:20:3f:a4:57:06:4b:c2:07:f0:7d:44:20:
12:79:d2:8a:bc:b0:02:c9:e0:47:28:c6:d4:58:3a:
0c:ed:0b:a4:4e:44:97:aa:e0:db:bb:94:a9:7d:5d:
09:a6:c2:9e:68:0e:35:34:ac:2b:ad:78:67:a5:02:
11:cd:49:05:93:68:cb:87:db:4e:a6:46:b4:90:09:
55:40:40:66:2f:fd:64:5d:57:0d:99:d0:35:d1:86:
9f:e9:4f:ae:68:34:84:8c:4a:4c:69:40:b0:1c:26:
bf:f5:ad:8a:34:7f:12:2f:95:5d:ca:df:67:d2:07:
58:5c:47:d6:a8:47:6c:33:e9:c5:d0:68:9f:9f:b3:
7e:8a:53:77:40:b2:93:cf:4f:54:a5:65:ad:6f:ab:
02:64:f7:a5:28:a0:cc:7b:08:b2:bd:a0:93:30:3d:
ca:0d:40:81:80:0a:9d:ee:0c:e1:0a:48:e5:07:6f:
14:3a:08:63:40:fa:5d:f3:ad:a2:b5:ad:15:aa:2b:
2f:7a:d1:1a:47:ae:b9:f1:9b:ff:d9:a6:17:9c:fa:
f1:01:58:47:10:d9:49:10:6f:26:c5:ca:14:a7:de:
2a:86:69:c6:b9:35:5b:65:15:2e:19:6f:ab:c5:4c:
75:0f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
8D:AA:2D:E7:86:26:9D:A0:C4:8B:89:F4:6D:93:A3:5D:8E:7D:38:69
X509v3 Authority Key Identifier:
keyid:52:5E:C9:3D:7C:A7:37:44:B2:C1:FB:B6:DD:A6:44:93:C2:A4:95:C1
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Ul7JPXynN0Sywfu23aZEk8KklcE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/50/6558ec-d568-4cb9-a03a-8366b164dd66/1/Ul7JPXynN0Sywfu23aZEk8KklcE.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/50/6558ec-d568-4cb9-a03a-8366b164dd66/1/Ul7JPXynN0Sywfu23aZEk8KklcE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
3d:01:5f:11:88:37:b0:21:2a:7d:98:80:21:7d:81:7a:76:93:
93:1f:44:8f:fe:b3:48:21:f2:4b:78:90:e6:e9:62:90:fc:3b:
93:e1:67:93:0d:0d:24:5d:89:21:3e:bc:fa:37:a4:11:ac:08:
a3:ec:c2:0d:35:9e:11:81:9f:fd:98:f0:4e:9d:d1:64:2c:35:
6f:a5:25:c0:55:03:53:02:d7:f4:24:5d:39:db:75:0d:fc:0a:
d5:c0:59:73:00:6d:2e:47:c5:55:ff:83:0a:8d:78:b3:56:63:
0d:48:bf:64:27:4d:fd:94:65:19:6b:43:5a:2e:b5:23:7e:ba:
cc:78:a2:6a:3c:54:8e:6e:b9:b8:8a:1a:6d:a8:eb:ca:ee:d8:
c8:7d:4e:22:45:07:c6:c9:12:6a:f6:4e:30:ed:7e:7a:93:dd:
56:f3:95:8a:5b:8c:b7:f1:e8:de:6d:86:f6:ea:65:98:b9:cc:
38:a0:83:03:5c:92:a3:74:f1:fd:08:d9:da:a7:b7:fc:35:c5:
a7:68:f4:e4:d1:c2:db:cb:aa:bc:2c:ca:fa:94:a1:4a:bf:88:
92:b7:4b:f8:82:cd:c3:7d:13:42:d2:d3:75:0c:41:9e:52:4d:
d7:cd:f4:83:87:e5:9f:ff:e4:93:f1:34:5d:74:19:02:34:f6:
9d:47:01:0d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu May 1 20:48:33 2025 by rpki-client