Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/54/acfcb6-d78a-448a-a761-dd3b4f8381c4/1/UJ33KNG0ZjQFSXLSlF_aWAc7V2I.mft
File: UJ33KNG0ZjQFSXLSlF_aWAc7V2I.mft (raw, json)
Hash identifier: 49qnwR5LABkSfuKtxWq7xjSYS3t8K6CO9kaChHzINAk=
Subject key identifier: 1B:C8:29:09:D9:8D:74:D7:87:4C:D8:69:2E:BB:E7:0B:56:98:1F:D0
Authority key identifier: 50:9D:F7:28:D1:B4:66:34:05:49:72:D2:94:5F:DA:58:07:3B:57:62
Certificate issuer: /CN=509df728d1b46634054972d2945fda58073b5762
Certificate serial: 0196914C6C62ED231D0F83586C4DA72375B6
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/UJ33KNG0ZjQFSXLSlF_aWAc7V2I.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/54/acfcb6-d78a-448a-a761-dd3b4f8381c4/1/UJ33KNG0ZjQFSXLSlF_aWAc7V2I.mft
Manifest number: 1521
Signing time: Fri 02 May 2025 14:00:26 +0000
Manifest this update: Fri 02 May 2025 14:00:26 +0000
Manifest next update: Sat 03 May 2025 14:00:26 +0000
Files and hashes: 1: ESRRBuPxkFpgbvZAxR8IDZJapd4.roa (hash: fCF3gX9WpLCGv/7JJRZ5dUsdJiPQCU2D4419eMUm0Lw=)
2: PbHlg7ScZeHhyNVnOAfVfDkj0UQ.roa (hash: cTb4Y7y4+1yzCxetjTY01rGPBaGcJj2ddHFrkZyJApU=)
3: UJ33KNG0ZjQFSXLSlF_aWAc7V2I.crl (hash: Qk5pztMAOLdBPLfn7k4tUMWak0qaP4PXVxLBQDIlURE=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/54/acfcb6-d78a-448a-a761-dd3b4f8381c4/1/UJ33KNG0ZjQFSXLSlF_aWAc7V2I.crl
rsync://rpki.ripe.net/repository/DEFAULT/54/acfcb6-d78a-448a-a761-dd3b4f8381c4/1/UJ33KNG0ZjQFSXLSlF_aWAc7V2I.mft
rsync://rpki.ripe.net/repository/DEFAULT/UJ33KNG0ZjQFSXLSlF_aWAc7V2I.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 03 May 2025 14:00:26 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:91:4c:6c:62:ed:23:1d:0f:83:58:6c:4d:a7:23:75:b6
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=509df728d1b46634054972d2945fda58073b5762
Validity
Not Before: May 2 14:00:26 2025 GMT
Not After : May 3 14:00:26 2025 GMT
Subject: CN=1bc82909d98d74d7874cd8692ebbe70b56981fd0
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c9:99:8c:a3:89:48:22:05:5c:b1:18:f4:c5:f3:
cc:4a:24:ab:5b:2b:46:e9:59:79:b6:25:0b:5c:66:
bb:b5:1d:39:b6:79:c9:77:d6:c6:7c:d3:31:17:8a:
a6:55:8c:f5:33:23:57:cd:7a:99:69:ea:07:97:9f:
1e:b6:cf:f3:c5:57:66:40:b9:fd:13:10:70:22:81:
d4:64:62:87:60:7f:44:de:90:a8:bc:ea:e7:2a:fd:
06:bb:ca:3e:e5:c0:c6:c6:ab:d0:d8:4a:d8:d7:91:
8d:83:b7:53:15:b0:50:58:c8:a4:d0:78:29:bf:b4:
8f:32:8f:a9:b1:da:04:f4:b6:32:fc:4f:a2:75:df:
b9:d3:d2:8c:0f:9d:a0:d0:da:39:6a:87:56:96:fc:
09:9a:2a:bb:bd:c0:d7:0c:01:08:3b:35:69:2a:10:
5d:2d:be:b8:6b:05:32:c7:c8:6b:36:d3:06:b7:c4:
e3:bd:85:f3:aa:f1:9f:55:ca:b5:53:f9:95:e3:2f:
9f:18:30:cc:bb:ab:fb:c4:d2:a2:14:6b:e0:dc:42:
f1:d1:aa:34:34:26:d6:16:e5:b8:8a:03:1e:2b:41:
8f:08:f4:45:b4:86:d3:c2:58:be:21:e7:70:2f:d4:
37:c0:95:c6:6a:cd:1b:bf:cf:a7:00:b1:9f:50:44:
6e:af
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
1B:C8:29:09:D9:8D:74:D7:87:4C:D8:69:2E:BB:E7:0B:56:98:1F:D0
X509v3 Authority Key Identifier:
keyid:50:9D:F7:28:D1:B4:66:34:05:49:72:D2:94:5F:DA:58:07:3B:57:62
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/UJ33KNG0ZjQFSXLSlF_aWAc7V2I.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/54/acfcb6-d78a-448a-a761-dd3b4f8381c4/1/UJ33KNG0ZjQFSXLSlF_aWAc7V2I.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/54/acfcb6-d78a-448a-a761-dd3b4f8381c4/1/UJ33KNG0ZjQFSXLSlF_aWAc7V2I.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
7a:e7:8e:b0:51:29:02:00:fb:0f:d2:b1:fb:7d:94:6c:ef:4f:
5c:42:f4:d7:3d:b4:9e:61:e2:50:63:98:cf:68:b1:a1:43:b2:
0d:80:63:b7:be:dc:5a:a6:50:1c:e9:ee:11:79:f5:97:aa:e0:
65:95:fc:04:f1:eb:78:ad:8a:11:f2:25:c1:94:7c:cd:9b:99:
58:f4:27:34:2b:55:98:35:d8:15:79:6f:6e:a4:b4:ce:6c:1d:
57:bb:3a:c2:1e:af:13:d8:bb:fd:26:21:3e:9d:44:36:d3:bf:
24:4c:77:18:cb:dd:3b:97:1e:d4:64:0f:7e:f4:37:02:4f:20:
40:09:84:e9:a6:f1:46:54:32:9c:30:77:94:10:a0:42:e9:62:
7d:35:35:58:5b:5c:c0:96:fb:09:f2:0a:05:f2:57:09:25:0b:
78:d2:f3:11:8a:55:f8:98:c8:c0:13:e7:15:59:d6:86:76:44:
97:6d:8e:99:ce:6d:d3:86:d3:98:58:51:e4:4b:bc:dd:02:5b:
1a:f7:d9:a0:1d:da:aa:be:f7:51:af:b2:ad:63:e3:04:0b:21:
b4:39:40:ff:74:be:49:60:73:fc:f3:cc:33:92:61:f0:e3:87:
69:cf:dd:bc:1f:a0:fd:45:42:4b:0d:c0:50:31:4e:14:9f:95:
f4:c3:0c:ac
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri May 2 23:23:14 2025 by rpki-client