Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/54/b5f6af-3c83-4cb5-b5eb-ba14843c549c/1/UCw35-y1m2Z_qC7PCT5e2HZhqOI.mft
File: UCw35-y1m2Z_qC7PCT5e2HZhqOI.mft (raw, json)
Hash identifier: yYGWTXCyvMGGzB+7ITckdXNwHZztyUNBbgnJiHtBw2Y=
Subject key identifier: 4B:AC:85:65:6E:93:C1:1B:4A:56:85:F4:DA:66:AC:16:22:48:2B:04
Authority key identifier: 50:2C:37:E7:EC:B5:9B:66:7F:A8:2E:CF:09:3E:5E:D8:76:61:A8:E2
Certificate issuer: /CN=502c37e7ecb59b667fa82ecf093e5ed87661a8e2
Certificate serial: 01967831678530F3633C58C68404809AE273
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/UCw35-y1m2Z_qC7PCT5e2HZhqOI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/54/b5f6af-3c83-4cb5-b5eb-ba14843c549c/1/UCw35-y1m2Z_qC7PCT5e2HZhqOI.mft
Manifest number: 0446
Signing time: Sun 27 Apr 2025 17:00:25 +0000
Manifest this update: Sun 27 Apr 2025 17:00:25 +0000
Manifest next update: Mon 28 Apr 2025 17:00:25 +0000
Files and hashes: 1: 0siOn8oVbOzVCasVDaPzmYX1tbc.roa (hash: SBMJ/e1Sts5wpcL+aFgVksq/m8nr6hq1VOYBzLKdoWI=)
2: UCw35-y1m2Z_qC7PCT5e2HZhqOI.crl (hash: tv436gsvYonMmCfhs7A65bardtVxFpLl4VBxbw7rGhE=)
3: jgvyflC9cxUvuv1ddomja9gsSes.roa (hash: 5URFyBRZ0uEAXpl92dbXCwRyKauPGInl6RJ5C4/n3ps=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/54/b5f6af-3c83-4cb5-b5eb-ba14843c549c/1/UCw35-y1m2Z_qC7PCT5e2HZhqOI.crl
rsync://rpki.ripe.net/repository/DEFAULT/54/b5f6af-3c83-4cb5-b5eb-ba14843c549c/1/UCw35-y1m2Z_qC7PCT5e2HZhqOI.mft
rsync://rpki.ripe.net/repository/DEFAULT/UCw35-y1m2Z_qC7PCT5e2HZhqOI.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 28 Apr 2025 14:00:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:78:31:67:85:30:f3:63:3c:58:c6:84:04:80:9a:e2:73
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=502c37e7ecb59b667fa82ecf093e5ed87661a8e2
Validity
Not Before: Apr 27 17:00:25 2025 GMT
Not After : Apr 28 17:00:25 2025 GMT
Subject: CN=4bac85656e93c11b4a5685f4da66ac1622482b04
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ce:7b:82:01:74:43:34:95:97:b7:f8:c2:74:42:
a0:d3:54:13:f5:fa:9e:5f:a2:3e:eb:56:31:37:73:
5d:98:34:8f:13:36:6b:62:cc:89:6f:0d:ea:73:ad:
8f:48:7f:55:15:0a:8d:88:8e:99:bd:2c:7a:0f:bc:
1c:7b:0a:01:65:07:e6:5b:2e:e7:3f:da:0b:03:26:
b4:a2:11:4a:ed:04:4e:aa:cb:9b:41:1a:6c:e6:c8:
e9:5b:23:27:09:39:80:58:39:c1:3a:0c:96:7d:f3:
1d:0b:e3:08:d2:14:a6:36:88:1e:27:ac:e0:ba:61:
86:d7:a3:f2:da:09:8d:f0:5c:44:75:52:e4:69:56:
e1:79:e2:f0:d2:6d:84:4b:b5:d3:24:ba:a5:a9:d0:
4e:cb:87:eb:56:2a:f9:7d:b7:e2:fc:01:84:7b:42:
23:7a:05:b1:e6:d4:3d:30:35:e7:fa:10:12:34:6a:
31:34:71:5e:5e:07:55:55:15:01:57:aa:72:34:6b:
ce:21:4d:66:61:96:58:25:e3:e8:63:75:73:d9:1f:
bb:fc:f0:1a:96:57:61:29:fe:f3:2f:25:e6:6a:25:
3e:94:5f:df:e8:73:d9:3c:e5:47:43:df:85:8b:1d:
c6:30:95:b0:4a:75:9b:f0:d1:77:83:53:a7:91:a2:
51:55
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
4B:AC:85:65:6E:93:C1:1B:4A:56:85:F4:DA:66:AC:16:22:48:2B:04
X509v3 Authority Key Identifier:
keyid:50:2C:37:E7:EC:B5:9B:66:7F:A8:2E:CF:09:3E:5E:D8:76:61:A8:E2
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/UCw35-y1m2Z_qC7PCT5e2HZhqOI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/54/b5f6af-3c83-4cb5-b5eb-ba14843c549c/1/UCw35-y1m2Z_qC7PCT5e2HZhqOI.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/54/b5f6af-3c83-4cb5-b5eb-ba14843c549c/1/UCw35-y1m2Z_qC7PCT5e2HZhqOI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
01:3e:ec:f4:a5:48:ce:fb:c2:11:4f:bd:34:76:fd:11:c2:72:
e0:1c:6b:98:76:f0:e4:f7:8a:0d:46:22:50:e4:29:57:b9:19:
ea:af:d8:f3:07:86:41:c3:e2:a8:3a:d1:9b:fb:65:7c:7f:b8:
ed:73:2f:06:98:bb:8d:ff:96:25:d0:7d:95:f4:4b:d8:fb:1c:
b1:95:37:7d:e0:96:d7:53:39:2c:4c:4f:a0:b1:b2:30:1e:52:
68:2e:5e:3f:32:7a:ac:3d:da:f2:30:c9:7f:aa:e3:e1:67:2e:
47:12:ca:60:7f:89:c9:5e:9e:bd:3b:21:f1:71:5e:5e:af:5a:
e1:da:6a:14:c0:53:6e:6f:39:a5:25:b9:cb:e1:06:79:14:39:
be:e1:b5:27:52:db:06:2b:71:39:7d:fa:bc:b0:1b:59:af:e5:
f2:8e:f4:cb:4d:2c:0a:a2:5c:d0:df:4e:8e:bb:b7:1c:67:be:
fb:e1:b1:89:0c:d1:ee:a7:cc:72:19:a2:83:e2:ea:5f:dd:45:
a8:24:c9:5a:78:8d:9f:71:f4:f1:8b:5f:17:5e:4c:b8:32:76:
f2:0e:bb:11:a8:f8:69:40:33:c9:9d:bc:9f:d2:f2:6a:57:0b:
df:b2:79:5a:8c:73:83:3f:f2:69:28:1a:93:78:28:b2:76:ac:
63:cd:2c:11
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Apr 27 23:48:54 2025 by rpki-client