Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/5f/31fd16-6d00-4d09-a8d4-c1d6c8f319c1/1/UQzngdsNx-T59JQUWileTMsSHK4.mft
File: UQzngdsNx-T59JQUWileTMsSHK4.mft (raw, json)
Hash identifier: r4QfDi18aKCyCIaRZDnpc2xLbWI31dLq+39Q89k/o8Y=
Subject key identifier: 52:FB:F8:CA:93:6B:12:C3:26:23:66:8F:0C:51:0A:E4:DC:19:9C:45
Authority key identifier: 51:0C:E7:81:DB:0D:C7:E4:F9:F4:94:14:5A:29:5E:4C:CB:12:1C:AE
Certificate issuer: /CN=510ce781db0dc7e4f9f494145a295e4ccb121cae
Certificate serial: 01967567C1D898C21F2C97C88E27B0CD977D
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/UQzngdsNx-T59JQUWileTMsSHK4.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/5f/31fd16-6d00-4d09-a8d4-c1d6c8f319c1/1/UQzngdsNx-T59JQUWileTMsSHK4.mft
Manifest number: 032D
Signing time: Sun 27 Apr 2025 04:00:56 +0000
Manifest this update: Sun 27 Apr 2025 04:00:56 +0000
Manifest next update: Mon 28 Apr 2025 04:00:56 +0000
Files and hashes: 1: 7spEQVqcL4vrSpVaVj2ZHbdCXAk.roa (hash: fpYq7eNAV/2Q3SZsPHHqVIOf+rVV6huCrpQyiQCeASw=)
2: UQzngdsNx-T59JQUWileTMsSHK4.crl (hash: JoPXWtZ2ztex9YRff2DIaiTlqTZv6GKa7tUt9M7BqQI=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/5f/31fd16-6d00-4d09-a8d4-c1d6c8f319c1/1/UQzngdsNx-T59JQUWileTMsSHK4.crl
rsync://rpki.ripe.net/repository/DEFAULT/5f/31fd16-6d00-4d09-a8d4-c1d6c8f319c1/1/UQzngdsNx-T59JQUWileTMsSHK4.mft
rsync://rpki.ripe.net/repository/DEFAULT/UQzngdsNx-T59JQUWileTMsSHK4.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 28 Apr 2025 04:00:56 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:75:67:c1:d8:98:c2:1f:2c:97:c8:8e:27:b0:cd:97:7d
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=510ce781db0dc7e4f9f494145a295e4ccb121cae
Validity
Not Before: Apr 27 04:00:56 2025 GMT
Not After : Apr 28 04:00:56 2025 GMT
Subject: CN=52fbf8ca936b12c32623668f0c510ae4dc199c45
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9f:a7:40:c6:69:f0:a4:b8:a0:4b:b0:c5:6b:8f:
32:e6:06:b0:00:33:fa:9f:70:43:14:65:fd:d9:6b:
ff:52:63:18:83:d7:cf:3b:80:19:1c:b9:78:48:6c:
bf:1e:c4:1e:4d:09:44:80:46:0f:74:b5:0a:7d:99:
3d:80:8f:26:bf:99:2f:fa:1f:c8:50:0f:68:7a:48:
a5:ac:d8:48:c6:de:ef:1a:19:ad:60:9e:6c:32:65:
4e:77:62:13:ab:e8:ed:ab:90:9e:eb:4c:20:46:50:
9d:d5:8d:10:d9:34:76:eb:04:e1:6b:9a:ee:6d:dc:
b6:99:80:e0:09:f3:be:9c:38:e4:f7:f3:fc:7d:ba:
91:66:86:1d:d6:31:86:bc:f8:b9:f2:74:3b:80:33:
9e:69:0c:6c:2e:12:2b:7c:fd:eb:dd:b9:0e:8c:a2:
e9:f6:66:9b:41:57:e4:c2:e3:94:b0:71:c7:d5:f4:
1c:38:28:e9:ce:f1:a3:9f:cf:09:f5:b9:e9:ca:8a:
a1:ed:23:0f:4e:ae:62:49:18:13:a3:e5:0a:8f:d1:
4f:47:d5:cc:02:8e:4f:54:54:ad:ee:aa:af:a2:f1:
27:1e:48:0f:27:ee:ea:c7:9d:92:98:29:00:77:d0:
ee:29:c7:45:fc:5f:e3:08:e0:44:1b:92:48:e6:ed:
2b:e7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
52:FB:F8:CA:93:6B:12:C3:26:23:66:8F:0C:51:0A:E4:DC:19:9C:45
X509v3 Authority Key Identifier:
keyid:51:0C:E7:81:DB:0D:C7:E4:F9:F4:94:14:5A:29:5E:4C:CB:12:1C:AE
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/UQzngdsNx-T59JQUWileTMsSHK4.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5f/31fd16-6d00-4d09-a8d4-c1d6c8f319c1/1/UQzngdsNx-T59JQUWileTMsSHK4.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/5f/31fd16-6d00-4d09-a8d4-c1d6c8f319c1/1/UQzngdsNx-T59JQUWileTMsSHK4.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
6d:da:09:ae:7c:4b:27:05:9e:6f:51:4a:6a:21:44:95:49:f7:
99:62:1c:5b:e5:2a:8f:ea:56:1e:53:20:9a:02:9c:e4:e6:62:
11:48:4c:43:bd:03:cd:4a:f5:5a:e0:55:4c:fc:89:4c:cb:6f:
c4:80:97:bd:a1:1e:0a:55:db:e5:0f:15:da:55:f2:40:2f:b6:
da:34:af:20:5d:70:46:f2:9b:3f:8d:fc:5c:b6:36:bf:06:b1:
8f:2f:b9:cb:4a:cf:d4:0f:c0:f2:b1:d0:37:9a:97:d3:15:78:
19:4e:49:62:b4:63:8b:ca:3a:de:a5:dc:2f:eb:13:28:3e:4c:
d3:f3:7d:2f:f3:72:81:0e:2d:bd:60:85:8b:07:68:59:97:ff:
f5:17:6e:aa:e8:40:d8:6e:40:05:57:56:d1:5e:45:a0:04:91:
48:6d:f7:db:56:37:d1:b5:a8:05:4e:d8:32:34:b3:15:fd:cd:
23:29:66:a1:be:cd:94:42:00:c8:b2:5d:24:e0:c5:2f:d6:b2:
49:f8:df:a3:7c:c5:3e:af:f9:84:28:e6:00:cb:67:bb:76:75:
24:03:82:7f:84:5d:5d:c8:c2:f3:10:20:cb:76:50:42:86:af:
25:41:d9:55:c5:11:34:cb:fe:ee:98:e4:4e:6d:fe:f7:9d:f4:
ea:44:39:09
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Apr 27 12:16:12 2025 by rpki-client