Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/60/2b4d0f-219f-4c00-8648-a12de3a33553/1/UiJvZxwmQ6XASEYmT-4B-UOsK_w.mft
File: UiJvZxwmQ6XASEYmT-4B-UOsK_w.mft (raw, json)
Hash identifier: s+8Kht3eryR0tHMUxTyEE1gfKUToKBG89BPNqW0PLrg=
Subject key identifier: E3:DD:07:3E:13:F0:73:60:E4:8C:39:4C:D2:41:7B:26:09:CB:4A:D4
Authority key identifier: 52:22:6F:67:1C:26:43:A5:C0:48:46:26:4F:EE:01:F9:43:AC:2B:FC
Certificate issuer: /CN=52226f671c2643a5c04846264fee01f943ac2bfc
Certificate serial: 01967A56C35CF5906E8DF0F105CB196805D6
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/UiJvZxwmQ6XASEYmT-4B-UOsK_w.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/60/2b4d0f-219f-4c00-8648-a12de3a33553/1/UiJvZxwmQ6XASEYmT-4B-UOsK_w.mft
Manifest number: 1511
Signing time: Mon 28 Apr 2025 03:00:28 +0000
Manifest this update: Mon 28 Apr 2025 03:00:28 +0000
Manifest next update: Tue 29 Apr 2025 03:00:28 +0000
Files and hashes: 1: SDwa_442z28okDepd5smjiOQRww.roa (hash: vI2MQekdn3KI3C4mvdXcQ3gXy8wA7HojYkfFVqdmGF0=)
2: UiJvZxwmQ6XASEYmT-4B-UOsK_w.crl (hash: xbUrrIcdqxS4RWse4caASQnV4pjXnBoNbfryehEbBck=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/60/2b4d0f-219f-4c00-8648-a12de3a33553/1/UiJvZxwmQ6XASEYmT-4B-UOsK_w.crl
rsync://rpki.ripe.net/repository/DEFAULT/60/2b4d0f-219f-4c00-8648-a12de3a33553/1/UiJvZxwmQ6XASEYmT-4B-UOsK_w.mft
rsync://rpki.ripe.net/repository/DEFAULT/UiJvZxwmQ6XASEYmT-4B-UOsK_w.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 28 Apr 2025 23:00:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:7a:56:c3:5c:f5:90:6e:8d:f0:f1:05:cb:19:68:05:d6
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=52226f671c2643a5c04846264fee01f943ac2bfc
Validity
Not Before: Apr 28 03:00:28 2025 GMT
Not After : Apr 29 03:00:28 2025 GMT
Subject: CN=e3dd073e13f07360e48c394cd2417b2609cb4ad4
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c1:d5:9f:80:56:d5:ca:b3:fc:7b:3d:3a:94:8a:
e5:aa:b3:f6:17:08:5a:63:c9:45:e0:b3:54:64:7a:
a4:94:17:38:a4:bf:bf:c2:44:e0:0b:e5:26:76:c1:
db:ba:1e:61:75:7d:92:a1:33:75:1a:79:d9:67:15:
9d:78:7f:41:c4:b4:2a:2f:16:d2:ec:92:17:e4:66:
35:db:32:92:7f:be:23:98:4c:8e:90:f8:55:dd:70:
91:ff:ec:9c:60:19:2b:d9:41:ba:5b:c1:b1:f8:fd:
40:c5:a2:68:f7:f6:6b:b8:e8:85:93:79:2f:f0:4c:
ee:78:44:5d:a6:8a:48:c6:07:ac:91:8a:52:74:f2:
8b:f7:73:45:70:c6:88:e1:88:c2:7a:70:73:46:08:
e0:f7:5b:0d:eb:9d:5b:76:b4:88:fa:92:5b:6c:aa:
72:87:ea:19:16:62:a2:bd:0c:95:5d:f9:ce:ef:89:
9c:cf:ad:35:09:fd:62:8c:6d:59:c6:28:17:ab:a4:
d1:55:aa:17:37:94:a6:77:2a:23:e2:b9:45:1b:21:
50:3b:c3:81:8f:55:a1:1d:79:3b:2c:1b:95:64:bc:
26:bf:55:bd:18:8c:5d:24:c1:b1:09:5d:f6:88:8a:
5b:52:a7:85:aa:87:4e:0a:d2:48:e7:cf:56:7b:ba:
1d:8f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E3:DD:07:3E:13:F0:73:60:E4:8C:39:4C:D2:41:7B:26:09:CB:4A:D4
X509v3 Authority Key Identifier:
keyid:52:22:6F:67:1C:26:43:A5:C0:48:46:26:4F:EE:01:F9:43:AC:2B:FC
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/UiJvZxwmQ6XASEYmT-4B-UOsK_w.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/60/2b4d0f-219f-4c00-8648-a12de3a33553/1/UiJvZxwmQ6XASEYmT-4B-UOsK_w.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/60/2b4d0f-219f-4c00-8648-a12de3a33553/1/UiJvZxwmQ6XASEYmT-4B-UOsK_w.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
9a:0f:cf:ee:19:ba:d4:79:85:ce:18:1b:15:0d:d6:10:8c:c5:
d4:0c:a0:11:f4:ad:43:f5:bc:a8:49:86:7b:8e:6a:68:59:de:
1b:74:96:d2:ba:0c:22:8d:6f:c0:a3:10:91:3d:ad:e9:76:bc:
62:e6:8a:b2:34:d2:ee:88:72:73:79:df:40:99:29:99:fa:d9:
df:2b:ef:ca:04:99:3c:ac:bd:32:99:13:17:e6:3e:4a:46:03:
b0:22:b5:6c:9c:d5:18:3b:57:5a:cb:74:f5:2d:c4:5b:10:1b:
27:ae:4a:6d:be:42:02:23:8a:a9:1c:5c:e3:3a:b1:0a:0f:35:
c5:59:7f:91:62:7a:71:f1:60:90:ce:0c:f2:a9:e0:52:54:2f:
ac:86:eb:58:13:44:58:31:ec:08:3c:c6:7a:62:21:5c:33:4f:
9e:14:4f:20:24:1c:3e:84:01:2e:8c:ef:b9:10:60:ca:cf:37:
02:bc:3c:2b:c9:dc:d9:d2:d0:ad:0b:76:3b:3e:47:bb:b0:68:
26:52:6b:b0:0d:8a:79:1a:25:8a:76:df:ce:2a:3a:02:d6:21:
4a:06:79:2d:65:2d:54:5e:14:37:ce:18:eb:d0:48:12:a3:32:
63:77:46:81:5a:51:83:ca:20:85:9a:55:6b:08:a6:08:9e:81:
0d:f3:76:a2
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 28 07:17:58 2025 by rpki-client