Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/65/9fce78-4f9d-4847-b759-b451e477b9c2/1/UJSiarpxAHYh_VmdU3u3rqreizM.mft
File: UJSiarpxAHYh_VmdU3u3rqreizM.mft (raw, json)
Hash identifier: Q06zfBg6C6gi1mrScmgw/FRULikyUxI09TaeCQ5tGV8=
Subject key identifier: E0:E6:5B:DE:3D:62:44:A0:78:66:68:A3:66:99:BC:95:DF:38:0C:4D
Authority key identifier: 50:94:A2:6A:BA:71:00:76:21:FD:59:9D:53:7B:B7:AE:AA:DE:8B:33
Certificate issuer: /CN=5094a26aba71007621fd599d537bb7aeaade8b33
Certificate serial: 0196846C720E47E45017C38B78DCB139B9E5
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/UJSiarpxAHYh_VmdU3u3rqreizM.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/65/9fce78-4f9d-4847-b759-b451e477b9c2/1/UJSiarpxAHYh_VmdU3u3rqreizM.mft
Manifest number: 151A
Signing time: Wed 30 Apr 2025 02:00:21 +0000
Manifest this update: Wed 30 Apr 2025 02:00:21 +0000
Manifest next update: Thu 01 May 2025 02:00:21 +0000
Files and hashes: 1: PYLR3kfr_0El_Ga2E9JeZcCyCVc.roa (hash: A0449RCi6B29H8zKA0rMM/NDvKNi2c+elOaTXG6BpHk=)
2: UJSiarpxAHYh_VmdU3u3rqreizM.crl (hash: 6RCl/HfSh7v4jJ53SBHsIkDh+5dcjCDQ6HZP+stSXyo=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/65/9fce78-4f9d-4847-b759-b451e477b9c2/1/UJSiarpxAHYh_VmdU3u3rqreizM.crl
rsync://rpki.ripe.net/repository/DEFAULT/65/9fce78-4f9d-4847-b759-b451e477b9c2/1/UJSiarpxAHYh_VmdU3u3rqreizM.mft
rsync://rpki.ripe.net/repository/DEFAULT/UJSiarpxAHYh_VmdU3u3rqreizM.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 01 May 2025 00:00:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:84:6c:72:0e:47:e4:50:17:c3:8b:78:dc:b1:39:b9:e5
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=5094a26aba71007621fd599d537bb7aeaade8b33
Validity
Not Before: Apr 30 02:00:21 2025 GMT
Not After : May 1 02:00:21 2025 GMT
Subject: CN=e0e65bde3d6244a0786668a36699bc95df380c4d
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c2:53:06:07:cf:ec:be:08:f8:1b:61:93:c5:9c:
a3:05:d7:41:e2:63:5a:e4:af:55:b5:b9:d5:bc:ca:
d8:42:db:18:60:87:20:25:1a:78:0a:17:a9:5e:26:
97:39:42:3b:c9:7c:e7:56:e1:3d:34:5f:14:ee:f9:
3c:7f:da:34:ea:2f:36:40:80:3d:c0:ec:51:c6:45:
fe:b5:28:28:12:59:a5:d6:bb:6e:02:d6:a6:bb:2a:
53:c5:cd:21:c1:ec:52:58:b1:2b:a9:7e:f6:28:06:
1f:38:6b:61:48:5c:9c:56:b6:d6:63:8a:b0:0d:76:
07:e5:64:38:94:a5:59:15:65:f6:01:d0:47:f3:d9:
21:11:34:6e:c1:5e:19:fd:0f:aa:bd:a6:e1:1b:5e:
9d:4c:80:64:68:4e:bb:75:e0:ff:d0:dc:61:a1:2f:
ed:17:2a:cd:ba:fb:fc:b2:2b:cc:c2:7f:83:58:94:
12:4f:3f:d6:7b:9f:3f:4c:ee:80:f9:7e:12:b8:b8:
6b:cd:9a:61:05:fc:a2:62:16:55:fa:69:12:2f:bf:
8b:ea:d7:0c:1b:1e:6a:45:d8:f0:96:ce:ea:27:7a:
80:29:3b:bb:a3:8f:0c:16:74:ec:47:18:35:30:30:
6b:d4:7a:49:66:94:65:b5:d3:0b:8b:bd:4f:1d:e6:
06:cd
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E0:E6:5B:DE:3D:62:44:A0:78:66:68:A3:66:99:BC:95:DF:38:0C:4D
X509v3 Authority Key Identifier:
keyid:50:94:A2:6A:BA:71:00:76:21:FD:59:9D:53:7B:B7:AE:AA:DE:8B:33
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/UJSiarpxAHYh_VmdU3u3rqreizM.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/65/9fce78-4f9d-4847-b759-b451e477b9c2/1/UJSiarpxAHYh_VmdU3u3rqreizM.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/65/9fce78-4f9d-4847-b759-b451e477b9c2/1/UJSiarpxAHYh_VmdU3u3rqreizM.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
04:42:34:1c:e3:b4:49:44:be:25:fd:cf:1e:46:8d:88:c5:0f:
be:65:6c:aa:9c:0b:f2:d6:da:f5:ea:88:0b:30:4e:4f:97:62:
1b:42:ae:22:67:55:bb:33:da:fb:6d:0d:73:9c:ea:85:e0:7d:
d9:32:74:96:df:af:6a:38:9e:0a:de:51:6c:b5:b2:17:f2:eb:
6d:ee:53:1a:2b:e4:19:be:f6:92:d4:1a:6f:08:b6:6e:1b:b1:
a0:21:99:02:f2:08:a5:b7:be:f0:c1:7a:70:11:7f:7a:e5:74:
be:ba:4f:d7:e5:fc:d4:3a:2d:4c:95:ae:b2:74:19:f3:54:a4:
74:66:5f:d8:dd:fd:26:ba:a5:56:af:dc:3e:11:ba:47:eb:ae:
f3:5b:dd:4e:bf:54:4d:ea:0f:2f:f1:44:4c:d3:4c:07:fe:45:
63:98:e1:29:45:3c:b9:6a:26:22:c2:6a:ed:f0:05:39:25:4c:
ed:22:75:a7:3c:cf:59:1f:50:0e:f8:bb:11:02:b7:60:70:63:
e0:76:15:92:c1:1f:50:84:42:da:da:55:81:d1:2c:f4:f5:65:
d5:c1:e3:0d:fc:d5:9c:06:46:0a:74:06:68:fa:35:5b:bc:71:
32:07:96:8e:f5:58:ca:26:d6:de:f2:59:2f:e6:6c:cc:75:70:
43:08:54:a9
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Apr 30 05:47:58 2025 by rpki-client