Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/6e/86d23e-400a-4adc-80e4-905d9dcf50ae/1/UZpqm-tS7_KWRGWblDKgpZI3MUw.mft
File: UZpqm-tS7_KWRGWblDKgpZI3MUw.mft (raw, json)
Hash identifier: Y21KmghRL6h2PW2lngAYcYQ9/BsV2HiyNIMBKVpvhDQ=
Subject key identifier: 25:DE:BA:95:AF:9D:28:91:B5:82:FE:3D:14:3D:AA:AF:9F:69:82:64
Authority key identifier: 51:9A:6A:9B:EB:52:EF:F2:96:44:65:9B:94:32:A0:A5:92:37:31:4C
Certificate issuer: /CN=519a6a9beb52eff29644659b9432a0a59237314c
Certificate serial: 0196824774DDF704BF762D5FDE39D86A0FB5
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/UZpqm-tS7_KWRGWblDKgpZI3MUw.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/6e/86d23e-400a-4adc-80e4-905d9dcf50ae/1/UZpqm-tS7_KWRGWblDKgpZI3MUw.mft
Manifest number: 1260
Signing time: Tue 29 Apr 2025 16:00:43 +0000
Manifest this update: Tue 29 Apr 2025 16:00:43 +0000
Manifest next update: Wed 30 Apr 2025 16:00:43 +0000
Files and hashes: 1: 1-to4kOVan_yFMS4Y6ZPmpiXkPy0.roa (hash: 2k5Vbn4Uzj43wxo1XqMC5rFldjjQHil2kjWg9IIMQEQ=)
2: UZpqm-tS7_KWRGWblDKgpZI3MUw.crl (hash: E1cABysKNyO67chgKXaouykR74YHLMJHpDbUlM5jF20=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/6e/86d23e-400a-4adc-80e4-905d9dcf50ae/1/UZpqm-tS7_KWRGWblDKgpZI3MUw.crl
rsync://rpki.ripe.net/repository/DEFAULT/6e/86d23e-400a-4adc-80e4-905d9dcf50ae/1/UZpqm-tS7_KWRGWblDKgpZI3MUw.mft
rsync://rpki.ripe.net/repository/DEFAULT/UZpqm-tS7_KWRGWblDKgpZI3MUw.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 30 Apr 2025 15:02:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:82:47:74:dd:f7:04:bf:76:2d:5f:de:39:d8:6a:0f:b5
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=519a6a9beb52eff29644659b9432a0a59237314c
Validity
Not Before: Apr 29 16:00:43 2025 GMT
Not After : Apr 30 16:00:43 2025 GMT
Subject: CN=25deba95af9d2891b582fe3d143daaaf9f698264
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9e:20:f8:61:02:fd:2e:c1:7b:be:20:77:71:f1:
b5:3c:b5:11:63:a3:4d:c8:26:39:83:88:ec:d2:87:
f5:30:d0:01:70:71:1e:18:4c:49:34:c2:c0:c4:5e:
fe:dd:c9:00:de:56:3c:7c:a7:bd:d6:32:80:8b:85:
b1:5b:79:2e:9c:01:1f:09:67:47:bc:91:92:5d:c4:
53:3d:8e:e9:91:af:95:43:e4:58:fa:e6:0f:9a:8c:
af:05:6f:93:38:17:56:5c:2c:c0:c1:39:42:70:89:
e6:5b:91:f7:29:4f:cf:30:15:34:0c:16:d9:28:c9:
35:ef:4a:e3:ab:92:c5:3c:b0:5d:b2:bb:e2:94:a4:
4a:b6:58:22:f5:f9:12:96:6c:2a:ca:ec:67:2a:dd:
e7:03:98:a1:49:63:67:5a:d9:65:30:22:4b:70:25:
8d:e8:93:16:eb:1e:c7:c8:85:80:6b:70:12:10:5f:
a1:15:bb:d3:51:c4:45:85:77:43:88:30:9b:bf:17:
40:b0:0b:45:4a:7b:fc:2b:eb:98:18:47:3f:28:e7:
ef:69:e0:2f:eb:c9:13:b4:a6:a7:8c:3c:3f:26:74:
80:9d:d3:c8:ca:86:96:c4:df:8a:18:8a:4c:dd:ba:
e6:ee:52:8a:b9:fa:15:74:67:1a:a8:2d:73:46:19:
56:81
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
25:DE:BA:95:AF:9D:28:91:B5:82:FE:3D:14:3D:AA:AF:9F:69:82:64
X509v3 Authority Key Identifier:
keyid:51:9A:6A:9B:EB:52:EF:F2:96:44:65:9B:94:32:A0:A5:92:37:31:4C
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/UZpqm-tS7_KWRGWblDKgpZI3MUw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/6e/86d23e-400a-4adc-80e4-905d9dcf50ae/1/UZpqm-tS7_KWRGWblDKgpZI3MUw.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/6e/86d23e-400a-4adc-80e4-905d9dcf50ae/1/UZpqm-tS7_KWRGWblDKgpZI3MUw.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
17:67:c3:4b:6d:8d:35:0b:40:d7:43:16:e9:2e:5f:69:2b:2f:
16:d4:e8:54:54:ab:5a:cc:be:42:89:af:9b:59:36:90:ab:92:
1b:45:a4:b3:e7:b5:a1:76:c3:36:f5:bf:c7:ab:9a:0d:c6:47:
2f:ad:6c:22:66:2f:7f:6a:3c:13:5b:39:1a:9c:61:ec:b8:78:
f6:84:3e:b7:2e:76:1b:46:a9:46:02:95:95:f8:c2:f0:f6:6a:
47:c4:83:e5:e7:8d:c8:83:54:b6:88:8d:36:26:e6:8d:60:59:
84:ef:51:30:75:f7:d9:0c:33:dc:03:85:c6:c2:48:6d:8a:46:
5d:17:97:71:6f:0d:00:c8:db:45:52:eb:ef:09:96:3f:91:c5:
32:74:a8:df:2f:05:9a:a7:6f:27:d7:a6:ec:08:a6:98:44:a0:
6e:d8:c0:f1:82:ca:f5:28:55:29:c7:c5:e7:15:cc:c9:b9:4d:
19:0f:15:72:43:24:18:3f:fc:03:5f:41:f9:77:33:21:1e:4a:
5a:16:88:e5:4a:1b:42:fd:ac:3b:3d:cf:b2:d9:17:c3:9c:c9:
58:76:43:0f:af:a4:f1:09:1c:6a:c8:3c:7a:99:76:a8:22:49:
5d:39:40:2e:86:11:f9:49:af:02:4d:1a:e0:b2:93:35:81:41:
ea:19:67:c1
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Apr 30 00:28:32 2025 by rpki-client