Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/75/f35fb5-0f67-44e4-9a54-fd6f235daf0b/1/UZ5x0bhgWjO53WVLo43fq8HO9es.mft
File: UZ5x0bhgWjO53WVLo43fq8HO9es.mft (raw, json)
Hash identifier: ms29+lm6B5LyKlW41W+O21h5nK1/gKOt7KcvmTqyhWU=
Subject key identifier: 07:7B:E7:69:3B:DA:2A:FD:48:5F:0F:3C:FB:C3:98:19:42:87:45:AB
Authority key identifier: 51:9E:71:D1:B8:60:5A:33:B9:DD:65:4B:A3:8D:DF:AB:C1:CE:F5:EB
Certificate issuer: /CN=519e71d1b8605a33b9dd654ba38ddfabc1cef5eb
Certificate serial: 0196797B1B95219F01BBC7CB683C1DD658C2
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/UZ5x0bhgWjO53WVLo43fq8HO9es.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/75/f35fb5-0f67-44e4-9a54-fd6f235daf0b/1/UZ5x0bhgWjO53WVLo43fq8HO9es.mft
Manifest number: 04CA
Signing time: Sun 27 Apr 2025 23:00:33 +0000
Manifest this update: Sun 27 Apr 2025 23:00:33 +0000
Manifest next update: Mon 28 Apr 2025 23:00:33 +0000
Files and hashes: 1: UZ5x0bhgWjO53WVLo43fq8HO9es.crl (hash: Uo7lFps8yc+EL8hmzi0kwxkCmqAu3j1wCK+OnBDUpuE=)
2: hQEUB92m80TtbOvBRID9BabLTbg.roa (hash: FkI5eSVTSgPh2a3D5h7cuawbzfvlNnMVkDchwgutjQU=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/75/f35fb5-0f67-44e4-9a54-fd6f235daf0b/1/UZ5x0bhgWjO53WVLo43fq8HO9es.crl
rsync://rpki.ripe.net/repository/DEFAULT/75/f35fb5-0f67-44e4-9a54-fd6f235daf0b/1/UZ5x0bhgWjO53WVLo43fq8HO9es.mft
rsync://rpki.ripe.net/repository/DEFAULT/UZ5x0bhgWjO53WVLo43fq8HO9es.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 28 Apr 2025 16:00:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:79:7b:1b:95:21:9f:01:bb:c7:cb:68:3c:1d:d6:58:c2
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=519e71d1b8605a33b9dd654ba38ddfabc1cef5eb
Validity
Not Before: Apr 27 23:00:33 2025 GMT
Not After : Apr 28 23:00:33 2025 GMT
Subject: CN=077be7693bda2afd485f0f3cfbc39819428745ab
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8d:cc:44:a6:b2:21:ce:5b:1b:35:b2:3a:6a:d9:
99:ec:17:85:06:8f:3e:00:f1:98:52:aa:81:6e:fc:
c0:31:81:d6:da:7f:ae:7f:36:19:e6:4c:db:49:81:
20:03:7c:e9:7f:82:47:18:e9:bc:97:9e:35:b6:f2:
5c:c4:81:f4:a6:85:e1:ca:12:f2:9d:76:46:68:83:
d4:e4:e8:97:62:9e:86:4b:df:dc:84:e2:ae:58:d3:
34:74:19:23:97:b7:3d:18:6c:99:6f:32:da:fa:e1:
9c:0e:22:a3:28:10:92:45:ab:9e:e9:83:40:c6:0d:
70:f5:f3:0e:f1:8f:c4:86:ca:67:db:db:e3:74:60:
d7:9f:0c:1b:73:59:31:09:2e:c1:38:df:99:0a:26:
36:37:a8:9c:c4:fe:29:4f:58:d7:9a:45:2e:7b:ae:
c7:ec:f3:a6:98:79:84:42:bb:5b:23:de:6f:8b:88:
c2:45:4e:b7:38:aa:61:22:c4:cc:a2:92:75:b7:85:
8e:52:9f:0b:9a:c9:bd:16:e5:55:24:27:03:69:0a:
4a:70:0d:ae:d9:ad:73:07:51:eb:61:7d:17:6c:92:
a4:3d:55:08:36:9e:c4:2f:e7:52:c6:4a:ac:63:12:
56:ff:8b:c5:9d:c1:dc:f7:6e:03:af:bd:f1:d9:a6:
ba:37
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
07:7B:E7:69:3B:DA:2A:FD:48:5F:0F:3C:FB:C3:98:19:42:87:45:AB
X509v3 Authority Key Identifier:
keyid:51:9E:71:D1:B8:60:5A:33:B9:DD:65:4B:A3:8D:DF:AB:C1:CE:F5:EB
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/UZ5x0bhgWjO53WVLo43fq8HO9es.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/75/f35fb5-0f67-44e4-9a54-fd6f235daf0b/1/UZ5x0bhgWjO53WVLo43fq8HO9es.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/75/f35fb5-0f67-44e4-9a54-fd6f235daf0b/1/UZ5x0bhgWjO53WVLo43fq8HO9es.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
07:bb:04:3c:8c:bc:b2:77:ac:c8:9d:ea:5d:a1:9f:c7:41:14:
59:a3:a5:5f:5e:f5:7d:1a:cc:ca:af:1e:2c:43:f7:a9:65:d3:
24:39:94:c7:5a:3b:e5:c6:0d:d6:68:84:4b:b3:12:d3:2c:0c:
a2:5a:93:5b:99:78:39:c8:e4:3a:7f:6c:6c:8f:4e:64:b9:24:
d6:b0:2d:f9:53:8c:a1:ec:71:43:25:8e:1d:45:ce:38:5a:48:
d5:ae:d7:f3:83:59:c8:f2:99:1e:22:c8:43:9b:2f:5f:de:32:
d1:11:93:e7:6c:0d:6e:f5:9b:47:3d:23:5e:d7:42:31:1f:cf:
10:62:1d:25:ea:83:27:63:4f:6b:32:c7:97:31:77:2b:5c:d8:
8e:36:95:ae:64:72:e6:87:8b:55:0f:21:d8:85:77:68:6b:a1:
46:5f:9f:55:4f:05:fc:60:cf:6f:52:d1:bf:01:20:fa:05:ca:
6a:a8:f2:03:0d:5e:17:ff:14:95:cd:5a:f6:bf:73:ec:7b:cb:
e8:87:13:41:b6:75:31:c6:78:e9:ec:6e:3c:1d:32:d8:6d:bd:
2f:81:0e:b1:f1:80:c3:f2:56:d2:be:d7:81:7d:62:3e:a7:29:
23:17:f1:8a:25:26:9b:ac:20:b6:92:e6:b6:72:f1:04:d0:01:
26:d7:89:5b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 28 01:21:41 2025 by rpki-client