Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/7d/d8c85e-4198-4869-b9cd-e280b6501704/1/UnAs3uBDCUrC8zFwEl-U9wNNqPA.mft
File: UnAs3uBDCUrC8zFwEl-U9wNNqPA.mft (raw, json)
Hash identifier: ZJm9Q3jMO0GfMFmZT9SfH00KMiv3wOD5qRlYvcrlNns=
Subject key identifier: FC:1D:01:89:FF:49:BD:B3:A8:C6:B1:CC:30:E8:BA:21:57:0D:E9:60
Authority key identifier: 52:70:2C:DE:E0:43:09:4A:C2:F3:31:70:12:5F:94:F7:03:4D:A8:F0
Certificate issuer: /CN=52702cdee043094ac2f33170125f94f7034da8f0
Certificate serial: 0196764335780D6786C2E6D6E327D8EB5F22
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/UnAs3uBDCUrC8zFwEl-U9wNNqPA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/7d/d8c85e-4198-4869-b9cd-e280b6501704/1/UnAs3uBDCUrC8zFwEl-U9wNNqPA.mft
Manifest number: 0EAA
Signing time: Sun 27 Apr 2025 08:00:38 +0000
Manifest this update: Sun 27 Apr 2025 08:00:38 +0000
Manifest next update: Mon 28 Apr 2025 08:00:38 +0000
Files and hashes: 1: UnAs3uBDCUrC8zFwEl-U9wNNqPA.crl (hash: hsxKN09uQYzBkMj5Z5wwzPQUTXfC+hvjpza6FPmyB98=)
2: eZTqCsy1o9f-eq_FZSRPL4-aBD8.roa (hash: cQOdS5lB0S1LA9krJg3sdASUyUTn/NkoA0OQ3se0FuM=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/7d/d8c85e-4198-4869-b9cd-e280b6501704/1/UnAs3uBDCUrC8zFwEl-U9wNNqPA.crl
rsync://rpki.ripe.net/repository/DEFAULT/7d/d8c85e-4198-4869-b9cd-e280b6501704/1/UnAs3uBDCUrC8zFwEl-U9wNNqPA.mft
rsync://rpki.ripe.net/repository/DEFAULT/UnAs3uBDCUrC8zFwEl-U9wNNqPA.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 28 Apr 2025 05:00:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:76:43:35:78:0d:67:86:c2:e6:d6:e3:27:d8:eb:5f:22
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=52702cdee043094ac2f33170125f94f7034da8f0
Validity
Not Before: Apr 27 08:00:38 2025 GMT
Not After : Apr 28 08:00:38 2025 GMT
Subject: CN=fc1d0189ff49bdb3a8c6b1cc30e8ba21570de960
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:97:25:be:a5:5f:e7:5b:83:68:6e:70:26:40:f6:
15:03:6f:14:d8:53:9c:ef:4f:06:18:67:a9:95:74:
78:7a:34:6a:ea:2d:45:4c:85:a7:da:49:6c:e7:94:
85:b3:a1:e3:7f:7a:d1:98:37:1f:4b:56:16:7e:d6:
f3:6f:c5:f2:c0:cc:1b:70:30:36:b9:23:fa:af:02:
2e:71:24:69:6a:3d:25:30:b3:a2:d5:5a:1d:88:a0:
f4:16:51:23:a3:09:2a:29:3c:6b:2b:62:98:0a:b2:
25:1f:6d:66:cd:ac:2a:72:27:94:4f:58:7e:1b:ed:
93:81:4a:14:ae:25:06:86:24:7f:04:84:1d:c6:60:
bf:ca:04:52:39:ec:e5:af:37:80:33:e3:a3:61:cc:
96:81:c7:10:b7:fa:55:81:f6:b4:29:66:08:1c:ff:
27:87:b7:d4:9b:3b:b2:0a:88:81:2c:d0:55:d7:dc:
fd:7f:7b:cb:db:02:14:d4:1e:86:eb:0e:5c:0f:d0:
07:72:62:08:53:5a:93:df:06:8d:90:a0:29:8d:e1:
b8:18:ca:db:1c:43:db:a2:b3:cb:a2:7b:51:83:1d:
e2:9b:01:b2:29:3a:b8:cf:9b:1f:d0:2f:36:75:61:
18:0c:ba:2f:02:90:7a:34:85:3b:b1:4c:8f:ca:6c:
b5:a1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
FC:1D:01:89:FF:49:BD:B3:A8:C6:B1:CC:30:E8:BA:21:57:0D:E9:60
X509v3 Authority Key Identifier:
keyid:52:70:2C:DE:E0:43:09:4A:C2:F3:31:70:12:5F:94:F7:03:4D:A8:F0
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/UnAs3uBDCUrC8zFwEl-U9wNNqPA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/7d/d8c85e-4198-4869-b9cd-e280b6501704/1/UnAs3uBDCUrC8zFwEl-U9wNNqPA.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/7d/d8c85e-4198-4869-b9cd-e280b6501704/1/UnAs3uBDCUrC8zFwEl-U9wNNqPA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
a6:3f:68:04:8a:15:2a:ec:5c:81:b1:1e:af:12:d7:b5:dd:4f:
22:7d:2e:b2:ef:fd:cc:51:f7:d1:1c:fe:3e:17:31:49:75:8b:
62:e1:91:c6:e4:cf:b3:0f:4a:11:29:06:6f:66:57:6b:eb:09:
d1:75:5e:6e:d0:57:20:a9:cd:e0:71:41:44:89:4d:23:96:91:
ad:96:95:26:63:c8:23:ac:0c:40:55:5d:05:f3:0c:76:76:14:
ed:77:d2:40:17:80:4a:2a:2a:ac:45:12:90:7f:d8:e9:39:c4:
1c:5f:2a:92:89:02:35:89:9b:1b:4b:82:dd:27:34:a4:52:59:
54:73:13:e4:c7:83:76:40:12:33:f2:55:31:d7:dd:42:33:04:
ea:eb:a5:4c:f3:41:ea:87:63:fc:34:d6:59:07:7c:e2:2b:c3:
f7:ce:90:b1:88:8f:b4:dd:dc:4c:a0:60:d7:f7:04:54:f0:81:
55:b4:e2:d4:84:bb:a0:01:0e:3e:12:49:03:d4:bd:9a:bd:93:
78:46:b4:48:ea:09:10:56:d4:04:7c:51:b2:31:06:da:5d:c6:
80:8d:fa:0b:27:e8:f5:ca:af:ee:8c:93:97:39:42:db:1f:a1:
8c:9c:0a:8e:ee:65:36:68:86:53:c7:de:69:1c:a1:76:fc:91:
0c:47:74:e0
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Apr 27 12:57:47 2025 by rpki-client