Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/7d/dd543d-d1f5-4f49-890f-5944d8ec273c/1/UD9z_v6dvRZWFDdaGKNM3PtKMe4.mft
File: UD9z_v6dvRZWFDdaGKNM3PtKMe4.mft (raw, json)
Hash identifier: fiqSdx/PYzy1kxQZmvJ3hu0/XaRCz0IeyiHNuFYQ++s=
Subject key identifier: 44:59:38:49:0D:92:75:F2:37:9E:32:BC:0C:20:F9:78:2A:8B:CE:1C
Authority key identifier: 50:3F:73:FE:FE:9D:BD:16:56:14:37:5A:18:A3:4C:DC:FB:4A:31:EE
Certificate issuer: /CN=503f73fefe9dbd165614375a18a34cdcfb4a31ee
Certificate serial: 019684DA9F9CCA1F0D5A01AE63348850F214
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/UD9z_v6dvRZWFDdaGKNM3PtKMe4.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/7d/dd543d-d1f5-4f49-890f-5944d8ec273c/1/UD9z_v6dvRZWFDdaGKNM3PtKMe4.mft
Manifest number: 08D0
Signing time: Wed 30 Apr 2025 04:00:42 +0000
Manifest this update: Wed 30 Apr 2025 04:00:42 +0000
Manifest next update: Thu 01 May 2025 04:00:42 +0000
Files and hashes: 1: UD9z_v6dvRZWFDdaGKNM3PtKMe4.crl (hash: Rca+NRqdrYBKTAhGkWHb3E5POPk4RcJWz43xtEwEdOk=)
2: rB2uaCwrLsHd8QP3gzLrvvAfPiA.roa (hash: rFl9lkx1744U+43ipMxs7m2ICQoiTAYXwAH+fMGwgoo=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/7d/dd543d-d1f5-4f49-890f-5944d8ec273c/1/UD9z_v6dvRZWFDdaGKNM3PtKMe4.crl
rsync://rpki.ripe.net/repository/DEFAULT/7d/dd543d-d1f5-4f49-890f-5944d8ec273c/1/UD9z_v6dvRZWFDdaGKNM3PtKMe4.mft
rsync://rpki.ripe.net/repository/DEFAULT/UD9z_v6dvRZWFDdaGKNM3PtKMe4.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 01 May 2025 00:00:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:84:da:9f:9c:ca:1f:0d:5a:01:ae:63:34:88:50:f2:14
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=503f73fefe9dbd165614375a18a34cdcfb4a31ee
Validity
Not Before: Apr 30 04:00:42 2025 GMT
Not After : May 1 04:00:42 2025 GMT
Subject: CN=445938490d9275f2379e32bc0c20f9782a8bce1c
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b8:a5:77:80:56:10:6a:bc:7a:28:10:3b:e5:b0:
07:e4:56:42:61:4d:b2:00:26:2c:89:3b:b3:72:20:
cc:18:22:71:07:c8:22:23:ad:2a:18:94:cc:87:60:
40:bd:f7:f7:d0:75:b9:65:8e:82:a1:52:bb:71:6e:
fd:05:77:f2:f1:2a:65:a0:ce:06:a1:19:a0:91:75:
c4:5c:48:62:2d:42:17:65:7b:51:52:1d:cf:e9:24:
da:8d:93:e5:84:bf:07:fa:66:a5:ac:d1:1d:2a:98:
f3:79:33:ed:a5:66:42:38:fe:a1:6b:fa:99:47:ee:
cb:0a:ad:b7:d5:d6:ec:40:b7:74:62:68:dc:b0:67:
cf:11:2f:46:7d:12:ee:6c:5c:0a:cb:a4:d9:89:3d:
93:b2:a9:31:1f:04:f2:96:a7:3e:f3:c2:6f:74:73:
74:2f:67:49:a2:64:b6:ee:44:71:06:2d:ca:71:38:
d3:dc:b7:64:c3:14:76:5b:33:a1:df:bb:2d:f9:4a:
7a:bb:3b:5c:b6:89:65:a4:e7:d9:c5:3c:91:ff:8f:
58:5e:7b:9b:5c:ad:02:93:ef:b1:0a:3a:22:42:cf:
4a:a9:ee:25:1a:a2:cb:bd:79:a2:4d:c2:a0:ae:31:
dd:62:6d:16:4f:4e:ef:e2:08:26:a0:71:61:b1:65:
9b:ad
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
44:59:38:49:0D:92:75:F2:37:9E:32:BC:0C:20:F9:78:2A:8B:CE:1C
X509v3 Authority Key Identifier:
keyid:50:3F:73:FE:FE:9D:BD:16:56:14:37:5A:18:A3:4C:DC:FB:4A:31:EE
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/UD9z_v6dvRZWFDdaGKNM3PtKMe4.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/7d/dd543d-d1f5-4f49-890f-5944d8ec273c/1/UD9z_v6dvRZWFDdaGKNM3PtKMe4.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/7d/dd543d-d1f5-4f49-890f-5944d8ec273c/1/UD9z_v6dvRZWFDdaGKNM3PtKMe4.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
b6:a4:1b:e7:89:43:af:d7:e4:04:1a:ed:45:0a:eb:61:34:cf:
39:43:d8:15:fd:c9:46:6b:a3:93:88:e3:7c:2e:d8:5c:38:9b:
26:73:d2:07:aa:7a:b0:51:87:79:18:bb:e2:35:6f:63:92:9a:
4d:45:dc:39:ab:5f:0a:f1:a1:5a:5a:5a:55:01:c9:b0:7b:1d:
0c:07:9e:15:c1:cc:30:8d:2a:37:23:41:d4:fe:de:4b:8c:97:
ba:60:54:27:76:7e:b4:0a:13:99:90:c5:68:ae:79:38:42:2b:
38:55:25:0c:a1:94:a7:07:42:92:f1:00:b9:29:54:95:01:64:
de:59:32:24:f0:2e:08:fc:02:8d:20:9c:e5:79:ae:a0:c5:f1:
e9:a9:b7:ad:34:60:62:b2:df:a0:33:23:fa:6d:a0:24:09:7e:
d6:72:cb:8a:13:7d:fa:0f:30:c5:1d:a8:79:76:f6:66:41:30:
84:cf:c6:b6:15:4e:b4:6a:3f:45:f9:a2:20:c2:ee:a0:60:62:
00:14:2a:2d:97:37:9f:8c:ca:94:ff:d8:14:5c:e4:8f:c7:90:
63:32:51:ac:d7:1c:8b:2c:f1:32:ef:e3:a1:26:03:57:d2:a3:
c5:b1:db:66:3e:28:bf:29:13:65:b6:42:f1:30:90:51:99:eb:
4e:6b:46:7d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Apr 30 08:14:13 2025 by rpki-client