Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/80/5721b9-f931-4fc6-9c34-d717cf3cc155/1/UEBzuGGe_AcFK57ftcy2Gx9c54E.mft
File: UEBzuGGe_AcFK57ftcy2Gx9c54E.mft (raw, json)
Hash identifier: /UvjoJwY2+Wk+64c/YUvmEPshN+Y93Hxams2S1tEpOc=
Subject key identifier: 21:BC:48:77:98:90:36:B4:4D:85:72:15:9E:AD:14:F2:DF:D7:11:06
Authority key identifier: 50:40:73:B8:61:9E:FC:07:05:2B:9E:DF:B5:CC:B6:1B:1F:5C:E7:81
Certificate issuer: /CN=504073b8619efc07052b9edfb5ccb61b1f5ce781
Certificate serial: 01967AC49DAB5BF49E3380FB63FDB3F4131A
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/UEBzuGGe_AcFK57ftcy2Gx9c54E.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/80/5721b9-f931-4fc6-9c34-d717cf3cc155/1/UEBzuGGe_AcFK57ftcy2Gx9c54E.mft
Manifest number: 1515
Signing time: Mon 28 Apr 2025 05:00:27 +0000
Manifest this update: Mon 28 Apr 2025 05:00:27 +0000
Manifest next update: Tue 29 Apr 2025 05:00:27 +0000
Files and hashes: 1: L4_tSMK5k5kqqbJMWxeueMUP_mA.roa (hash: 9KNzXq4Jj1Ie5L/sgRkqWPLj6rBqACEfWOxUaBMMoF8=)
2: MpgfzBZcCwpGmCHQXOGgVC0SBbw.roa (hash: l1OVDxtg0CoOASKjwgQu29p5CMY+5ES/VliOBwP9wAQ=)
3: UEBzuGGe_AcFK57ftcy2Gx9c54E.crl (hash: 0CEWC1vNAj6cbIrv9+cg00RSD9mgcJcZEw6tWi9icJs=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/80/5721b9-f931-4fc6-9c34-d717cf3cc155/1/UEBzuGGe_AcFK57ftcy2Gx9c54E.crl
rsync://rpki.ripe.net/repository/DEFAULT/80/5721b9-f931-4fc6-9c34-d717cf3cc155/1/UEBzuGGe_AcFK57ftcy2Gx9c54E.mft
rsync://rpki.ripe.net/repository/DEFAULT/UEBzuGGe_AcFK57ftcy2Gx9c54E.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 28 Apr 2025 23:00:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:7a:c4:9d:ab:5b:f4:9e:33:80:fb:63:fd:b3:f4:13:1a
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=504073b8619efc07052b9edfb5ccb61b1f5ce781
Validity
Not Before: Apr 28 05:00:27 2025 GMT
Not After : Apr 29 05:00:27 2025 GMT
Subject: CN=21bc4877989036b44d8572159ead14f2dfd71106
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ca:75:bd:d7:1a:d4:35:49:83:dd:37:e1:75:0f:
7a:a5:e6:b2:27:24:15:a0:29:4b:6a:aa:8a:d5:e2:
c2:e3:76:9d:4b:24:a8:e2:bf:a4:1c:28:f1:75:6c:
60:37:7f:87:99:a3:32:59:2d:d7:b0:f1:eb:96:04:
c6:38:42:71:43:55:bb:94:f3:bc:4f:60:be:5c:bd:
91:19:f3:0b:18:a6:80:bd:6f:5e:85:5d:3f:38:73:
cb:61:1a:45:ed:83:52:75:ca:b8:72:05:b6:5b:26:
9b:b2:d5:5e:12:e2:20:49:6f:fb:3a:62:1d:2a:93:
6f:d7:20:f5:ab:8c:1f:34:dd:78:1f:21:cb:76:c1:
36:4b:98:bc:f5:77:58:11:5b:0e:57:c6:81:90:9f:
2e:9a:bc:59:c1:dc:d5:9f:83:df:09:d6:f2:ee:d6:
a9:3c:47:04:a1:3a:81:ce:f3:21:0f:c1:00:26:83:
cc:9d:26:f6:18:51:d5:cf:c6:ca:9a:62:e0:cd:f6:
27:8d:95:1b:9a:60:52:7c:7f:98:6c:24:ba:d1:0b:
62:e8:43:4d:7a:67:e9:fd:94:3a:fb:7d:1f:83:2e:
17:59:85:9f:19:06:27:76:fc:bd:f4:b9:5d:9d:a9:
25:99:f8:e8:56:00:04:fb:68:b8:0a:e9:a3:95:77:
1a:0d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
21:BC:48:77:98:90:36:B4:4D:85:72:15:9E:AD:14:F2:DF:D7:11:06
X509v3 Authority Key Identifier:
keyid:50:40:73:B8:61:9E:FC:07:05:2B:9E:DF:B5:CC:B6:1B:1F:5C:E7:81
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/UEBzuGGe_AcFK57ftcy2Gx9c54E.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/80/5721b9-f931-4fc6-9c34-d717cf3cc155/1/UEBzuGGe_AcFK57ftcy2Gx9c54E.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/80/5721b9-f931-4fc6-9c34-d717cf3cc155/1/UEBzuGGe_AcFK57ftcy2Gx9c54E.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
5a:a5:da:19:59:92:5d:e7:a7:d3:19:47:2b:90:2e:dd:48:8e:
f5:e2:c3:4d:c9:6f:12:de:6f:0e:ad:93:b8:23:b1:f1:97:98:
e8:a0:0f:55:b6:f7:d7:59:d3:f9:b7:78:04:88:5c:8e:5b:66:
a5:03:f3:23:b2:ff:ee:fb:47:6a:3f:21:2a:97:6b:04:dd:40:
31:b9:4f:a8:08:c5:9d:22:a8:7e:46:f2:d7:b2:bc:7f:9a:e4:
17:54:2b:25:e1:07:a8:b3:04:16:67:41:9b:f0:22:1f:d8:b9:
c7:c3:53:3d:3a:6e:20:a3:bd:1c:5d:6a:b2:67:52:2d:2d:2a:
0e:13:d7:d6:4f:3d:23:df:a4:fa:09:46:08:2f:4b:61:a8:b3:
72:e1:6e:e0:68:c2:7f:57:0e:a4:ff:17:26:31:10:ac:ca:a4:
02:02:a5:47:63:f9:45:74:7b:13:6d:4c:51:3e:2d:63:03:5e:
b4:26:9f:40:d0:4e:cb:91:40:2e:60:89:b8:97:5b:ee:2a:6b:
93:26:21:f0:3f:c1:e3:77:81:3f:94:a3:ab:39:98:aa:10:ff:
0e:d8:07:9d:6d:d7:77:a9:21:04:e3:06:35:27:f8:80:b6:5d:
41:07:e3:9d:c9:86:3c:db:30:3c:40:8a:e8:4e:3f:3e:c8:b6:
e6:8a:8f:2e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 28 07:18:48 2025 by rpki-client