Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/86/e02035-73ae-4fd2-80c1-e151d4d39b41/1/umwdlY_wlMrxNGzGb3FszrbcUAk.mft
File: umwdlY_wlMrxNGzGb3FszrbcUAk.mft (raw, json)
Hash identifier: 1+gK+k873V4zvY+grEd264b4Kgkcctcn1OMHAUaggoM=
Subject key identifier: 25:98:3B:11:86:82:F8:BC:A2:06:FC:C2:85:69:24:28:0E:14:07:D7
Authority key identifier: BA:6C:1D:95:8F:F0:94:CA:F1:34:6C:C6:6F:71:6C:CE:B6:DC:50:09
Certificate issuer: /CN=ba6c1d958ff094caf1346cc66f716cceb6dc5009
Certificate serial: 019681A252A6D071509324F396F945A82CF0
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/umwdlY_wlMrxNGzGb3FszrbcUAk.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/86/e02035-73ae-4fd2-80c1-e151d4d39b41/1/umwdlY_wlMrxNGzGb3FszrbcUAk.mft
Manifest number: 11D7
Signing time: Tue 29 Apr 2025 13:00:20 +0000
Manifest this update: Tue 29 Apr 2025 13:00:20 +0000
Manifest next update: Wed 30 Apr 2025 13:00:20 +0000
Files and hashes: 1: qKek5ZOAt9w9vxEPh4zkLLlKVYI.roa (hash: gz7wbf7RuIAjOfumVR0HGG8azx+yCAuEY5X4YlBO90Q=)
2: umwdlY_wlMrxNGzGb3FszrbcUAk.crl (hash: 3K7Vo0AKvy8uHOayLd5CuaLMgGeD9a1Z0KyhKnKUhe0=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/86/e02035-73ae-4fd2-80c1-e151d4d39b41/1/umwdlY_wlMrxNGzGb3FszrbcUAk.crl
rsync://rpki.ripe.net/repository/DEFAULT/86/e02035-73ae-4fd2-80c1-e151d4d39b41/1/umwdlY_wlMrxNGzGb3FszrbcUAk.mft
rsync://rpki.ripe.net/repository/DEFAULT/umwdlY_wlMrxNGzGb3FszrbcUAk.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 30 Apr 2025 13:00:20 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:81:a2:52:a6:d0:71:50:93:24:f3:96:f9:45:a8:2c:f0
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=ba6c1d958ff094caf1346cc66f716cceb6dc5009
Validity
Not Before: Apr 29 13:00:20 2025 GMT
Not After : Apr 30 13:00:20 2025 GMT
Subject: CN=25983b118682f8bca206fcc2856924280e1407d7
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a2:40:9d:05:db:2b:c9:de:be:3e:ac:82:8f:f6:
e9:2e:2a:60:12:63:84:8c:60:0f:f9:85:75:95:d4:
df:3a:2f:4f:c2:c4:c8:b3:75:ec:5f:a6:2f:84:fe:
5c:7e:b9:64:a5:07:26:f0:19:fb:cd:56:b8:c5:25:
e5:b7:16:0f:f5:c2:65:a2:4c:66:c4:8c:2c:cf:5d:
3c:d8:bc:81:60:1a:72:e2:8c:d7:41:79:0c:38:7b:
0b:55:7b:a4:72:ac:58:2a:68:91:6b:f2:17:7c:f8:
cb:43:82:ed:18:7a:23:eb:62:fe:a9:f1:51:e5:e5:
1e:2a:ae:a2:41:40:f2:f8:9d:a3:13:c4:b3:a3:61:
de:00:0a:f6:f6:d6:5b:f0:d6:e1:16:81:1b:4f:ed:
3d:d2:e8:46:39:0c:49:41:04:e6:7e:69:15:ee:04:
91:5b:61:bc:34:af:59:74:21:f8:b9:de:9a:1f:db:
5a:fe:6f:33:90:8c:05:44:1f:fa:83:8c:89:3d:79:
62:8d:28:e6:0d:cf:f3:6d:eb:48:c4:27:b8:ce:53:
e1:19:16:24:3d:0f:c0:9d:0c:8f:90:50:36:25:23:
90:fc:bd:ba:15:ca:51:f3:55:75:e2:7b:f9:f1:4f:
3a:f6:83:cc:27:a9:07:86:86:21:f0:98:7f:a1:74:
48:8d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
25:98:3B:11:86:82:F8:BC:A2:06:FC:C2:85:69:24:28:0E:14:07:D7
X509v3 Authority Key Identifier:
keyid:BA:6C:1D:95:8F:F0:94:CA:F1:34:6C:C6:6F:71:6C:CE:B6:DC:50:09
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/umwdlY_wlMrxNGzGb3FszrbcUAk.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/86/e02035-73ae-4fd2-80c1-e151d4d39b41/1/umwdlY_wlMrxNGzGb3FszrbcUAk.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/86/e02035-73ae-4fd2-80c1-e151d4d39b41/1/umwdlY_wlMrxNGzGb3FszrbcUAk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
3b:65:ad:d2:01:85:19:05:bd:76:88:c5:e9:46:60:ab:e3:0d:
25:eb:3b:9f:fe:02:86:45:a4:84:c7:49:8e:d2:10:36:c4:b4:
33:5f:17:7d:9d:ed:62:64:d3:1f:d0:96:e8:6c:02:54:1e:2c:
1d:ed:fe:98:7e:40:5c:53:91:9a:c7:26:5b:75:eb:cb:b2:69:
4a:14:ef:45:b0:8d:32:4b:31:11:4e:88:fc:30:4b:9f:65:0a:
b3:ce:aa:80:be:24:30:25:6b:1c:d4:88:b7:6d:f4:b9:e0:0a:
2c:d6:9b:bc:1e:ae:75:66:c1:08:70:c8:18:85:9c:04:b3:3c:
c7:70:f0:06:eb:9f:c6:b9:40:0f:b4:3c:eb:d4:c5:9d:e3:38:
cc:e0:ee:b1:92:28:f8:39:9c:ef:e6:32:f5:1f:7f:ce:5b:32:
c2:69:a3:81:72:79:fe:64:1d:cd:87:79:0b:1d:24:88:b8:62:
bf:53:da:a6:82:37:75:c5:85:c1:42:14:50:f8:cb:be:0f:d0:
22:84:74:0d:3d:31:ef:c5:67:44:2b:4b:6c:83:f5:46:d3:82:
07:5a:78:d9:21:66:82:3b:46:1e:61:3c:b5:4f:73:84:17:25:
c5:c7:d0:fa:7b:03:27:bb:3c:e8:b0:24:56:a4:be:93:3c:f2:
01:cd:34:c3
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Apr 29 18:40:37 2025 by rpki-client