Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/8b/a28b5c-88d7-4ad4-9e1d-8ac17e9c40db/1/UHDcUgTez3q-pQcNdfoFjIrAE9U.mft
File: UHDcUgTez3q-pQcNdfoFjIrAE9U.mft (raw, json)
Hash identifier: Fx6EN/rTkLAMS6xQzQdgvGk2KHKLpduMf90hYdUYJZI=
Subject key identifier: 5B:C6:D6:DE:76:C8:A2:FE:FB:39:EC:3E:3D:D1:A6:D4:DB:D8:F8:B1
Authority key identifier: 50:70:DC:52:04:DE:CF:7A:BE:A5:07:0D:75:FA:05:8C:8A:C0:13:D5
Certificate issuer: /CN=5070dc5204decf7abea5070d75fa058c8ac013d5
Certificate serial: 01968391C72FFF9BE1743586E5704EDA8750
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/UHDcUgTez3q-pQcNdfoFjIrAE9U.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/8b/a28b5c-88d7-4ad4-9e1d-8ac17e9c40db/1/UHDcUgTez3q-pQcNdfoFjIrAE9U.mft
Manifest number: 1237
Signing time: Tue 29 Apr 2025 22:01:31 +0000
Manifest this update: Tue 29 Apr 2025 22:01:31 +0000
Manifest next update: Wed 30 Apr 2025 22:01:31 +0000
Files and hashes: 1: 1qF2qpZ4KDEQgCHi8Zz6Mofp1Bw.roa (hash: ZUGdPkmwhsuvGIfhBFvpGPh0RIr8NwcoDU94MyjHlG0=)
2: UHDcUgTez3q-pQcNdfoFjIrAE9U.crl (hash: B5Hh31rbNCdncK2HrusJlgBZ/+DV0Y8gv7vfK/UmR1k=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/8b/a28b5c-88d7-4ad4-9e1d-8ac17e9c40db/1/UHDcUgTez3q-pQcNdfoFjIrAE9U.crl
rsync://rpki.ripe.net/repository/DEFAULT/8b/a28b5c-88d7-4ad4-9e1d-8ac17e9c40db/1/UHDcUgTez3q-pQcNdfoFjIrAE9U.mft
rsync://rpki.ripe.net/repository/DEFAULT/UHDcUgTez3q-pQcNdfoFjIrAE9U.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 30 Apr 2025 22:01:31 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:83:91:c7:2f:ff:9b:e1:74:35:86:e5:70:4e:da:87:50
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=5070dc5204decf7abea5070d75fa058c8ac013d5
Validity
Not Before: Apr 29 22:01:31 2025 GMT
Not After : Apr 30 22:01:31 2025 GMT
Subject: CN=5bc6d6de76c8a2fefb39ec3e3dd1a6d4dbd8f8b1
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:f1:e5:aa:0d:a1:55:5f:07:a8:a7:45:c6:2c:d9:
9e:b0:df:1d:e7:b6:f1:47:99:05:1b:c5:5f:56:d5:
86:d4:b9:78:30:2d:1f:fd:5d:1e:c8:1c:d3:ef:2f:
8a:27:88:18:a6:1d:9e:41:d6:fa:a1:24:9f:a0:11:
d9:01:72:b7:22:49:c5:65:53:88:ca:30:63:4b:dd:
04:58:73:27:b9:0a:91:c2:57:93:eb:91:bf:71:de:
1f:a4:03:02:d8:d5:d9:c3:24:cd:8f:2b:fe:13:8e:
13:fb:1b:ff:42:fa:6d:ff:72:78:bc:4d:73:09:8c:
ef:8a:45:94:60:d9:bd:9e:1b:08:b0:01:ad:1e:28:
ae:a1:74:04:9b:2f:9b:86:70:47:e8:62:0f:9e:90:
ab:5d:74:ac:b0:99:29:bb:6f:97:6a:f3:77:61:12:
89:ae:16:41:08:7c:ee:38:6a:8f:80:1b:c9:a4:06:
1f:cb:65:f5:cc:30:01:4f:99:8d:f4:18:4f:04:43:
ba:f7:2d:f9:d8:d1:8a:96:ec:dd:a2:fd:4a:c0:de:
55:1a:74:36:47:7d:df:0b:17:1b:02:3b:d5:c4:28:
7d:90:45:3b:cc:80:d6:4e:cf:87:5d:ac:45:5c:9d:
51:c9:e9:6a:39:9a:6e:48:d7:03:c1:06:e6:8f:be:
c1:e3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
5B:C6:D6:DE:76:C8:A2:FE:FB:39:EC:3E:3D:D1:A6:D4:DB:D8:F8:B1
X509v3 Authority Key Identifier:
keyid:50:70:DC:52:04:DE:CF:7A:BE:A5:07:0D:75:FA:05:8C:8A:C0:13:D5
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/UHDcUgTez3q-pQcNdfoFjIrAE9U.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/8b/a28b5c-88d7-4ad4-9e1d-8ac17e9c40db/1/UHDcUgTez3q-pQcNdfoFjIrAE9U.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/8b/a28b5c-88d7-4ad4-9e1d-8ac17e9c40db/1/UHDcUgTez3q-pQcNdfoFjIrAE9U.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
d4:d1:d3:83:9d:78:68:04:2b:95:c2:4c:d0:e2:b8:3e:f3:f5:
dd:79:47:bc:9e:15:34:9b:ae:53:99:9d:bb:b3:c2:ff:2a:b5:
38:8a:d5:0e:0f:3f:3b:05:16:d2:52:ef:05:93:6f:a6:07:9d:
7a:ac:8f:1d:64:93:2b:ab:58:45:e9:20:dc:26:8e:67:5a:48:
fa:f4:05:fd:e8:54:a8:3e:e4:0e:0c:57:6d:5e:b3:13:d9:28:
45:16:f7:b2:b8:31:e4:e7:cb:47:6e:f1:3b:29:05:df:95:12:
63:0d:a2:47:48:e1:63:49:6f:64:f9:8f:8f:d4:6c:51:c4:ca:
98:0e:4d:f3:d3:39:68:71:34:9f:4e:8b:01:73:d8:dd:f8:e0:
14:3a:fc:f6:5d:cc:63:c8:dd:e1:17:07:0b:8f:89:ca:c1:03:
e0:93:c4:48:66:a4:17:46:97:18:a5:f3:b5:42:db:85:7e:4d:
a2:d5:38:9d:b5:11:86:fe:83:db:81:2d:84:6a:29:56:45:c5:
6e:ea:b4:28:27:73:96:92:cb:1a:6b:4c:9f:96:da:84:82:b3:
0d:b3:65:ad:cf:b8:6c:ab:18:3e:75:73:dd:97:7a:35:56:b9:
0f:bf:69:f6:b9:cc:11:d1:0f:ed:7e:49:f9:7a:30:97:61:0b:
a1:d2:ea:87
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Apr 30 03:41:38 2025 by rpki-client