Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/8e/6d9359-afef-4535-9c93-f33d3bb36484/1/UpwnMJi1J2jKDkSjosFu_tSmXKA.mft
File: UpwnMJi1J2jKDkSjosFu_tSmXKA.mft (raw, json)
Hash identifier: q3yyP50lmsABUZZMPQM1nD4snr6f44a8Py5fE0pgMnY=
Subject key identifier: 23:BA:24:79:B1:BA:21:4F:93:72:1F:57:44:1E:64:40:07:BA:81:F7
Authority key identifier: 52:9C:27:30:98:B5:27:68:CA:0E:44:A3:A2:C1:6E:FE:D4:A6:5C:A0
Certificate issuer: /CN=529c273098b52768ca0e44a3a2c16efed4a65ca0
Certificate serial: 01967B699A39FCEB9CCBD82219C3D84FC0FF
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/UpwnMJi1J2jKDkSjosFu_tSmXKA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/8e/6d9359-afef-4535-9c93-f33d3bb36484/1/UpwnMJi1J2jKDkSjosFu_tSmXKA.mft
Manifest number: 152D
Signing time: Mon 28 Apr 2025 08:00:40 +0000
Manifest this update: Mon 28 Apr 2025 08:00:40 +0000
Manifest next update: Tue 29 Apr 2025 08:00:40 +0000
Files and hashes: 1: MJhgLu59YXAjx2CDwZQ7L8x1uhk.roa (hash: oBmd+orh6Kz8QYSvJuroMg2z2WEqmWjCN/qb8cgW+K0=)
2: UpwnMJi1J2jKDkSjosFu_tSmXKA.crl (hash: 0UN0t/3csdqLOqkz/LjgJ4ikDVBzgkZDX9VtatJH1BQ=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/8e/6d9359-afef-4535-9c93-f33d3bb36484/1/UpwnMJi1J2jKDkSjosFu_tSmXKA.crl
rsync://rpki.ripe.net/repository/DEFAULT/8e/6d9359-afef-4535-9c93-f33d3bb36484/1/UpwnMJi1J2jKDkSjosFu_tSmXKA.mft
rsync://rpki.ripe.net/repository/DEFAULT/UpwnMJi1J2jKDkSjosFu_tSmXKA.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 29 Apr 2025 08:00:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:7b:69:9a:39:fc:eb:9c:cb:d8:22:19:c3:d8:4f:c0:ff
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=529c273098b52768ca0e44a3a2c16efed4a65ca0
Validity
Not Before: Apr 28 08:00:40 2025 GMT
Not After : Apr 29 08:00:40 2025 GMT
Subject: CN=23ba2479b1ba214f93721f57441e644007ba81f7
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a8:86:cb:f4:07:e2:db:66:b0:d5:88:28:8c:ba:
7b:41:d5:78:e1:7d:f7:02:1d:61:76:e2:06:a8:eb:
0a:89:7a:e7:ac:e1:59:5a:31:dc:af:9a:50:a2:e6:
dd:a7:32:6e:9e:88:be:d0:e0:84:25:2b:d4:a3:bc:
f2:a2:3c:2f:d5:da:cf:1c:60:5a:a9:9b:7f:c5:b0:
09:a5:bb:00:5e:05:1f:fe:ad:cf:8b:43:ee:60:09:
b4:5d:71:c8:98:de:25:ee:bd:e3:9f:57:21:14:1c:
90:e5:fe:92:6a:29:7b:52:55:ec:bb:3f:b2:6c:bf:
8c:46:28:79:d8:be:bb:23:13:73:10:36:25:f7:24:
65:b8:bc:71:19:0e:2d:7a:3a:9b:58:b5:85:8c:4e:
1e:61:20:98:b2:25:ea:93:0c:14:bb:aa:f1:05:90:
98:97:6e:14:6b:d1:5b:97:bb:d4:71:24:c2:6e:41:
b4:a5:f9:88:e7:57:e4:fa:58:9a:0c:5d:46:8d:92:
a9:98:51:bf:25:ff:bf:c4:7e:ce:16:93:60:0e:a3:
22:85:bd:98:bd:0b:a7:9b:a2:5e:69:dc:21:d0:bc:
78:74:0e:17:25:f3:b7:8b:61:14:6f:48:9e:04:b8:
c7:d9:e2:6f:3b:a0:9e:82:d4:61:c7:7c:bc:3b:b1:
e5:31
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
23:BA:24:79:B1:BA:21:4F:93:72:1F:57:44:1E:64:40:07:BA:81:F7
X509v3 Authority Key Identifier:
keyid:52:9C:27:30:98:B5:27:68:CA:0E:44:A3:A2:C1:6E:FE:D4:A6:5C:A0
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/UpwnMJi1J2jKDkSjosFu_tSmXKA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/8e/6d9359-afef-4535-9c93-f33d3bb36484/1/UpwnMJi1J2jKDkSjosFu_tSmXKA.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/8e/6d9359-afef-4535-9c93-f33d3bb36484/1/UpwnMJi1J2jKDkSjosFu_tSmXKA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
76:2b:84:20:2e:9a:c2:09:5f:8f:77:9e:6c:85:5d:d3:d0:ec:
39:d6:ed:81:a2:b5:da:58:57:b6:d7:51:4d:88:30:54:f4:f6:
49:e3:92:42:cf:5a:d5:ec:16:b1:8c:e9:22:fb:d3:f9:9c:6e:
09:3c:d7:4a:9a:ed:99:a8:f4:7f:43:cf:5d:2b:76:25:96:cd:
f1:e6:02:d3:54:e7:28:00:f4:5f:71:e7:20:bf:0b:0c:0d:08:
07:28:aa:19:b0:57:6b:ab:53:23:7f:c4:c3:c6:51:c3:54:23:
33:4a:99:16:4c:75:69:60:c5:99:ed:e7:ee:e4:9c:3d:60:6e:
e7:5a:54:54:7b:ea:5c:64:e4:95:60:23:bd:24:d1:87:3b:c9:
3f:a2:30:53:b2:6d:65:75:e7:72:c3:8f:bb:de:9c:37:7c:cf:
77:18:70:84:50:d9:05:c8:72:ac:16:48:c0:6e:60:66:64:30:
d5:08:34:c7:58:6b:09:e4:3d:28:65:61:21:1e:6a:76:a3:10:
68:9a:12:83:f7:9d:63:b0:49:25:f7:eb:dd:66:22:a5:a5:d4:
86:3c:e6:98:ab:b6:e9:ae:7b:e8:97:4e:47:d7:d2:87:bb:ed:
cf:90:74:50:40:c8:72:e7:ae:f7:a0:b3:0e:e3:dd:4c:a0:12:
31:1c:93:43
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 28 12:30:15 2025 by rpki-client