Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/91/9e0c8c-e666-4e72-ae21-7a04bcbd0e46/1/UtLtjEn1Ab8ymRxkI8Ks768CSWk.mft
File: UtLtjEn1Ab8ymRxkI8Ks768CSWk.mft (raw, json)
Hash identifier: aF8wq5Rm+5JngEtDpPr27GKUB8F9OAVr6TmHAaR+jHE=
Subject key identifier: 17:2A:5A:81:67:DC:B9:EC:59:1F:6B:D5:67:26:7E:91:EE:60:9C:9F
Authority key identifier: 52:D2:ED:8C:49:F5:01:BF:32:99:1C:64:23:C2:AC:EF:AF:02:49:69
Certificate issuer: /CN=52d2ed8c49f501bf32991c6423c2acefaf024969
Certificate serial: 019686C94518852AE1456C9A5DE537B1CD69
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/UtLtjEn1Ab8ymRxkI8Ks768CSWk.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/91/9e0c8c-e666-4e72-ae21-7a04bcbd0e46/1/UtLtjEn1Ab8ymRxkI8Ks768CSWk.mft
Manifest number: 018D
Signing time: Wed 30 Apr 2025 13:00:59 +0000
Manifest this update: Wed 30 Apr 2025 13:00:59 +0000
Manifest next update: Thu 01 May 2025 13:00:59 +0000
Files and hashes: 1: MKNa-STNNQIC43-YfYTvv0QElrI.roa (hash: 5nl1biPNK+Z/9Gdw9bn2cf84K3XezIkK/OVnwTz/dio=)
2: UtLtjEn1Ab8ymRxkI8Ks768CSWk.crl (hash: bAQ2r0nSvJ8ioZAiuL0lYZ4W8k7n3Vs6HxU2wWoL+qw=)
3: ckdLePhoueFIYZx4kGDlV51XN1k.roa (hash: aOA0NbOYFDXcRN0IYoUzlHYQw/Z3WdJX57vq3cILcdo=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/91/9e0c8c-e666-4e72-ae21-7a04bcbd0e46/1/UtLtjEn1Ab8ymRxkI8Ks768CSWk.crl
rsync://rpki.ripe.net/repository/DEFAULT/91/9e0c8c-e666-4e72-ae21-7a04bcbd0e46/1/UtLtjEn1Ab8ymRxkI8Ks768CSWk.mft
rsync://rpki.ripe.net/repository/DEFAULT/UtLtjEn1Ab8ymRxkI8Ks768CSWk.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 01 May 2025 13:00:59 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:86:c9:45:18:85:2a:e1:45:6c:9a:5d:e5:37:b1:cd:69
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=52d2ed8c49f501bf32991c6423c2acefaf024969
Validity
Not Before: Apr 30 13:00:59 2025 GMT
Not After : May 1 13:00:59 2025 GMT
Subject: CN=172a5a8167dcb9ec591f6bd567267e91ee609c9f
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:96:46:c4:02:0f:07:98:23:0e:b5:b7:cb:33:52:
0c:31:87:5f:50:e6:f2:94:54:bd:d0:f3:78:7d:12:
fa:76:5b:14:48:71:20:8d:08:f0:d5:94:ae:85:10:
ee:a5:53:ea:9a:b3:60:09:ef:88:0c:6f:94:c6:fe:
2d:6a:7c:89:67:84:19:c8:5c:9b:bb:fd:4d:c8:ce:
bb:cc:49:0c:79:2c:9d:70:b5:2b:d6:7c:62:92:ad:
f9:e7:02:3c:0e:2a:9f:c7:b7:e4:4b:43:de:f6:6e:
8e:bc:b4:d3:b0:74:d7:fe:a6:ad:3e:e4:d8:71:78:
ca:98:95:d9:62:bf:dc:72:87:0c:08:4c:cd:e6:ac:
8d:07:d8:f5:d7:4d:e7:c7:a7:fb:42:a9:66:ae:76:
4b:31:b0:ae:09:44:b0:c8:1a:4a:ad:cd:19:93:c7:
76:92:69:b8:8e:94:f5:0f:c3:5b:32:64:3a:c2:bc:
91:ad:1a:f2:39:13:e9:f8:eb:59:3a:b4:26:fe:16:
de:0b:23:28:24:8a:77:c2:4a:a1:ed:ca:4a:02:69:
58:af:11:04:58:71:9e:e2:fa:2e:41:3f:c4:ae:4e:
e4:db:c2:7b:b2:72:3a:d7:e2:33:59:f2:0c:ba:44:
ff:12:01:14:72:0d:70:fa:de:a5:70:90:06:33:75:
b6:c1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
17:2A:5A:81:67:DC:B9:EC:59:1F:6B:D5:67:26:7E:91:EE:60:9C:9F
X509v3 Authority Key Identifier:
keyid:52:D2:ED:8C:49:F5:01:BF:32:99:1C:64:23:C2:AC:EF:AF:02:49:69
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/UtLtjEn1Ab8ymRxkI8Ks768CSWk.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/91/9e0c8c-e666-4e72-ae21-7a04bcbd0e46/1/UtLtjEn1Ab8ymRxkI8Ks768CSWk.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/91/9e0c8c-e666-4e72-ae21-7a04bcbd0e46/1/UtLtjEn1Ab8ymRxkI8Ks768CSWk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
90:bb:b4:10:98:9c:0a:72:4e:0d:72:bd:9c:28:b7:e1:5d:c1:
45:90:fd:e5:2f:30:03:36:2c:27:ca:96:6e:68:18:17:36:9c:
aa:51:7a:ec:3d:c4:78:43:bd:e5:d7:c5:17:89:5c:8d:ba:3a:
30:26:8d:79:4a:37:d4:25:0a:eb:32:84:06:de:8f:df:3f:54:
ec:b8:b8:5b:1f:06:83:f5:38:bd:10:bf:3b:37:66:81:2b:74:
57:b6:40:dd:f0:22:d8:d2:64:eb:f2:bc:e9:e9:14:6a:cb:23:
24:08:b1:d2:02:35:b2:59:4e:95:68:b4:87:2d:5f:b2:12:79:
0c:5c:11:df:94:f7:fa:d6:a4:2b:7e:5c:62:50:c9:0d:37:28:
46:f3:02:0b:ad:df:6d:4a:89:53:5f:e5:27:60:cd:fd:3c:5f:
a0:1a:1d:f7:3e:6c:89:88:5e:1e:48:f5:bd:4d:67:b6:ce:a8:
91:8a:3e:96:01:54:bd:fb:35:7d:1c:78:0b:b2:8f:ea:38:27:
55:28:92:12:0a:9e:2f:78:7a:85:37:70:d2:20:0a:f4:14:36:
42:5c:b7:e6:08:fa:94:89:69:4f:1b:02:06:20:2f:e6:59:05:
8d:ba:e5:be:e2:06:55:3c:02:2d:0c:6a:46:06:52:bf:c3:b5:
c8:d8:1b:40
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Apr 30 15:12:40 2025 by rpki-client