Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/92/f9dd1c-317b-41c1-8fcb-7d9eabee15ac/1/UxZZCg6vSN8rGuI7nVWenKwlmX4.mft
File: UxZZCg6vSN8rGuI7nVWenKwlmX4.mft (raw, json)
Hash identifier: KARVbQQnctQGUbPy33Sa3yL64nHio9ABhWvvVrduGE0=
Subject key identifier: 70:78:3B:B9:6E:FF:84:6B:37:FC:AC:F9:8C:2F:08:9B:DE:4B:CE:DB
Authority key identifier: 53:16:59:0A:0E:AF:48:DF:2B:1A:E2:3B:9D:55:9E:9C:AC:25:99:7E
Certificate issuer: /CN=5316590a0eaf48df2b1ae23b9d559e9cac25997e
Certificate serial: 01967341D9A2BCBE2F461F869EC145114FF5
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/UxZZCg6vSN8rGuI7nVWenKwlmX4.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/92/f9dd1c-317b-41c1-8fcb-7d9eabee15ac/1/UxZZCg6vSN8rGuI7nVWenKwlmX4.mft
Manifest number: 150E
Signing time: Sat 26 Apr 2025 18:00:17 +0000
Manifest this update: Sat 26 Apr 2025 18:00:17 +0000
Manifest next update: Sun 27 Apr 2025 18:00:17 +0000
Files and hashes: 1: IwWglmhS5Zmc1TAwKCoGnND82Hg.roa (hash: yxdnz39K/r0yEcsRsb6jG3Fu9Th+zv6+zwScMkcw/2k=)
2: Slwbbwyy2R4DXhMszcmZSafHRLM.roa (hash: hGzmzAgGBljAorRZaTCZ/rFSgBsMkWs+ukGHvQ5mFco=)
3: UxZZCg6vSN8rGuI7nVWenKwlmX4.crl (hash: qxKYBHTZ0lRDX/97r7svi2dz0QKUXW58nh8k3iWXMiw=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/92/f9dd1c-317b-41c1-8fcb-7d9eabee15ac/1/UxZZCg6vSN8rGuI7nVWenKwlmX4.crl
rsync://rpki.ripe.net/repository/DEFAULT/92/f9dd1c-317b-41c1-8fcb-7d9eabee15ac/1/UxZZCg6vSN8rGuI7nVWenKwlmX4.mft
rsync://rpki.ripe.net/repository/DEFAULT/UxZZCg6vSN8rGuI7nVWenKwlmX4.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 27 Apr 2025 18:00:17 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:73:41:d9:a2:bc:be:2f:46:1f:86:9e:c1:45:11:4f:f5
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=5316590a0eaf48df2b1ae23b9d559e9cac25997e
Validity
Not Before: Apr 26 18:00:17 2025 GMT
Not After : Apr 27 18:00:17 2025 GMT
Subject: CN=70783bb96eff846b37fcacf98c2f089bde4bcedb
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:98:4a:82:3b:c2:be:14:1b:49:f1:39:7f:38:9a:
e3:a6:ea:ec:a9:10:aa:17:7b:b2:27:b5:60:9a:24:
df:10:1c:02:ad:29:b1:1a:03:b6:9c:a7:b3:ee:b7:
48:34:0b:26:a0:ab:39:fd:9a:c9:1f:86:01:b7:d6:
d9:cf:be:ef:1c:3f:56:d7:de:13:b3:92:d9:21:76:
42:33:f7:45:c6:0d:fa:2c:e4:85:ef:e8:a6:c6:c3:
da:8a:28:f5:12:bc:ca:f9:16:7f:68:26:a3:ef:06:
f2:4b:7a:db:70:a2:97:ba:0e:ff:7c:5a:4d:f0:1c:
c7:bf:93:d8:cf:b7:a7:52:ed:03:b6:e4:d8:96:70:
07:76:05:5c:6e:84:49:58:7f:5c:30:32:49:dd:64:
fa:35:79:ef:6d:73:91:e4:a7:73:70:05:15:51:a4:
0f:44:03:8e:fb:2c:da:77:89:f4:81:e2:0b:9e:09:
5b:3f:df:39:a2:b9:34:7a:a3:e1:c7:17:92:85:77:
3e:39:f8:1a:8f:e8:de:3a:af:32:ab:7a:13:db:fa:
e3:40:eb:68:bb:a6:18:cc:20:bb:19:63:5a:df:52:
05:b1:26:d5:42:22:9b:72:26:ba:a9:6e:e5:da:d9:
50:ac:99:70:43:d4:c2:d0:55:02:86:f0:f8:ae:28:
6d:0d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
70:78:3B:B9:6E:FF:84:6B:37:FC:AC:F9:8C:2F:08:9B:DE:4B:CE:DB
X509v3 Authority Key Identifier:
keyid:53:16:59:0A:0E:AF:48:DF:2B:1A:E2:3B:9D:55:9E:9C:AC:25:99:7E
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/UxZZCg6vSN8rGuI7nVWenKwlmX4.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/92/f9dd1c-317b-41c1-8fcb-7d9eabee15ac/1/UxZZCg6vSN8rGuI7nVWenKwlmX4.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/92/f9dd1c-317b-41c1-8fcb-7d9eabee15ac/1/UxZZCg6vSN8rGuI7nVWenKwlmX4.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
66:af:ce:ec:85:43:43:9a:b9:ba:af:bc:bf:cf:24:73:04:3b:
67:44:d7:8b:82:d7:1c:ac:a9:a2:a1:38:c7:3a:8f:78:6b:83:
72:75:05:62:dc:51:ce:f1:59:46:ae:84:bd:cc:70:fb:50:40:
23:8d:0e:21:ad:15:0e:8f:04:df:4c:de:bc:53:54:44:6d:ea:
8c:92:fc:41:10:a2:6b:e5:07:bf:1d:13:b9:cd:a7:53:40:3c:
aa:b8:90:06:4a:15:73:15:c7:d7:c6:ef:54:5c:00:6a:94:e5:
bc:78:19:1d:9e:56:7b:ed:4c:68:7f:3b:67:0f:75:5b:2b:85:
a6:e9:44:54:50:56:8e:8a:d5:51:83:a2:3b:6a:8e:10:d6:3a:
7d:81:e9:05:f3:65:b7:1c:f5:7d:b6:ea:8d:18:fd:bd:83:20:
36:5c:5e:bb:ec:5b:a3:af:3f:e7:4f:8f:6c:fd:7d:01:03:f8:
aa:47:e2:33:b3:24:48:41:7c:ca:c0:24:e0:61:7b:74:7b:a0:
da:71:49:59:33:74:2f:2f:0b:b6:3e:92:4e:91:33:df:c0:24:
dd:e8:af:09:00:44:5b:86:21:44:46:35:bb:13:ff:1f:91:6d:
98:76:55:9d:04:64:6a:f3:11:1d:fd:2a:06:20:8b:59:84:13:
41:e4:c3:f2
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Apr 27 04:08:49 2025 by rpki-client