Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/97/03f9ee-53e3-4f69-b8b0-c138e5c27c2b/1/UhqgJHWNjRBOEXnFUDmBZjav4pg.mft
File: UhqgJHWNjRBOEXnFUDmBZjav4pg.mft (raw, json)
Hash identifier: sXRbpHFyn+3Svi7kTInUHPgipBzLwbIMfesgq/i5giw=
Subject key identifier: 1B:BC:C9:46:8E:4A:2E:AC:12:08:B2:57:FB:55:65:95:2F:DA:2C:D7
Authority key identifier: 52:1A:A0:24:75:8D:8D:10:4E:11:79:C5:50:39:81:66:36:AF:E2:98
Certificate issuer: /CN=521aa024758d8d104e1179c55039816636afe298
Certificate serial: 019677C37AEAB91C0729FC4E45B0B7F8D2C8
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/UhqgJHWNjRBOEXnFUDmBZjav4pg.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/97/03f9ee-53e3-4f69-b8b0-c138e5c27c2b/1/UhqgJHWNjRBOEXnFUDmBZjav4pg.mft
Manifest number: 150E
Signing time: Sun 27 Apr 2025 15:00:21 +0000
Manifest this update: Sun 27 Apr 2025 15:00:21 +0000
Manifest next update: Mon 28 Apr 2025 15:00:21 +0000
Files and hashes: 1: UhqgJHWNjRBOEXnFUDmBZjav4pg.crl (hash: 07iQAuvEJGZ5GH2MszAO8W8Xc0rAVNOL+zRbVuf+uuQ=)
2: wzHTUEDPSJ9fu6Go3MzUkAR9gVE.roa (hash: HH9rFvWwfqcHjpbJnsKsdwBfEEqoBLNu0bOt5Pi9+gU=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/97/03f9ee-53e3-4f69-b8b0-c138e5c27c2b/1/UhqgJHWNjRBOEXnFUDmBZjav4pg.crl
rsync://rpki.ripe.net/repository/DEFAULT/97/03f9ee-53e3-4f69-b8b0-c138e5c27c2b/1/UhqgJHWNjRBOEXnFUDmBZjav4pg.mft
rsync://rpki.ripe.net/repository/DEFAULT/UhqgJHWNjRBOEXnFUDmBZjav4pg.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 28 Apr 2025 15:00:21 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:77:c3:7a:ea:b9:1c:07:29:fc:4e:45:b0:b7:f8:d2:c8
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=521aa024758d8d104e1179c55039816636afe298
Validity
Not Before: Apr 27 15:00:21 2025 GMT
Not After : Apr 28 15:00:21 2025 GMT
Subject: CN=1bbcc9468e4a2eac1208b257fb5565952fda2cd7
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:db:d5:9a:c1:23:32:96:16:3c:82:68:e7:4f:6c:
d0:dd:15:ae:59:b7:d8:71:c9:15:97:f5:94:26:3f:
05:d2:ff:11:ee:1b:27:5e:d3:bd:fe:16:9b:33:77:
61:be:f2:2b:2b:aa:38:55:d7:cb:03:d1:2f:24:44:
7f:91:9a:0d:98:0a:40:8d:4f:09:e9:2b:c4:f4:4d:
26:72:b2:6e:74:50:61:ea:24:90:ee:31:18:a9:80:
a7:e3:01:7d:01:9c:5e:17:15:f3:30:fd:f3:25:e2:
b8:6b:4b:ee:c4:20:a3:c7:2c:46:1e:d4:1a:b7:41:
b3:ec:5b:7e:5a:0e:39:5d:db:7c:88:37:84:24:d9:
16:5f:7d:ca:3c:af:b8:70:10:93:9b:5d:19:39:3d:
b7:3b:22:47:16:9f:1e:07:f7:e7:2b:71:bb:e2:78:
dd:75:d4:e0:ab:7a:bd:6b:89:0d:dd:c9:c7:7b:ce:
5e:74:f5:06:3e:19:cb:89:cd:6b:a7:7e:79:e8:47:
8a:7b:1a:17:42:0d:9a:6b:60:67:8e:26:50:7a:01:
63:93:36:3f:c9:9a:ce:7f:2f:91:db:31:6f:dd:89:
1d:b2:66:e5:5d:26:8b:68:05:68:f0:a0:0b:6a:6c:
7c:07:15:52:e1:b5:a4:30:15:d5:63:f3:ea:d8:5a:
43:79
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
1B:BC:C9:46:8E:4A:2E:AC:12:08:B2:57:FB:55:65:95:2F:DA:2C:D7
X509v3 Authority Key Identifier:
keyid:52:1A:A0:24:75:8D:8D:10:4E:11:79:C5:50:39:81:66:36:AF:E2:98
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/UhqgJHWNjRBOEXnFUDmBZjav4pg.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/97/03f9ee-53e3-4f69-b8b0-c138e5c27c2b/1/UhqgJHWNjRBOEXnFUDmBZjav4pg.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/97/03f9ee-53e3-4f69-b8b0-c138e5c27c2b/1/UhqgJHWNjRBOEXnFUDmBZjav4pg.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
22:67:86:23:3b:db:9f:ec:c2:4a:8c:16:ec:d6:a5:c5:f7:2f:
b2:f7:1e:e9:a5:b6:76:ed:08:9f:1a:f8:27:19:8c:8e:90:9b:
13:85:12:37:fa:93:04:53:a9:da:2c:06:5e:4f:b4:42:ea:4e:
d7:53:7f:a4:68:d6:6d:9c:89:fe:c2:d2:a5:18:3c:a5:b3:0c:
e1:7a:b9:f6:c3:b6:39:bc:a6:b7:d3:9d:17:be:9f:58:6f:62:
3b:50:d6:1b:8a:f5:a5:85:3a:8d:18:ae:ee:78:64:57:46:6f:
14:1c:a0:52:0e:dc:86:0f:5b:0d:79:57:f6:79:44:db:c6:b6:
10:a4:01:a4:ce:7c:dd:f1:ad:fc:50:53:80:8d:c1:a9:a9:27:
c8:02:fc:59:7f:36:4e:ee:5a:0b:66:ff:f9:03:47:82:9f:a9:
be:e4:2c:04:99:68:56:a3:11:61:1c:29:b0:6a:54:c5:76:f2:
cb:dc:3e:8e:9e:ee:d4:61:49:d3:6a:f0:bf:0b:a8:a1:ed:b9:
57:f7:a1:04:c4:3e:42:be:1e:2d:da:75:6e:40:ee:60:0a:d1:
8a:09:c0:64:b4:26:45:9c:c3:a9:d9:04:9b:86:ce:79:99:cd:
b1:c5:39:a3:1c:04:9f:0f:85:35:ea:75:cf:5e:2c:6f:68:56:
b0:62:9e:37
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 28 01:46:14 2025 by rpki-client