Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/9f/9b1d85-7198-4af6-a632-d0cfe43016de/1/UkEeUtq30L4mdDE7a10udL0RNg4.mft
File: UkEeUtq30L4mdDE7a10udL0RNg4.mft (raw, json)
Hash identifier: qA1hLjQjfRInI6yi7Hrt5I1eHod3w19tDpXFTJeEJ+k=
Subject key identifier: 0E:6C:B3:36:2E:BA:4C:CE:1F:B4:60:F7:DA:BC:2F:DA:8C:8E:34:9B
Authority key identifier: 52:41:1E:52:DA:B7:D0:BE:26:74:31:3B:6B:5D:2E:74:BD:11:36:0E
Certificate issuer: /CN=52411e52dab7d0be2674313b6b5d2e74bd11360e
Certificate serial: 019676B0D33CCAE59E1B97CBA9D2D6F0C27C
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/UkEeUtq30L4mdDE7a10udL0RNg4.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/9f/9b1d85-7198-4af6-a632-d0cfe43016de/1/UkEeUtq30L4mdDE7a10udL0RNg4.mft
Manifest number: 0D05
Signing time: Sun 27 Apr 2025 10:00:21 +0000
Manifest this update: Sun 27 Apr 2025 10:00:21 +0000
Manifest next update: Mon 28 Apr 2025 10:00:21 +0000
Files and hashes: 1: UkEeUtq30L4mdDE7a10udL0RNg4.crl (hash: iNYZYLo63/FavuzxrRXt/m/Twoo1DUYbsrgdq+lOysM=)
2: vkVOKzv8_S2fkG1izpq7kTixdUE.roa (hash: piMEcgAOMMddSvNaBzKcgAojln/bHlikM4A3Z6HENXY=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/9f/9b1d85-7198-4af6-a632-d0cfe43016de/1/UkEeUtq30L4mdDE7a10udL0RNg4.crl
rsync://rpki.ripe.net/repository/DEFAULT/9f/9b1d85-7198-4af6-a632-d0cfe43016de/1/UkEeUtq30L4mdDE7a10udL0RNg4.mft
rsync://rpki.ripe.net/repository/DEFAULT/UkEeUtq30L4mdDE7a10udL0RNg4.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 28 Apr 2025 07:29:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:76:b0:d3:3c:ca:e5:9e:1b:97:cb:a9:d2:d6:f0:c2:7c
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=52411e52dab7d0be2674313b6b5d2e74bd11360e
Validity
Not Before: Apr 27 10:00:21 2025 GMT
Not After : Apr 28 10:00:21 2025 GMT
Subject: CN=0e6cb3362eba4cce1fb460f7dabc2fda8c8e349b
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:da:88:db:bb:21:59:9d:d2:55:9e:ae:1f:4c:b9:
eb:b4:57:93:1c:35:3e:8f:a6:a6:1b:f9:08:66:85:
82:bc:77:07:61:3b:10:b3:b6:6d:be:eb:a1:2e:18:
ea:f2:59:87:d6:8d:9b:a5:05:b5:ba:16:92:81:a9:
1c:de:91:86:ec:56:f2:f5:e3:e0:84:af:ff:f4:10:
24:72:74:b6:9d:fb:a2:a6:c4:d7:97:3b:5a:4d:a6:
cc:87:a5:a1:c3:13:76:2b:c3:89:ae:c4:34:4b:b9:
73:05:49:b5:2d:35:c0:7c:51:34:37:09:56:bb:04:
2c:8e:d2:ff:0a:89:a1:21:e7:32:78:82:f0:ca:51:
70:91:1e:67:b7:80:a6:5c:33:8d:d4:21:34:f4:4d:
eb:ad:7f:43:c8:71:8b:2e:4e:8f:24:4f:cb:6e:55:
52:3f:e3:17:7c:cb:33:29:06:90:07:fe:81:25:e6:
8f:0f:21:3e:28:d9:94:54:03:3f:c9:5b:6f:c7:a1:
95:16:85:45:dc:ff:25:0f:ce:90:1b:87:96:38:01:
23:d0:e7:55:50:89:35:47:3a:d0:15:ae:36:c1:e3:
a5:ab:39:58:2e:c7:dc:b6:0e:88:ef:3d:57:97:e9:
57:15:09:08:de:94:39:b6:8c:bb:45:ca:19:04:66:
89:2b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
0E:6C:B3:36:2E:BA:4C:CE:1F:B4:60:F7:DA:BC:2F:DA:8C:8E:34:9B
X509v3 Authority Key Identifier:
keyid:52:41:1E:52:DA:B7:D0:BE:26:74:31:3B:6B:5D:2E:74:BD:11:36:0E
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/UkEeUtq30L4mdDE7a10udL0RNg4.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/9f/9b1d85-7198-4af6-a632-d0cfe43016de/1/UkEeUtq30L4mdDE7a10udL0RNg4.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/9f/9b1d85-7198-4af6-a632-d0cfe43016de/1/UkEeUtq30L4mdDE7a10udL0RNg4.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
9f:b1:18:fd:fd:f7:0a:4b:b0:4a:05:4a:71:64:b2:4f:4c:ad:
0c:86:40:56:16:ef:05:4b:11:a0:a6:d3:fe:3a:6f:5f:55:a8:
9e:d4:84:2f:2e:88:a1:59:a4:8c:c6:84:8f:14:8d:68:bf:11:
e3:a8:94:af:ca:4e:b7:c2:ec:86:64:6e:65:33:3b:06:02:07:
ea:54:05:c6:76:b3:4b:81:c2:e5:12:89:d6:a4:37:6f:49:56:
a4:fc:a2:6a:d5:a5:91:49:89:21:60:f6:43:c4:8d:aa:4d:be:
6e:2f:1d:d1:2f:b6:1d:e6:f8:b6:56:0a:27:9e:7d:c1:c6:a3:
db:2e:7d:c3:76:fd:1a:3e:00:fb:e5:fb:f5:cf:ec:e7:2a:68:
56:16:dc:54:f0:b4:d1:9e:bd:bf:7d:3b:32:4d:27:9b:b4:b7:
9d:ae:5d:f5:17:ae:4c:a4:cd:01:6a:bd:93:da:4d:37:cf:7f:
e6:6f:27:57:de:b3:05:61:8a:fd:d0:b3:c3:03:07:ad:71:ca:
d3:60:46:72:99:78:db:6c:77:2f:c3:bf:74:f0:68:b8:a0:de:
b3:65:af:3a:bb:fa:54:d1:02:de:8d:59:07:09:89:39:d3:2d:
58:5e:90:64:ba:b0:6e:64:6a:2f:ec:72:b4:9f:be:11:fe:4a:
4f:e8:76:54
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Apr 27 17:33:45 2025 by rpki-client