Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/a3/997265-69ad-4b4d-b738-f733e0f405ad/1/UBEgdwLICEl5tIPPyG3vdUPgXO0.mft
File: UBEgdwLICEl5tIPPyG3vdUPgXO0.mft (raw, json)
Hash identifier: ZbCPZcN25MoG9lSE2VGfPsUVgCcaHF/jr9J52CsAY24=
Subject key identifier: 8D:76:20:40:64:6A:5C:B7:47:1D:16:F4:A3:E6:4C:89:74:E4:1B:20
Authority key identifier: 50:11:20:77:02:C8:08:49:79:B4:83:CF:C8:6D:EF:75:43:E0:5C:ED
Certificate issuer: /CN=5011207702c8084979b483cfc86def7543e05ced
Certificate serial: 0196876D891C7A9127F4632E0208BC984BB1
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/UBEgdwLICEl5tIPPyG3vdUPgXO0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/a3/997265-69ad-4b4d-b738-f733e0f405ad/1/UBEgdwLICEl5tIPPyG3vdUPgXO0.mft
Manifest number: 0941
Signing time: Wed 30 Apr 2025 16:00:24 +0000
Manifest this update: Wed 30 Apr 2025 16:00:24 +0000
Manifest next update: Thu 01 May 2025 16:00:24 +0000
Files and hashes: 1: UBEgdwLICEl5tIPPyG3vdUPgXO0.crl (hash: 4VXpd9PjYUmUAHS8FlB8Vg2EA1jz0VbkgvBiCkJBK1M=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/a3/997265-69ad-4b4d-b738-f733e0f405ad/1/UBEgdwLICEl5tIPPyG3vdUPgXO0.crl
rsync://rpki.ripe.net/repository/DEFAULT/a3/997265-69ad-4b4d-b738-f733e0f405ad/1/UBEgdwLICEl5tIPPyG3vdUPgXO0.mft
rsync://rpki.ripe.net/repository/DEFAULT/UBEgdwLICEl5tIPPyG3vdUPgXO0.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 01 May 2025 13:16:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:87:6d:89:1c:7a:91:27:f4:63:2e:02:08:bc:98:4b:b1
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=5011207702c8084979b483cfc86def7543e05ced
Validity
Not Before: Apr 30 16:00:24 2025 GMT
Not After : May 1 16:00:24 2025 GMT
Subject: CN=8d762040646a5cb7471d16f4a3e64c8974e41b20
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b4:d3:1a:a0:2b:c6:4f:81:3b:db:8f:33:37:5a:
23:fe:00:ce:e6:8e:ec:55:05:ac:06:db:b9:95:27:
e3:bc:cb:8b:fe:a8:e5:1b:58:5a:88:27:52:fd:e6:
f2:a8:ab:60:ec:04:6a:5b:d2:d6:9d:91:27:0a:b3:
0d:18:41:81:96:53:0e:b4:ea:01:a7:be:eb:5e:cf:
fd:e9:b9:4a:41:59:2a:c9:71:4b:d6:5e:ac:fe:12:
ab:24:ba:2e:e6:39:6c:97:81:8d:90:72:80:21:2c:
08:33:80:0a:ea:93:84:f3:51:f9:6e:06:97:86:5d:
58:b3:80:f7:18:c1:0b:c9:57:50:ff:7e:5b:ed:86:
29:e7:01:24:2d:f0:2b:53:c0:9f:b0:88:49:a6:74:
08:02:2e:4d:b1:f2:5f:fd:7c:fe:f2:4c:1f:9f:36:
08:1b:68:e7:b2:5f:61:22:8b:12:8f:26:fa:69:d0:
0e:73:66:e3:74:2e:14:a0:99:c0:2d:4b:3a:65:41:
2d:34:89:2f:07:e4:9d:ee:f4:e1:7c:95:85:58:0b:
44:0c:f2:32:26:61:24:d9:3b:cc:e1:3c:54:d1:5a:
43:3e:c9:b5:2a:6d:4e:06:57:f6:05:f4:24:25:c3:
c6:18:b7:0f:8f:ca:b9:d1:01:44:45:aa:e7:27:5c:
53:3d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
8D:76:20:40:64:6A:5C:B7:47:1D:16:F4:A3:E6:4C:89:74:E4:1B:20
X509v3 Authority Key Identifier:
keyid:50:11:20:77:02:C8:08:49:79:B4:83:CF:C8:6D:EF:75:43:E0:5C:ED
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/UBEgdwLICEl5tIPPyG3vdUPgXO0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a3/997265-69ad-4b4d-b738-f733e0f405ad/1/UBEgdwLICEl5tIPPyG3vdUPgXO0.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/a3/997265-69ad-4b4d-b738-f733e0f405ad/1/UBEgdwLICEl5tIPPyG3vdUPgXO0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
0a:a4:88:93:89:f7:5e:1f:fb:cb:e3:da:77:ca:9c:02:0d:2c:
0e:dd:86:ad:86:1f:9c:ff:39:26:9a:63:ef:d4:79:88:49:b8:
a2:9e:45:1b:bb:56:35:7f:de:54:83:cc:e5:dc:34:55:d3:57:
42:4d:57:2a:7b:b5:8d:06:d2:e6:85:3c:07:3d:df:5b:35:b0:
d3:7e:ef:03:77:ee:19:73:e5:0a:0a:ec:2f:b7:a9:a8:26:ed:
7f:8c:a8:a7:a0:0d:7d:c8:62:a4:00:33:e8:8b:96:ea:03:ea:
1c:a4:bd:e3:99:76:a4:6f:8e:f5:77:ff:13:5f:e6:f4:d2:bf:
d9:27:c1:8d:63:7d:f9:01:48:91:51:51:4f:dc:05:14:07:fc:
6a:55:7d:f4:e9:bc:05:c4:44:52:1e:9b:8e:03:3d:21:62:95:
8b:c3:ba:85:89:37:63:a8:31:31:78:de:f3:cd:65:b8:7d:f3:
60:fd:be:0e:2d:f3:6b:26:2a:12:f7:2f:8c:16:48:76:c9:e0:
4e:e4:16:27:5a:6e:e3:3d:93:10:10:d8:52:c6:b9:5a:1b:b3:
14:94:88:6c:a2:c2:88:50:e2:64:97:02:ff:19:a0:90:be:e5:
6b:14:cb:65:44:b1:dc:bb:e7:be:79:99:b7:90:0c:b3:c7:8a:
9b:1b:15:a7
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Apr 30 18:44:31 2025 by rpki-client