Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ab/6e0ed3-eb01-44f7-8d54-39d9e0962440/1/ucic-t1R9Nkhuz0MVfkxNmOnHMQ.mft
File: ucic-t1R9Nkhuz0MVfkxNmOnHMQ.mft (raw, json)
Hash identifier: 3M/y/+wRS7QgmMYQmEeegU1/5CnggmQBobHLfwtjkWs=
Subject key identifier: C0:4C:F7:FE:A0:B2:94:3B:C4:58:D3:F1:8B:AD:23:0F:90:C1:8A:A6
Authority key identifier: B9:C8:9C:FA:DD:51:F4:D9:21:BB:3D:0C:55:F9:31:36:63:A7:1C:C4
Certificate issuer: /CN=b9c89cfadd51f4d921bb3d0c55f9313663a71cc4
Certificate serial: 01968A37E675C8721B8BD73B8C8728A3DC34
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/ucic-t1R9Nkhuz0MVfkxNmOnHMQ.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ab/6e0ed3-eb01-44f7-8d54-39d9e0962440/1/ucic-t1R9Nkhuz0MVfkxNmOnHMQ.mft
Manifest number: 1519
Signing time: Thu 01 May 2025 05:00:41 +0000
Manifest this update: Thu 01 May 2025 05:00:41 +0000
Manifest next update: Fri 02 May 2025 05:00:41 +0000
Files and hashes: 1: im_xjRz8P6HBxQJyvuA2N4KfaPQ.roa (hash: PEZegDXuxI9++oLKtHN5JJ1N3bKD7cnT7mW6YuzzJI8=)
2: ucic-t1R9Nkhuz0MVfkxNmOnHMQ.crl (hash: U3xA6UrT01O9Gd735y8m3y4NfwZ3Y9gyBrbXy4dOcoI=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/ab/6e0ed3-eb01-44f7-8d54-39d9e0962440/1/ucic-t1R9Nkhuz0MVfkxNmOnHMQ.crl
rsync://rpki.ripe.net/repository/DEFAULT/ab/6e0ed3-eb01-44f7-8d54-39d9e0962440/1/ucic-t1R9Nkhuz0MVfkxNmOnHMQ.mft
rsync://rpki.ripe.net/repository/DEFAULT/ucic-t1R9Nkhuz0MVfkxNmOnHMQ.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 02 May 2025 05:00:41 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:8a:37:e6:75:c8:72:1b:8b:d7:3b:8c:87:28:a3:dc:34
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=b9c89cfadd51f4d921bb3d0c55f9313663a71cc4
Validity
Not Before: May 1 05:00:41 2025 GMT
Not After : May 2 05:00:41 2025 GMT
Subject: CN=c04cf7fea0b2943bc458d3f18bad230f90c18aa6
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a2:c9:a1:a1:bd:5b:cf:b3:75:57:3c:29:d0:ec:
03:a0:1a:00:c1:dc:76:26:38:76:7e:e3:70:9a:f0:
cf:82:d8:c5:13:98:ec:18:90:fc:f4:2b:cd:7f:d7:
e7:a2:68:be:d0:fc:64:49:8b:04:7e:25:4e:38:82:
3e:72:6e:c5:e4:e7:75:a5:e7:09:b3:56:b6:36:bf:
92:3c:d6:7d:ba:c9:10:13:e4:af:80:71:1d:2d:20:
22:e4:dd:d7:92:aa:6e:4e:b3:9e:50:ed:b5:99:86:
c1:34:f1:c5:37:5d:fa:59:4e:bc:8b:dd:b9:4f:14:
84:af:6c:52:05:49:20:e4:e2:2e:c6:46:8f:1c:24:
5c:2d:3a:b7:05:54:a7:ae:e0:4b:22:2d:b1:35:aa:
dc:64:7e:6c:7f:21:d6:05:e1:59:b0:69:1d:30:0e:
c9:a1:61:04:4c:bd:58:c3:fd:1b:32:91:8f:d0:bd:
78:4b:79:67:86:fa:8a:49:17:49:f8:c8:59:72:13:
6e:fc:7b:27:07:09:87:00:0a:3c:69:e4:d6:13:87:
e6:67:c8:1e:a4:3e:b3:d8:b9:d1:10:64:94:64:8e:
15:7f:c5:70:19:2b:02:5b:58:14:0e:3c:9e:aa:fc:
ca:54:c1:02:40:7b:93:1e:6b:3b:f9:79:ed:c7:66:
be:cf
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C0:4C:F7:FE:A0:B2:94:3B:C4:58:D3:F1:8B:AD:23:0F:90:C1:8A:A6
X509v3 Authority Key Identifier:
keyid:B9:C8:9C:FA:DD:51:F4:D9:21:BB:3D:0C:55:F9:31:36:63:A7:1C:C4
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ucic-t1R9Nkhuz0MVfkxNmOnHMQ.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ab/6e0ed3-eb01-44f7-8d54-39d9e0962440/1/ucic-t1R9Nkhuz0MVfkxNmOnHMQ.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/ab/6e0ed3-eb01-44f7-8d54-39d9e0962440/1/ucic-t1R9Nkhuz0MVfkxNmOnHMQ.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
5d:fa:f5:6e:83:45:5a:df:8f:f7:66:07:1a:6f:23:30:de:8c:
18:75:d5:d8:40:b2:d4:63:99:b4:85:34:1a:d7:50:51:33:e2:
be:29:06:0a:a0:24:73:91:4e:90:c4:30:d1:6f:39:e1:43:8d:
e2:a9:e2:4f:62:2d:f0:c2:d4:17:c4:a0:93:01:02:35:43:d8:
33:2f:13:d2:d7:4c:a9:a8:4c:73:e5:c9:58:ad:ac:6c:a5:ac:
86:50:0b:6f:90:dd:1b:95:52:94:62:3d:38:4b:72:98:8b:3a:
4c:b5:7d:84:71:8e:3e:e0:31:a9:3c:7d:21:de:53:cc:e3:16:
73:36:78:49:d1:1f:4f:57:12:c8:9f:ba:31:94:0b:8f:a2:1e:
df:be:29:a3:ee:0c:2a:2e:86:48:34:78:0f:98:de:98:c6:08:
80:a4:55:ba:05:f6:ff:ab:62:0f:09:be:6d:8b:1c:eb:be:69:
cd:20:1f:0c:6f:51:00:52:2c:72:f2:bc:fa:2d:a9:ef:3d:d5:
4b:fd:45:a8:b1:6f:10:5a:1e:49:a0:01:56:69:05:5c:27:03:
d5:51:5d:8e:88:b0:c4:8f:e6:ae:b2:f4:32:d3:3b:2b:ea:4b:
4a:11:ed:2e:73:1b:c6:2f:b4:cd:d4:2d:92:ae:7b:43:87:7e:
40:b0:77:1f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu May 1 14:23:48 2025 by rpki-client