Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/af/45d284-a373-4552-bc8a-743112b0e771/1/ULsVjSnjdQDVw6JdraFJsqUD9qU.mft
File: ULsVjSnjdQDVw6JdraFJsqUD9qU.mft (raw, json)
Hash identifier: 0VSozTbzbZN6klwOWLP7nOVMn2gMEsPArhWafXOvqtY=
Subject key identifier: 4D:91:2D:B8:DE:EC:F9:71:D0:69:05:B2:09:2A:68:B9:73:7E:31:8A
Authority key identifier: 50:BB:15:8D:29:E3:75:00:D5:C3:A2:5D:AD:A1:49:B2:A5:03:F6:A5
Certificate issuer: /CN=50bb158d29e37500d5c3a25dada149b2a503f6a5
Certificate serial: 019685114C1C216FF8CBE25F3198A418B4FE
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/ULsVjSnjdQDVw6JdraFJsqUD9qU.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/af/45d284-a373-4552-bc8a-743112b0e771/1/ULsVjSnjdQDVw6JdraFJsqUD9qU.mft
Manifest number: 0407
Signing time: Wed 30 Apr 2025 05:00:25 +0000
Manifest this update: Wed 30 Apr 2025 05:00:25 +0000
Manifest next update: Thu 01 May 2025 05:00:25 +0000
Files and hashes: 1: FsCfl3c4Ltiv9Zcfet8sFDK261w.roa (hash: 0KkSs+dGUlPIvwsEqtO4YX2lHrkRDey49/pmSeBkBNg=)
2: ULsVjSnjdQDVw6JdraFJsqUD9qU.crl (hash: XEjnj6lMN+r2H5zByXoF7+zPbNSBypB8cYW68Aumx14=)
3: dMpsd9wlXgD-cspja3jDD1k9bOA.roa (hash: NYHzPamuN1malposZb2BM/eWGsMUpeT5gZWd7cy50qo=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/af/45d284-a373-4552-bc8a-743112b0e771/1/ULsVjSnjdQDVw6JdraFJsqUD9qU.crl
rsync://rpki.ripe.net/repository/DEFAULT/af/45d284-a373-4552-bc8a-743112b0e771/1/ULsVjSnjdQDVw6JdraFJsqUD9qU.mft
rsync://rpki.ripe.net/repository/DEFAULT/ULsVjSnjdQDVw6JdraFJsqUD9qU.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 01 May 2025 05:00:25 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:85:11:4c:1c:21:6f:f8:cb:e2:5f:31:98:a4:18:b4:fe
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=50bb158d29e37500d5c3a25dada149b2a503f6a5
Validity
Not Before: Apr 30 05:00:25 2025 GMT
Not After : May 1 05:00:25 2025 GMT
Subject: CN=4d912db8deecf971d06905b2092a68b9737e318a
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b2:c9:ea:fc:ec:34:ac:62:67:bc:f5:2e:19:59:
a0:55:9c:5a:66:09:14:1f:f8:5f:99:be:c8:70:e4:
3b:e6:7e:55:b9:46:db:f1:70:99:ee:7f:4b:ca:87:
08:ca:eb:3a:59:52:6f:0b:82:ac:59:9a:a8:da:96:
95:43:ae:c8:7f:b3:57:bb:d3:51:c8:9d:29:0a:e4:
0a:14:3c:7e:5f:54:87:74:c4:5f:fc:38:31:d2:5f:
e1:ed:eb:91:d6:d5:3c:a3:46:d3:54:18:34:b4:af:
5a:bc:43:f8:41:e0:44:0a:64:b4:c9:d0:99:a8:a4:
d4:97:87:94:0b:67:6a:f0:e2:b7:9b:72:58:47:a8:
c5:0e:55:50:fc:a8:c2:c8:72:e7:bf:47:3b:fa:01:
a1:e1:b1:bb:7c:c2:6d:3f:37:2f:74:cb:6b:cd:57:
4a:b4:19:96:cd:53:a1:13:6b:86:94:9b:0a:21:37:
50:f9:c6:54:e8:be:69:d2:eb:f5:3b:d5:de:36:ea:
ed:9d:70:8a:b8:cd:78:08:9b:11:72:bb:82:d5:f6:
e1:48:8a:5d:6a:58:84:c8:1b:bd:b6:5e:e0:11:9f:
7a:fb:92:26:df:b7:11:f2:98:e5:bd:50:f4:84:49:
60:0b:37:8c:08:8f:a1:9f:4f:2c:72:23:4e:64:e6:
06:eb
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
4D:91:2D:B8:DE:EC:F9:71:D0:69:05:B2:09:2A:68:B9:73:7E:31:8A
X509v3 Authority Key Identifier:
keyid:50:BB:15:8D:29:E3:75:00:D5:C3:A2:5D:AD:A1:49:B2:A5:03:F6:A5
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ULsVjSnjdQDVw6JdraFJsqUD9qU.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/af/45d284-a373-4552-bc8a-743112b0e771/1/ULsVjSnjdQDVw6JdraFJsqUD9qU.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/af/45d284-a373-4552-bc8a-743112b0e771/1/ULsVjSnjdQDVw6JdraFJsqUD9qU.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
38:d8:09:81:ff:1c:d2:88:94:57:76:17:5f:6f:d5:ee:2c:8d:
33:39:c3:2e:b7:01:6e:e5:87:77:7a:42:ea:6e:a6:28:af:fc:
c9:23:b7:34:82:e8:d4:e8:11:b3:46:7e:39:2e:5a:0c:a8:80:
82:4c:ed:d8:eb:75:10:cc:3f:f3:e3:ab:f0:b1:6b:2b:b5:40:
86:78:fa:1d:5a:2c:f4:8a:42:01:fb:57:7b:fc:80:19:87:83:
f9:d5:2a:82:a9:34:b4:56:48:14:ea:74:3f:e0:2b:68:21:36:
a5:27:19:b6:91:77:c8:24:16:7d:d4:00:9c:cc:77:6f:a6:04:
09:8a:3d:ba:49:2b:e8:da:fb:be:69:3d:46:a4:03:5f:a3:56:
3d:a0:39:a7:f1:ee:6f:2e:10:20:50:8e:f0:98:80:a3:58:62:
6f:bc:1f:85:40:66:28:95:8d:6d:c2:de:65:cb:64:44:30:e9:
86:2d:1a:9d:65:94:45:78:ba:79:ab:c6:a2:21:fc:6f:be:1d:
a1:55:53:d3:9d:73:c5:15:b5:ca:a8:0c:8b:75:ff:28:04:62:
ac:20:ea:9a:24:7c:c2:e6:e4:53:e7:70:f4:27:f2:05:8f:51:
c0:9b:33:78:5a:a1:86:59:90:8c:d9:3b:23:46:4f:b7:dd:c4:
0c:75:90:ee
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Apr 30 14:45:49 2025 by rpki-client