Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b0/d2cec5-b245-4547-a9cd-f6c644c94608/1/c_umgtacHRBwjte2rqojLuibkB0.mft
File: c_umgtacHRBwjte2rqojLuibkB0.mft (raw, json)
Hash identifier: 3p74vzX27qiocGk+Uh3hkmW7PMoNEfJHzqur3oEqOeI=
Subject key identifier: 7B:5A:D7:EF:35:C9:04:26:87:85:AB:B5:BC:23:D1:EA:2B:D4:B2:E3
Authority key identifier: 73:FB:A6:82:D6:9C:1D:10:70:8E:D7:B6:AE:AA:23:2E:E8:9B:90:1D
Certificate issuer: /CN=73fba682d69c1d10708ed7b6aeaa232ee89b901d
Certificate serial: 019676E859E45AC64859D48529CB768CB453
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/c_umgtacHRBwjte2rqojLuibkB0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/b0/d2cec5-b245-4547-a9cd-f6c644c94608/1/c_umgtacHRBwjte2rqojLuibkB0.mft
Manifest number: 0E4E
Signing time: Sun 27 Apr 2025 11:01:00 +0000
Manifest this update: Sun 27 Apr 2025 11:01:00 +0000
Manifest next update: Mon 28 Apr 2025 11:01:00 +0000
Files and hashes: 1: VFafoaVO2bN0O_eWCA7NRDo9AQI.roa (hash: ZCSixYQYQeBNPNi+wxPK+CWr+k+nO4o0D+w9LRSwgUE=)
2: c_umgtacHRBwjte2rqojLuibkB0.crl (hash: pD239vYhhoYMnkmXLv/brO3E5bYZDBKvK1MJiW0okHw=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/b0/d2cec5-b245-4547-a9cd-f6c644c94608/1/c_umgtacHRBwjte2rqojLuibkB0.crl
rsync://rpki.ripe.net/repository/DEFAULT/b0/d2cec5-b245-4547-a9cd-f6c644c94608/1/c_umgtacHRBwjte2rqojLuibkB0.mft
rsync://rpki.ripe.net/repository/DEFAULT/c_umgtacHRBwjte2rqojLuibkB0.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 28 Apr 2025 05:00:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:76:e8:59:e4:5a:c6:48:59:d4:85:29:cb:76:8c:b4:53
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=73fba682d69c1d10708ed7b6aeaa232ee89b901d
Validity
Not Before: Apr 27 11:01:00 2025 GMT
Not After : Apr 28 11:01:00 2025 GMT
Subject: CN=7b5ad7ef35c904268785abb5bc23d1ea2bd4b2e3
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b7:d9:ff:84:3e:3b:7d:82:87:9d:20:3b:61:01:
48:de:d0:3b:6a:14:79:ec:8f:fc:3d:09:f7:30:68:
de:9c:63:84:2b:36:82:bf:4e:ff:b5:61:ee:bb:7f:
c6:c6:12:e8:be:d4:bb:8a:9d:20:7f:ac:c6:74:37:
64:c4:26:c6:ea:8f:05:bf:f5:87:87:9e:8a:de:04:
23:1b:36:6e:38:ad:a3:28:ce:cd:77:79:fc:68:9a:
5d:a0:9f:ad:e4:d3:13:05:df:50:06:2f:ca:25:c4:
3f:db:13:18:52:ec:54:44:e0:4c:81:1a:ab:d7:59:
ea:4a:e8:e7:dc:5c:ff:22:4a:d9:92:42:d6:87:dc:
6b:91:89:78:be:2d:4f:30:4b:78:86:74:b8:44:92:
58:4c:d7:4e:d5:c4:44:4c:20:37:8d:3d:70:00:18:
4a:3b:03:1d:04:2a:e7:c1:7c:77:c2:62:8d:ad:15:
07:ee:df:01:c6:ba:a3:63:ec:06:06:d5:04:fe:32:
70:b4:1a:53:aa:d2:b2:91:87:4d:12:18:1b:e3:72:
9f:df:79:2e:af:28:44:17:32:3e:ae:03:8b:c2:c6:
e1:81:bb:e1:c1:73:85:60:e6:56:68:52:01:cd:0d:
9f:91:50:80:bf:71:e9:6e:1d:0a:a6:bd:89:21:e8:
4a:09
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
7B:5A:D7:EF:35:C9:04:26:87:85:AB:B5:BC:23:D1:EA:2B:D4:B2:E3
X509v3 Authority Key Identifier:
keyid:73:FB:A6:82:D6:9C:1D:10:70:8E:D7:B6:AE:AA:23:2E:E8:9B:90:1D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/c_umgtacHRBwjte2rqojLuibkB0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b0/d2cec5-b245-4547-a9cd-f6c644c94608/1/c_umgtacHRBwjte2rqojLuibkB0.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/b0/d2cec5-b245-4547-a9cd-f6c644c94608/1/c_umgtacHRBwjte2rqojLuibkB0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
13:b9:41:3d:37:08:ca:cb:35:af:72:73:f2:c2:ac:b1:6e:2d:
59:8f:ea:3c:35:4a:89:f7:21:24:fa:1b:ee:d5:30:bd:c1:8b:
2e:9c:84:33:2b:52:97:89:0e:b7:9f:63:37:e7:e6:d7:e5:bc:
a8:69:7c:ed:b1:b6:cb:20:d1:5f:5a:a3:5b:74:ff:a3:27:f9:
87:74:91:d2:03:4d:63:15:cc:cf:32:5c:87:ef:3e:44:94:fb:
54:1d:dd:9d:f4:6c:46:75:0e:b1:9f:d5:87:3d:93:67:e0:e4:
c0:16:21:ff:40:eb:fa:f4:ad:29:c5:f8:ca:83:37:e1:cd:05:
67:fe:6a:18:2d:e4:09:74:fd:b5:f8:34:e7:45:c6:9f:f5:d0:
92:ed:9c:1f:1f:23:b1:38:11:fc:23:e7:d2:27:d2:51:a8:4b:
c9:c6:90:66:4e:88:95:bd:d9:78:e7:c0:0f:4c:0c:7a:c2:df:
07:b2:c8:c6:3d:77:9d:48:95:b9:70:56:d6:b8:30:c4:75:be:
dc:0d:35:8e:7f:e8:f1:52:af:47:7c:7e:9c:b7:a9:10:39:12:
1b:d7:f3:a7:33:8a:bf:97:cd:31:2f:72:39:ed:f5:33:f2:e3:
bc:46:28:1e:ca:d4:1a:48:c1:fa:70:97:8a:6c:cd:3d:68:b1:
ee:8c:36:7e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Apr 27 12:54:46 2025 by rpki-client