Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b7/731b4c-8ca8-497b-8a2b-43c1c61d02eb/1/UNpYj16aHCr1a-CPfmosmYGrYCY.mft
File: UNpYj16aHCr1a-CPfmosmYGrYCY.mft (raw, json)
Hash identifier: HeXlmwqNLzeJleHD26C3KuVMZzcF0Pyh2oN2Xoli6bw=
Subject key identifier: 33:FD:B5:05:B6:BD:1F:B8:72:1E:75:0F:6C:87:55:4F:35:46:48:BA
Authority key identifier: 50:DA:58:8F:5E:9A:1C:2A:F5:6B:E0:8F:7E:6A:2C:99:81:AB:60:26
Certificate issuer: /CN=50da588f5e9a1c2af56be08f7e6a2c9981ab6026
Certificate serial: 0196771F037DA0EA34056123716B328DB425
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/UNpYj16aHCr1a-CPfmosmYGrYCY.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/b7/731b4c-8ca8-497b-8a2b-43c1c61d02eb/1/UNpYj16aHCr1a-CPfmosmYGrYCY.mft
Manifest number: 097C
Signing time: Sun 27 Apr 2025 12:00:43 +0000
Manifest this update: Sun 27 Apr 2025 12:00:43 +0000
Manifest next update: Mon 28 Apr 2025 12:00:43 +0000
Files and hashes: 1: UNpYj16aHCr1a-CPfmosmYGrYCY.crl (hash: 8QRZ72dFA2LIK6/W3AiWYOcXKqLBX9GIxlmxPaPv0CM=)
2: VwHu0AZouyhVLQY99VO0Hkcb7pw.roa (hash: cQhVJXl3GQeuBM9kWPoYpEUpa83WUtjFGDqVTGex39s=)
3: g5Vn880XXpeU5DJfsGcy-Urcv2M.roa (hash: OCJJ4xo5f+mpBB7aa28MDI5Ug57SbY/lCFK1ZpNzZKw=)
4: tqTqorxuukrl9uDDia_5nmx2f7s.roa (hash: Jv1dDJLLdh6QR2z0ABpF4hZs9+OaRufEEerM9P1Rxzo=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/b7/731b4c-8ca8-497b-8a2b-43c1c61d02eb/1/UNpYj16aHCr1a-CPfmosmYGrYCY.crl
rsync://rpki.ripe.net/repository/DEFAULT/b7/731b4c-8ca8-497b-8a2b-43c1c61d02eb/1/UNpYj16aHCr1a-CPfmosmYGrYCY.mft
rsync://rpki.ripe.net/repository/DEFAULT/UNpYj16aHCr1a-CPfmosmYGrYCY.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 28 Apr 2025 05:00:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:77:1f:03:7d:a0:ea:34:05:61:23:71:6b:32:8d:b4:25
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=50da588f5e9a1c2af56be08f7e6a2c9981ab6026
Validity
Not Before: Apr 27 12:00:43 2025 GMT
Not After : Apr 28 12:00:43 2025 GMT
Subject: CN=33fdb505b6bd1fb8721e750f6c87554f354648ba
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b1:3f:f3:0c:16:4b:1a:10:aa:d4:16:64:ac:2d:
7c:f4:b4:81:dc:cf:5a:ff:0e:3c:f0:b8:72:14:3c:
42:37:20:4f:0c:a5:55:14:5d:96:71:36:4f:60:40:
47:b4:63:8d:5b:8a:93:69:74:26:81:f8:78:e5:d4:
6f:6a:e8:b7:f1:9a:8d:24:58:73:57:9f:0b:4b:2f:
64:d1:24:b1:5f:3c:28:36:27:d1:af:d1:7b:5b:1f:
8a:ad:e0:16:52:bf:5d:a5:db:c8:24:5e:6a:ba:eb:
1a:1b:76:c3:cd:38:55:db:90:28:5a:9b:01:76:d2:
c7:0f:43:11:0c:31:f3:99:c1:1a:ed:14:7f:fc:41:
bb:fc:35:94:0b:21:fc:d4:08:ec:bb:be:1c:6f:1a:
2f:02:5b:58:33:d3:44:84:a0:02:5d:44:77:a7:8a:
5e:6e:7f:f3:b0:2c:7e:3a:4a:70:f3:7d:ae:d5:d1:
75:a7:2f:5e:60:48:2a:ef:f6:ef:b9:a6:a2:a0:0d:
be:7d:e3:1d:b3:8e:a2:c8:75:9a:51:66:f1:b4:dd:
00:30:24:67:87:fc:bd:3e:e0:e6:16:1e:78:b7:a3:
a5:3a:44:ca:66:ce:d2:b8:b8:a0:18:38:4c:67:4e:
4f:0f:20:71:2f:96:d3:cc:df:c1:8b:9c:3a:b5:d4:
7b:5d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
33:FD:B5:05:B6:BD:1F:B8:72:1E:75:0F:6C:87:55:4F:35:46:48:BA
X509v3 Authority Key Identifier:
keyid:50:DA:58:8F:5E:9A:1C:2A:F5:6B:E0:8F:7E:6A:2C:99:81:AB:60:26
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/UNpYj16aHCr1a-CPfmosmYGrYCY.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b7/731b4c-8ca8-497b-8a2b-43c1c61d02eb/1/UNpYj16aHCr1a-CPfmosmYGrYCY.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/b7/731b4c-8ca8-497b-8a2b-43c1c61d02eb/1/UNpYj16aHCr1a-CPfmosmYGrYCY.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
89:ef:93:12:2e:a6:a3:aa:16:ae:64:1d:1c:24:0a:f5:e1:14:
5c:60:42:fa:0a:50:1f:ec:e5:94:88:4f:76:cc:5b:b6:5b:cb:
5c:16:dd:14:88:f1:f1:d2:09:6a:e6:47:11:f2:b3:9e:26:91:
f3:47:45:1f:9a:4b:c3:aa:4a:08:9f:48:42:e4:d9:e8:ef:13:
d3:c5:48:ba:4f:dd:c6:11:b0:bd:82:42:6f:29:8b:0c:01:be:
39:15:e4:53:33:34:9b:5e:bd:15:10:a0:b1:68:e0:50:92:43:
ad:f3:27:8a:08:3b:a8:dd:93:4f:13:3c:c6:e1:68:d1:1a:5f:
34:87:3a:2e:53:d9:c8:97:35:b6:3d:77:2f:50:b0:f9:7e:57:
d1:36:77:bb:fc:56:7b:1e:90:df:9e:93:24:e5:ad:06:be:91:
e1:79:74:ae:36:eb:d9:6d:1b:2e:76:57:bc:3d:04:84:2f:d5:
7d:dc:95:10:8d:aa:64:93:5e:09:f7:3b:55:c7:27:1f:d1:2f:
69:e7:47:4f:49:a7:fc:c5:76:98:97:0c:cf:fa:ab:7f:84:03:
11:c1:7a:b9:90:df:40:da:f3:b0:d0:5a:7e:75:7b:7d:e2:22:
04:45:12:57:4b:fb:2f:4f:c1:a0:e7:41:b7:16:d1:20:03:1f:
6c:1f:71:fe
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Apr 27 15:30:57 2025 by rpki-client