Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ba/1f7bad-e5dd-4e52-b0d4-8f5c9867e998/1/UA2xcVBSJTv1I_FAufVjehHV6a8.mft
File: UA2xcVBSJTv1I_FAufVjehHV6a8.mft (raw, json)
Hash identifier: HSH3Zo6bLPMlIAJ+WX+Tbou4tHAV7n3UvIA3Get+RLo=
Subject key identifier: D6:EE:C8:E9:0C:8C:96:5F:9A:AC:22:31:B0:2A:03:8D:6D:57:5C:6A
Authority key identifier: 50:0D:B1:71:50:52:25:3B:F5:23:F1:40:B9:F5:63:7A:11:D5:E9:AF
Certificate issuer: /CN=500db1715052253bf523f140b9f5637a11d5e9af
Certificate serial: 019677C374B75555346F744BCDB4AE0CD600
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/UA2xcVBSJTv1I_FAufVjehHV6a8.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ba/1f7bad-e5dd-4e52-b0d4-8f5c9867e998/1/UA2xcVBSJTv1I_FAufVjehHV6a8.mft
Manifest number: 150E
Signing time: Sun 27 Apr 2025 15:00:20 +0000
Manifest this update: Sun 27 Apr 2025 15:00:20 +0000
Manifest next update: Mon 28 Apr 2025 15:00:20 +0000
Files and hashes: 1: CYNP6vN-qElEU6kqxQQrlgtjw0E.roa (hash: 50zm/kAB1hENUbgpvzJQwq1lkvUVeWylyOULFWpoN/I=)
2: UA2xcVBSJTv1I_FAufVjehHV6a8.crl (hash: SeTY8N1aFDwGdGU205DrtOHatd37vFPp600F/L8BhMk=)
3: pSWgXuERRm1Au1teAh3DmpY14k0.roa (hash: EnWqTAmFjlN0INK78CFEhUf7qBxCnt1KXQVV4wR/100=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/ba/1f7bad-e5dd-4e52-b0d4-8f5c9867e998/1/UA2xcVBSJTv1I_FAufVjehHV6a8.crl
rsync://rpki.ripe.net/repository/DEFAULT/ba/1f7bad-e5dd-4e52-b0d4-8f5c9867e998/1/UA2xcVBSJTv1I_FAufVjehHV6a8.mft
rsync://rpki.ripe.net/repository/DEFAULT/UA2xcVBSJTv1I_FAufVjehHV6a8.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 28 Apr 2025 07:29:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:77:c3:74:b7:55:55:34:6f:74:4b:cd:b4:ae:0c:d6:00
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=500db1715052253bf523f140b9f5637a11d5e9af
Validity
Not Before: Apr 27 15:00:20 2025 GMT
Not After : Apr 28 15:00:20 2025 GMT
Subject: CN=d6eec8e90c8c965f9aac2231b02a038d6d575c6a
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9a:57:c4:85:45:01:dd:e0:5a:e4:73:c4:a6:1d:
13:d9:88:03:73:39:8d:dd:2a:cc:4f:ff:f1:36:26:
fa:f4:75:be:48:44:9a:bc:23:e6:c9:b8:5a:1d:38:
cb:9e:7f:c8:6e:fa:c1:41:54:eb:c8:04:1b:23:0a:
d6:1b:c9:4b:a4:ca:2e:e3:a4:2d:63:04:51:06:22:
e6:13:87:3c:82:fd:b2:a8:e3:29:56:81:bd:43:72:
b9:21:73:e5:60:9c:40:58:f3:d6:99:fe:57:05:d8:
5c:62:1b:ea:45:bf:91:41:a7:b7:b0:b3:4e:64:48:
e2:86:e0:a4:76:d7:58:67:c0:53:2f:32:84:01:c0:
87:fe:32:cd:12:97:63:fe:c8:e2:49:1c:a5:7d:29:
46:71:b0:45:1f:60:54:6d:95:69:a8:a8:e1:75:ae:
79:1c:1c:3d:14:3e:e8:c5:8e:32:91:11:3d:92:f3:
15:32:29:33:1e:00:2f:6e:2a:e7:9e:b7:f4:46:16:
90:d2:1e:17:7c:e9:0a:ee:f2:31:17:ea:69:74:e5:
ac:6e:b0:1a:a7:f3:e1:20:91:aa:8d:25:c4:86:66:
f0:53:b9:95:a4:e5:6d:ca:16:1c:8d:53:d8:5d:e0:
c5:ab:00:f6:53:5a:3f:20:51:85:d9:fe:18:90:45:
ad:ab
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D6:EE:C8:E9:0C:8C:96:5F:9A:AC:22:31:B0:2A:03:8D:6D:57:5C:6A
X509v3 Authority Key Identifier:
keyid:50:0D:B1:71:50:52:25:3B:F5:23:F1:40:B9:F5:63:7A:11:D5:E9:AF
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/UA2xcVBSJTv1I_FAufVjehHV6a8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ba/1f7bad-e5dd-4e52-b0d4-8f5c9867e998/1/UA2xcVBSJTv1I_FAufVjehHV6a8.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/ba/1f7bad-e5dd-4e52-b0d4-8f5c9867e998/1/UA2xcVBSJTv1I_FAufVjehHV6a8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
6f:1b:75:c5:02:9c:df:e4:35:35:59:4b:9b:20:c3:85:22:0d:
74:80:9f:bf:74:79:bd:05:f0:df:e2:91:c1:8c:39:0f:4d:1d:
d8:36:af:c3:4d:28:30:61:60:1f:1e:81:fe:dc:f4:3d:6c:6f:
2d:ee:57:0f:3c:c6:2d:2f:c6:dd:4a:bd:43:9b:fe:71:a7:e1:
21:54:6c:fe:e7:57:cf:4a:ce:94:72:b8:01:a7:ba:87:33:81:
14:43:a7:cc:9a:76:3d:e4:23:b4:17:5c:08:6e:77:9b:b0:ca:
90:dc:69:26:d3:3a:c0:73:f3:b8:65:da:6b:0d:7b:24:96:28:
7a:25:38:d3:d1:6d:1d:63:0b:94:ab:df:aa:9b:7f:04:60:69:
99:c7:73:fd:64:03:0d:fd:d6:1a:62:5c:22:5b:e4:dc:43:6c:
a7:84:5f:73:da:59:c3:40:ce:c2:a6:64:db:d5:76:2f:6c:b0:
4d:54:6f:7a:f0:57:a6:1f:56:76:26:0f:8b:42:7f:54:fc:32:
af:f1:50:6e:5c:02:30:4b:41:ea:78:3a:a9:e3:c5:29:9b:1b:
21:2a:8a:ee:85:16:1f:b4:e8:bd:b8:02:7f:37:bc:2f:e6:d6:
82:99:9c:ee:3f:89:ba:8b:24:6f:9a:f1:ae:50:a4:52:e0:11:
a7:48:32:0d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Apr 27 17:54:12 2025 by rpki-client