Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c1/3fd910-78bc-442a-88ac-8c52de6fa888/1/UZ6XRwxj_aFMMmXrdBpw46i2mv8.mft
File: UZ6XRwxj_aFMMmXrdBpw46i2mv8.mft (raw, json)
Hash identifier: cCYtarFhraq0s9EMih6QPcTZo3uKHRnjPgMpKdGFPi4=
Subject key identifier: 8F:1E:DD:0A:E9:6F:5B:3A:B8:F9:9F:A4:3E:82:0D:EF:08:F4:28:BC
Authority key identifier: 51:9E:97:47:0C:63:FD:A1:4C:32:65:EB:74:1A:70:E3:A8:B6:9A:FF
Certificate issuer: /CN=519e97470c63fda14c3265eb741a70e3a8b69aff
Certificate serial: 01967AC4DF9BD4D60A0CD8731135FEE6849F
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/UZ6XRwxj_aFMMmXrdBpw46i2mv8.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c1/3fd910-78bc-442a-88ac-8c52de6fa888/1/UZ6XRwxj_aFMMmXrdBpw46i2mv8.mft
Manifest number: 1515
Signing time: Mon 28 Apr 2025 05:00:44 +0000
Manifest this update: Mon 28 Apr 2025 05:00:44 +0000
Manifest next update: Tue 29 Apr 2025 05:00:44 +0000
Files and hashes: 1: PHMUioSV6r8_zcC5NX0kowWeLiU.roa (hash: Zgy4HYim+fh6zPODOf4zTcRCqIKQwEhvSl2nYZcO3+g=)
2: UZ6XRwxj_aFMMmXrdBpw46i2mv8.crl (hash: zvf4S1lhxX4hU+dXhexLW1RGJWCGBKXSel5eiOpMM6I=)
3: sCXtdqp4cXaJS2Ln-_IeOocxpNc.roa (hash: J4ntkjmuAU7zZwkkuhYRl8vaQJj+FqwqLBhEct+ihHA=)
4: vev4R9SqcqVytee6s6Z0JR3COYM.roa (hash: 0hHUicyfDNcNzd9gVOE9ykNNh2B97kn9na0214xMYkU=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/c1/3fd910-78bc-442a-88ac-8c52de6fa888/1/UZ6XRwxj_aFMMmXrdBpw46i2mv8.crl
rsync://rpki.ripe.net/repository/DEFAULT/c1/3fd910-78bc-442a-88ac-8c52de6fa888/1/UZ6XRwxj_aFMMmXrdBpw46i2mv8.mft
rsync://rpki.ripe.net/repository/DEFAULT/UZ6XRwxj_aFMMmXrdBpw46i2mv8.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 29 Apr 2025 05:00:44 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:7a:c4:df:9b:d4:d6:0a:0c:d8:73:11:35:fe:e6:84:9f
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=519e97470c63fda14c3265eb741a70e3a8b69aff
Validity
Not Before: Apr 28 05:00:44 2025 GMT
Not After : Apr 29 05:00:44 2025 GMT
Subject: CN=8f1edd0ae96f5b3ab8f99fa43e820def08f428bc
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ac:61:11:27:fc:c6:3c:a5:d1:58:65:3b:6a:6f:
4d:30:c6:bd:e4:a5:6d:4c:8d:45:e7:82:57:09:52:
c6:f5:28:58:35:78:22:22:11:68:07:d5:c9:c6:1e:
b5:50:56:49:6d:ef:66:45:66:6d:c3:83:cd:ea:58:
ad:f8:32:40:1a:a6:bc:6f:13:72:e4:32:cb:44:8b:
30:0a:cb:7c:de:f7:8e:a6:91:af:93:89:9e:04:ed:
80:95:ce:4a:cf:90:39:14:67:52:4e:a6:9c:56:98:
7b:76:71:dc:92:62:b1:21:42:dd:a7:49:cc:6d:d0:
1a:59:39:17:16:8f:44:36:58:06:65:00:2e:d4:f1:
0d:ab:32:11:9a:ca:b3:f4:19:ef:59:74:ba:85:86:
9a:65:6c:a1:5f:82:57:cc:b9:5a:25:ba:15:48:f5:
2b:6f:17:da:a4:01:26:02:68:dc:d4:7f:d1:a5:96:
4a:6d:e0:3c:90:27:93:74:85:f4:b5:9a:1a:4a:c3:
6e:39:67:2c:4d:20:1a:69:4b:6a:a2:e1:e3:72:38:
b2:b1:bb:ab:ea:7c:c0:d9:3f:6a:95:b0:fe:0c:fe:
8b:c6:a1:99:e0:5f:ed:01:b1:64:03:1e:2d:e8:0f:
5a:51:34:43:c4:12:af:42:97:dc:00:cc:f1:fd:b1:
1e:3f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
8F:1E:DD:0A:E9:6F:5B:3A:B8:F9:9F:A4:3E:82:0D:EF:08:F4:28:BC
X509v3 Authority Key Identifier:
keyid:51:9E:97:47:0C:63:FD:A1:4C:32:65:EB:74:1A:70:E3:A8:B6:9A:FF
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/UZ6XRwxj_aFMMmXrdBpw46i2mv8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c1/3fd910-78bc-442a-88ac-8c52de6fa888/1/UZ6XRwxj_aFMMmXrdBpw46i2mv8.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/c1/3fd910-78bc-442a-88ac-8c52de6fa888/1/UZ6XRwxj_aFMMmXrdBpw46i2mv8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
b4:5c:17:bb:26:15:d2:28:d9:a6:4b:29:b9:77:d6:ed:0b:b4:
48:8d:4e:45:7a:96:06:6c:8e:31:31:dc:33:87:7f:ef:97:4b:
85:80:aa:52:1a:2b:db:e4:b1:2a:83:e5:26:f3:46:25:52:65:
d1:dd:92:8f:a2:98:94:9d:0f:92:a4:8e:c6:bb:ee:5b:a8:7b:
28:f0:f7:2e:d5:9a:69:1f:65:3b:66:3f:bf:34:76:5c:8c:0c:
c1:8e:d1:28:ce:f6:8c:c7:19:f8:4c:1d:10:a3:11:5b:73:72:
51:9f:d3:61:75:7e:a3:93:52:55:5c:43:78:6a:26:d8:15:9d:
27:94:17:de:46:45:1d:e0:a1:05:bc:b1:42:c5:09:7d:2e:32:
a7:21:23:03:e9:46:ab:b3:67:9c:4a:4d:2c:05:cc:07:c6:99:
5f:92:89:b3:97:dc:e9:0b:15:4a:90:70:68:f1:fb:de:64:13:
cf:95:4d:be:61:29:2c:64:09:fa:11:3d:1e:36:37:29:8f:43:
12:25:b3:8f:8c:94:25:de:83:a2:28:7e:b9:a5:78:aa:ad:9e:
a5:f0:74:ba:bb:d4:3d:8f:59:aa:60:fa:76:42:6c:82:81:46:
9f:d0:89:8d:08:94:73:ff:10:8a:cc:ce:f2:af:94:e8:3e:6a:
78:a0:eb:c4
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 28 15:06:12 2025 by rpki-client