Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c8/f462dc-9e59-4e8d-9c6d-f46887df9863/1/UltwWpHbww7RDrciK3eXuDTgGGM.mft
File: UltwWpHbww7RDrciK3eXuDTgGGM.mft (raw, json)
Hash identifier: bRJJvsKIcNFvcqU0+8ld01EbRQAf+WkYR0YqpApy5ak=
Subject key identifier: BF:07:A2:EA:8B:1E:D0:F5:7A:D6:D4:2C:AE:3E:D7:05:32:9C:36:40
Authority key identifier: 52:5B:70:5A:91:DB:C3:0E:D1:0E:B7:22:2B:77:97:B8:34:E0:18:63
Certificate issuer: /CN=525b705a91dbc30ed10eb7222b7797b834e01863
Certificate serial: 01967E338307F946B07A6738D766D364CB42
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/UltwWpHbww7RDrciK3eXuDTgGGM.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c8/f462dc-9e59-4e8d-9c6d-f46887df9863/1/UltwWpHbww7RDrciK3eXuDTgGGM.mft
Manifest number: 1516
Signing time: Mon 28 Apr 2025 21:00:27 +0000
Manifest this update: Mon 28 Apr 2025 21:00:27 +0000
Manifest next update: Tue 29 Apr 2025 21:00:27 +0000
Files and hashes: 1: CcJJz4LHqBfVmqebSCbbfSxazO4.roa (hash: NpYxNXz/TsGqoMRv+WmEIOF956M+rNYVRpeLiIuXSLs=)
2: DxImOx_LjbbW5qRqk68u0Cu1-sQ.roa (hash: ape7uiR4ZZbTkIG/kyNeBwlIHv8cWlil9k64NhQAZCk=)
3: O9n2W45IL4ZPQ7ySmP_wgMSjmM0.roa (hash: LHjzPi1frnVBcp5q4ol11nwZf0XWlDw2urze+/Pgr4A=)
4: UltwWpHbww7RDrciK3eXuDTgGGM.crl (hash: Rlkb8MhmWZDgz55gOfjiN90KaltPyGF+kweDNo86Vpw=)
5: agSJfA3zW_tdhYtohVlsRja4TdQ.roa (hash: PReYJ3ClBU9KEfTUKtskQ1POrp0pAjooI8cTw1s1kyk=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/c8/f462dc-9e59-4e8d-9c6d-f46887df9863/1/UltwWpHbww7RDrciK3eXuDTgGGM.crl
rsync://rpki.ripe.net/repository/DEFAULT/c8/f462dc-9e59-4e8d-9c6d-f46887df9863/1/UltwWpHbww7RDrciK3eXuDTgGGM.mft
rsync://rpki.ripe.net/repository/DEFAULT/UltwWpHbww7RDrciK3eXuDTgGGM.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 29 Apr 2025 21:00:27 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:7e:33:83:07:f9:46:b0:7a:67:38:d7:66:d3:64:cb:42
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=525b705a91dbc30ed10eb7222b7797b834e01863
Validity
Not Before: Apr 28 21:00:27 2025 GMT
Not After : Apr 29 21:00:27 2025 GMT
Subject: CN=bf07a2ea8b1ed0f57ad6d42cae3ed705329c3640
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a5:16:24:bd:1c:5b:72:87:b4:80:14:a8:3d:57:
9c:9e:dd:2a:f0:95:c5:b1:dc:a1:0e:45:cb:34:e0:
43:fd:3c:c4:f3:06:52:d7:9d:c0:5c:a2:c7:aa:e4:
cd:9f:52:fd:13:01:37:fa:69:08:ae:32:fd:59:11:
6e:32:53:20:27:c5:6e:8a:8c:14:18:d7:85:de:86:
eb:80:1d:cc:98:a0:8b:4d:04:28:a0:92:4b:41:ec:
ad:4a:c3:49:78:0a:72:b1:17:c8:6e:1b:5f:17:aa:
73:37:fe:54:c7:a8:8f:73:23:06:06:e3:b1:87:72:
be:0d:d6:4b:c2:3e:33:1d:64:d4:56:1b:ef:b7:c3:
fd:eb:b0:2b:8f:a0:f7:bd:7a:a1:2f:a8:d5:87:ee:
8b:8a:ba:29:3d:bf:07:15:1c:74:ce:fc:a3:dc:3d:
70:31:07:ca:5d:95:49:a0:e0:a5:d4:df:58:a3:ee:
5f:27:8c:4f:7f:57:65:d2:b7:3f:9e:03:f3:a8:fd:
4c:b5:7d:f2:6f:cd:86:91:20:a8:0d:49:5e:8a:54:
6d:f8:d1:a7:0c:7c:7d:20:cb:71:68:3a:1a:95:77:
3c:41:5b:72:7d:e7:fc:1c:bf:2a:15:5b:dc:14:3c:
71:40:eb:17:93:5a:35:6e:69:b9:27:ec:29:2d:37:
78:37
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
BF:07:A2:EA:8B:1E:D0:F5:7A:D6:D4:2C:AE:3E:D7:05:32:9C:36:40
X509v3 Authority Key Identifier:
keyid:52:5B:70:5A:91:DB:C3:0E:D1:0E:B7:22:2B:77:97:B8:34:E0:18:63
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/UltwWpHbww7RDrciK3eXuDTgGGM.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c8/f462dc-9e59-4e8d-9c6d-f46887df9863/1/UltwWpHbww7RDrciK3eXuDTgGGM.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/c8/f462dc-9e59-4e8d-9c6d-f46887df9863/1/UltwWpHbww7RDrciK3eXuDTgGGM.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
2c:e7:8a:57:09:51:d8:22:6d:1c:ca:9c:3c:8e:60:2a:c7:b3:
66:7b:ee:dc:5f:24:d3:c7:0a:65:e1:c5:80:72:82:34:d4:dd:
9b:6b:cd:5d:53:f1:ed:5e:91:41:f3:43:f0:aa:50:56:74:dc:
b2:68:fe:96:7c:13:5e:74:eb:0c:b1:ac:58:e2:c6:64:82:3e:
26:c1:4d:28:21:54:0a:01:50:f3:79:ee:a4:54:44:72:5c:e7:
20:af:44:a4:9a:d7:d7:24:2e:7d:2f:35:4f:56:8f:b6:af:5a:
d8:eb:e2:f0:38:c4:a3:14:74:7e:0c:8f:f4:5f:0d:39:5c:c5:
b7:b1:20:38:89:64:34:39:f5:c4:a5:a6:6b:4a:78:4d:77:45:
1b:e2:62:3e:d6:51:4c:84:2b:d8:db:55:a5:f9:b1:73:3f:98:
88:3d:2a:d0:49:3a:0d:36:bc:ff:ac:69:13:be:27:02:53:fa:
5f:70:80:fa:48:1d:89:60:10:07:9a:33:05:a5:4f:fa:bf:3c:
ba:b7:59:3d:d9:89:56:54:79:06:d9:85:bd:24:dd:ec:13:dc:
b0:27:62:4a:6d:4a:c1:ca:ba:fa:0f:92:18:0f:95:8a:13:70:
f5:0d:0f:0f:de:2a:ed:7f:67:23:a9:16:50:49:bc:9e:f7:2d:
f5:ea:91:6f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Apr 29 06:57:30 2025 by rpki-client