Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/cf/063e59-9e94-4e91-8b7e-6f4de020aae6/1/1UfPnyd2dHcSCx07JsxXphCZpyQ.mft
File: 1UfPnyd2dHcSCx07JsxXphCZpyQ.mft (raw, json)
Hash identifier: uqN5flPMxX3PPccABt7XHngPVjmMVzqMN7UrAq4w0Uo=
Subject key identifier: 3D:8A:24:37:93:A5:50:6D:A6:AB:BE:22:F0:96:66:A5:1B:97:68:C8
Authority key identifier: D5:47:CF:9F:27:76:74:77:12:0B:1D:3B:26:CC:57:A6:10:99:A7:24
Certificate issuer: /CN=d547cf9f27767477120b1d3b26cc57a61099a724
Certificate serial: 01967BA05714512BB65D724ECFE1159ED856
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/1UfPnyd2dHcSCx07JsxXphCZpyQ.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/cf/063e59-9e94-4e91-8b7e-6f4de020aae6/1/1UfPnyd2dHcSCx07JsxXphCZpyQ.mft
Manifest number: 02C1
Signing time: Mon 28 Apr 2025 09:00:27 +0000
Manifest this update: Mon 28 Apr 2025 09:00:27 +0000
Manifest next update: Tue 29 Apr 2025 09:00:27 +0000
Files and hashes: 1: 1UfPnyd2dHcSCx07JsxXphCZpyQ.crl (hash: cawzbGDHR3R3wVB6+IXh8vtHngJ38eODtsPQOj8PC3k=)
2: loFt9UkmmZ1FwU6GuBvE7wOCBXI.roa (hash: EBLJxo6VHYAxrO4XWEk670Ig6ARB7G0deWDK0JqRpRk=)
3: uEe7yxEzwBqxOdiy6kW5K2akSMQ.roa (hash: 4vrYRNv3vEFbdxt4zd7lm78u8NLMmrbvWa8ivtjvkwA=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/cf/063e59-9e94-4e91-8b7e-6f4de020aae6/1/1UfPnyd2dHcSCx07JsxXphCZpyQ.crl
rsync://rpki.ripe.net/repository/DEFAULT/cf/063e59-9e94-4e91-8b7e-6f4de020aae6/1/1UfPnyd2dHcSCx07JsxXphCZpyQ.mft
rsync://rpki.ripe.net/repository/DEFAULT/1UfPnyd2dHcSCx07JsxXphCZpyQ.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 29 Apr 2025 08:00:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:7b:a0:57:14:51:2b:b6:5d:72:4e:cf:e1:15:9e:d8:56
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=d547cf9f27767477120b1d3b26cc57a61099a724
Validity
Not Before: Apr 28 09:00:27 2025 GMT
Not After : Apr 29 09:00:27 2025 GMT
Subject: CN=3d8a243793a5506da6abbe22f09666a51b9768c8
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c4:08:8e:08:11:13:4c:41:83:ea:7e:72:46:a3:
57:95:7f:34:93:06:0b:f5:32:0e:5d:9b:cc:ab:2e:
52:58:a2:94:8b:74:ab:37:25:e0:92:b2:56:9c:6b:
d7:69:e2:69:30:e6:9f:bc:f2:59:1f:65:07:0d:f6:
a8:8d:33:16:27:46:19:a7:cd:4a:bb:a3:55:e4:7f:
c6:be:4b:c7:8f:1e:68:0e:57:a8:75:84:2c:80:8d:
f0:45:bf:ec:27:e6:62:5c:01:35:91:ec:14:e2:19:
f8:76:50:5a:9c:19:b7:3d:66:0e:5a:0d:22:0a:21:
fe:d6:da:87:21:5e:23:5b:1b:38:44:c3:82:a2:29:
1e:e5:56:9e:e2:bd:75:c1:ff:1a:d6:93:99:b0:d4:
e7:a3:41:52:9d:88:a2:70:41:bd:c1:ab:24:3d:b9:
7c:c3:cf:a5:30:64:a8:06:49:72:f5:fe:07:c4:1e:
dc:86:3f:e4:e0:41:f5:21:71:f3:7e:0e:20:27:cf:
19:3c:4d:0d:b4:9f:bd:af:52:ad:1d:ff:58:0e:ff:
3c:61:9e:ad:e4:20:e6:35:92:e7:12:64:d7:d1:13:
4e:9e:9d:8b:0d:a9:18:59:b8:97:4f:64:cf:17:63:
3f:8a:32:3b:cb:25:27:24:62:68:b1:3b:e5:0f:21:
bf:01
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
3D:8A:24:37:93:A5:50:6D:A6:AB:BE:22:F0:96:66:A5:1B:97:68:C8
X509v3 Authority Key Identifier:
keyid:D5:47:CF:9F:27:76:74:77:12:0B:1D:3B:26:CC:57:A6:10:99:A7:24
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/1UfPnyd2dHcSCx07JsxXphCZpyQ.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/cf/063e59-9e94-4e91-8b7e-6f4de020aae6/1/1UfPnyd2dHcSCx07JsxXphCZpyQ.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/cf/063e59-9e94-4e91-8b7e-6f4de020aae6/1/1UfPnyd2dHcSCx07JsxXphCZpyQ.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
08:c5:fc:f9:cb:e4:a0:30:01:62:b1:bb:ea:f3:bd:e3:70:29:
bb:bc:8b:36:92:bd:f8:73:cd:2a:4e:3c:c3:07:b0:37:b6:59:
31:2c:16:68:ab:fe:1b:f2:b9:60:55:d7:f5:bc:4d:48:b3:8d:
78:98:49:37:fe:54:ad:fc:07:c4:35:cd:1f:3b:b8:63:85:85:
2e:d4:d5:13:05:41:e6:72:70:f8:8a:78:00:ed:d2:84:1c:41:
71:0d:0e:c7:23:46:4d:86:f2:50:93:95:f8:68:0b:01:b0:a9:
53:63:bb:e0:85:d9:28:f0:f6:56:d0:f3:b4:aa:a5:12:7d:80:
ad:5e:31:81:21:65:91:dd:de:12:42:16:b4:f5:4a:17:c4:f1:
8c:23:19:e9:b6:9a:9f:f9:4a:2b:3f:be:32:73:38:f6:dc:ac:
58:b7:09:16:6f:61:a2:de:9b:62:55:70:83:64:72:b3:2b:1b:
47:a4:bb:90:ab:59:67:88:9f:0d:5a:a8:79:94:61:1f:8f:df:
5c:d9:f6:dc:1a:62:aa:8d:91:b3:86:e5:fc:ef:2f:ae:54:33:
f5:f1:79:7e:71:49:d2:3b:8d:74:3b:b1:6b:aa:d4:81:d8:07:
4f:f6:27:b2:a8:5f:94:8c:f7:8c:e5:2a:ef:4a:82:05:14:38:
0f:01:85:da
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 28 12:32:22 2025 by rpki-client