Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d0/3b023e-a397-46bb-9465-bf3f62b95f10/1/UEUj-IEevlqjWYURpI87rwABqOg.mft
File: UEUj-IEevlqjWYURpI87rwABqOg.mft (raw, json)
Hash identifier: hFJtufIlJBqmGE/dxU1bgWGjTb7uM4POLZxp7x7pdWU=
Subject key identifier: CA:5F:A5:F6:38:FC:06:60:9B:A9:99:52:FA:FA:67:6C:80:4A:43:78
Authority key identifier: 50:45:23:F8:81:1E:BE:5A:A3:59:85:11:A4:8F:3B:AF:00:01:A8:E8
Certificate issuer: /CN=504523f8811ebe5aa3598511a48f3baf0001a8e8
Certificate serial: 019673E6F0782897B14796F6D6CF795E07F2
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/UEUj-IEevlqjWYURpI87rwABqOg.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/d0/3b023e-a397-46bb-9465-bf3f62b95f10/1/UEUj-IEevlqjWYURpI87rwABqOg.mft
Manifest number: 0FAD
Signing time: Sat 26 Apr 2025 21:00:36 +0000
Manifest this update: Sat 26 Apr 2025 21:00:36 +0000
Manifest next update: Sun 27 Apr 2025 21:00:36 +0000
Files and hashes: 1: UEUj-IEevlqjWYURpI87rwABqOg.crl (hash: b0RpxRskw51P/zJtt9G1xY98/iAlbeeRYwN4asnpc9k=)
2: ZZhPPwqLkt0i32K3myspkarpm7w.roa (hash: I/Su6LLFQ+Dm0Pej9IN4WakV0FZtHq7XZa94FgMwfR8=)
3: _U1q7kl-Gvc0JP4VZVgWjqcMCOs.roa (hash: 3X8IGbj3QMA8V3ptFiyp/tKTSPuKRQ3qYJfTsAQKmxs=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/d0/3b023e-a397-46bb-9465-bf3f62b95f10/1/UEUj-IEevlqjWYURpI87rwABqOg.crl
rsync://rpki.ripe.net/repository/DEFAULT/d0/3b023e-a397-46bb-9465-bf3f62b95f10/1/UEUj-IEevlqjWYURpI87rwABqOg.mft
rsync://rpki.ripe.net/repository/DEFAULT/UEUj-IEevlqjWYURpI87rwABqOg.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 27 Apr 2025 20:00:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:73:e6:f0:78:28:97:b1:47:96:f6:d6:cf:79:5e:07:f2
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=504523f8811ebe5aa3598511a48f3baf0001a8e8
Validity
Not Before: Apr 26 21:00:36 2025 GMT
Not After : Apr 27 21:00:36 2025 GMT
Subject: CN=ca5fa5f638fc06609ba99952fafa676c804a4378
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e5:41:62:40:73:df:5e:f5:68:ca:9c:cc:47:0e:
6e:63:e2:68:aa:2a:bf:d9:2c:d3:a0:b6:7d:c8:c7:
ca:a9:92:0e:13:5a:7b:42:0b:d8:e7:ed:cb:e1:f3:
ec:7e:42:7f:03:5d:e8:b4:a4:9b:67:10:78:94:4a:
95:f3:82:e8:bc:c9:ce:04:98:aa:74:80:8d:dc:8c:
d1:b2:a1:4b:12:c3:7a:7c:b2:e3:1b:4d:c3:03:b6:
fe:2e:71:25:84:c8:93:31:0b:5e:84:a5:f7:fc:21:
8a:54:23:a6:41:4b:1c:02:22:77:15:08:2e:02:0c:
cd:1b:57:a2:8a:62:57:6c:aa:bf:74:99:0a:ce:50:
cb:8c:87:67:bf:fd:4f:ba:06:20:b9:ac:1d:a1:5d:
da:1c:48:ce:d9:2c:54:97:6a:f8:2e:d7:f0:d0:74:
57:4b:62:73:f6:a7:9f:ef:d2:32:f5:00:5b:62:2f:
d7:db:89:1c:a1:04:0b:57:79:49:d5:f4:f2:db:28:
52:f6:db:30:31:1b:fb:7c:29:25:ca:60:e8:2a:15:
a5:f5:78:8c:0b:fa:28:0c:40:57:8f:de:cc:32:27:
b5:3e:48:46:c3:82:be:8b:fc:5e:23:f1:83:23:56:
de:2b:f9:24:8b:95:72:d4:b1:0d:98:e8:1d:73:59:
2d:3b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
CA:5F:A5:F6:38:FC:06:60:9B:A9:99:52:FA:FA:67:6C:80:4A:43:78
X509v3 Authority Key Identifier:
keyid:50:45:23:F8:81:1E:BE:5A:A3:59:85:11:A4:8F:3B:AF:00:01:A8:E8
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/UEUj-IEevlqjWYURpI87rwABqOg.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d0/3b023e-a397-46bb-9465-bf3f62b95f10/1/UEUj-IEevlqjWYURpI87rwABqOg.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/d0/3b023e-a397-46bb-9465-bf3f62b95f10/1/UEUj-IEevlqjWYURpI87rwABqOg.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
33:2f:dc:e1:00:ab:52:dd:89:ab:ee:a9:97:23:ca:87:1f:9b:
ab:86:d5:ce:54:1f:72:3c:67:2b:7e:1d:34:cf:20:c0:d9:7e:
52:5b:17:9a:2f:d7:10:f8:fa:32:cd:84:4a:e5:e5:1d:0f:62:
92:cf:4f:8a:86:51:48:df:8f:a5:98:3f:8d:47:d7:3d:fa:69:
77:29:46:e4:6e:64:71:74:c4:3b:cb:e6:b5:c0:e0:1a:cd:bf:
9b:e2:42:e0:d6:8e:96:a3:57:60:7a:ad:14:7e:b8:c2:0c:4d:
bd:09:2e:ec:26:be:ea:7b:b7:d3:18:db:be:83:25:36:48:fc:
68:9c:92:37:48:bb:0a:2d:21:6e:02:ba:a9:e0:22:12:08:87:
f9:c6:f1:af:eb:af:45:7a:77:c9:55:c1:54:bc:c5:0c:6f:dc:
3e:51:e0:17:85:f9:3d:f8:10:de:b0:d6:76:2a:f4:9a:58:21:
26:b3:9b:be:fb:47:ad:d6:fb:4b:02:73:67:a6:97:1e:b8:46:
dd:fb:bf:0e:dd:19:8c:d6:4d:58:60:c4:2a:86:8d:56:1a:0d:
b0:4b:84:bd:7c:96:3a:70:0e:fd:f8:86:11:4c:8c:1b:d1:3f:
c5:c5:58:e2:37:0a:1b:c9:ad:ad:a4:5a:5a:0b:a4:a8:03:ae:
f9:cd:14:4a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Apr 27 03:56:59 2025 by rpki-client