Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d5/e0f3bb-a099-4785-8929-3d7f92c23a8b/1/Ue4aZ3JetKdkpYe8Nwed676B-2Q.mft
File: Ue4aZ3JetKdkpYe8Nwed676B-2Q.mft (raw, json)
Hash identifier: 0Ke+QgetK7zcAz/ilR9Q0u5Tum52tp5Dxt6Opv287n8=
Subject key identifier: BC:25:BE:39:A2:C9:B2:26:43:CA:EB:74:AB:EB:18:C6:94:A8:3F:CB
Authority key identifier: 51:EE:1A:67:72:5E:B4:A7:64:A5:87:BC:37:07:9D:EB:BE:81:FB:64
Certificate issuer: /CN=51ee1a67725eb4a764a587bc37079debbe81fb64
Certificate serial: 01967EA1B135CF253FB0526FE61C2CDD86FE
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Ue4aZ3JetKdkpYe8Nwed676B-2Q.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/d5/e0f3bb-a099-4785-8929-3d7f92c23a8b/1/Ue4aZ3JetKdkpYe8Nwed676B-2Q.mft
Manifest number: 1416
Signing time: Mon 28 Apr 2025 23:00:47 +0000
Manifest this update: Mon 28 Apr 2025 23:00:47 +0000
Manifest next update: Tue 29 Apr 2025 23:00:47 +0000
Files and hashes: 1: 4ve1bR44fXpzC4OLaMdoWgSf4Wg.roa (hash: ORYpvPkbfZNFI/vr3Fjdbyn/Yoia3e4Tx4qioep5WQs=)
2: Ue4aZ3JetKdkpYe8Nwed676B-2Q.crl (hash: ixIALnfAf5wZ9ZmN9APGogSrq0y5uFQXe+5rtF7XZNg=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/d5/e0f3bb-a099-4785-8929-3d7f92c23a8b/1/Ue4aZ3JetKdkpYe8Nwed676B-2Q.crl
rsync://rpki.ripe.net/repository/DEFAULT/d5/e0f3bb-a099-4785-8929-3d7f92c23a8b/1/Ue4aZ3JetKdkpYe8Nwed676B-2Q.mft
rsync://rpki.ripe.net/repository/DEFAULT/Ue4aZ3JetKdkpYe8Nwed676B-2Q.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 29 Apr 2025 23:00:47 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:7e:a1:b1:35:cf:25:3f:b0:52:6f:e6:1c:2c:dd:86:fe
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=51ee1a67725eb4a764a587bc37079debbe81fb64
Validity
Not Before: Apr 28 23:00:47 2025 GMT
Not After : Apr 29 23:00:47 2025 GMT
Subject: CN=bc25be39a2c9b22643caeb74abeb18c694a83fcb
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d9:c4:e8:37:88:f7:5a:27:4f:4b:54:87:25:d5:
3f:d8:72:95:9b:0e:79:d7:4b:14:bf:85:43:88:51:
79:34:8d:c5:5e:ef:7e:d1:15:38:96:0f:4c:a7:18:
d0:c5:46:e1:48:69:e3:ee:29:7b:b8:1a:39:bf:0f:
2b:bd:d4:b1:5a:55:c3:aa:c5:8f:02:95:4b:33:8f:
3f:36:ef:2c:65:f5:1c:5b:ba:4d:8a:a9:7f:6d:89:
ac:7c:4d:65:bf:6b:fb:4a:be:cd:2f:e1:81:bb:7f:
f4:36:ca:22:60:c3:f8:dd:0d:4c:8e:48:4c:59:2e:
6f:0b:6a:38:ba:d3:2d:7a:39:38:d0:00:0c:03:6c:
65:ed:12:e9:57:e5:2f:c2:9c:29:46:43:93:3f:d1:
45:0b:5d:f8:8d:6c:68:a7:ea:bd:d9:dd:79:cc:9f:
b8:2b:08:86:c6:c6:f4:99:d9:ac:fc:81:27:9a:05:
4a:6c:2d:03:82:51:da:22:36:a7:89:69:d2:47:aa:
94:37:a7:72:97:5a:80:bc:6b:56:6b:66:10:6e:b7:
20:1e:a4:05:df:15:dd:fb:34:c2:34:9e:60:1f:8e:
5f:aa:da:b3:8b:36:9a:af:f0:30:a2:18:7b:47:1d:
a6:99:67:ad:4a:40:76:0b:5b:01:84:2f:32:ad:6c:
48:73
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
BC:25:BE:39:A2:C9:B2:26:43:CA:EB:74:AB:EB:18:C6:94:A8:3F:CB
X509v3 Authority Key Identifier:
keyid:51:EE:1A:67:72:5E:B4:A7:64:A5:87:BC:37:07:9D:EB:BE:81:FB:64
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Ue4aZ3JetKdkpYe8Nwed676B-2Q.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d5/e0f3bb-a099-4785-8929-3d7f92c23a8b/1/Ue4aZ3JetKdkpYe8Nwed676B-2Q.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/d5/e0f3bb-a099-4785-8929-3d7f92c23a8b/1/Ue4aZ3JetKdkpYe8Nwed676B-2Q.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
7f:63:6b:7e:e9:14:d6:19:0c:8d:3f:51:0f:7e:a6:d8:97:47:
0a:e4:34:81:6e:1d:a2:4c:e2:61:3b:bc:ad:96:a9:2d:af:62:
fb:4f:c1:80:bd:0f:22:e1:37:08:73:a9:c3:b9:04:88:f4:fc:
9a:b2:67:4d:b1:6f:af:2c:32:5a:7b:17:f5:de:93:76:7f:b6:
dc:d1:35:52:7b:2e:1a:0a:62:67:f1:ce:39:28:08:6a:5f:bf:
07:f5:2e:bc:9b:00:44:11:8c:d0:f3:53:b6:d6:ba:87:d1:78:
36:20:3e:35:9a:4d:d4:03:a2:b1:e4:f6:4b:87:7d:5a:28:8c:
bc:7b:b1:9e:4a:bb:26:c8:cc:87:ac:e9:2e:c9:99:b6:70:c1:
60:04:fe:0b:07:64:12:17:b1:cd:22:c7:37:27:1f:88:d0:c1:
09:b2:07:e1:25:b6:04:8c:cb:5d:d0:34:ec:fc:3e:1e:0e:ab:
1d:29:32:91:44:20:e1:d0:88:8b:55:14:40:46:ee:4d:5f:4e:
ac:7c:6b:0e:9d:87:a3:e1:3d:56:9f:e2:07:df:6f:0e:8d:7b:
87:f0:3d:0c:3d:56:50:37:24:b8:e2:52:e8:a8:3a:45:2c:36:
84:50:4b:e4:d1:04:db:d6:91:b1:39:d7:41:11:d2:54:4e:8a:
d1:cd:e0:0f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Apr 29 09:32:31 2025 by rpki-client