Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d6/d3ab28-7f47-41f3-b231-78844e101133/1/UfSwsEaesNBxmUzYI480vvAMb74.mft
File: UfSwsEaesNBxmUzYI480vvAMb74.mft (raw, json)
Hash identifier: NCmlD9WRU5AFi8ikJFKsK098GVTOeYuNqB3+gTp9uxE=
Subject key identifier: 44:CC:E0:3A:98:ED:81:25:BE:E9:96:0E:71:7F:26:D8:CF:3E:7E:62
Authority key identifier: 51:F4:B0:B0:46:9E:B0:D0:71:99:4C:D8:23:8F:34:BE:F0:0C:6F:BE
Certificate issuer: /CN=51f4b0b0469eb0d071994cd8238f34bef00c6fbe
Certificate serial: 01967831A9DA7BE12781896C445DF0F2B5B5
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/UfSwsEaesNBxmUzYI480vvAMb74.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/d6/d3ab28-7f47-41f3-b231-78844e101133/1/UfSwsEaesNBxmUzYI480vvAMb74.mft
Manifest number: 0484
Signing time: Sun 27 Apr 2025 17:00:42 +0000
Manifest this update: Sun 27 Apr 2025 17:00:42 +0000
Manifest next update: Mon 28 Apr 2025 17:00:42 +0000
Files and hashes: 1: UfSwsEaesNBxmUzYI480vvAMb74.crl (hash: WHOnL8+qw6j2TJPlBYmOBzqwRZtQY8/2Ryq3KzBYoJA=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/d6/d3ab28-7f47-41f3-b231-78844e101133/1/UfSwsEaesNBxmUzYI480vvAMb74.crl
rsync://rpki.ripe.net/repository/DEFAULT/d6/d3ab28-7f47-41f3-b231-78844e101133/1/UfSwsEaesNBxmUzYI480vvAMb74.mft
rsync://rpki.ripe.net/repository/DEFAULT/UfSwsEaesNBxmUzYI480vvAMb74.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 28 Apr 2025 14:00:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:78:31:a9:da:7b:e1:27:81:89:6c:44:5d:f0:f2:b5:b5
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=51f4b0b0469eb0d071994cd8238f34bef00c6fbe
Validity
Not Before: Apr 27 17:00:42 2025 GMT
Not After : Apr 28 17:00:42 2025 GMT
Subject: CN=44cce03a98ed8125bee9960e717f26d8cf3e7e62
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b7:83:84:e3:97:97:64:ae:27:b9:b9:a8:9e:37:
d1:5a:04:63:be:b5:a6:2a:56:52:fc:b3:35:93:e9:
7e:be:71:2e:f8:f5:4d:63:1a:c8:81:dc:34:dd:2f:
01:39:50:ec:44:17:81:5d:e0:4c:34:39:56:3c:a6:
4f:39:68:93:6f:1c:ee:70:c3:ca:8d:ff:26:72:e7:
25:f2:9b:d9:48:b0:a0:e9:8a:18:6e:76:a8:9b:5f:
ee:f6:82:ff:5e:1a:b8:cd:59:73:ec:e0:32:3b:62:
1a:74:1f:8b:e2:f7:59:89:f9:bc:61:41:32:91:d9:
f1:81:c2:1d:73:32:86:4a:c0:d4:4d:40:58:f7:bd:
0f:87:b3:58:af:9d:8b:5f:67:35:4d:24:18:84:25:
19:4a:c9:0c:8e:9c:cd:9d:0e:f5:02:ea:37:a4:8f:
f0:82:a6:65:26:34:ae:73:da:4b:4e:7e:17:ea:2c:
03:2e:18:39:45:d3:53:35:c6:a2:df:08:f2:98:fa:
56:50:84:e9:51:a8:27:b4:16:54:b6:fb:6c:5e:30:
b8:43:7c:1d:44:35:b6:b6:0f:95:17:12:76:f0:a2:
05:c5:be:61:1a:cb:a2:5c:0e:37:7c:f4:78:43:42:
ac:b0:9d:a8:2f:d4:07:c4:e7:f2:07:a8:fb:82:38:
6e:01
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
44:CC:E0:3A:98:ED:81:25:BE:E9:96:0E:71:7F:26:D8:CF:3E:7E:62
X509v3 Authority Key Identifier:
keyid:51:F4:B0:B0:46:9E:B0:D0:71:99:4C:D8:23:8F:34:BE:F0:0C:6F:BE
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/UfSwsEaesNBxmUzYI480vvAMb74.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d6/d3ab28-7f47-41f3-b231-78844e101133/1/UfSwsEaesNBxmUzYI480vvAMb74.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/d6/d3ab28-7f47-41f3-b231-78844e101133/1/UfSwsEaesNBxmUzYI480vvAMb74.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
5f:43:ba:18:eb:e4:e0:a8:67:40:df:15:b9:99:69:90:a2:7d:
55:a5:8d:c5:26:4a:ec:fb:8e:a4:f2:60:72:b3:15:17:15:d3:
c6:f0:9b:56:b9:20:7b:e6:4a:2c:1a:eb:5e:8c:9c:5f:5b:d0:
c1:d1:51:d5:89:06:d4:03:dc:b5:0b:fa:2d:56:b3:b5:00:bf:
79:d0:1a:aa:75:91:72:49:ca:ae:50:5a:a2:38:c1:83:53:3d:
24:8b:2a:f8:a7:36:47:8e:c5:7f:d6:77:08:2c:54:02:de:b3:
4d:14:b8:30:02:45:3e:30:97:ad:fa:75:b9:c7:2f:34:bf:b7:
2e:28:fc:a3:a4:ea:16:23:0a:b0:34:fe:83:98:39:9e:fb:01:
cf:e2:ee:5b:06:8b:bf:60:8a:ee:42:28:cf:37:5b:21:e6:db:
44:07:04:06:db:1b:bd:e9:23:09:09:42:23:32:0c:c9:16:ff:
6c:7e:67:f1:65:47:c1:34:f9:b0:ab:5a:2f:0b:63:7e:74:07:
67:43:a5:a3:65:fc:f4:b6:c7:99:06:a3:e6:f2:d9:d5:9b:84:
e1:1f:e0:37:a0:27:2c:d9:9f:f6:1d:e1:fd:92:ae:5f:12:e2:
cd:1e:15:9e:f6:4e:96:98:ac:25:5c:72:ad:49:c1:6b:47:87:
f5:d2:b6:ea
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Apr 27 18:29:19 2025 by rpki-client