Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e1/5c10ef-6d3c-45e4-8ef9-9d794ee14dd0/1/UmTy3QuYerdeN5-Bd6QXajCGAGg.mft
File: UmTy3QuYerdeN5-Bd6QXajCGAGg.mft (raw, json)
Hash identifier: Ae04mAS2GVe5fncdA83yE7fvDLk6dDFermkGITCqp7Q=
Subject key identifier: 55:92:C2:3E:16:A1:77:D4:57:BE:5C:CD:25:29:AC:0D:A7:1F:FD:1B
Authority key identifier: 52:64:F2:DD:0B:98:7A:B7:5E:37:9F:81:77:A4:17:6A:30:86:00:68
Certificate issuer: /CN=5264f2dd0b987ab75e379f8177a4176a30860068
Certificate serial: 0196827E32EE509687E6C033979AC7E91626
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/UmTy3QuYerdeN5-Bd6QXajCGAGg.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/e1/5c10ef-6d3c-45e4-8ef9-9d794ee14dd0/1/UmTy3QuYerdeN5-Bd6QXajCGAGg.mft
Manifest number: 0151
Signing time: Tue 29 Apr 2025 17:00:30 +0000
Manifest this update: Tue 29 Apr 2025 17:00:30 +0000
Manifest next update: Wed 30 Apr 2025 17:00:30 +0000
Files and hashes: 1: UmTy3QuYerdeN5-Bd6QXajCGAGg.crl (hash: hPFR7PmoTzSvIwIWGqyBJX2g23pQOJaO3hXoU0giXFw=)
2: kSBGX6VsJ-AheRVeDxMsoKpFQYY.roa (hash: bpCrbxr/pNjdQZDOcvXUOPJK/8m01DTiWBCnp2w78BY=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/e1/5c10ef-6d3c-45e4-8ef9-9d794ee14dd0/1/UmTy3QuYerdeN5-Bd6QXajCGAGg.crl
rsync://rpki.ripe.net/repository/DEFAULT/e1/5c10ef-6d3c-45e4-8ef9-9d794ee14dd0/1/UmTy3QuYerdeN5-Bd6QXajCGAGg.mft
rsync://rpki.ripe.net/repository/DEFAULT/UmTy3QuYerdeN5-Bd6QXajCGAGg.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 30 Apr 2025 15:02:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:82:7e:32:ee:50:96:87:e6:c0:33:97:9a:c7:e9:16:26
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=5264f2dd0b987ab75e379f8177a4176a30860068
Validity
Not Before: Apr 29 17:00:30 2025 GMT
Not After : Apr 30 17:00:30 2025 GMT
Subject: CN=5592c23e16a177d457be5ccd2529ac0da71ffd1b
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bb:43:34:12:77:5c:b9:6b:49:32:a9:28:d8:5e:
e2:d5:6c:05:23:07:a7:5e:d7:d2:0d:69:cf:a9:91:
aa:cf:51:5f:cf:86:b9:4f:e3:5e:06:57:52:22:46:
85:49:d0:93:4a:8c:51:89:0b:79:03:f3:84:17:79:
b8:83:91:62:65:34:33:75:2f:39:ca:fd:0b:64:2f:
f4:2c:15:29:42:dc:e3:6e:01:12:d7:55:a1:58:9b:
1b:af:f4:dc:95:70:45:7d:93:8d:77:ac:2f:10:20:
3b:92:5f:8d:7a:f0:92:2c:13:8b:c3:91:a6:35:b9:
52:99:5c:d2:d5:31:02:04:94:20:f7:3d:aa:10:e4:
97:71:09:9d:98:61:e3:73:ca:cc:c1:24:c0:97:29:
0e:fd:bf:d8:41:09:20:76:67:e7:b2:e8:c8:f5:24:
64:6e:71:21:b8:64:e9:7e:64:df:c2:53:b8:d7:96:
dd:99:f8:44:ca:45:0c:ee:63:19:26:69:22:9c:85:
eb:42:c1:be:d0:3c:10:8c:8f:ab:25:28:17:d8:66:
a9:97:c1:cd:2e:1e:05:7d:7c:4e:3a:e7:d7:f5:44:
36:c3:79:4f:d6:98:ca:06:02:df:77:7f:c0:eb:a5:
03:c2:dc:71:3c:09:7d:e4:94:74:37:f7:3e:94:40:
ff:9d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
55:92:C2:3E:16:A1:77:D4:57:BE:5C:CD:25:29:AC:0D:A7:1F:FD:1B
X509v3 Authority Key Identifier:
keyid:52:64:F2:DD:0B:98:7A:B7:5E:37:9F:81:77:A4:17:6A:30:86:00:68
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/UmTy3QuYerdeN5-Bd6QXajCGAGg.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e1/5c10ef-6d3c-45e4-8ef9-9d794ee14dd0/1/UmTy3QuYerdeN5-Bd6QXajCGAGg.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/e1/5c10ef-6d3c-45e4-8ef9-9d794ee14dd0/1/UmTy3QuYerdeN5-Bd6QXajCGAGg.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
64:63:f7:63:17:93:dc:30:b5:4e:0b:3d:e2:46:88:b9:a9:41:
1d:97:47:62:e2:ff:11:2d:78:e0:55:49:f6:36:36:71:fb:57:
2d:ab:2b:04:bd:ba:f3:3b:cf:78:78:14:6b:e8:c0:9c:e6:cc:
89:a7:6e:d8:02:b7:32:a6:55:c8:a3:b8:6f:c0:dd:2f:9a:19:
ad:50:79:4f:f5:33:f8:d6:aa:65:67:95:60:ce:af:d3:a3:94:
65:c5:46:fd:06:cb:c1:1e:cd:90:a6:07:68:d6:76:9e:73:28:
b7:73:cd:7d:f2:73:7f:43:c4:b3:75:8a:1c:87:94:b2:38:2b:
9c:2f:fe:d8:71:c6:66:f6:70:11:67:49:1c:27:09:eb:f8:62:
75:b3:45:39:f2:04:62:ba:87:0a:73:01:ce:ac:d9:0c:a9:68:
df:cb:c1:ba:25:44:9a:03:a4:99:39:d2:0f:ab:62:6a:d6:0b:
bb:af:3c:75:03:92:b8:20:f9:92:af:8b:99:21:ba:c8:b8:e6:
2b:82:32:7c:85:81:42:25:35:48:c5:7f:20:f4:48:76:2c:53:
b6:3c:cb:76:1e:d7:07:55:36:a8:d6:fe:0b:30:0e:86:ff:74:
52:e1:82:26:4f:34:5c:98:cd:54:8b:c4:e3:d9:0b:96:48:14:
1c:6e:d7:53
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Apr 30 00:15:32 2025 by rpki-client