Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e9/d45193-b5fe-4e1d-8e42-ae5db6e1486d/1/UjhuUgR45iW-HWKC0hawWRL4OHQ.mft
File: UjhuUgR45iW-HWKC0hawWRL4OHQ.mft (raw, json)
Hash identifier: p1pn3oKERRBZWvI9RfeK/YQ5RSLeZewZDZcrxrwn9UM=
Subject key identifier: 8F:6D:0C:61:33:4E:AD:C7:6E:F0:6C:EC:A3:55:61:25:14:86:36:20
Authority key identifier: 52:38:6E:52:04:78:E6:25:BE:1D:62:82:D2:16:B0:59:12:F8:38:74
Certificate issuer: /CN=52386e520478e625be1d6282d216b05912f83874
Certificate serial: 0196778CECC244CD440DF2134EF2211B59B8
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/UjhuUgR45iW-HWKC0hawWRL4OHQ.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/e9/d45193-b5fe-4e1d-8e42-ae5db6e1486d/1/UjhuUgR45iW-HWKC0hawWRL4OHQ.mft
Manifest number: 0FDA
Signing time: Sun 27 Apr 2025 14:00:46 +0000
Manifest this update: Sun 27 Apr 2025 14:00:46 +0000
Manifest next update: Mon 28 Apr 2025 14:00:46 +0000
Files and hashes: 1: QuDe7YY_sSA1ZHkaY1YGA7fk4Sk.roa (hash: dBtp4ubeXafI3822xjxUQr/5SZeBaG519BE55zuoInI=)
2: UjhuUgR45iW-HWKC0hawWRL4OHQ.crl (hash: z4AhtULolhKRqR9124OVJfaLdMAJxszLupfYpjLpKtQ=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/e9/d45193-b5fe-4e1d-8e42-ae5db6e1486d/1/UjhuUgR45iW-HWKC0hawWRL4OHQ.crl
rsync://rpki.ripe.net/repository/DEFAULT/e9/d45193-b5fe-4e1d-8e42-ae5db6e1486d/1/UjhuUgR45iW-HWKC0hawWRL4OHQ.mft
rsync://rpki.ripe.net/repository/DEFAULT/UjhuUgR45iW-HWKC0hawWRL4OHQ.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 28 Apr 2025 07:29:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:77:8c:ec:c2:44:cd:44:0d:f2:13:4e:f2:21:1b:59:b8
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=52386e520478e625be1d6282d216b05912f83874
Validity
Not Before: Apr 27 14:00:46 2025 GMT
Not After : Apr 28 14:00:46 2025 GMT
Subject: CN=8f6d0c61334eadc76ef06ceca355612514863620
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:aa:ae:a0:a6:d5:2c:9c:52:81:24:82:e9:da:47:
98:d8:c7:dc:1f:fe:6a:08:b1:e5:5f:80:f1:71:52:
8f:c9:36:cf:c9:13:04:c5:eb:ac:e0:80:04:38:2b:
94:c8:06:18:8c:00:ef:ac:cd:74:be:35:46:77:ba:
5c:d8:50:3e:7e:ac:4c:34:2a:3b:f2:a7:27:fb:72:
67:4e:7a:08:b5:e3:24:f4:3f:96:fa:26:87:61:89:
2c:3b:9c:1c:64:b1:6e:84:31:57:79:a6:45:e9:54:
b0:22:4f:b0:14:a0:8d:3a:d5:f9:90:b2:92:cf:b0:
b2:6f:77:97:e2:af:c3:f8:cc:e1:78:c6:c6:fe:32:
f4:1f:4d:c3:56:41:8c:2c:b7:f3:2c:ef:03:2e:55:
8d:13:71:69:28:ff:36:c8:86:55:3e:5e:31:3c:c7:
44:7d:8a:0e:0d:40:3f:e5:22:4e:21:c8:1d:75:23:
f7:9e:e8:2d:3f:64:31:31:2b:14:79:96:22:4a:38:
8d:97:ee:d2:65:5b:0d:fb:ff:19:b3:fd:35:7e:87:
d0:d6:71:4f:df:e1:fc:d7:de:8d:3b:d9:71:16:54:
6a:e9:42:f2:ed:8b:2e:cc:09:2a:3f:c6:09:e2:05:
27:b0:ad:0b:2a:47:ed:c7:f4:2c:1a:6b:06:48:27:
1c:99
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
8F:6D:0C:61:33:4E:AD:C7:6E:F0:6C:EC:A3:55:61:25:14:86:36:20
X509v3 Authority Key Identifier:
keyid:52:38:6E:52:04:78:E6:25:BE:1D:62:82:D2:16:B0:59:12:F8:38:74
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/UjhuUgR45iW-HWKC0hawWRL4OHQ.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e9/d45193-b5fe-4e1d-8e42-ae5db6e1486d/1/UjhuUgR45iW-HWKC0hawWRL4OHQ.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/e9/d45193-b5fe-4e1d-8e42-ae5db6e1486d/1/UjhuUgR45iW-HWKC0hawWRL4OHQ.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
8b:26:81:b0:4b:ea:70:42:16:58:e1:2a:91:be:7a:67:3d:f7:
6d:f5:36:38:c5:78:9a:9d:db:33:5e:e3:a3:38:df:bf:c4:b2:
82:cd:7a:aa:a4:6c:3d:e0:dd:ec:4a:0b:5d:bc:0f:61:b2:b6:
49:ce:b2:d8:1a:90:5c:3e:c6:a4:23:8d:00:58:19:89:d8:b5:
6e:46:69:3d:fa:11:5f:f3:6e:b7:5d:19:1c:aa:7c:e8:b7:a2:
57:8a:53:3e:aa:36:e1:6a:bf:38:cd:9c:a1:ec:3e:e6:69:a1:
c2:db:c0:d8:5a:cf:f2:7c:5b:af:62:10:69:c3:6f:6e:04:63:
05:04:0e:2c:97:44:18:00:45:5c:4e:3d:93:d9:6a:00:83:2b:
12:d0:8f:36:30:f6:e1:95:69:5d:77:a1:58:c1:54:3f:26:22:
b4:b1:44:1b:82:1e:67:12:6c:ca:b1:8c:90:6d:eb:7f:c9:18:
c0:9b:f2:d3:eb:ab:51:09:a3:12:d1:4b:85:04:a7:c3:a0:44:
79:22:a3:16:fe:20:ac:e2:b9:0f:17:90:a6:f3:80:d7:3c:71:
b7:f2:6d:b5:06:5a:e3:f8:03:f2:de:42:39:d1:d7:e2:83:45:
54:95:56:42:f5:b0:93:25:ba:67:2c:79:ed:89:62:06:bf:d6:
9a:2d:8e:b4
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Apr 27 16:33:20 2025 by rpki-client