Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f0/ce58d5-126a-44aa-aa08-0f3c1658d0b7/1/UJY_Dmf02JPPPXAaI2EObziVkmA.mft
File: UJY_Dmf02JPPPXAaI2EObziVkmA.mft (raw, json)
Hash identifier: rD4gjHHglqDTIP63uRJ6cIOgy3HfgXFahaZmSlqtGcs=
Subject key identifier: B8:51:9F:F1:B1:DF:16:4E:AA:BE:61:0F:2D:C9:56:D7:AB:16:BE:91
Authority key identifier: 50:96:3F:0E:67:F4:D8:93:CF:3D:70:1A:23:61:0E:6F:38:95:92:60
Certificate issuer: /CN=50963f0e67f4d893cf3d701a23610e6f38959260
Certificate serial: 019685803FB9B8EE9BC12225BF5030DEEEAF
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/UJY_Dmf02JPPPXAaI2EObziVkmA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/f0/ce58d5-126a-44aa-aa08-0f3c1658d0b7/1/UJY_Dmf02JPPPXAaI2EObziVkmA.mft
Manifest number: 044A
Signing time: Wed 30 Apr 2025 07:01:36 +0000
Manifest this update: Wed 30 Apr 2025 07:01:36 +0000
Manifest next update: Thu 01 May 2025 07:01:36 +0000
Files and hashes: 1: 0EbACDVL2fDivnf5KUiVukCW6AM.roa (hash: 2EVhZ0rS+lj6U3ajXAU+8FEPpDbqGDvioQB8YdIkUmc=)
2: UJY_Dmf02JPPPXAaI2EObziVkmA.crl (hash: bfpAsAnFLU7CGGZmmE3JQOfkxdXLDLfk15cbrc3X7m8=)
3: mqm7Jg5-zPabxGFXHWcZsQaK2dY.roa (hash: /oBnHrhig1strh5pSaVLSZyr3E+b/5bhNvAnJC6HiAM=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/f0/ce58d5-126a-44aa-aa08-0f3c1658d0b7/1/UJY_Dmf02JPPPXAaI2EObziVkmA.crl
rsync://rpki.ripe.net/repository/DEFAULT/f0/ce58d5-126a-44aa-aa08-0f3c1658d0b7/1/UJY_Dmf02JPPPXAaI2EObziVkmA.mft
rsync://rpki.ripe.net/repository/DEFAULT/UJY_Dmf02JPPPXAaI2EObziVkmA.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 01 May 2025 07:01:36 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:85:80:3f:b9:b8:ee:9b:c1:22:25:bf:50:30:de:ee:af
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=50963f0e67f4d893cf3d701a23610e6f38959260
Validity
Not Before: Apr 30 07:01:36 2025 GMT
Not After : May 1 07:01:36 2025 GMT
Subject: CN=b8519ff1b1df164eaabe610f2dc956d7ab16be91
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ac:f7:6c:04:37:bb:02:19:ae:6d:bd:f6:33:a0:
35:47:de:3e:ac:26:06:2e:75:6b:7d:9f:0c:88:34:
a1:1d:60:31:c3:65:f1:0b:a8:1f:d8:74:c3:cf:35:
61:8c:b2:e5:48:67:98:fc:21:87:64:da:1a:32:d6:
16:33:d2:db:6a:58:37:24:89:3a:06:d2:64:8d:a1:
4f:04:87:a0:6f:ad:98:8e:23:82:70:a8:79:57:7b:
b6:d6:d3:e1:32:e4:e4:71:46:67:9b:81:97:33:2b:
f7:79:26:62:a4:3f:4c:72:57:22:68:67:72:65:94:
07:f7:a5:c6:66:dd:9a:03:be:bc:8f:4c:a2:b6:32:
e4:ca:f4:aa:c6:4e:92:35:c1:ee:37:5a:aa:47:e4:
80:ad:53:85:63:4a:4a:c1:47:d1:4a:4a:db:ec:30:
09:eb:d4:19:cd:51:09:68:88:23:52:20:66:51:94:
5a:82:84:06:f8:c1:0b:e0:7c:24:e6:37:a1:72:b4:
1c:e9:56:3d:37:9e:b9:07:16:48:07:80:8a:86:a2:
b2:b3:cf:6c:d0:31:92:98:b9:92:82:b4:f3:e0:6e:
e2:bc:f0:7e:df:4a:b6:87:ed:bd:8a:8c:48:fb:31:
0e:9a:a0:4b:ef:80:23:13:58:07:f7:67:97:57:dd:
de:3b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B8:51:9F:F1:B1:DF:16:4E:AA:BE:61:0F:2D:C9:56:D7:AB:16:BE:91
X509v3 Authority Key Identifier:
keyid:50:96:3F:0E:67:F4:D8:93:CF:3D:70:1A:23:61:0E:6F:38:95:92:60
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/UJY_Dmf02JPPPXAaI2EObziVkmA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f0/ce58d5-126a-44aa-aa08-0f3c1658d0b7/1/UJY_Dmf02JPPPXAaI2EObziVkmA.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/f0/ce58d5-126a-44aa-aa08-0f3c1658d0b7/1/UJY_Dmf02JPPPXAaI2EObziVkmA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
22:1f:0a:1e:a4:63:cd:29:6a:bc:7b:70:a3:2d:db:35:9e:0e:
f2:74:35:cf:96:ca:d7:8a:a9:87:c5:ed:4e:90:0e:95:a6:e9:
f4:b2:a4:07:ba:aa:c2:c7:35:2d:0b:7e:10:c3:e8:be:08:15:
e0:8c:54:15:73:e7:65:c2:d4:4f:f6:74:9a:81:2d:75:6f:20:
b5:a9:f9:45:36:db:d5:20:34:81:93:5a:98:91:d0:e3:ed:ae:
fd:8e:2b:91:a9:8c:6f:55:7a:48:56:c5:fa:44:28:31:2b:d7:
eb:74:0a:70:f4:59:31:70:47:b9:e7:1b:25:65:ce:3e:11:28:
1a:e1:20:70:d1:8b:7c:79:ce:c2:46:25:9d:7a:a2:82:cb:4d:
38:11:f1:46:02:89:6c:45:1c:3b:8b:9a:3c:1d:f2:d7:b8:43:
de:0a:56:6c:f4:d5:75:16:0d:ab:a0:d7:66:fa:94:a6:75:a3:
b7:87:ee:f1:79:c0:90:7f:1a:a6:8c:45:1c:62:96:f9:0a:a9:
c2:fa:d3:9e:87:49:ba:d5:59:a6:73:f0:3e:b1:86:d2:00:d6:
0c:1c:da:47:86:b1:c8:32:f1:46:fa:19:98:f4:03:a6:b2:82:
41:7d:0a:5b:20:8c:12:26:f3:a4:ab:2f:21:05:43:eb:52:2d:
ce:c8:e7:34
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Apr 30 14:01:50 2025 by rpki-client