Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f5/851708-19f9-4ecc-a442-0ce3a2efc8dd/1/UlkVtMckB6-3lB5b4pSscTOxB7M.mft
File: UlkVtMckB6-3lB5b4pSscTOxB7M.mft (raw, json)
Hash identifier: gFwDu/QxgnYcPUjFST6Uw3D/qwPLeWVmG7ToYtxSgwo=
Subject key identifier: 00:D4:8C:94:01:13:4A:7F:82:63:27:E9:FA:2C:4D:18:3F:A8:1E:97
Authority key identifier: 52:59:15:B4:C7:24:07:AF:B7:94:1E:5B:E2:94:AC:71:33:B1:07:B3
Certificate issuer: /CN=525915b4c72407afb7941e5be294ac7133b107b3
Certificate serial: 01967A2003647B288DE5E32393B5D0E1A8EA
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/UlkVtMckB6-3lB5b4pSscTOxB7M.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/f5/851708-19f9-4ecc-a442-0ce3a2efc8dd/1/UlkVtMckB6-3lB5b4pSscTOxB7M.mft
Manifest number: 1202
Signing time: Mon 28 Apr 2025 02:00:40 +0000
Manifest this update: Mon 28 Apr 2025 02:00:40 +0000
Manifest next update: Tue 29 Apr 2025 02:00:40 +0000
Files and hashes: 1: UlkVtMckB6-3lB5b4pSscTOxB7M.crl (hash: WqWvpyBVk8GSAHC2pOnf4zLuFjt6ljF49YGXn3MQ4C0=)
2: ci7D-gavzkR5lRu-Y8rw6gTVt8k.roa (hash: e5+WwJtdUyHAODWheWNyNbbf9/GmybmxPgwjpdHpaL8=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/f5/851708-19f9-4ecc-a442-0ce3a2efc8dd/1/UlkVtMckB6-3lB5b4pSscTOxB7M.crl
rsync://rpki.ripe.net/repository/DEFAULT/f5/851708-19f9-4ecc-a442-0ce3a2efc8dd/1/UlkVtMckB6-3lB5b4pSscTOxB7M.mft
rsync://rpki.ripe.net/repository/DEFAULT/UlkVtMckB6-3lB5b4pSscTOxB7M.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 28 Apr 2025 23:00:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:7a:20:03:64:7b:28:8d:e5:e3:23:93:b5:d0:e1:a8:ea
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=525915b4c72407afb7941e5be294ac7133b107b3
Validity
Not Before: Apr 28 02:00:40 2025 GMT
Not After : Apr 29 02:00:40 2025 GMT
Subject: CN=00d48c9401134a7f826327e9fa2c4d183fa81e97
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:fb:ea:eb:ff:2c:6a:30:b5:34:62:ba:d9:f2:9b:
6f:2e:3e:4b:b1:7c:23:ef:fe:17:b5:bd:b1:dd:38:
d4:e5:eb:c4:df:d8:a3:56:0e:d6:b6:aa:31:39:eb:
2e:67:1a:fa:d1:85:26:f6:00:99:e9:66:5d:7c:29:
a4:01:5a:49:a5:c0:7f:f3:4c:8d:4a:07:f0:64:c8:
56:8e:cd:79:7b:8a:30:a9:ba:e2:62:61:0d:d4:4f:
0e:45:b6:f8:55:3e:01:a6:a2:53:ef:b1:3c:06:2a:
a1:15:07:7c:8c:29:6d:e1:01:ff:36:9c:9f:65:4b:
62:c0:9a:bc:9c:8f:74:88:3a:09:b5:db:9d:c8:b4:
21:50:4a:4a:a6:dd:97:95:86:c3:dc:ae:34:d5:92:
c4:39:eb:52:b1:a4:1d:1b:a9:86:b3:d0:7d:11:bd:
0d:d2:17:03:dc:7f:07:cc:90:82:0e:ac:cc:71:66:
d0:04:6d:d3:71:9e:8e:c1:51:a2:26:1b:51:dd:9b:
66:91:4a:34:64:19:00:75:7e:59:d7:df:75:28:31:
3f:f3:d1:bb:8b:c9:1e:0e:73:d3:71:ae:bd:7a:08:
9c:44:df:a7:4c:69:54:11:e9:f0:ab:f4:a4:6e:0d:
70:76:97:c7:ff:26:98:a2:59:be:d1:92:37:50:69:
82:4f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
00:D4:8C:94:01:13:4A:7F:82:63:27:E9:FA:2C:4D:18:3F:A8:1E:97
X509v3 Authority Key Identifier:
keyid:52:59:15:B4:C7:24:07:AF:B7:94:1E:5B:E2:94:AC:71:33:B1:07:B3
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/UlkVtMckB6-3lB5b4pSscTOxB7M.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f5/851708-19f9-4ecc-a442-0ce3a2efc8dd/1/UlkVtMckB6-3lB5b4pSscTOxB7M.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/f5/851708-19f9-4ecc-a442-0ce3a2efc8dd/1/UlkVtMckB6-3lB5b4pSscTOxB7M.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
8a:58:00:8b:34:7a:73:4b:2e:fd:02:9f:f0:13:46:d8:1a:71:
3f:28:83:67:ff:a7:2e:8e:8a:f8:70:e9:c9:06:9f:68:5c:7a:
cb:4e:0c:d2:23:c5:26:d0:60:2f:6a:35:6f:44:d5:e2:8e:38:
71:3b:42:32:7b:b9:fe:27:02:3e:32:ca:a3:88:e7:34:f8:a8:
29:f2:4e:32:61:6f:ca:34:cf:90:5d:1b:dc:c1:44:53:f7:d2:
8c:9e:09:29:65:f1:7c:79:c7:3e:cc:d5:4a:42:cc:23:ac:f7:
0f:e7:5c:dd:74:fe:49:f0:a6:b8:56:16:80:5a:8e:03:d4:fa:
ad:c8:e9:1f:f6:55:2e:0e:fb:90:27:13:61:cb:55:e7:26:15:
a5:ec:e6:cb:eb:58:02:dd:8e:d1:ae:2e:7d:ae:8e:f8:b8:30:
8d:07:ec:a5:69:1e:04:7b:74:8a:c3:45:87:87:38:23:7c:5b:
5c:78:b2:31:f8:26:c3:85:93:cd:64:e0:8f:60:28:17:d0:c3:
cf:16:15:86:75:6e:ed:76:3c:a7:a1:ca:b9:90:91:75:20:7d:
00:af:18:14:30:ff:b0:be:89:6e:b4:bd:05:2d:e9:53:8a:d2:
bc:34:9a:21:74:ca:52:08:2d:61:16:19:f0:ed:f1:dd:4a:47:
2c:2c:60:f3
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 28 07:40:46 2025 by rpki-client