Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/03/d937e0-4277-4e6a-b593-46a880425799/1/UqqgphiMl6p0LMeG47cLyQnKxEw.mft
File: UqqgphiMl6p0LMeG47cLyQnKxEw.mft (raw, json)
Hash identifier: oZHAnCYA5ecYIItMZEsqctzp6IR8zc7jggiRO6l+G/4=
Subject key identifier: F3:0A:79:55:29:5E:E1:7E:64:1F:D7:6F:76:1D:85:1C:4B:20:3E:85
Authority key identifier: 52:AA:A0:A6:18:8C:97:AA:74:2C:C7:86:E3:B7:0B:C9:09:CA:C4:4C
Certificate issuer: /CN=52aaa0a6188c97aa742cc786e3b70bc909cac44c
Certificate serial: 0196BCA4715A2E6E5A0B807FD288DB9B3609
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/UqqgphiMl6p0LMeG47cLyQnKxEw.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/03/d937e0-4277-4e6a-b593-46a880425799/1/UqqgphiMl6p0LMeG47cLyQnKxEw.mft
Manifest number: 1536
Signing time: Sun 11 May 2025 00:00:15 +0000
Manifest this update: Sun 11 May 2025 00:00:15 +0000
Manifest next update: Mon 12 May 2025 00:00:15 +0000
Files and hashes: 1: FUcDBcdERXDvpSpVVtQ0MRZq0uA.roa (hash: YuEo9I5eTH3VTcnkb3/qbWIdudFx1NiVz8otO9o9G9w=)
2: UqqgphiMl6p0LMeG47cLyQnKxEw.crl (hash: fo4k3DXJFDo305gsQEsgURxKLB1E1T+XdbYJ0V41N70=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/03/d937e0-4277-4e6a-b593-46a880425799/1/UqqgphiMl6p0LMeG47cLyQnKxEw.crl
rsync://rpki.ripe.net/repository/DEFAULT/03/d937e0-4277-4e6a-b593-46a880425799/1/UqqgphiMl6p0LMeG47cLyQnKxEw.mft
rsync://rpki.ripe.net/repository/DEFAULT/UqqgphiMl6p0LMeG47cLyQnKxEw.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 11 May 2025 22:00:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:bc:a4:71:5a:2e:6e:5a:0b:80:7f:d2:88:db:9b:36:09
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=52aaa0a6188c97aa742cc786e3b70bc909cac44c
Validity
Not Before: May 11 00:00:15 2025 GMT
Not After : May 12 00:00:15 2025 GMT
Subject: CN=f30a7955295ee17e641fd76f761d851c4b203e85
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cc:9f:69:57:d0:45:e7:c1:86:b4:aa:5d:35:fd:
00:4b:bc:a4:75:77:d6:66:4e:50:59:26:cb:fa:8d:
bb:e7:13:9a:0c:7d:fb:10:4c:47:b5:ba:32:69:20:
e8:54:bf:79:61:70:04:71:ed:07:4f:f9:1c:78:f4:
40:0c:74:8f:b8:64:a8:a4:38:5e:dc:98:43:50:f1:
99:6c:32:43:20:31:31:1c:87:9e:f8:af:01:98:b6:
f1:89:52:ed:c6:d7:a5:29:52:cc:1c:72:3b:77:e1:
5f:c4:d3:ec:fc:a6:07:26:83:d2:39:29:49:40:f2:
55:c3:57:fd:4b:4a:d0:78:f7:a0:7d:af:01:dc:46:
93:8b:2b:66:9c:ee:47:c1:8c:4c:78:99:6d:21:06:
8c:38:65:a8:94:84:16:a6:ef:43:03:75:d4:86:5a:
02:6c:fb:98:43:f1:18:64:25:dc:41:ad:c9:f5:23:
73:fb:b2:1f:ad:1c:0b:a4:72:ec:96:51:7c:71:bb:
d9:55:27:38:7c:9a:09:69:0e:03:50:3e:cb:7f:d7:
29:cb:77:54:4e:96:e3:48:cd:ad:5a:29:28:31:05:
1a:63:d8:09:bd:8f:33:84:72:1d:1f:e5:cb:29:35:
f2:3e:9c:30:ed:59:2c:57:8b:4a:2c:74:2c:16:46:
42:4b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F3:0A:79:55:29:5E:E1:7E:64:1F:D7:6F:76:1D:85:1C:4B:20:3E:85
X509v3 Authority Key Identifier:
keyid:52:AA:A0:A6:18:8C:97:AA:74:2C:C7:86:E3:B7:0B:C9:09:CA:C4:4C
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/UqqgphiMl6p0LMeG47cLyQnKxEw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/03/d937e0-4277-4e6a-b593-46a880425799/1/UqqgphiMl6p0LMeG47cLyQnKxEw.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/03/d937e0-4277-4e6a-b593-46a880425799/1/UqqgphiMl6p0LMeG47cLyQnKxEw.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
46:7c:76:8f:bf:f1:b1:d0:2e:2a:e4:f7:c3:66:28:a8:38:72:
99:68:99:4c:56:69:4a:7c:0c:e0:92:20:8a:d2:b2:a2:5d:f4:
88:40:2c:bf:8b:c6:fe:75:44:cf:18:a9:b5:84:70:11:b7:d3:
c2:b0:57:f8:f7:88:9f:0d:cb:8c:f3:7c:99:63:d3:24:2a:7e:
fa:98:4b:3e:a4:47:3f:e4:f5:62:4c:b0:33:ff:b6:e2:03:e0:
ab:e5:ac:a2:f2:7d:af:2c:af:c8:d8:e4:60:5b:29:bc:90:0e:
4d:e2:a6:cd:66:c1:c1:19:24:e1:af:7b:db:ec:c7:fd:1c:59:
d7:ae:d5:08:1c:0a:ea:aa:d0:42:40:3a:86:a2:94:29:e5:bc:
b6:95:c2:86:72:ec:f8:4f:8c:a5:c2:8c:e6:71:db:4a:36:7d:
c6:1e:aa:e5:44:58:e8:0d:5b:6d:88:3b:a9:e7:46:e9:43:e4:
de:99:9f:09:3b:a5:9c:46:46:c7:42:e2:a9:2b:59:04:d6:09:
fd:e4:cd:1a:4f:84:8d:a0:5d:67:cf:4e:5a:b1:4f:ca:22:af:
45:c9:2f:d7:11:14:7f:7e:bf:31:cd:d7:35:cc:74:d1:88:56:
1f:cb:7d:b6:9f:da:09:c3:fe:29:c7:9b:8c:db:df:1e:f0:f8:
22:94:bc:76
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun May 11 06:19:44 2025 by rpki-client