Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/07/96a928-819c-476c-bae1-50c9f5b3c3e4/1/UoUm3npC8eCAkWhA7r85A4uJPRY.mft
File: UoUm3npC8eCAkWhA7r85A4uJPRY.mft (raw, json)
Hash identifier: 3pjNNvyuESSxV1KzL0T0C+7FxvsbPuRCDqpQTXY+8VM=
Subject key identifier: 4B:C5:23:47:41:0A:8A:A5:35:B7:BF:31:CD:F7:90:9B:0B:6A:6C:75
Authority key identifier: 52:85:26:DE:7A:42:F1:E0:80:91:68:40:EE:BF:39:03:8B:89:3D:16
Certificate issuer: /CN=528526de7a42f1e080916840eebf39038b893d16
Certificate serial: 0196B5C778CF5624F9FFEC345ED7C17FC075
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/UoUm3npC8eCAkWhA7r85A4uJPRY.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/07/96a928-819c-476c-bae1-50c9f5b3c3e4/1/UoUm3npC8eCAkWhA7r85A4uJPRY.mft
Manifest number: 08B5
Signing time: Fri 09 May 2025 16:01:10 +0000
Manifest this update: Fri 09 May 2025 16:01:10 +0000
Manifest next update: Sat 10 May 2025 16:01:10 +0000
Files and hashes: 1: UoUm3npC8eCAkWhA7r85A4uJPRY.crl (hash: alPuzEo+Wnjp28CtZjrK9EOu7W7joW2f04i66TSN2R0=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/07/96a928-819c-476c-bae1-50c9f5b3c3e4/1/UoUm3npC8eCAkWhA7r85A4uJPRY.crl
rsync://rpki.ripe.net/repository/DEFAULT/07/96a928-819c-476c-bae1-50c9f5b3c3e4/1/UoUm3npC8eCAkWhA7r85A4uJPRY.mft
rsync://rpki.ripe.net/repository/DEFAULT/UoUm3npC8eCAkWhA7r85A4uJPRY.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 10 May 2025 10:00:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:b5:c7:78:cf:56:24:f9:ff:ec:34:5e:d7:c1:7f:c0:75
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=528526de7a42f1e080916840eebf39038b893d16
Validity
Not Before: May 9 16:01:10 2025 GMT
Not After : May 10 16:01:10 2025 GMT
Subject: CN=4bc52347410a8aa535b7bf31cdf7909b0b6a6c75
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:af:43:7a:1a:0e:cc:83:9a:84:f9:d1:c1:8c:1d:
6d:b5:c1:bf:11:0f:8f:43:01:28:e6:7e:f4:fb:72:
2c:cc:63:d8:20:86:8a:c5:23:48:5d:a3:5f:9e:82:
56:73:c3:04:20:f7:38:dd:5c:c9:da:40:44:27:d8:
6d:37:13:e1:22:58:72:8b:e8:0a:d7:6b:d4:7f:a3:
41:b9:f4:ca:0f:ce:d5:57:69:05:33:e3:60:f2:23:
06:0d:36:9b:2f:c5:c9:d8:93:05:c2:ed:3f:9b:72:
dc:c3:9f:c7:04:88:8e:a8:a9:09:a5:2e:c3:1e:e8:
2a:2a:84:57:33:a3:d3:91:b0:6c:61:2d:42:24:fd:
f2:a5:8c:2d:b8:b0:9d:40:f7:85:c8:7d:29:dc:e0:
40:d4:5a:e6:5b:6c:da:39:7a:4d:1a:b7:98:94:8c:
9f:5f:84:0a:47:5b:3f:5e:93:ce:c6:ed:77:cd:e1:
55:f1:ba:aa:99:98:3d:de:80:d0:57:b3:81:c3:bf:
9b:53:4d:b8:d6:29:d7:cb:f5:80:94:66:b0:b9:b5:
ed:1a:f7:90:41:f6:a2:89:24:54:53:52:38:58:42:
c9:9a:27:a4:3d:e6:6e:56:ea:60:6b:4e:b0:53:32:
a6:1e:22:41:9b:9b:ab:a4:26:0b:a7:2a:b4:2c:35:
49:dd
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
4B:C5:23:47:41:0A:8A:A5:35:B7:BF:31:CD:F7:90:9B:0B:6A:6C:75
X509v3 Authority Key Identifier:
keyid:52:85:26:DE:7A:42:F1:E0:80:91:68:40:EE:BF:39:03:8B:89:3D:16
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/UoUm3npC8eCAkWhA7r85A4uJPRY.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/07/96a928-819c-476c-bae1-50c9f5b3c3e4/1/UoUm3npC8eCAkWhA7r85A4uJPRY.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/07/96a928-819c-476c-bae1-50c9f5b3c3e4/1/UoUm3npC8eCAkWhA7r85A4uJPRY.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
01:64:b6:75:54:02:3a:0e:fe:16:3c:74:fa:f7:a7:c5:9b:f9:
97:9e:61:90:7a:29:ac:5c:87:91:35:1b:3d:5d:5c:04:57:6d:
b8:d9:0d:6e:2c:7e:01:b5:3e:85:90:9c:7d:a4:cb:02:ea:b8:
96:96:cf:aa:2c:9d:e4:6c:9a:1e:34:8d:50:b3:8b:7e:88:33:
27:6e:7b:a2:d1:73:cd:cb:9a:4a:bf:ca:33:78:2a:e0:90:e0:
a2:a2:5d:20:45:10:75:ec:ca:1d:66:dc:4c:fa:6e:20:75:ea:
3c:83:6c:7c:82:59:c7:59:c2:b2:58:79:a0:78:09:93:77:41:
b9:97:81:b7:02:1e:b5:d7:f5:7f:46:63:c8:8b:35:bd:90:1f:
a7:42:18:49:8c:f8:92:64:83:62:e3:ae:1c:3e:c2:5a:8f:36:
d5:00:8b:38:d9:ad:8f:57:42:dd:da:e0:af:c4:ef:8e:2e:17:
d9:e3:62:55:ec:9f:7f:9b:07:29:56:19:b7:13:d9:a9:cc:98:
93:0d:f8:8b:c6:85:73:45:01:9b:93:8c:fd:e6:d1:e4:ae:e0:
4b:74:5f:f0:55:dd:cc:c4:9e:c0:d3:86:54:d5:82:62:ef:80:
ee:f1:2e:0c:cc:84:0e:b8:03:72:ec:e8:5c:01:5c:35:1f:17:
c5:ee:7d:fd
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri May 9 18:08:23 2025 by rpki-client