Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/09/1f75cb-c7b9-4529-bdaf-46c7974bd18a/1/UYqkmTdA34rTjZLMDBByNObfoFw.mft
File: UYqkmTdA34rTjZLMDBByNObfoFw.mft (raw, json)
Hash identifier: p1pfqfLsTII2yyiD2ymTdusGDp+OCt8F6UBwj0/W5rI=
Subject key identifier: AF:DE:0B:AA:DC:24:F3:E6:5D:FA:DF:1E:DC:EC:71:AA:09:D6:51:62
Authority key identifier: 51:8A:A4:99:37:40:DF:8A:D3:8D:92:CC:0C:10:72:34:E6:DF:A0:5C
Certificate issuer: /CN=518aa4993740df8ad38d92cc0c107234e6dfa05c
Certificate serial: 0196C3826600956C690999C5365D567DE53A
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/UYqkmTdA34rTjZLMDBByNObfoFw.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/09/1f75cb-c7b9-4529-bdaf-46c7974bd18a/1/UYqkmTdA34rTjZLMDBByNObfoFw.mft
Manifest number: 1534
Signing time: Mon 12 May 2025 08:00:24 +0000
Manifest this update: Mon 12 May 2025 08:00:24 +0000
Manifest next update: Tue 13 May 2025 08:00:24 +0000
Files and hashes: 1: UYqkmTdA34rTjZLMDBByNObfoFw.crl (hash: m4tPeowuex/1vwRo9G/MIH0jKodgoHLrvrg5QmlM29M=)
2: v6sZNB7vHuDSmuOPiFQ5RwhcXZU.roa (hash: HNoyOAlUbidKG0QWi+a4Ll+NOheRAU20lbJrFUIG14k=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/09/1f75cb-c7b9-4529-bdaf-46c7974bd18a/1/UYqkmTdA34rTjZLMDBByNObfoFw.crl
rsync://rpki.ripe.net/repository/DEFAULT/09/1f75cb-c7b9-4529-bdaf-46c7974bd18a/1/UYqkmTdA34rTjZLMDBByNObfoFw.mft
rsync://rpki.ripe.net/repository/DEFAULT/UYqkmTdA34rTjZLMDBByNObfoFw.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 13 May 2025 01:00:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:c3:82:66:00:95:6c:69:09:99:c5:36:5d:56:7d:e5:3a
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=518aa4993740df8ad38d92cc0c107234e6dfa05c
Validity
Not Before: May 12 08:00:24 2025 GMT
Not After : May 13 08:00:24 2025 GMT
Subject: CN=afde0baadc24f3e65dfadf1edcec71aa09d65162
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a0:ce:f0:b0:9e:8b:29:3e:de:3e:a4:f5:72:21:
98:22:df:e6:79:20:bb:3d:24:2a:0b:6f:5e:c2:d8:
af:0f:88:5f:c5:2b:21:5b:ce:f2:c5:5d:8f:08:37:
78:70:35:fb:e0:18:9e:69:c4:5c:5b:7b:80:b4:57:
a1:9f:b6:48:fc:a9:c1:09:cc:c2:dc:8c:3b:92:e1:
7f:e1:60:d9:d4:f5:36:65:e6:27:fb:69:47:ee:66:
b5:96:0b:3e:ca:ba:c7:5b:15:ed:24:0b:40:a1:04:
ff:8e:1c:a2:dc:51:ce:28:fc:57:b6:30:6f:10:71:
d3:3a:3a:f8:59:68:8b:b8:2b:1d:aa:a6:43:01:66:
4b:69:f6:50:bd:db:f9:85:80:30:0f:58:58:e1:a6:
1c:e4:98:57:bd:84:eb:a1:bd:09:cc:8c:27:cb:a4:
3d:17:38:e5:fa:6d:80:0b:52:92:1c:7e:f2:c3:99:
69:27:3c:7f:30:9c:80:df:cf:85:a1:d0:11:c1:6e:
31:81:a6:77:aa:de:97:d8:a6:3b:15:9b:05:2d:e5:
28:be:73:35:e9:5e:ce:e3:29:81:27:9f:69:ae:f0:
a7:d2:25:ad:c9:4d:87:54:82:06:7b:42:f1:4d:55:
bb:d6:8a:12:e3:b1:4f:dc:5b:51:d6:e2:c1:07:df:
70:c7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
AF:DE:0B:AA:DC:24:F3:E6:5D:FA:DF:1E:DC:EC:71:AA:09:D6:51:62
X509v3 Authority Key Identifier:
keyid:51:8A:A4:99:37:40:DF:8A:D3:8D:92:CC:0C:10:72:34:E6:DF:A0:5C
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/UYqkmTdA34rTjZLMDBByNObfoFw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/09/1f75cb-c7b9-4529-bdaf-46c7974bd18a/1/UYqkmTdA34rTjZLMDBByNObfoFw.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/09/1f75cb-c7b9-4529-bdaf-46c7974bd18a/1/UYqkmTdA34rTjZLMDBByNObfoFw.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
93:85:58:00:07:d0:a2:6e:06:2f:46:e7:77:a2:ba:33:02:ed:
b7:25:dc:06:1f:8b:c6:37:3d:56:b6:9f:8c:81:91:32:12:f6:
9c:55:b1:fc:44:b3:fd:9e:26:8f:6f:23:a5:04:eb:e9:4c:a1:
98:dd:dc:98:91:81:97:be:7a:10:09:8a:ac:bf:c7:02:01:b4:
6e:a0:2c:e0:74:28:be:58:7d:7d:36:ef:3b:39:1f:f3:49:b1:
89:2e:9b:b5:c3:a9:a5:79:a7:ff:85:5f:8d:61:44:c2:aa:6c:
f6:1a:65:9d:ab:d6:da:32:10:c7:11:b9:d0:9e:5d:16:af:06:
b1:bc:02:e1:ba:29:65:d0:04:42:ec:3a:25:af:18:9d:25:20:
4e:d0:d2:7b:b6:70:21:d2:70:aa:1e:c5:75:33:16:ab:92:89:
a4:50:74:a7:fb:e6:c7:9c:55:f8:a3:f9:57:91:b3:c0:ad:d9:
3a:91:92:f0:26:4d:29:6d:4a:48:af:b6:c1:b9:82:32:22:0b:
e6:35:4d:64:01:df:32:f9:2f:5c:eb:75:0e:de:37:5f:5b:d7:
46:31:28:d6:40:30:5f:c6:b0:37:75:8f:53:60:fc:4e:83:b0:
c2:3b:c0:47:bf:62:71:75:d5:50:42:dd:93:f9:dc:8c:0b:28:
44:51:bd:35
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon May 12 10:57:34 2025 by rpki-client