Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/0c/4e7b5c-2906-478a-8ef0-d29701487536/1/UVfIfREcgFD9XJrCsGvmIyNnUDM.mft
File: UVfIfREcgFD9XJrCsGvmIyNnUDM.mft (raw, json)
Hash identifier: azsihKrjyex0jFaQa8vI5GO5mEk4zcx3i0LYbCYLGpI=
Subject key identifier: 37:3B:F9:51:E4:A9:BE:84:EF:6E:96:1B:11:AA:52:29:42:D3:8E:69
Authority key identifier: 51:57:C8:7D:11:1C:80:50:FD:5C:9A:C2:B0:6B:E6:23:23:67:50:33
Certificate issuer: /CN=5157c87d111c8050fd5c9ac2b06be62323675033
Certificate serial: 0196AFC4B3A28F6769BCCCF09979151DEAAF
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/UVfIfREcgFD9XJrCsGvmIyNnUDM.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/0c/4e7b5c-2906-478a-8ef0-d29701487536/1/UVfIfREcgFD9XJrCsGvmIyNnUDM.mft
Manifest number: 0CF9
Signing time: Thu 08 May 2025 12:00:25 +0000
Manifest this update: Thu 08 May 2025 12:00:25 +0000
Manifest next update: Fri 09 May 2025 12:00:25 +0000
Files and hashes: 1: UVfIfREcgFD9XJrCsGvmIyNnUDM.crl (hash: 0qYLEbg6DBUKxPXdi0hXiTpPDjUolvyfmnJQuqTO3kI=)
2: YzKUAEeM3CnWsdIrwfHnUsBhQcI.roa (hash: 4/OtRTmHPZoVC5SXZxinCft/J9eQslnnS2y+eRKDbVE=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/0c/4e7b5c-2906-478a-8ef0-d29701487536/1/UVfIfREcgFD9XJrCsGvmIyNnUDM.crl
rsync://rpki.ripe.net/repository/DEFAULT/0c/4e7b5c-2906-478a-8ef0-d29701487536/1/UVfIfREcgFD9XJrCsGvmIyNnUDM.mft
rsync://rpki.ripe.net/repository/DEFAULT/UVfIfREcgFD9XJrCsGvmIyNnUDM.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 09 May 2025 12:00:25 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:af:c4:b3:a2:8f:67:69:bc:cc:f0:99:79:15:1d:ea:af
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=5157c87d111c8050fd5c9ac2b06be62323675033
Validity
Not Before: May 8 12:00:25 2025 GMT
Not After : May 9 12:00:25 2025 GMT
Subject: CN=373bf951e4a9be84ef6e961b11aa522942d38e69
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bd:b3:81:e9:aa:b3:ba:e7:d9:39:fd:c8:9f:77:
db:e9:6d:3e:92:dd:d8:35:b1:fb:9f:e9:10:e6:f8:
c2:25:87:d4:c7:bc:10:04:a0:2e:00:42:85:ad:71:
7c:db:25:74:3a:cc:71:41:f1:4f:fd:72:35:02:dc:
49:11:54:b6:bc:7d:30:11:5b:45:c3:94:82:35:16:
47:a8:54:6d:cd:84:d2:ff:e0:b3:41:01:14:da:ab:
73:4d:17:b4:eb:2d:c7:5d:a0:f8:41:f8:e3:cd:b7:
fc:a1:56:28:57:09:ea:24:53:93:df:db:97:17:9a:
64:a3:65:14:fa:00:71:a5:70:fe:77:5e:af:8a:6b:
ac:1b:49:27:d9:0a:b5:d4:5e:83:72:21:e9:d2:1d:
d0:a3:57:97:ba:a4:a4:a7:22:ba:a8:9c:f9:85:64:
ed:d0:ae:e5:2d:6a:d2:f2:80:4c:fb:b2:c8:ba:03:
8d:82:8d:92:69:08:cb:d0:4c:3e:07:f1:67:43:ee:
f1:e6:95:96:13:fc:c8:0d:30:e9:53:61:df:43:a3:
bb:00:03:8d:4f:fb:d3:f0:4d:83:e6:ab:fb:ff:51:
5a:47:b0:3c:53:8b:9e:c4:31:be:24:ae:79:1e:af:
dd:97:9d:7a:a1:52:c5:e5:bc:62:43:5b:42:52:a3:
b3:31
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
37:3B:F9:51:E4:A9:BE:84:EF:6E:96:1B:11:AA:52:29:42:D3:8E:69
X509v3 Authority Key Identifier:
keyid:51:57:C8:7D:11:1C:80:50:FD:5C:9A:C2:B0:6B:E6:23:23:67:50:33
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/UVfIfREcgFD9XJrCsGvmIyNnUDM.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/0c/4e7b5c-2906-478a-8ef0-d29701487536/1/UVfIfREcgFD9XJrCsGvmIyNnUDM.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/0c/4e7b5c-2906-478a-8ef0-d29701487536/1/UVfIfREcgFD9XJrCsGvmIyNnUDM.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
6e:c9:61:e7:a5:ce:ef:86:28:f2:24:21:c4:6f:c5:cd:27:c7:
47:82:57:15:8c:ef:bc:f0:52:15:a1:91:82:a0:86:39:4d:d5:
e6:1d:e4:fc:69:f0:fb:12:b2:95:0e:ea:ea:95:28:89:b2:d4:
68:74:fb:1c:7e:a6:1e:39:ae:a6:18:6e:c8:72:77:71:8a:be:
f4:e0:f0:4b:b4:b0:9d:1d:ff:58:8d:7d:db:ce:4c:5b:81:7a:
f0:f2:bd:da:88:0f:23:16:d6:4d:64:8b:9a:c0:38:d7:1e:e2:
92:86:d5:39:cb:6c:4f:ca:5d:f5:94:25:65:41:da:36:99:e9:
3b:e7:76:a9:5b:9a:9d:bf:0a:dc:78:7b:94:31:16:41:3d:05:
2a:3f:2e:e3:87:0b:e0:73:fb:ad:a5:59:11:a8:83:32:27:b9:
54:8d:ef:2f:10:16:7e:a0:4b:0b:1a:10:d3:e3:41:31:e5:a6:
b8:6b:b6:43:92:bb:bd:b6:4a:74:61:dc:29:23:84:6c:c8:9f:
31:1f:a2:67:7b:f3:9b:a7:8e:6a:e5:24:4d:04:7e:63:79:0c:
da:7f:dc:13:62:fd:b4:7e:ad:46:e7:e4:02:25:a0:63:a4:5b:
47:2c:45:77:40:26:95:56:df:05:46:8a:35:f9:7a:ff:52:fe:
61:13:2d:70
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu May 8 18:25:42 2025 by rpki-client