Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/16/4f5e7b-14e7-44bc-8d5d-d2957453b844/1/UfsmDqHIG4GxkdCujcNkESHp65Y.mft
File: UfsmDqHIG4GxkdCujcNkESHp65Y.mft (raw, json)
Hash identifier: JySZJnKOus6hyBWGjwKSpdd0C59v3XAc+knfWsZ7t88=
Subject key identifier: F4:D3:99:45:B8:49:A8:C8:E4:EF:13:B6:30:24:43:E3:FE:A5:B2:44
Authority key identifier: 51:FB:26:0E:A1:C8:1B:81:B1:91:D0:AE:8D:C3:64:11:21:E9:EB:96
Certificate issuer: /CN=51fb260ea1c81b81b191d0ae8dc3641121e9eb96
Certificate serial: 0196C5DEAA7F11B153AF54B36D54EA896BB0
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/UfsmDqHIG4GxkdCujcNkESHp65Y.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/16/4f5e7b-14e7-44bc-8d5d-d2957453b844/1/UfsmDqHIG4GxkdCujcNkESHp65Y.mft
Manifest number: 04DA
Signing time: Mon 12 May 2025 19:00:26 +0000
Manifest this update: Mon 12 May 2025 19:00:26 +0000
Manifest next update: Tue 13 May 2025 19:00:26 +0000
Files and hashes: 1: UfsmDqHIG4GxkdCujcNkESHp65Y.crl (hash: 3mEd/bSq3ACHqraTOOS702B8qK1GJcY0b91qYbkAblI=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/16/4f5e7b-14e7-44bc-8d5d-d2957453b844/1/UfsmDqHIG4GxkdCujcNkESHp65Y.crl
rsync://rpki.ripe.net/repository/DEFAULT/16/4f5e7b-14e7-44bc-8d5d-d2957453b844/1/UfsmDqHIG4GxkdCujcNkESHp65Y.mft
rsync://rpki.ripe.net/repository/DEFAULT/UfsmDqHIG4GxkdCujcNkESHp65Y.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 13 May 2025 14:31:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:c5:de:aa:7f:11:b1:53:af:54:b3:6d:54:ea:89:6b:b0
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=51fb260ea1c81b81b191d0ae8dc3641121e9eb96
Validity
Not Before: May 12 19:00:26 2025 GMT
Not After : May 13 19:00:26 2025 GMT
Subject: CN=f4d39945b849a8c8e4ef13b6302443e3fea5b244
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ad:28:88:4b:aa:19:dd:08:16:09:aa:71:7a:dd:
e1:53:1d:45:f4:18:ea:1b:19:0b:bc:4f:95:21:ba:
3b:1e:03:44:f9:db:aa:9a:38:9b:63:ff:8b:df:bb:
b3:54:92:6f:ef:53:9c:f0:64:1c:04:8e:6a:a8:c2:
3f:85:85:9c:57:60:19:db:24:3a:79:26:e9:64:e0:
2e:63:59:8d:94:c3:57:a1:67:1a:d0:dc:74:65:ce:
df:33:11:98:19:64:bc:01:75:91:f1:f9:76:2b:47:
66:0e:53:49:f3:1d:33:75:a8:60:1c:f5:ee:14:78:
dd:6d:83:9b:21:32:e1:82:03:29:ca:64:b3:45:5b:
53:ba:24:95:90:8e:dc:3a:16:09:41:fe:e3:8d:60:
24:ae:6f:ce:e9:3a:54:a7:2e:4b:e1:68:19:52:66:
f6:b6:1e:9c:8e:ca:32:89:0a:9b:81:e9:47:9f:73:
32:54:ad:26:d6:31:da:4c:ad:0a:89:18:ec:8c:9f:
01:a8:f9:d8:f3:95:54:68:45:c3:0e:c5:1e:08:17:
c9:14:91:6c:68:79:d7:7c:83:6d:7c:3b:d2:43:5e:
3c:cd:27:72:52:be:ac:76:47:e3:98:27:f3:04:52:
e4:02:0a:7d:b3:3a:a4:1b:82:f2:4f:0b:bc:18:e4:
0a:65
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F4:D3:99:45:B8:49:A8:C8:E4:EF:13:B6:30:24:43:E3:FE:A5:B2:44
X509v3 Authority Key Identifier:
keyid:51:FB:26:0E:A1:C8:1B:81:B1:91:D0:AE:8D:C3:64:11:21:E9:EB:96
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/UfsmDqHIG4GxkdCujcNkESHp65Y.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/16/4f5e7b-14e7-44bc-8d5d-d2957453b844/1/UfsmDqHIG4GxkdCujcNkESHp65Y.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/16/4f5e7b-14e7-44bc-8d5d-d2957453b844/1/UfsmDqHIG4GxkdCujcNkESHp65Y.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
b9:49:54:43:3f:da:0e:b1:56:bd:06:ad:2b:e6:9f:15:aa:a4:
a8:c3:31:77:77:c2:63:e2:1f:86:89:e7:43:c4:11:34:bf:a6:
4e:ba:53:69:e7:ab:af:c0:b9:31:32:f2:47:9f:f9:0c:0e:c9:
97:c9:18:7e:e4:87:8f:58:d1:61:8b:03:bc:32:d0:31:15:fc:
be:3e:74:81:88:57:26:00:6a:3e:5f:24:3c:bd:14:28:41:5d:
08:22:ea:cc:24:1f:d6:6a:ff:2e:3f:d9:79:90:93:07:cc:dd:
bf:f0:20:09:fd:44:e3:9e:84:1f:44:fe:f3:51:82:02:77:be:
50:39:43:0e:15:90:8b:ea:39:b4:48:36:93:5f:3c:72:f7:73:
57:aa:a1:54:ce:b4:a9:4b:1d:1b:5c:73:d8:9e:8c:da:e5:de:
16:8d:3c:13:d4:14:e7:70:db:92:2d:31:05:85:ea:8a:10:62:
f8:87:39:09:21:8a:f9:30:af:62:f8:41:ee:b1:01:43:ad:07:
c6:ee:b7:82:64:59:cd:2b:06:39:1e:02:6c:06:20:3f:04:dd:
db:2f:73:9e:d3:45:8e:c2:57:89:f8:b5:94:ef:27:83:9b:08:
7c:70:dc:e2:78:7b:ac:3a:41:cf:52:9f:a8:6f:94:02:79:48:
92:0a:31:ac
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue May 13 00:02:41 2025 by rpki-client