Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/16/5f1511-10fc-43e7-a8e0-58b79bc9bcc7/1/UHx3C7awjctNbqmwyWJyrzpvnHE.mft
File: UHx3C7awjctNbqmwyWJyrzpvnHE.mft (raw, json)
Hash identifier: 67MWXTGHndYxuQLd/jG6Rm3yOb8E8UIy2HaDkjyCAIA=
Subject key identifier: DE:15:D6:0A:BD:D5:72:C1:A4:B0:5D:F2:AD:6D:CC:A4:E6:5B:8B:1B
Authority key identifier: 50:7C:77:0B:B6:B0:8D:CB:4D:6E:A9:B0:C9:62:72:AF:3A:6F:9C:71
Certificate issuer: /CN=507c770bb6b08dcb4d6ea9b0c96272af3a6f9c71
Certificate serial: 0196CD2A21E2BDCEC58D5F4FC748C524EC6B
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/UHx3C7awjctNbqmwyWJyrzpvnHE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/16/5f1511-10fc-43e7-a8e0-58b79bc9bcc7/1/UHx3C7awjctNbqmwyWJyrzpvnHE.mft
Manifest number: 0D
Signing time: Wed 14 May 2025 05:00:12 +0000
Manifest this update: Wed 14 May 2025 05:00:12 +0000
Manifest next update: Thu 15 May 2025 05:00:12 +0000
Files and hashes: 1: 7vKO7KJon2U-PLT4fG2hAFvhGko.roa (hash: zjVmGhrF2p6uK4Xne1JZdTjHYFdY+pPfwr5U6yqo03M=)
2: EdaEcdzfZKUU8pzTsayBRrh8XNY.roa (hash: O3+hPZUQsLmn/0ZqbZYW7yg/F0HNHy5aqWBZDmT4tfM=)
3: UHx3C7awjctNbqmwyWJyrzpvnHE.crl (hash: vI/gsWWIg6ChVy6ArrktOSqkgA1+XW+5V/SCxw93KrE=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/16/5f1511-10fc-43e7-a8e0-58b79bc9bcc7/1/UHx3C7awjctNbqmwyWJyrzpvnHE.crl
rsync://rpki.ripe.net/repository/DEFAULT/16/5f1511-10fc-43e7-a8e0-58b79bc9bcc7/1/UHx3C7awjctNbqmwyWJyrzpvnHE.mft
rsync://rpki.ripe.net/repository/DEFAULT/UHx3C7awjctNbqmwyWJyrzpvnHE.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 15 May 2025 05:00:12 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:cd:2a:21:e2:bd:ce:c5:8d:5f:4f:c7:48:c5:24:ec:6b
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=507c770bb6b08dcb4d6ea9b0c96272af3a6f9c71
Validity
Not Before: May 14 05:00:12 2025 GMT
Not After : May 15 05:00:12 2025 GMT
Subject: CN=de15d60abdd572c1a4b05df2ad6dcca4e65b8b1b
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8b:8c:a7:bf:64:06:14:34:40:5d:74:b8:50:0f:
cb:93:f1:5d:11:b9:ce:1c:3d:af:51:61:c3:a0:18:
c8:55:31:1f:ef:d0:b3:87:67:4b:72:0a:ce:33:6e:
e0:a6:e5:ad:80:9e:aa:5a:03:db:04:ee:fe:d6:2a:
fe:21:5a:4c:62:32:24:fe:65:57:0f:fd:39:f3:2b:
37:c8:6e:9a:cb:35:3b:89:65:b2:7e:81:50:7f:c4:
bd:f6:82:4a:3d:83:8e:c5:b7:15:d1:bb:c8:7f:c4:
bc:df:53:ba:68:fd:2e:6d:a5:18:88:3d:b7:79:24:
c9:4c:ea:69:95:d3:d8:0c:51:09:9b:c9:3e:90:8e:
17:4e:90:42:43:a1:ca:bb:e1:ea:61:f6:04:96:52:
6a:b1:67:a4:d9:05:9c:08:e4:38:05:bf:96:2c:c9:
1f:68:1d:cf:2b:45:dc:65:67:26:89:63:b5:42:57:
84:99:97:26:c6:7a:22:5f:d0:88:7f:b7:4e:b1:b3:
05:b5:da:9a:7a:22:e8:5d:1b:51:59:94:18:33:b4:
5e:ec:2c:87:3b:dc:8f:3d:11:cb:15:ef:9b:d6:f9:
e1:9b:e4:c4:51:ba:72:a5:3c:b7:50:ec:c5:1a:5d:
13:d7:a9:80:56:d8:8b:f0:2d:b3:05:a4:31:b0:6a:
bc:c1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
DE:15:D6:0A:BD:D5:72:C1:A4:B0:5D:F2:AD:6D:CC:A4:E6:5B:8B:1B
X509v3 Authority Key Identifier:
keyid:50:7C:77:0B:B6:B0:8D:CB:4D:6E:A9:B0:C9:62:72:AF:3A:6F:9C:71
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/UHx3C7awjctNbqmwyWJyrzpvnHE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/16/5f1511-10fc-43e7-a8e0-58b79bc9bcc7/1/UHx3C7awjctNbqmwyWJyrzpvnHE.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/16/5f1511-10fc-43e7-a8e0-58b79bc9bcc7/1/UHx3C7awjctNbqmwyWJyrzpvnHE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
66:d3:82:6b:1c:e1:09:5e:cd:b6:e3:98:bf:d6:db:0a:5f:a1:
03:ba:cb:21:c7:a9:8e:c6:9b:2d:dd:b7:09:0d:3e:3c:94:3b:
5b:6c:a2:6e:9e:ab:54:e6:04:cd:b0:0d:d8:56:ef:2b:d3:7a:
0f:77:f4:2d:a4:86:0f:19:d3:5c:95:06:0d:d8:03:b1:af:b2:
89:63:88:02:31:f6:d5:eb:31:d9:c5:89:b7:50:38:90:d4:f7:
05:89:e9:1f:c5:b3:43:ff:a1:ae:0b:ad:d3:27:4d:2c:43:c0:
27:d2:27:85:3b:59:79:f7:5c:52:4c:55:d9:67:de:63:25:74:
2c:8b:be:e6:ef:ec:a8:5f:34:ce:7d:ea:7e:c2:06:b4:a9:55:
ff:41:02:95:c7:02:31:77:5f:d2:8b:97:f4:be:49:2e:7d:b9:
05:13:9d:7e:ce:cd:47:6d:28:87:8b:3e:70:76:06:5e:74:ec:
49:83:6a:cb:4f:bc:fa:b7:c2:77:f4:6b:45:27:69:9e:02:57:
0a:c2:6c:31:54:fb:2b:85:b1:33:18:25:02:0f:25:2f:a2:ac:
4a:c2:f3:b5:ec:2f:19:6d:0b:d2:c1:23:da:fd:aa:92:67:4b:
06:ed:d3:95:92:b9:8a:99:01:b3:5a:0a:2e:76:ec:d9:90:b0:
69:0a:8e:b6
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed May 14 12:22:04 2025 by rpki-client