Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/2b/02c568-91ee-485d-99a2-59bce319c1cb/1/UiEH7Qe1rA2CadcinZ_Syg4yZYs.mft
File: UiEH7Qe1rA2CadcinZ_Syg4yZYs.mft (raw, json)
Hash identifier: Vjq88ruO4Wjmbu0h+zUvaQzuZm/WrxdRNjj+FnPCksE=
Subject key identifier: 34:00:04:1D:B0:B9:A8:CB:3C:D5:46:0D:5E:66:DC:B2:47:36:E4:7B
Authority key identifier: 52:21:07:ED:07:B5:AC:0D:82:69:D7:22:9D:9F:D2:CA:0E:32:65:8B
Certificate issuer: /CN=522107ed07b5ac0d8269d7229d9fd2ca0e32658b
Certificate serial: 0196C6837A567DD8D3FFE9900A8D3B40E8B4
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/UiEH7Qe1rA2CadcinZ_Syg4yZYs.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/2b/02c568-91ee-485d-99a2-59bce319c1cb/1/UiEH7Qe1rA2CadcinZ_Syg4yZYs.mft
Manifest number: 1288
Signing time: Mon 12 May 2025 22:00:27 +0000
Manifest this update: Mon 12 May 2025 22:00:27 +0000
Manifest next update: Tue 13 May 2025 22:00:27 +0000
Files and hashes: 1: UiEH7Qe1rA2CadcinZ_Syg4yZYs.crl (hash: Ve2mPOvz3Kfc37BlA/7TkqYZkAVrPKJ0ug2jOPTLTGk=)
2: pPpmoMPPkAZMgk578mv2D1Fr8uM.roa (hash: qW9ujgr+WoSkhUysMB2U0VypgGpVS4nEjVgMmS5X+c8=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/2b/02c568-91ee-485d-99a2-59bce319c1cb/1/UiEH7Qe1rA2CadcinZ_Syg4yZYs.crl
rsync://rpki.ripe.net/repository/DEFAULT/2b/02c568-91ee-485d-99a2-59bce319c1cb/1/UiEH7Qe1rA2CadcinZ_Syg4yZYs.mft
rsync://rpki.ripe.net/repository/DEFAULT/UiEH7Qe1rA2CadcinZ_Syg4yZYs.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 13 May 2025 22:00:27 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:c6:83:7a:56:7d:d8:d3:ff:e9:90:0a:8d:3b:40:e8:b4
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=522107ed07b5ac0d8269d7229d9fd2ca0e32658b
Validity
Not Before: May 12 22:00:27 2025 GMT
Not After : May 13 22:00:27 2025 GMT
Subject: CN=3400041db0b9a8cb3cd5460d5e66dcb24736e47b
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:fd:75:19:d7:f9:44:2e:16:a2:e8:d8:bc:8b:0c:
40:34:22:99:0a:9e:07:36:63:1c:b0:25:0c:c8:41:
50:a7:70:79:86:41:9a:1e:47:7a:a2:f5:a0:15:6c:
e0:e5:67:78:a2:fa:5a:d3:5f:1e:ef:5c:f6:3e:cb:
17:7c:ed:81:05:bf:d2:20:82:99:20:37:0b:de:48:
14:71:50:ee:07:59:6b:82:28:29:90:e9:6c:87:2e:
56:05:2b:c5:d4:46:a2:c8:6b:92:ca:fa:1e:59:6e:
19:96:49:ed:02:78:53:91:78:ba:df:26:81:9d:fd:
60:26:d7:df:ff:97:37:0b:dc:33:b7:d3:74:f3:90:
fa:76:a9:ac:a5:13:0c:36:a1:aa:b1:b3:d9:77:3f:
93:79:e4:77:e0:0c:a0:42:97:78:53:02:ed:c8:72:
1a:8c:f4:0d:11:40:1b:9d:31:cb:7d:17:61:73:cc:
61:a2:9d:14:5f:91:2a:c5:24:23:83:41:03:aa:2e:
43:6f:b3:fa:6b:b7:10:25:30:c3:23:38:a6:6b:7c:
92:f9:bd:81:25:ad:ef:4b:ad:a8:13:bb:fc:15:82:
5b:82:e4:b6:0f:61:90:31:74:c6:c5:0d:4c:41:60:
68:0b:64:35:19:07:0a:ad:5f:26:1e:3d:35:6b:99:
6e:0d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
34:00:04:1D:B0:B9:A8:CB:3C:D5:46:0D:5E:66:DC:B2:47:36:E4:7B
X509v3 Authority Key Identifier:
keyid:52:21:07:ED:07:B5:AC:0D:82:69:D7:22:9D:9F:D2:CA:0E:32:65:8B
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/UiEH7Qe1rA2CadcinZ_Syg4yZYs.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/2b/02c568-91ee-485d-99a2-59bce319c1cb/1/UiEH7Qe1rA2CadcinZ_Syg4yZYs.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/2b/02c568-91ee-485d-99a2-59bce319c1cb/1/UiEH7Qe1rA2CadcinZ_Syg4yZYs.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
4e:15:a1:a1:32:b4:d7:34:a6:02:ba:37:28:a9:e8:42:2f:ef:
73:24:d1:24:bd:07:99:fb:46:36:82:43:66:44:c0:53:90:b0:
ea:11:82:34:b8:45:e3:43:d2:dc:43:2c:26:02:0e:77:ed:28:
1b:7a:fb:26:72:29:1e:fb:2c:91:2b:15:ef:c7:6d:b2:f6:bd:
71:5f:5c:be:bf:3e:58:08:3f:5e:f2:0e:4b:51:4b:74:04:26:
ed:b6:ff:cb:a7:8a:83:9f:4d:a2:84:8a:e1:e3:3b:5a:1e:7c:
e8:c9:1e:94:f9:a8:5d:8c:fb:50:39:59:92:2b:25:f9:c1:97:
1f:42:46:2e:8a:47:ba:aa:3b:f1:c0:f6:45:1d:d0:27:de:d2:
0c:89:5e:ad:ad:78:73:a3:3a:21:b2:df:5a:8d:03:51:8d:48:
a8:b4:aa:34:b7:5d:e0:70:f5:24:a6:68:e4:30:05:50:f6:ba:
25:a8:34:e6:31:2b:55:d1:37:bf:70:13:c5:fd:7b:0e:e6:e0:
38:e1:d9:07:02:36:1a:3e:48:fe:21:71:f3:2f:dd:ac:a8:90:
32:07:61:6f:28:de:9a:c3:2f:32:9b:78:9b:98:c5:5b:37:5d:
2f:35:87:db:bf:0a:30:8b:a4:f3:c9:54:de:a0:49:2b:be:95:
86:36:78:9f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue May 13 06:40:54 2025 by rpki-client