Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/2e/b5d3b8-bdbf-46fb-aa94-b14e599c0cc2/1/Ua7cV2vfVgC_5MR5A4X6ztxG8DQ.mft
File: Ua7cV2vfVgC_5MR5A4X6ztxG8DQ.mft (raw, json)
Hash identifier: OBvOPtgxOP8GT/pGh7sN1EozscrvxCgTVGSHUUHAM+Q=
Subject key identifier: 88:E5:21:A7:4D:A6:D0:5E:F1:63:20:5E:86:35:B9:E8:28:6E:CF:EC
Authority key identifier: 51:AE:DC:57:6B:DF:56:00:BF:E4:C4:79:03:85:FA:CE:DC:46:F0:34
Certificate issuer: /CN=51aedc576bdf5600bfe4c4790385facedc46f034
Certificate serial: 0196ACC3DA321961719A33EA77F46DA377A4
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Ua7cV2vfVgC_5MR5A4X6ztxG8DQ.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/2e/b5d3b8-bdbf-46fb-aa94-b14e599c0cc2/1/Ua7cV2vfVgC_5MR5A4X6ztxG8DQ.mft
Manifest number: 144D
Signing time: Wed 07 May 2025 22:00:38 +0000
Manifest this update: Wed 07 May 2025 22:00:38 +0000
Manifest next update: Thu 08 May 2025 22:00:38 +0000
Files and hashes: 1: CNVq6hwjcvgKEJLlVTlQtSTBrJw.roa (hash: XXymanpZ2oFTMQyHo/xvD9pTSAOM/yLCZqhwlA0NOiw=)
2: Ua7cV2vfVgC_5MR5A4X6ztxG8DQ.crl (hash: dmdF+lMcMm1q+o43P0FcAHAQnYH3JBje9aHn1Q8m7Z4=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/2e/b5d3b8-bdbf-46fb-aa94-b14e599c0cc2/1/Ua7cV2vfVgC_5MR5A4X6ztxG8DQ.crl
rsync://rpki.ripe.net/repository/DEFAULT/2e/b5d3b8-bdbf-46fb-aa94-b14e599c0cc2/1/Ua7cV2vfVgC_5MR5A4X6ztxG8DQ.mft
rsync://rpki.ripe.net/repository/DEFAULT/Ua7cV2vfVgC_5MR5A4X6ztxG8DQ.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 08 May 2025 20:38:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:ac:c3:da:32:19:61:71:9a:33:ea:77:f4:6d:a3:77:a4
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=51aedc576bdf5600bfe4c4790385facedc46f034
Validity
Not Before: May 7 22:00:38 2025 GMT
Not After : May 8 22:00:38 2025 GMT
Subject: CN=88e521a74da6d05ef163205e8635b9e8286ecfec
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ca:d2:2d:93:be:71:f3:e8:24:e6:7d:0c:c9:87:
af:2a:1c:d1:0c:b3:42:8f:48:dc:57:5e:73:d5:06:
f7:55:9f:5a:ca:33:f0:a6:1b:b6:cf:a6:44:ec:29:
71:c3:63:51:a0:bc:af:21:e3:20:ff:8d:55:c8:d3:
2c:5d:27:50:10:1e:e4:ed:97:d5:7b:ab:5b:bf:b8:
d2:b1:2d:47:0c:ae:f9:57:d6:d0:69:4b:db:bb:c1:
c2:27:8e:ae:bb:9c:e8:67:0e:59:99:aa:35:f4:d6:
9a:73:26:45:2d:df:e6:c9:e9:82:95:3c:10:33:6e:
ae:ac:65:24:0c:11:d1:f4:35:d3:2c:e4:d0:13:e0:
9a:2d:0d:f5:6e:11:ee:df:a1:8c:3a:e9:12:d2:ba:
e4:65:55:e6:2d:7e:c7:a2:72:42:01:cf:ea:14:8b:
c5:38:83:b6:e3:ae:cf:8f:8a:1c:e1:47:1a:80:00:
ad:d2:0b:fe:9a:49:64:21:56:1a:e3:ac:c1:78:72:
2a:8b:2f:08:8e:8b:22:46:ee:90:d4:6f:a6:0e:4f:
5c:b9:3c:76:33:52:86:bc:3a:46:c5:fb:1f:18:68:
4c:04:95:cd:60:37:34:15:a4:5a:32:e4:37:c7:38:
72:24:87:b1:1d:cb:39:54:2f:e8:43:8b:50:a0:7f:
a6:ab
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
88:E5:21:A7:4D:A6:D0:5E:F1:63:20:5E:86:35:B9:E8:28:6E:CF:EC
X509v3 Authority Key Identifier:
keyid:51:AE:DC:57:6B:DF:56:00:BF:E4:C4:79:03:85:FA:CE:DC:46:F0:34
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Ua7cV2vfVgC_5MR5A4X6ztxG8DQ.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/2e/b5d3b8-bdbf-46fb-aa94-b14e599c0cc2/1/Ua7cV2vfVgC_5MR5A4X6ztxG8DQ.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/2e/b5d3b8-bdbf-46fb-aa94-b14e599c0cc2/1/Ua7cV2vfVgC_5MR5A4X6ztxG8DQ.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
15:86:c6:7b:e0:ee:7e:27:b3:33:67:6f:97:64:8a:50:fd:b3:
73:28:a6:2d:3e:d9:9e:ba:e4:2b:02:f0:b0:dc:b3:48:2f:98:
9f:cc:3d:ee:1b:f4:be:ba:fb:e4:d0:f2:24:b7:fb:11:47:3e:
b8:ad:84:11:7d:46:0f:84:63:31:58:8a:41:93:a2:5d:49:ea:
ed:3a:0e:12:13:49:73:60:8a:f6:f8:df:0c:8f:4f:cd:1e:65:
45:5f:a4:50:83:c6:11:40:27:86:5b:f4:32:d9:a7:80:98:db:
6f:bc:7a:07:e9:d1:36:98:21:97:b3:95:ad:4a:3e:7e:19:2e:
e1:b5:d4:6f:28:04:c3:1c:5c:73:37:74:de:cf:d0:10:38:7b:
b5:6f:c3:ad:bb:ed:74:55:12:da:68:d3:28:2f:a7:8c:02:51:
50:2d:e1:8e:90:d9:b2:3a:57:1f:31:36:02:87:48:c2:ab:13:
8b:81:59:a1:6e:f0:27:c1:d6:d0:ad:c7:9b:c3:2f:4b:d3:5b:
17:57:66:3b:4a:b3:81:9c:69:07:21:ee:18:c6:2d:6d:c7:f1:
b4:8e:49:50:c1:8a:08:71:a3:97:0a:a2:9f:4c:90:2d:18:de:
bb:73:9a:48:50:ad:d4:01:6a:dc:d9:b0:73:17:fa:78:2e:ce:
05:b7:99:4a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu May 8 05:04:58 2025 by rpki-client