Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/34/9d43cb-841c-40f2-9d9f-75f47f07c4e3/1/UnB4bxfEG9AWJvctsjnyCLUYm7A.mft
File: UnB4bxfEG9AWJvctsjnyCLUYm7A.mft (raw, json)
Hash identifier: eA624cqgY8nmx9mXqKhB+tAS05lE3O9820+VSBVCfg8=
Subject key identifier: 6F:01:00:CF:79:AB:D5:D8:54:20:1D:23:24:99:98:A8:54:3A:0E:F5
Authority key identifier: 52:70:78:6F:17:C4:1B:D0:16:26:F7:2D:B2:39:F2:08:B5:18:9B:B0
Certificate issuer: /CN=5270786f17c41bd01626f72db239f208b5189bb0
Certificate serial: 0196A76666CA51D93F274AA20C9AC61F52FC
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/UnB4bxfEG9AWJvctsjnyCLUYm7A.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/34/9d43cb-841c-40f2-9d9f-75f47f07c4e3/1/UnB4bxfEG9AWJvctsjnyCLUYm7A.mft
Manifest number: 152C
Signing time: Tue 06 May 2025 21:00:28 +0000
Manifest this update: Tue 06 May 2025 21:00:28 +0000
Manifest next update: Wed 07 May 2025 21:00:28 +0000
Files and hashes: 1: DmHJvnXYNCZG6CwLW6LsQtmujI4.roa (hash: x67qTlyXrzA3beyYfkqEGco6s6alggLnNjlSZnKsSr0=)
2: UnB4bxfEG9AWJvctsjnyCLUYm7A.crl (hash: M+1CxGWOKl7m2ScN3yQWJ1KL87jIWsWzCFe55qBordg=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/34/9d43cb-841c-40f2-9d9f-75f47f07c4e3/1/UnB4bxfEG9AWJvctsjnyCLUYm7A.crl
rsync://rpki.ripe.net/repository/DEFAULT/34/9d43cb-841c-40f2-9d9f-75f47f07c4e3/1/UnB4bxfEG9AWJvctsjnyCLUYm7A.mft
rsync://rpki.ripe.net/repository/DEFAULT/UnB4bxfEG9AWJvctsjnyCLUYm7A.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 07 May 2025 21:00:28 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:a7:66:66:ca:51:d9:3f:27:4a:a2:0c:9a:c6:1f:52:fc
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=5270786f17c41bd01626f72db239f208b5189bb0
Validity
Not Before: May 6 21:00:28 2025 GMT
Not After : May 7 21:00:28 2025 GMT
Subject: CN=6f0100cf79abd5d854201d23249998a8543a0ef5
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b0:99:5d:c1:2f:6d:2b:d9:f4:4f:13:b9:b2:ea:
47:27:c5:00:be:f0:2d:bc:fe:f2:ff:1c:51:eb:7a:
f6:40:45:5c:6f:4f:f6:d6:2e:46:d7:98:98:56:a7:
0b:40:2b:f4:9e:5c:07:34:7a:29:ab:b1:21:eb:da:
fc:e9:ad:75:1a:37:6e:5d:08:7e:f9:77:81:81:14:
cd:d7:66:11:88:a5:2b:1c:8e:2a:a6:43:9b:ef:00:
96:13:35:1c:81:73:4f:9b:9d:c7:dc:85:11:c3:54:
6a:8c:33:eb:1d:78:16:1e:66:26:0c:ef:f2:78:e9:
e7:3a:b2:1f:06:a1:c9:ae:95:65:79:6e:a1:4f:be:
91:8a:3b:6e:2f:38:d4:97:e1:d0:c0:72:55:7a:28:
96:be:f3:f2:83:d7:99:55:ff:61:15:a0:ca:21:d2:
38:cb:7a:58:6a:96:66:cb:97:0f:46:e0:4a:5f:bd:
ff:dc:03:69:11:a1:4e:01:a5:b1:46:51:02:df:7a:
d0:51:05:ff:53:55:8e:41:26:91:e0:52:43:b0:3f:
1f:9f:7a:50:83:02:1c:0c:70:dd:0c:fd:2e:82:ac:
4c:ed:81:e5:a3:10:76:a1:a1:50:1b:38:56:56:8c:
1a:0a:35:5f:b5:a4:1c:ac:07:2a:4d:d4:ef:29:15:
5b:e9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
6F:01:00:CF:79:AB:D5:D8:54:20:1D:23:24:99:98:A8:54:3A:0E:F5
X509v3 Authority Key Identifier:
keyid:52:70:78:6F:17:C4:1B:D0:16:26:F7:2D:B2:39:F2:08:B5:18:9B:B0
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/UnB4bxfEG9AWJvctsjnyCLUYm7A.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/34/9d43cb-841c-40f2-9d9f-75f47f07c4e3/1/UnB4bxfEG9AWJvctsjnyCLUYm7A.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/34/9d43cb-841c-40f2-9d9f-75f47f07c4e3/1/UnB4bxfEG9AWJvctsjnyCLUYm7A.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
51:73:64:b1:c5:33:d6:2c:d5:07:2a:75:27:90:6e:a5:9e:82:
0c:bf:6e:4f:ab:af:75:67:33:c7:c7:8b:b7:64:5a:06:ad:28:
57:7f:23:48:e7:5c:99:b5:b4:78:7d:16:10:52:6e:20:b7:6b:
4f:ee:74:01:9a:95:e8:5b:d5:a3:e0:b6:de:36:ee:26:ce:50:
8c:b6:0f:4b:1a:4d:41:6a:89:0d:07:ce:ba:97:42:b9:99:3b:
f4:26:2e:51:69:e2:ce:55:16:1a:4c:9b:05:d0:d3:af:dc:0b:
03:72:5d:a6:74:45:66:f5:42:28:0c:7c:d7:95:c7:cf:e3:fb:
e0:de:b0:be:64:2a:e5:3f:08:54:6b:8d:f5:6c:37:d4:38:d2:
fb:a1:c2:a6:64:88:fd:e0:58:c8:4a:15:9a:29:06:12:97:74:
1d:ac:ff:33:01:17:53:b7:90:de:b4:99:29:c3:ad:e8:f8:6d:
60:2e:8c:53:c5:5a:b3:fa:87:94:59:68:be:21:19:f5:06:48:
2e:b2:fc:56:c2:06:f7:b5:82:a5:fb:cb:ef:01:be:27:26:92:
56:14:a1:e2:71:51:94:b4:95:f2:86:7b:7f:a9:ff:51:2b:93:
c4:57:29:34:b5:8b:b1:e6:ec:8d:b0:ae:40:c6:6c:9d:b3:bd:
1c:2c:12:d2
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed May 7 03:33:01 2025 by rpki-client