Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/38/a90423-0b4b-499f-be66-55608b694456/1/UFEncj6gz9ByRxOykXNMqjU-IOo.mft
File: UFEncj6gz9ByRxOykXNMqjU-IOo.mft (raw, json)
Hash identifier: K5VQTg8DNfjaJfpqI0yDcuegJHo1BlUqLDrg5CAD2R8=
Subject key identifier: 0B:4B:31:EC:37:85:08:7B:DE:13:8F:26:85:FD:E9:1A:58:E3:61:4D
Authority key identifier: 50:51:27:72:3E:A0:CF:D0:72:47:13:B2:91:73:4C:AA:35:3E:20:EA
Certificate issuer: /CN=505127723ea0cfd0724713b291734caa353e20ea
Certificate serial: 0196C64CAB80C4A15947231B8314C5DE56B3
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/UFEncj6gz9ByRxOykXNMqjU-IOo.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/38/a90423-0b4b-499f-be66-55608b694456/1/UFEncj6gz9ByRxOykXNMqjU-IOo.mft
Manifest number: 1547
Signing time: Mon 12 May 2025 21:00:35 +0000
Manifest this update: Mon 12 May 2025 21:00:35 +0000
Manifest next update: Tue 13 May 2025 21:00:35 +0000
Files and hashes: 1: DFgAMB_c4WeZyOx-eglKZBMeXuM.roa (hash: X7EnRSIwEjRtkMbUxZKI4C9GzuFGjpE6JJQKft4XunM=)
2: UFEncj6gz9ByRxOykXNMqjU-IOo.crl (hash: gvRx79fuH+olT2Cj/MMq9lekTIJ8tpXYc3oGypMhJVQ=)
3: cwQffYg0kiYjH-1rNcYLA94-ef0.roa (hash: Kweid10quhXZ8y9/SE/PMiXEL+CcUKUXoutq1WDQ6Zk=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/38/a90423-0b4b-499f-be66-55608b694456/1/UFEncj6gz9ByRxOykXNMqjU-IOo.crl
rsync://rpki.ripe.net/repository/DEFAULT/38/a90423-0b4b-499f-be66-55608b694456/1/UFEncj6gz9ByRxOykXNMqjU-IOo.mft
rsync://rpki.ripe.net/repository/DEFAULT/UFEncj6gz9ByRxOykXNMqjU-IOo.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 13 May 2025 14:31:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:c6:4c:ab:80:c4:a1:59:47:23:1b:83:14:c5:de:56:b3
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=505127723ea0cfd0724713b291734caa353e20ea
Validity
Not Before: May 12 21:00:35 2025 GMT
Not After : May 13 21:00:35 2025 GMT
Subject: CN=0b4b31ec3785087bde138f2685fde91a58e3614d
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a9:10:68:98:7d:b6:6b:0c:db:0b:89:ba:66:21:
46:79:62:17:8f:0a:d8:54:67:88:28:b7:9c:35:db:
4a:0d:9f:a9:3e:94:e7:47:b2:5f:60:0f:aa:84:37:
59:f6:b8:b1:54:a3:6c:72:ef:10:ad:b3:07:75:20:
72:40:3b:82:dc:87:e1:8f:02:db:e5:02:74:cf:bd:
f3:92:46:08:ed:c8:73:ba:fc:d6:aa:99:b6:0c:b4:
b4:b7:ba:ef:d7:a7:60:1c:43:10:16:7f:8a:e4:1b:
ea:b9:2c:a8:26:d3:8a:22:3b:78:5f:5b:f6:94:f3:
a3:e0:18:7a:27:4e:37:65:ca:0c:49:21:d8:c2:dd:
61:5b:42:bd:86:06:c9:28:75:e5:54:64:c5:76:46:
a0:a1:4b:31:75:69:b1:5f:02:71:f6:dd:24:f5:50:
4d:84:02:b4:7b:68:92:bb:16:a3:d4:df:35:66:76:
0b:29:3e:db:ca:df:67:0d:7e:9b:a8:9a:97:15:77:
e7:2f:07:7c:10:92:d7:90:e5:aa:83:f2:9a:62:c0:
e3:b5:b0:b1:02:37:99:87:d9:2d:ab:9e:ae:1c:67:
1e:3a:26:4f:f9:4b:0c:be:97:cb:29:1f:9c:e5:e5:
6e:18:30:4c:c3:22:5f:42:07:d6:7e:fa:a2:0f:10:
d2:a1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
0B:4B:31:EC:37:85:08:7B:DE:13:8F:26:85:FD:E9:1A:58:E3:61:4D
X509v3 Authority Key Identifier:
keyid:50:51:27:72:3E:A0:CF:D0:72:47:13:B2:91:73:4C:AA:35:3E:20:EA
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/UFEncj6gz9ByRxOykXNMqjU-IOo.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/38/a90423-0b4b-499f-be66-55608b694456/1/UFEncj6gz9ByRxOykXNMqjU-IOo.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/38/a90423-0b4b-499f-be66-55608b694456/1/UFEncj6gz9ByRxOykXNMqjU-IOo.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
43:1d:13:65:3e:2d:9f:d0:66:3e:ba:7c:e6:77:bf:1d:cc:6e:
36:67:74:50:d2:7b:ec:94:e9:62:e6:3c:59:85:aa:14:38:7a:
2b:72:95:49:3a:f8:29:41:b2:b9:b1:65:aa:da:19:61:ab:cc:
85:22:dd:21:93:6c:7f:3c:07:43:18:69:9c:9d:fc:ef:cc:17:
f2:92:83:17:28:2c:40:e7:00:b1:ed:79:f5:e4:30:05:fb:3a:
41:8b:4d:1a:f6:7b:36:73:47:42:99:c0:ac:d1:e5:8e:63:8d:
b4:70:cc:21:d6:c7:d1:e5:1f:81:ec:8d:00:05:bc:5a:6e:ea:
b2:99:da:b6:df:56:9c:af:cd:90:c8:fc:0d:3c:6b:bf:d0:4b:
a7:ee:46:aa:51:95:4a:89:2b:91:f3:43:f0:61:36:6f:43:e8:
c2:4d:be:83:55:2c:de:b3:c5:93:dc:0e:7c:e3:d1:f4:9b:4d:
06:03:5f:c9:42:3b:54:74:a7:7a:a1:33:8e:01:24:c0:95:71:
56:f0:ba:cb:1e:de:63:51:48:ac:41:45:a6:29:2a:ac:b6:2d:
33:66:74:7c:45:de:e2:65:3b:d9:ac:34:77:3e:51:5f:d6:14:
46:32:5a:09:82:5c:f6:2a:95:fb:97:8c:45:99:ee:e8:ae:e5:
f4:15:0c:5c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon May 12 22:51:28 2025 by rpki-client