Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/41/8d798a-73d7-44ba-97db-f84b60521df5/1/UFZxLM-od6u3YMt34nBBd0ywRzk.mft
File: UFZxLM-od6u3YMt34nBBd0ywRzk.mft (raw, json)
Hash identifier: 0T9KDfBFZ6SA2ORBWHKJ/ubjCrtz1xeUww6aWDLZOIY=
Subject key identifier: E8:0E:1D:84:52:D4:BE:6A:22:59:45:7E:76:F1:DB:42:30:4F:BE:67
Authority key identifier: 50:56:71:2C:CF:A8:77:AB:B7:60:CB:77:E2:70:41:77:4C:B0:47:39
Certificate issuer: /CN=5056712ccfa877abb760cb77e27041774cb04739
Certificate serial: 0196BB92909141224EB436EFE14AA25ADD30
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/UFZxLM-od6u3YMt34nBBd0ywRzk.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/41/8d798a-73d7-44ba-97db-f84b60521df5/1/UFZxLM-od6u3YMt34nBBd0ywRzk.mft
Manifest number: 1537
Signing time: Sat 10 May 2025 19:01:06 +0000
Manifest this update: Sat 10 May 2025 19:01:06 +0000
Manifest next update: Sun 11 May 2025 19:01:06 +0000
Files and hashes: 1: KkYiM3e0iOAnAg_yFBFSK_bjJl8.roa (hash: 5A5Vdre+g6oCjMH5zABiFnTSkWahsDuZjsJoxbwHMo0=)
2: UFZxLM-od6u3YMt34nBBd0ywRzk.crl (hash: 6b+NkyZoh1HmcfDngOzSI35WgDPCuPl8r1Plk7w7CY4=)
3: _Q23PPlL8v2niGzmSooSDUdLWSk.roa (hash: 8JwVrSvS2kxaZsRD1vVjitt0fjw3hWWmjxqgx0yIUoc=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/41/8d798a-73d7-44ba-97db-f84b60521df5/1/UFZxLM-od6u3YMt34nBBd0ywRzk.crl
rsync://rpki.ripe.net/repository/DEFAULT/41/8d798a-73d7-44ba-97db-f84b60521df5/1/UFZxLM-od6u3YMt34nBBd0ywRzk.mft
rsync://rpki.ripe.net/repository/DEFAULT/UFZxLM-od6u3YMt34nBBd0ywRzk.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 11 May 2025 19:01:06 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:bb:92:90:91:41:22:4e:b4:36:ef:e1:4a:a2:5a:dd:30
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=5056712ccfa877abb760cb77e27041774cb04739
Validity
Not Before: May 10 19:01:06 2025 GMT
Not After : May 11 19:01:06 2025 GMT
Subject: CN=e80e1d8452d4be6a2259457e76f1db42304fbe67
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b8:1d:78:63:0e:5d:b9:17:8d:1a:98:8c:9f:43:
37:26:85:fa:ee:58:10:f7:35:2e:93:a2:72:39:e6:
49:09:53:ae:a3:15:10:7e:c5:1e:38:84:1b:84:32:
d9:65:91:ee:0b:76:1d:1c:9c:98:7d:f3:f0:c9:a5:
b7:eb:67:b3:9b:eb:0d:73:34:23:f9:ca:dc:1a:15:
e7:42:b5:4e:d8:36:0f:11:c7:9c:9f:5d:ed:bb:77:
aa:29:78:ff:69:50:42:96:6f:af:d3:74:9f:aa:7f:
d6:b6:0e:50:54:0b:5b:66:74:29:1d:26:21:ca:b8:
68:c9:ef:95:54:5e:f4:32:06:04:dd:b0:f3:65:ea:
8a:62:b2:52:eb:a0:14:f0:9e:20:62:5d:a6:20:81:
51:23:9e:e7:8d:d7:07:cd:64:d3:b4:3b:4d:e1:23:
34:c5:8b:b2:2e:6f:9e:8a:7b:19:18:c7:a0:7b:60:
15:85:ac:6e:84:74:9c:4d:22:d4:12:76:ff:a5:38:
be:4c:60:e9:72:ce:70:c1:7d:81:34:56:04:c9:32:
37:44:f1:37:8e:15:91:ab:70:3d:13:62:07:c2:ae:
95:9d:a5:05:0a:bf:06:18:b1:3c:fe:98:29:34:f9:
54:da:43:78:12:df:94:d9:e8:1d:89:08:d2:e0:2a:
b9:19
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E8:0E:1D:84:52:D4:BE:6A:22:59:45:7E:76:F1:DB:42:30:4F:BE:67
X509v3 Authority Key Identifier:
keyid:50:56:71:2C:CF:A8:77:AB:B7:60:CB:77:E2:70:41:77:4C:B0:47:39
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/UFZxLM-od6u3YMt34nBBd0ywRzk.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/41/8d798a-73d7-44ba-97db-f84b60521df5/1/UFZxLM-od6u3YMt34nBBd0ywRzk.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/41/8d798a-73d7-44ba-97db-f84b60521df5/1/UFZxLM-od6u3YMt34nBBd0ywRzk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
9f:62:ce:14:ff:8e:52:c9:40:04:f2:11:81:84:a3:ba:92:f8:
8c:61:e5:2a:ff:99:9f:e6:ec:a2:50:1c:ae:90:0e:8c:f6:ae:
c3:5e:5f:42:e3:13:8b:44:ba:62:d6:0e:23:54:61:37:2f:01:
5b:0c:ca:0e:b8:89:99:63:07:91:be:46:7d:a3:4c:2d:ee:03:
42:e9:2b:07:f8:a9:2f:de:3c:d3:60:d4:e0:ee:cc:e5:c0:6e:
b4:68:5e:18:98:44:12:e5:c1:6b:bb:68:fc:cb:cc:a0:87:dc:
79:f8:53:f0:ca:12:26:3d:04:57:2f:c4:41:fa:6d:a2:b9:68:
4c:e0:13:23:24:2d:6d:f6:d4:93:53:2d:77:f3:89:93:e8:75:
a6:44:c3:4a:5d:c2:4b:21:3f:fb:ce:03:40:43:07:3d:75:19:
8e:1a:5b:3c:fd:78:1a:e7:a0:77:1c:bd:52:e5:df:d2:8e:8d:
af:3f:de:a1:49:f6:18:53:d5:bc:bc:b4:ca:6d:9e:93:62:28:
35:11:08:6b:fb:d9:3a:b6:9f:5e:20:a5:fb:f6:63:e9:27:c1:
bb:99:66:09:e9:b6:63:48:51:69:03:1e:f7:a3:06:08:48:34:
68:50:fc:45:61:d4:35:d6:a6:e1:85:a2:4c:7e:31:49:65:ae:
24:47:fa:07
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun May 11 00:50:27 2025 by rpki-client