Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/47/4791e2-df25-4c7c-89df-76ec4acbb726/1/UeOaZ3aTuvt5JNbqhGl4z0xouMI.mft
File: UeOaZ3aTuvt5JNbqhGl4z0xouMI.mft (raw, json)
Hash identifier: laneX4BmLpD/N1hVidLKx7Ef/A0H4Sb22JXKf7xC4pk=
Subject key identifier: E9:85:E1:60:3C:5C:D0:04:D0:88:5F:3D:17:E1:70:1C:C8:C4:78:C8
Authority key identifier: 51:E3:9A:67:76:93:BA:FB:79:24:D6:EA:84:69:78:CF:4C:68:B8:C2
Certificate issuer: /CN=51e39a677693bafb7924d6ea846978cf4c68b8c2
Certificate serial: 0196B2C5DA7039A9110AB383FEC0FFB7E15F
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/UeOaZ3aTuvt5JNbqhGl4z0xouMI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/47/4791e2-df25-4c7c-89df-76ec4acbb726/1/UeOaZ3aTuvt5JNbqhGl4z0xouMI.mft
Manifest number: 14BE
Signing time: Fri 09 May 2025 02:00:32 +0000
Manifest this update: Fri 09 May 2025 02:00:32 +0000
Manifest next update: Sat 10 May 2025 02:00:32 +0000
Files and hashes: 1: UeOaZ3aTuvt5JNbqhGl4z0xouMI.crl (hash: VOB71bdp7XIe45P3iT4DOrv59HKSc/JdyWHRNumDqUA=)
2: w9u-iq9HQmmSpA58usBGj5VWpns.roa (hash: ebZ703D4CGF85tWdcmJd8B3P1oiiNNvM6TpGRigzvuk=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/47/4791e2-df25-4c7c-89df-76ec4acbb726/1/UeOaZ3aTuvt5JNbqhGl4z0xouMI.crl
rsync://rpki.ripe.net/repository/DEFAULT/47/4791e2-df25-4c7c-89df-76ec4acbb726/1/UeOaZ3aTuvt5JNbqhGl4z0xouMI.mft
rsync://rpki.ripe.net/repository/DEFAULT/UeOaZ3aTuvt5JNbqhGl4z0xouMI.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 10 May 2025 00:00:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:b2:c5:da:70:39:a9:11:0a:b3:83:fe:c0:ff:b7:e1:5f
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=51e39a677693bafb7924d6ea846978cf4c68b8c2
Validity
Not Before: May 9 02:00:32 2025 GMT
Not After : May 10 02:00:32 2025 GMT
Subject: CN=e985e1603c5cd004d0885f3d17e1701cc8c478c8
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d4:5f:97:c7:f2:44:23:e1:e5:a7:9d:2f:a3:0f:
22:85:8a:94:aa:44:7e:8b:6e:95:f1:64:26:8a:78:
27:51:a3:1b:26:89:05:0f:25:5c:35:e9:b4:fc:e8:
b0:3a:09:7f:57:78:b8:8e:f1:bc:ed:d8:56:42:07:
fa:bd:40:2c:3f:72:4a:54:01:e7:4a:37:e1:54:c0:
37:b1:a9:b4:a0:c7:3c:7a:84:26:2f:ab:0c:c0:34:
9f:6f:27:2e:40:9d:01:72:30:94:2b:74:c4:ac:4d:
56:a6:7a:5b:ba:07:20:01:7a:ce:83:21:42:4a:68:
b9:97:5d:7a:05:77:f9:d6:40:b8:cd:98:ec:f3:ca:
ca:8c:d2:ed:a1:b8:0b:5d:b7:e1:67:f7:e2:02:f8:
71:fe:87:d7:f3:3a:f9:87:ee:72:38:40:e9:cb:d5:
c3:00:fb:21:82:42:d4:6d:f1:06:d1:5f:e1:f2:1d:
34:af:b8:0b:c7:48:fd:1d:35:2a:c8:25:fd:74:a7:
0b:60:e1:16:20:4a:c3:ff:d1:21:8c:a5:1c:05:0b:
50:d4:0c:26:c0:a4:42:f2:0d:11:2f:1a:23:5b:dc:
e6:6b:0c:4a:8b:7e:6b:f6:24:93:b2:99:9b:cb:6b:
84:51:2d:33:58:0a:84:55:fd:67:8a:e9:10:9b:ad:
1d:73
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E9:85:E1:60:3C:5C:D0:04:D0:88:5F:3D:17:E1:70:1C:C8:C4:78:C8
X509v3 Authority Key Identifier:
keyid:51:E3:9A:67:76:93:BA:FB:79:24:D6:EA:84:69:78:CF:4C:68:B8:C2
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/UeOaZ3aTuvt5JNbqhGl4z0xouMI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/47/4791e2-df25-4c7c-89df-76ec4acbb726/1/UeOaZ3aTuvt5JNbqhGl4z0xouMI.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/47/4791e2-df25-4c7c-89df-76ec4acbb726/1/UeOaZ3aTuvt5JNbqhGl4z0xouMI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
aa:19:4e:e5:4b:40:2c:b5:a1:0e:b9:40:e5:25:a4:78:62:cb:
ff:6e:3d:02:3b:17:de:00:fa:b5:70:99:ed:5e:be:c3:d6:16:
a3:fb:be:c0:db:de:22:f8:5d:5c:d0:ce:8a:48:e0:45:0a:b3:
64:43:d7:a4:f4:7a:69:c4:13:e4:00:b4:ec:a4:97:0f:cf:28:
0e:a7:e5:0a:d2:20:aa:ec:b0:fc:83:80:d5:7c:d1:a4:4f:4d:
09:d2:81:be:37:ca:48:0d:1c:82:3c:7c:fd:62:1c:af:cb:c7:
00:54:80:e0:f2:0a:4a:67:19:98:57:c7:9f:1d:bd:94:82:66:
0e:cc:47:78:88:1e:60:fd:14:27:a0:66:56:39:74:69:a0:5d:
d3:c8:a1:d8:75:a1:80:05:09:d0:a8:f9:c3:7a:64:84:3a:b3:
3d:fa:82:14:67:09:a6:00:62:51:4e:b9:41:ba:d0:66:d1:82:
a7:3d:e0:d9:cf:f2:f0:0e:09:72:9d:05:2a:95:10:ad:19:33:
4c:c8:03:ba:f5:19:2e:78:6a:ea:85:6e:66:59:d5:79:e6:71:
c8:f3:2e:68:14:d2:16:6a:8f:9a:40:1a:68:60:4d:4f:f5:a2:
53:fd:77:85:a0:3f:1c:49:19:fe:35:2b:1e:b9:96:d4:10:93:
8f:7b:88:28
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri May 9 08:21:29 2025 by rpki-client