Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/48/66676a-3bac-4b6d-a638-96cd42f0f95b/1/UusD0hGZbpmknjw_nOSz8qFXI8U.mft
File: UusD0hGZbpmknjw_nOSz8qFXI8U.mft (raw, json)
Hash identifier: j5mb9Iuw5cneKXkt/79/nhJuGvLyJUxed8vgreT6Bfg=
Subject key identifier: 60:E3:1F:99:19:81:9A:65:2B:3E:E9:C8:65:E1:C9:FB:82:3E:A7:D3
Authority key identifier: 52:EB:03:D2:11:99:6E:99:A4:9E:3C:3F:9C:E4:B3:F2:A1:57:23:C5
Certificate issuer: /CN=52eb03d211996e99a49e3c3f9ce4b3f2a15723c5
Certificate serial: 0196ACC3A67F631934F93773447A17CD2406
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/UusD0hGZbpmknjw_nOSz8qFXI8U.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/48/66676a-3bac-4b6d-a638-96cd42f0f95b/1/UusD0hGZbpmknjw_nOSz8qFXI8U.mft
Manifest number: 14AD
Signing time: Wed 07 May 2025 22:00:25 +0000
Manifest this update: Wed 07 May 2025 22:00:25 +0000
Manifest next update: Thu 08 May 2025 22:00:25 +0000
Files and hashes: 1: Dfg_6uPZGIobbDBwacwC_EIGO5Q.roa (hash: MNEfy6R5nPCa8pOdBJiq9jk5hqQVJGf5oHPySiSroIg=)
2: UusD0hGZbpmknjw_nOSz8qFXI8U.crl (hash: 1jjFDz/r0qMx8DGAnZ9EGeClJsadcWpCno70cidCg9k=)
3: uHo3NllV-K3w1G6p5rG7wnxalyc.roa (hash: 9Ww2h+p6zLKhFMgiZaAelr6XnjDP//hoNtiBUG9Lei4=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/48/66676a-3bac-4b6d-a638-96cd42f0f95b/1/UusD0hGZbpmknjw_nOSz8qFXI8U.crl
rsync://rpki.ripe.net/repository/DEFAULT/48/66676a-3bac-4b6d-a638-96cd42f0f95b/1/UusD0hGZbpmknjw_nOSz8qFXI8U.mft
rsync://rpki.ripe.net/repository/DEFAULT/UusD0hGZbpmknjw_nOSz8qFXI8U.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 08 May 2025 20:38:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:ac:c3:a6:7f:63:19:34:f9:37:73:44:7a:17:cd:24:06
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=52eb03d211996e99a49e3c3f9ce4b3f2a15723c5
Validity
Not Before: May 7 22:00:25 2025 GMT
Not After : May 8 22:00:25 2025 GMT
Subject: CN=60e31f9919819a652b3ee9c865e1c9fb823ea7d3
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d1:3b:35:b9:70:1d:1d:5a:8f:f8:f3:7f:91:b1:
1d:e4:ee:ca:cd:67:9b:78:88:1f:68:fd:d3:9c:85:
85:ec:ef:f9:1e:1e:57:7f:3a:95:97:47:65:65:5d:
d5:c6:2b:81:a9:22:a0:1a:df:9d:7c:c4:09:1e:35:
f7:11:90:61:64:b9:a1:39:d3:86:91:35:ce:bb:f2:
ea:eb:80:fc:19:75:91:0b:aa:07:07:8f:48:81:c8:
f0:6c:3b:85:75:31:ae:86:1e:17:d1:e0:2f:58:b5:
a4:73:9f:14:13:13:91:c3:68:65:9c:7e:53:35:1c:
f9:f7:a5:e0:c7:07:e9:8c:fb:db:fa:7c:1a:83:1c:
e5:d9:66:81:3d:7e:5f:bf:c6:85:33:5c:f5:06:56:
84:79:d6:5e:c2:9b:f8:e9:94:0a:16:c0:15:c0:9e:
c3:69:8c:92:95:16:ea:ed:65:91:43:c0:23:80:f8:
cf:c6:34:3e:8b:ec:4b:37:b4:70:03:cd:0b:85:94:
f9:c2:63:87:44:5b:d0:d4:b2:6b:91:df:0e:1a:0b:
ff:3c:7b:5d:e7:2d:a0:d7:6d:75:8d:a1:e7:f0:a7:
65:93:74:48:89:e6:e2:37:60:02:c7:fd:1c:c3:43:
af:20:4e:df:2d:fd:af:a6:30:f4:66:0f:3f:1e:0f:
b8:cf
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
60:E3:1F:99:19:81:9A:65:2B:3E:E9:C8:65:E1:C9:FB:82:3E:A7:D3
X509v3 Authority Key Identifier:
keyid:52:EB:03:D2:11:99:6E:99:A4:9E:3C:3F:9C:E4:B3:F2:A1:57:23:C5
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/UusD0hGZbpmknjw_nOSz8qFXI8U.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/48/66676a-3bac-4b6d-a638-96cd42f0f95b/1/UusD0hGZbpmknjw_nOSz8qFXI8U.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/48/66676a-3bac-4b6d-a638-96cd42f0f95b/1/UusD0hGZbpmknjw_nOSz8qFXI8U.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
36:c7:74:2b:03:a8:4a:0b:1d:31:d5:59:9a:11:1d:0d:2d:fe:
71:c6:b1:5b:5a:db:cd:ad:b0:4c:80:55:6f:3a:86:39:81:47:
1e:6c:5f:a8:7b:f1:66:ae:c2:09:38:c3:2d:0d:66:8b:af:1d:
5d:df:85:b1:6c:00:4f:e3:1c:9c:6b:d2:d6:b2:e8:de:d5:7d:
90:22:79:ed:ab:9d:87:72:73:09:ce:8a:e2:31:6d:8e:7f:c8:
3a:72:a1:8c:a1:b4:18:9d:9f:64:04:46:8c:80:77:c7:91:b8:
84:e4:b2:22:a2:a0:22:1a:63:41:a5:3f:a4:6a:f5:04:0a:23:
d2:30:95:00:bb:ed:87:c5:e5:8f:e2:78:9a:30:b4:13:d0:3d:
0a:4c:b8:f0:07:75:82:db:f8:77:1f:ea:91:af:05:e7:6b:ad:
9c:9a:66:81:c9:fc:4e:7d:dc:74:6d:39:37:eb:d1:69:ed:97:
6e:c8:a5:6d:40:0d:85:ff:7a:31:b2:9e:62:c2:2e:74:7b:ff:
70:44:48:cc:c7:9c:67:70:4f:16:39:a1:87:43:25:9a:48:eb:
ba:a5:0b:7d:20:56:ef:ec:04:fc:70:42:af:04:f5:da:7d:c4:
1c:bb:27:a9:54:4d:17:b5:87:be:b1:da:8a:59:04:a9:83:67:
10:30:a3:7e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu May 8 00:13:43 2025 by rpki-client