Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/50/6558ec-d568-4cb9-a03a-8366b164dd66/1/Ul7JPXynN0Sywfu23aZEk8KklcE.mft
File: Ul7JPXynN0Sywfu23aZEk8KklcE.mft (raw, json)
Hash identifier: perlCK5onZag2VhfOS5nzissjMdVlPXudIGcmf0+ZKE=
Subject key identifier: 4D:B0:91:92:CA:38:01:73:AD:34:45:BD:68:60:7F:CE:50:EE:41:C1
Authority key identifier: 52:5E:C9:3D:7C:A7:37:44:B2:C1:FB:B6:DD:A6:44:93:C2:A4:95:C1
Certificate issuer: /CN=525ec93d7ca73744b2c1fbb6dda64493c2a495c1
Certificate serial: 0196C9F27FAD721F4BF78ECF8ECECBC7303E
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Ul7JPXynN0Sywfu23aZEk8KklcE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/50/6558ec-d568-4cb9-a03a-8366b164dd66/1/Ul7JPXynN0Sywfu23aZEk8KklcE.mft
Manifest number: 0399
Signing time: Tue 13 May 2025 14:00:34 +0000
Manifest this update: Tue 13 May 2025 14:00:34 +0000
Manifest next update: Wed 14 May 2025 14:00:34 +0000
Files and hashes: 1: 22DCbI9HvmzBDVGkxBm2WtXk528.roa (hash: 9ILpOZ8JHc5ka7qIZ58Ggk4y/F3lo6ZaZYJCwIqc3NU=)
2: Ul7JPXynN0Sywfu23aZEk8KklcE.crl (hash: /DZX+R98Nww3finXse/FXf/U65/VLxYxfjIxCgwc14g=)
3: jeCifaYzZ5yF8G9Sciofq7w0n90.roa (hash: HV83fet9uguwCmg88F5Wp34425cNOk2TAaGpYDTRo7Q=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/50/6558ec-d568-4cb9-a03a-8366b164dd66/1/Ul7JPXynN0Sywfu23aZEk8KklcE.crl
rsync://rpki.ripe.net/repository/DEFAULT/50/6558ec-d568-4cb9-a03a-8366b164dd66/1/Ul7JPXynN0Sywfu23aZEk8KklcE.mft
rsync://rpki.ripe.net/repository/DEFAULT/Ul7JPXynN0Sywfu23aZEk8KklcE.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 14 May 2025 14:00:34 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:c9:f2:7f:ad:72:1f:4b:f7:8e:cf:8e:ce:cb:c7:30:3e
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=525ec93d7ca73744b2c1fbb6dda64493c2a495c1
Validity
Not Before: May 13 14:00:34 2025 GMT
Not After : May 14 14:00:34 2025 GMT
Subject: CN=4db09192ca380173ad3445bd68607fce50ee41c1
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d3:2b:3a:d3:cd:44:c3:0e:23:13:2f:be:ff:c4:
e9:51:36:28:1d:d4:2b:31:66:b3:1b:ec:9f:c2:67:
21:00:ea:6e:09:b0:be:25:85:3d:ee:ae:62:92:2e:
df:ce:2d:4b:8c:43:16:91:af:8e:68:09:8b:ce:f0:
87:44:02:d7:6b:2d:38:2a:58:02:60:94:0e:ea:d8:
c0:5c:53:90:83:03:f3:2f:be:67:08:fe:02:fd:e7:
87:8f:bc:ec:aa:05:d0:35:25:c5:95:0d:33:4d:34:
5a:94:53:93:3f:a6:73:7d:4f:17:8e:f9:8e:35:f0:
95:da:f9:32:5f:5e:c5:3c:1a:9e:76:4b:ac:35:33:
29:99:a8:8e:92:f0:a9:1a:9b:6e:1e:74:92:76:ed:
8d:69:cd:58:59:05:74:23:9a:90:58:a2:19:c9:2e:
4b:23:28:00:e6:af:49:b9:3a:4d:29:c0:67:64:7e:
10:e6:c3:88:5e:dd:d0:dc:64:7f:26:cd:ac:26:c0:
cd:47:af:56:8f:32:6f:88:aa:dc:26:f6:0b:2b:76:
f4:43:6d:2d:fe:45:f6:7a:6e:23:a7:d8:54:af:fa:
cf:62:a5:eb:df:d2:1a:fc:2f:21:25:e8:e9:0b:66:
60:6a:a8:ae:e3:e0:fa:f8:2c:1f:3c:3d:3c:6f:6c:
92:85
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
4D:B0:91:92:CA:38:01:73:AD:34:45:BD:68:60:7F:CE:50:EE:41:C1
X509v3 Authority Key Identifier:
keyid:52:5E:C9:3D:7C:A7:37:44:B2:C1:FB:B6:DD:A6:44:93:C2:A4:95:C1
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Ul7JPXynN0Sywfu23aZEk8KklcE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/50/6558ec-d568-4cb9-a03a-8366b164dd66/1/Ul7JPXynN0Sywfu23aZEk8KklcE.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/50/6558ec-d568-4cb9-a03a-8366b164dd66/1/Ul7JPXynN0Sywfu23aZEk8KklcE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
26:8f:32:4f:5f:cd:2e:66:28:23:91:15:3b:58:94:aa:6d:5e:
10:1e:73:f9:78:bb:54:f5:c9:dd:c9:fe:d8:c4:5a:36:05:34:
04:82:af:f7:46:23:42:2a:8f:19:8e:fe:d3:35:3c:e0:6b:63:
cd:3b:51:e6:59:e1:08:e7:67:9d:22:f6:0d:95:bc:6f:c7:d0:
62:16:1e:4c:0d:fd:66:cc:92:0a:9a:ff:bc:9a:6f:af:a9:cb:
a9:35:95:e8:35:f6:60:c8:8f:f0:0b:ff:7f:9c:95:c0:a2:5c:
d6:2c:36:ba:4d:a1:96:c3:ec:d5:a7:a7:e1:ac:2f:55:b2:ad:
15:e4:c1:fd:56:5e:1d:06:17:88:16:20:95:95:2d:4f:76:4e:
fd:6f:6d:6f:87:5d:b4:62:65:68:0a:0e:b6:ef:31:6f:df:d3:
27:cc:87:d5:c8:ba:a3:97:ad:14:2b:bc:ff:08:fc:94:0e:e3:
a5:01:5d:02:b1:9f:9e:b1:4b:3e:ca:95:eb:cb:5d:22:67:02:
45:31:35:c7:c7:c6:b2:d3:d7:e4:88:a2:bd:ce:43:b8:0c:34:
de:d5:93:ff:d2:4c:06:e5:79:c6:cc:bf:3d:e3:11:d5:99:50:
4f:47:55:3f:be:46:23:da:5a:c8:25:13:da:64:d2:d3:c5:47:
68:1c:d2:a9
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue May 13 18:38:27 2025 by rpki-client