Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/54/b5f6af-3c83-4cb5-b5eb-ba14843c549c/1/UCw35-y1m2Z_qC7PCT5e2HZhqOI.mft
File: UCw35-y1m2Z_qC7PCT5e2HZhqOI.mft (raw, json)
Hash identifier: 1st3+r37bQm0qelZf/PJkrMARzsbjhW0bpPx8+GVMEo=
Subject key identifier: 42:B0:C0:89:35:4C:98:EE:C9:58:FB:23:23:22:14:F8:56:E4:D2:80
Authority key identifier: 50:2C:37:E7:EC:B5:9B:66:7F:A8:2E:CF:09:3E:5E:D8:76:61:A8:E2
Certificate issuer: /CN=502c37e7ecb59b667fa82ecf093e5ed87661a8e2
Certificate serial: 0196A0BF7F9F6021DB2069EB55CE3BAE4F7D
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/UCw35-y1m2Z_qC7PCT5e2HZhqOI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/54/b5f6af-3c83-4cb5-b5eb-ba14843c549c/1/UCw35-y1m2Z_qC7PCT5e2HZhqOI.mft
Manifest number: 045B
Signing time: Mon 05 May 2025 14:00:26 +0000
Manifest this update: Mon 05 May 2025 14:00:26 +0000
Manifest next update: Tue 06 May 2025 14:00:26 +0000
Files and hashes: 1: 0siOn8oVbOzVCasVDaPzmYX1tbc.roa (hash: SBMJ/e1Sts5wpcL+aFgVksq/m8nr6hq1VOYBzLKdoWI=)
2: UCw35-y1m2Z_qC7PCT5e2HZhqOI.crl (hash: BY9I1G2qxL0bgxx4mjs06Yi0TCfxswT9pb2RGuhPY/8=)
3: jgvyflC9cxUvuv1ddomja9gsSes.roa (hash: 5URFyBRZ0uEAXpl92dbXCwRyKauPGInl6RJ5C4/n3ps=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/54/b5f6af-3c83-4cb5-b5eb-ba14843c549c/1/UCw35-y1m2Z_qC7PCT5e2HZhqOI.crl
rsync://rpki.ripe.net/repository/DEFAULT/54/b5f6af-3c83-4cb5-b5eb-ba14843c549c/1/UCw35-y1m2Z_qC7PCT5e2HZhqOI.mft
rsync://rpki.ripe.net/repository/DEFAULT/UCw35-y1m2Z_qC7PCT5e2HZhqOI.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 06 May 2025 14:00:26 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:a0:bf:7f:9f:60:21:db:20:69:eb:55:ce:3b:ae:4f:7d
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=502c37e7ecb59b667fa82ecf093e5ed87661a8e2
Validity
Not Before: May 5 14:00:26 2025 GMT
Not After : May 6 14:00:26 2025 GMT
Subject: CN=42b0c089354c98eec958fb23232214f856e4d280
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ac:51:45:b4:fb:4f:11:af:91:59:b5:cd:36:30:
ec:02:ae:2e:54:b9:d4:98:d9:d1:17:ef:8b:ed:d9:
8d:af:8d:97:b0:4b:e0:f6:b8:98:37:37:7c:5a:2c:
fd:06:ff:2b:74:d4:26:dd:cc:2c:e0:99:5d:fb:d1:
1f:a0:ab:15:cf:f2:1f:92:dc:02:5b:ba:53:ec:c1:
80:75:c1:f0:4e:75:ea:61:4b:53:7b:21:e6:65:14:
72:f1:a9:01:e4:ae:18:50:7c:5d:6d:6b:40:a2:3c:
fd:4e:f5:3d:37:c2:1a:d6:b9:30:e5:dd:74:38:fc:
42:4a:f2:a6:03:90:99:d4:88:8c:6f:86:0e:3f:82:
5c:97:75:c7:b0:7f:5e:df:80:c7:fa:21:72:8c:43:
24:a5:97:fe:17:08:4a:4b:4c:af:cf:f1:21:3c:94:
ba:c1:b6:aa:08:13:55:1b:78:75:f0:8c:17:32:7c:
e3:40:96:4b:b8:69:5f:84:48:e9:41:0e:83:ad:02:
02:18:e1:28:0d:1a:a2:4b:9c:58:49:49:cd:9f:19:
05:d7:27:79:da:75:ea:dd:e1:51:7e:af:a5:43:b7:
9a:21:1c:0d:fb:f6:51:cf:b0:51:d8:dd:24:52:ad:
8f:d5:83:dc:eb:a6:3b:55:18:5b:3f:97:ad:91:27:
e1:7d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
42:B0:C0:89:35:4C:98:EE:C9:58:FB:23:23:22:14:F8:56:E4:D2:80
X509v3 Authority Key Identifier:
keyid:50:2C:37:E7:EC:B5:9B:66:7F:A8:2E:CF:09:3E:5E:D8:76:61:A8:E2
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/UCw35-y1m2Z_qC7PCT5e2HZhqOI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/54/b5f6af-3c83-4cb5-b5eb-ba14843c549c/1/UCw35-y1m2Z_qC7PCT5e2HZhqOI.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/54/b5f6af-3c83-4cb5-b5eb-ba14843c549c/1/UCw35-y1m2Z_qC7PCT5e2HZhqOI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
1e:ea:5d:b0:b7:ad:4c:b6:ef:e4:19:08:68:ad:43:e7:11:67:
68:d7:fb:7f:69:68:41:9b:fc:2a:ee:e5:45:c0:47:8d:f9:a4:
bc:ea:72:7c:12:29:59:43:f3:8c:87:34:b0:35:83:1b:30:13:
2b:32:50:78:14:47:89:f1:55:9b:25:4c:fd:a0:39:34:45:a7:
95:a6:9d:0c:dc:51:a1:0d:2b:5c:a6:11:57:2c:7e:3e:36:07:
71:03:92:31:09:cc:36:54:38:24:0e:29:d5:16:d9:46:14:9e:
b6:a4:08:64:db:67:6e:11:6d:33:b1:bc:67:45:94:72:89:cb:
f9:a8:74:44:ae:43:9b:ea:5d:e0:bc:86:47:2a:57:74:19:12:
65:d9:c0:71:96:d6:c9:7d:19:5b:5e:58:15:ce:c2:1c:f9:cf:
f3:61:6d:3d:37:a8:16:7f:77:29:94:ad:e6:07:9c:2c:88:c9:
43:dc:11:a6:90:b6:a2:d0:84:8e:25:bb:d6:ca:1b:e7:9e:a8:
48:0e:e6:4e:ce:63:36:47:1e:cf:fc:08:e0:8f:bb:f3:56:4b:
a1:33:0f:de:78:87:ec:1e:09:b4:9e:d9:a7:69:e5:eb:83:2f:
ae:c4:2e:2c:e6:81:ad:d2:91:ab:33:58:24:11:e2:ad:6a:45:
d9:87:0a:04
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon May 5 22:23:19 2025 by rpki-client