Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/65/9fce78-4f9d-4847-b759-b451e477b9c2/1/UJSiarpxAHYh_VmdU3u3rqreizM.mft
File: UJSiarpxAHYh_VmdU3u3rqreizM.mft (raw, json)
Hash identifier: Qj5rxMiet4EMO59OKR00+bZnmqCOgveAJsxc6UIr9+o=
Subject key identifier: D1:76:5A:1E:C5:94:64:66:4E:41:DD:E6:43:4B:CE:13:93:9D:60:98
Authority key identifier: 50:94:A2:6A:BA:71:00:76:21:FD:59:9D:53:7B:B7:AE:AA:DE:8B:33
Certificate issuer: /CN=5094a26aba71007621fd599d537bb7aeaade8b33
Certificate serial: 0196B6A2ECD037CC43559CCD6E41B3386969
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/UJSiarpxAHYh_VmdU3u3rqreizM.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/65/9fce78-4f9d-4847-b759-b451e477b9c2/1/UJSiarpxAHYh_VmdU3u3rqreizM.mft
Manifest number: 1534
Signing time: Fri 09 May 2025 20:00:52 +0000
Manifest this update: Fri 09 May 2025 20:00:52 +0000
Manifest next update: Sat 10 May 2025 20:00:52 +0000
Files and hashes: 1: PYLR3kfr_0El_Ga2E9JeZcCyCVc.roa (hash: A0449RCi6B29H8zKA0rMM/NDvKNi2c+elOaTXG6BpHk=)
2: UJSiarpxAHYh_VmdU3u3rqreizM.crl (hash: Rp1fJ49Wo3GJWnLwWoTJCXF/vKANdzfh/EhMsp1Buxo=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/65/9fce78-4f9d-4847-b759-b451e477b9c2/1/UJSiarpxAHYh_VmdU3u3rqreizM.crl
rsync://rpki.ripe.net/repository/DEFAULT/65/9fce78-4f9d-4847-b759-b451e477b9c2/1/UJSiarpxAHYh_VmdU3u3rqreizM.mft
rsync://rpki.ripe.net/repository/DEFAULT/UJSiarpxAHYh_VmdU3u3rqreizM.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 10 May 2025 17:53:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:b6:a2:ec:d0:37:cc:43:55:9c:cd:6e:41:b3:38:69:69
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=5094a26aba71007621fd599d537bb7aeaade8b33
Validity
Not Before: May 9 20:00:52 2025 GMT
Not After : May 10 20:00:52 2025 GMT
Subject: CN=d1765a1ec59464664e41dde6434bce13939d6098
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:97:a0:63:8c:2d:a6:12:3c:1a:86:9d:ac:c1:21:
d5:64:d7:cd:a4:5c:a3:33:57:17:5f:45:ee:e0:35:
f6:7f:25:0b:48:3e:8f:b0:8d:1e:05:ab:5d:ca:83:
84:49:36:9f:5c:e5:f5:d8:42:ee:7c:74:06:b7:da:
29:b8:6f:4d:2d:67:e6:33:87:7c:f6:03:41:91:cd:
95:30:60:db:ae:34:37:4f:6e:d8:3f:7f:b2:f7:92:
be:cc:90:32:cb:13:2d:2a:c8:4e:ea:8f:8f:7b:f6:
5f:0d:8d:3f:07:bd:95:02:61:9c:4d:6c:59:06:7e:
8e:52:72:9f:63:db:54:48:27:d8:48:69:69:bb:5c:
02:e4:cf:83:c0:a8:e5:47:4a:2a:83:62:3e:7c:43:
72:a1:74:c4:89:78:53:69:17:02:ea:09:ee:9a:be:
a8:cf:17:0f:9a:df:69:6a:e8:48:33:f3:61:f7:29:
6e:1a:5c:15:2c:5f:75:ba:bd:f5:0f:62:68:59:af:
dc:51:0b:c5:3e:eb:74:f6:e6:22:7c:9c:e9:20:1a:
17:24:14:17:99:b6:09:89:d4:3e:08:83:54:c6:ec:
bd:71:fc:38:cf:d6:f8:67:ee:91:4c:2d:e6:c9:29:
dc:33:a1:33:e4:49:53:46:d5:85:5a:a2:e3:a0:e8:
e0:0d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D1:76:5A:1E:C5:94:64:66:4E:41:DD:E6:43:4B:CE:13:93:9D:60:98
X509v3 Authority Key Identifier:
keyid:50:94:A2:6A:BA:71:00:76:21:FD:59:9D:53:7B:B7:AE:AA:DE:8B:33
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/UJSiarpxAHYh_VmdU3u3rqreizM.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/65/9fce78-4f9d-4847-b759-b451e477b9c2/1/UJSiarpxAHYh_VmdU3u3rqreizM.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/65/9fce78-4f9d-4847-b759-b451e477b9c2/1/UJSiarpxAHYh_VmdU3u3rqreizM.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
20:09:7f:8e:e7:ff:c6:47:82:d6:5a:02:7d:4a:94:c4:59:e4:
1b:bc:a0:32:21:fd:62:e2:fb:5c:3a:e5:bb:9f:c4:a6:f6:ce:
61:cf:d5:37:22:2e:df:c2:87:f2:12:3a:19:25:a0:3c:47:25:
50:95:50:cc:58:fa:39:5e:c5:23:e0:65:19:5d:54:c4:f9:61:
0c:73:e8:33:f0:6d:d2:4a:6d:42:1b:b7:e2:0f:27:60:a9:6f:
bd:08:c5:e4:35:95:d6:33:02:17:c1:2b:89:38:fd:db:d3:26:
ee:2e:0b:bc:16:d8:b2:e1:a9:2d:4d:28:0a:82:0a:75:ef:3c:
1b:a9:d9:c1:33:02:0c:be:29:ea:5f:a0:a9:36:e3:50:7d:59:
2a:fe:91:19:b0:05:c5:16:77:60:32:59:64:14:b2:09:32:67:
40:b4:62:27:d3:9b:7e:2d:90:6a:3f:c9:08:73:a5:13:eb:f3:
e3:38:e0:a2:39:ac:90:2e:23:61:f7:c7:17:84:7d:62:51:14:
91:6f:8c:2d:7c:cf:a1:f6:8b:3e:43:64:ed:a1:3c:76:b2:46:
48:ee:6c:87:50:c7:2e:0f:2e:a5:36:a0:da:12:7d:ed:a0:6b:
63:42:bf:86:98:7b:36:05:30:0a:9a:33:8a:37:a9:7d:7a:08:
24:30:5c:ae
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri May 9 23:56:44 2025 by rpki-client