Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/67/064906-5be3-4ed1-ab74-5da3ec82cc56/1/UpZVR_EJYGS2tXPAKBcUwfBhzU0.mft
File: UpZVR_EJYGS2tXPAKBcUwfBhzU0.mft (raw, json)
Hash identifier: wj6QSDzHDzUM2xBvIUznM1VS0Od0eCyAH6wYKq5H/b0=
Subject key identifier: 4C:BA:49:7E:C4:28:70:46:FC:52:9E:42:F0:70:27:5D:39:5D:65:A1
Authority key identifier: 52:96:55:47:F1:09:60:64:B6:B5:73:C0:28:17:14:C1:F0:61:CD:4D
Certificate issuer: /CN=52965547f1096064b6b573c0281714c1f061cd4d
Certificate serial: 0196BF6F14139332E902331B201BE157F485
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/UpZVR_EJYGS2tXPAKBcUwfBhzU0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/67/064906-5be3-4ed1-ab74-5da3ec82cc56/1/UpZVR_EJYGS2tXPAKBcUwfBhzU0.mft
Manifest number: 0E0A
Signing time: Sun 11 May 2025 13:00:49 +0000
Manifest this update: Sun 11 May 2025 13:00:49 +0000
Manifest next update: Mon 12 May 2025 13:00:49 +0000
Files and hashes: 1: UpZVR_EJYGS2tXPAKBcUwfBhzU0.crl (hash: hNkLogYw0R/95BiFGOEE7yRzyla67GfE+iFqWQUOohk=)
2: ove2TkiR5Y_QzNqFVx6binaCimY.roa (hash: nkoFx2cGJ1UQ07ClYGuA0sWHVfaghbV6qV22jBDNl8o=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/67/064906-5be3-4ed1-ab74-5da3ec82cc56/1/UpZVR_EJYGS2tXPAKBcUwfBhzU0.crl
rsync://rpki.ripe.net/repository/DEFAULT/67/064906-5be3-4ed1-ab74-5da3ec82cc56/1/UpZVR_EJYGS2tXPAKBcUwfBhzU0.mft
rsync://rpki.ripe.net/repository/DEFAULT/UpZVR_EJYGS2tXPAKBcUwfBhzU0.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 12 May 2025 13:00:49 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:bf:6f:14:13:93:32:e9:02:33:1b:20:1b:e1:57:f4:85
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=52965547f1096064b6b573c0281714c1f061cd4d
Validity
Not Before: May 11 13:00:49 2025 GMT
Not After : May 12 13:00:49 2025 GMT
Subject: CN=4cba497ec4287046fc529e42f070275d395d65a1
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bb:a3:a0:f9:b5:fc:78:d8:6a:e5:38:1e:87:6f:
ee:2e:e2:b6:b2:85:95:f8:6e:8b:12:91:10:72:3e:
4e:65:f4:45:31:61:af:86:a6:9c:3a:1c:a9:f1:8c:
85:cd:a7:87:7c:a9:24:b8:4f:43:bd:0b:b4:38:1b:
01:7b:47:8e:ad:0c:02:21:ab:68:ef:23:30:21:b9:
91:b3:3a:d8:75:d3:d8:e9:04:8e:73:75:21:db:b0:
80:f4:63:6b:91:bf:7f:19:34:2d:dd:c6:d3:12:b1:
62:1d:0e:4f:a2:85:63:3b:22:b9:ef:23:9f:89:2b:
68:28:60:8f:db:d8:2c:7a:71:c6:8c:cb:48:5f:29:
6d:25:0c:d2:ab:6a:65:4d:5e:a2:74:db:27:a5:a1:
e8:21:7a:23:f1:df:46:2f:97:2b:e0:3c:e4:c7:a6:
02:05:19:69:5a:6a:45:88:4c:c2:02:1c:5f:23:67:
26:83:f5:48:40:87:7d:40:ef:a7:f1:fc:81:7c:75:
da:b6:7a:9e:05:63:e6:66:c1:f9:5c:a6:90:35:64:
ff:f8:d4:fd:45:0f:de:20:d8:3e:e5:78:f4:f4:62:
b8:4f:ce:e8:71:22:c7:07:0d:7c:72:d6:ea:a5:f7:
88:a3:64:c5:01:e6:50:61:71:2d:e6:eb:e7:0e:16:
81:e7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
4C:BA:49:7E:C4:28:70:46:FC:52:9E:42:F0:70:27:5D:39:5D:65:A1
X509v3 Authority Key Identifier:
keyid:52:96:55:47:F1:09:60:64:B6:B5:73:C0:28:17:14:C1:F0:61:CD:4D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/UpZVR_EJYGS2tXPAKBcUwfBhzU0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/67/064906-5be3-4ed1-ab74-5da3ec82cc56/1/UpZVR_EJYGS2tXPAKBcUwfBhzU0.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/67/064906-5be3-4ed1-ab74-5da3ec82cc56/1/UpZVR_EJYGS2tXPAKBcUwfBhzU0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
72:0a:bb:22:56:90:4e:76:68:02:76:c6:8d:27:ae:b3:1f:bf:
00:15:b5:52:cf:3e:07:22:6b:23:cf:8b:87:ce:cd:f1:1b:a0:
0f:28:41:81:45:32:17:8d:59:54:91:da:e4:db:82:6d:3e:9d:
3b:85:69:ea:0a:32:93:c7:2e:44:68:e6:65:7e:fb:56:b3:23:
04:d9:31:f6:cd:e7:0b:90:ef:fd:bc:0f:78:11:51:6c:4c:db:
e4:0f:0d:da:c2:dc:29:4a:5f:9f:69:93:7c:c5:1d:02:34:7b:
14:b9:05:57:69:70:e9:a9:25:c9:ad:d6:c1:32:dc:73:8c:4c:
a3:c4:74:7b:e2:c1:bf:f8:6d:bd:64:12:a7:8f:89:78:a7:97:
3e:fb:33:ee:c0:a9:26:86:db:bb:a9:f4:f5:9a:a8:a5:25:e8:
04:66:9e:8e:e0:7b:ca:46:b6:ee:55:9e:f4:c7:84:9e:50:d7:
99:08:75:d7:f0:09:f4:cc:cf:7f:32:d5:0a:76:57:a9:78:dc:
da:63:1b:9f:b1:70:e5:91:4f:48:1c:34:eb:b4:e4:a4:95:4a:
f9:65:9e:dd:51:cb:6e:ad:e0:54:2b:ca:3f:cc:e2:dc:c9:88:
76:f6:ca:28:b6:e2:c4:f3:f6:a9:5a:dc:fc:e0:76:30:8e:83:
61:08:90:ca
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun May 11 18:42:05 2025 by rpki-client