Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/67/beac09-c49f-4c70-9818-431c39bb7b38/1/Uo1YFMcVZCDew6P35SbvD4Mz7vY.mft
File: Uo1YFMcVZCDew6P35SbvD4Mz7vY.mft (raw, json)
Hash identifier: k47OFL6lSpNiypad+zt/pLSZHCc8nkgtTsKD9oMDjUM=
Subject key identifier: ED:73:9E:E8:EA:A0:91:77:7F:8B:D3:D0:E6:BE:6D:9D:B7:54:7B:24
Authority key identifier: 52:8D:58:14:C7:15:64:20:DE:C3:A3:F7:E5:26:EF:0F:83:33:EE:F6
Certificate issuer: /CN=528d5814c7156420dec3a3f7e526ef0f8333eef6
Certificate serial: 0196C5DF1CEF4775632A1634AD76E4ECF53D
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Uo1YFMcVZCDew6P35SbvD4Mz7vY.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/67/beac09-c49f-4c70-9818-431c39bb7b38/1/Uo1YFMcVZCDew6P35SbvD4Mz7vY.mft
Manifest number: 13D9
Signing time: Mon 12 May 2025 19:00:55 +0000
Manifest this update: Mon 12 May 2025 19:00:55 +0000
Manifest next update: Tue 13 May 2025 19:00:55 +0000
Files and hashes: 1: MmFJokVO4QRlDiGRue7krePTmWQ.roa (hash: 2NjaoaYGPQ9nJqZ5MUASprFLlvmc6uqFQzLhkJlBENc=)
2: Uo1YFMcVZCDew6P35SbvD4Mz7vY.crl (hash: /psv4Gx1COtriZrGzU/K1Hj/YAicpay+2hMFl/dmeoQ=)
3: a9ojZnfz0fm0UVD2fXdjv-28qnw.roa (hash: s9wsqrb6KjabBhTORHQp4WAcdtQIFP8TAj4IRPzQjYo=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/67/beac09-c49f-4c70-9818-431c39bb7b38/1/Uo1YFMcVZCDew6P35SbvD4Mz7vY.crl
rsync://rpki.ripe.net/repository/DEFAULT/67/beac09-c49f-4c70-9818-431c39bb7b38/1/Uo1YFMcVZCDew6P35SbvD4Mz7vY.mft
rsync://rpki.ripe.net/repository/DEFAULT/Uo1YFMcVZCDew6P35SbvD4Mz7vY.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 13 May 2025 14:31:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:c5:df:1c:ef:47:75:63:2a:16:34:ad:76:e4:ec:f5:3d
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=528d5814c7156420dec3a3f7e526ef0f8333eef6
Validity
Not Before: May 12 19:00:55 2025 GMT
Not After : May 13 19:00:55 2025 GMT
Subject: CN=ed739ee8eaa091777f8bd3d0e6be6d9db7547b24
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cb:42:81:2f:ff:e8:17:ac:de:b3:96:73:19:72:
cb:c8:74:12:03:e1:77:29:11:5f:7a:41:c6:26:6b:
2a:43:d9:bc:21:66:8a:f4:a7:82:3a:41:6f:80:9d:
a8:53:54:17:85:02:40:14:42:77:1f:a8:4c:92:90:
3f:12:ee:9b:49:d5:2c:61:a4:22:cd:79:92:52:d9:
d8:b2:13:da:fa:1c:66:f9:ff:35:2c:18:93:03:2b:
43:89:e3:ca:2a:bf:87:0f:63:ee:7b:a1:c4:e5:46:
67:6b:c0:03:a0:75:25:79:67:b6:3e:0d:0d:14:ef:
c5:96:34:a1:44:96:e6:31:44:ff:87:e5:50:79:04:
8c:ea:2e:a6:9a:97:f9:36:ef:2d:6a:a4:00:10:45:
26:fb:42:ce:64:b1:ba:e9:d7:9e:98:fd:6c:55:7d:
89:12:06:fc:e1:e8:35:a5:46:ee:d5:d8:6b:94:7f:
14:7b:b6:02:e2:20:86:65:b9:ba:83:67:63:c7:ac:
b0:87:93:7e:d5:c0:8f:6a:65:bd:6a:bd:4d:6a:06:
75:66:fe:12:3c:35:9b:82:31:99:1c:81:63:8f:1b:
09:c4:1a:fd:06:6a:99:73:67:c4:72:b5:9c:c4:2b:
b1:f4:af:e7:f6:ea:b8:81:08:e8:14:a1:b7:0e:77:
3f:e7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
ED:73:9E:E8:EA:A0:91:77:7F:8B:D3:D0:E6:BE:6D:9D:B7:54:7B:24
X509v3 Authority Key Identifier:
keyid:52:8D:58:14:C7:15:64:20:DE:C3:A3:F7:E5:26:EF:0F:83:33:EE:F6
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Uo1YFMcVZCDew6P35SbvD4Mz7vY.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/67/beac09-c49f-4c70-9818-431c39bb7b38/1/Uo1YFMcVZCDew6P35SbvD4Mz7vY.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/67/beac09-c49f-4c70-9818-431c39bb7b38/1/Uo1YFMcVZCDew6P35SbvD4Mz7vY.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
8d:c5:77:f5:76:b8:bf:47:01:e2:b3:ba:94:73:74:d0:61:d3:
33:d9:f2:d4:ba:c3:22:df:58:e9:66:ac:ce:1e:04:8f:eb:66:
03:35:0f:f3:73:02:ab:cf:0a:c7:32:b9:76:5c:60:5c:5d:f3:
0f:0e:bd:34:61:1a:e4:a8:03:bd:dd:6d:47:d0:63:9a:27:af:
3a:2f:eb:d8:53:4b:57:83:5c:f7:c1:9b:c6:82:ba:e2:e6:16:
67:2b:19:2b:1f:64:5c:3b:eb:9e:6a:fa:10:2a:c9:a3:b0:2c:
d6:26:08:57:c9:d6:6a:72:49:1c:1d:46:49:47:94:dc:9b:f2:
0a:f7:3a:20:6d:09:ab:16:3e:e0:c3:35:1a:71:db:55:8a:90:
7d:46:f0:b0:ef:57:4b:d1:63:3e:c0:47:3b:96:88:39:28:ec:
c0:06:31:26:05:7d:e5:a7:7d:56:0f:25:93:9e:ad:32:fe:42:
36:b8:a2:01:40:42:2a:9c:f6:ce:9f:2d:a3:d2:a6:67:99:95:
67:c7:df:5e:05:16:8e:a8:1c:85:d1:f2:0c:08:f2:25:07:fb:
73:9f:36:30:60:17:1f:ac:c1:b8:5c:5a:29:d0:37:15:3b:80:
c3:bc:13:c0:27:f0:62:02:af:7f:94:74:e6:41:88:f4:d5:58:
ae:7f:f4:d1
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon May 12 23:51:41 2025 by rpki-client