Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/71/fb00ec-babd-4172-8d4d-2a64f99baf5f/1/UJw4zD6qNVb6OaIvMNwbpINv6J8.mft
File: UJw4zD6qNVb6OaIvMNwbpINv6J8.mft (raw, json)
Hash identifier: lRP6Lgbjzy348gvLoJHWYr04ag1nT3OXCbzsLVWeLbE=
Subject key identifier: AC:39:E2:67:33:2A:82:A9:F9:9C:8B:3D:C3:E9:94:F0:4A:AC:B0:B5
Authority key identifier: 50:9C:38:CC:3E:AA:35:56:FA:39:A2:2F:30:DC:1B:A4:83:6F:E8:9F
Certificate issuer: /CN=509c38cc3eaa3556fa39a22f30dc1ba4836fe89f
Certificate serial: 0196B9A3AF5F8B7C7092C86694736AEE1DAC
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/UJw4zD6qNVb6OaIvMNwbpINv6J8.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/71/fb00ec-babd-4172-8d4d-2a64f99baf5f/1/UJw4zD6qNVb6OaIvMNwbpINv6J8.mft
Manifest number: 152E
Signing time: Sat 10 May 2025 10:00:34 +0000
Manifest this update: Sat 10 May 2025 10:00:34 +0000
Manifest next update: Sun 11 May 2025 10:00:34 +0000
Files and hashes: 1: UJw4zD6qNVb6OaIvMNwbpINv6J8.crl (hash: KeTgtBRN3HYH4bBkWntR62lK0XSqNx5ZIwUsfWQDDbc=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/71/fb00ec-babd-4172-8d4d-2a64f99baf5f/1/UJw4zD6qNVb6OaIvMNwbpINv6J8.crl
rsync://rpki.ripe.net/repository/DEFAULT/71/fb00ec-babd-4172-8d4d-2a64f99baf5f/1/UJw4zD6qNVb6OaIvMNwbpINv6J8.mft
rsync://rpki.ripe.net/repository/DEFAULT/UJw4zD6qNVb6OaIvMNwbpINv6J8.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 11 May 2025 10:00:34 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:b9:a3:af:5f:8b:7c:70:92:c8:66:94:73:6a:ee:1d:ac
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=509c38cc3eaa3556fa39a22f30dc1ba4836fe89f
Validity
Not Before: May 10 10:00:34 2025 GMT
Not After : May 11 10:00:34 2025 GMT
Subject: CN=ac39e267332a82a9f99c8b3dc3e994f04aacb0b5
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b1:69:67:fa:ab:10:71:2f:64:c8:dc:31:f4:40:
fb:c4:c5:08:d0:f4:ba:88:13:e9:0f:98:14:98:a7:
be:ca:a4:03:7a:85:b4:9a:05:3a:92:52:5f:29:a1:
9c:c2:d1:dd:4b:71:1b:40:0d:7f:9c:d2:05:c4:bb:
57:7e:26:94:57:b7:35:db:5a:c3:4c:3d:d7:2a:47:
f8:1d:2a:03:43:64:97:88:cf:ad:cc:37:06:f5:31:
1c:cc:29:14:6d:09:7e:83:d3:10:f6:2e:34:87:03:
a3:80:c0:f9:b3:64:85:05:55:94:0f:a0:ba:df:16:
8f:d3:57:21:ca:8d:26:12:38:b5:2d:98:9b:30:68:
44:f7:6e:f2:57:49:6e:c5:a2:0f:67:95:dc:49:e9:
ce:e1:db:0b:de:27:c2:fc:48:61:d1:9a:e5:a8:cf:
18:72:ca:46:8f:de:18:c8:82:70:e5:69:2e:f8:88:
16:f0:3b:78:04:a0:c0:db:61:65:1b:97:fe:48:12:
b8:75:46:2e:2b:19:d1:18:40:fc:74:13:5c:0a:0b:
43:ab:7f:d1:82:54:79:5a:28:36:64:a6:75:06:17:
b4:6c:d3:75:00:f9:c8:a8:2d:c6:94:ca:9b:d8:07:
f5:6f:37:41:92:29:40:d9:3b:c9:28:6b:9d:b0:6f:
c2:47
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
AC:39:E2:67:33:2A:82:A9:F9:9C:8B:3D:C3:E9:94:F0:4A:AC:B0:B5
X509v3 Authority Key Identifier:
keyid:50:9C:38:CC:3E:AA:35:56:FA:39:A2:2F:30:DC:1B:A4:83:6F:E8:9F
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/UJw4zD6qNVb6OaIvMNwbpINv6J8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/71/fb00ec-babd-4172-8d4d-2a64f99baf5f/1/UJw4zD6qNVb6OaIvMNwbpINv6J8.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/71/fb00ec-babd-4172-8d4d-2a64f99baf5f/1/UJw4zD6qNVb6OaIvMNwbpINv6J8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
62:5a:c4:9d:a0:52:45:d0:71:f4:53:e4:86:73:7a:0f:b6:92:
27:e9:89:4a:43:24:60:2c:a8:b7:55:fd:72:fd:61:f9:e7:61:
6a:68:79:7e:d8:93:7c:06:e9:d9:08:42:71:24:59:76:ba:8e:
a1:7c:56:e5:96:d2:17:5c:e6:33:8b:d4:f5:fb:c9:6e:15:13:
28:fc:24:6b:94:e2:4d:64:c4:b8:01:b2:5e:c8:04:c0:1c:01:
3c:8a:9a:b1:f6:6e:6b:d0:07:2d:20:ec:e9:29:91:4b:27:6b:
5b:f8:4f:74:b0:f4:31:d4:9b:b4:08:94:38:84:a9:f4:89:b6:
0f:82:e3:d7:d4:6c:65:25:ab:1b:77:34:f2:83:1a:5c:8b:b4:
74:a1:d7:bc:07:f6:0d:55:d0:71:55:0a:80:2d:f6:3c:f7:01:
9e:eb:63:85:72:80:bb:5e:bd:be:91:59:a4:b1:f3:95:36:de:
57:ef:8a:a9:79:3c:f3:78:15:c2:8a:e1:f2:a1:b3:9e:d0:b0:
89:18:44:29:45:45:bb:2e:01:9e:d5:70:ca:85:a7:79:5b:18:
42:1b:e9:ad:80:8e:a0:f8:da:23:1f:bf:ac:4d:8a:42:41:4c:
0b:82:81:11:62:6e:50:52:bf:e2:dd:9e:79:c5:99:9a:31:f4:
4e:ca:be:7a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat May 10 17:06:45 2025 by rpki-client