Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/75/6ed434-cd51-4152-aa43-056bae27288e/1/UH5YKtyTadqK6F3ZNXQBIwgcfu0.mft
File: UH5YKtyTadqK6F3ZNXQBIwgcfu0.mft (raw, json)
Hash identifier: HhBHB1gMD+80lEgPDXt22P9gsbNAfLi2VBsPzBNuHi8=
Subject key identifier: 0A:CF:6F:A2:E0:43:41:7B:AE:FA:AA:4B:F7:D8:F4:F8:E1:BF:E9:24
Authority key identifier: 50:7E:58:2A:DC:93:69:DA:8A:E8:5D:D9:35:74:01:23:08:1C:7E:ED
Certificate issuer: /CN=507e582adc9369da8ae85dd935740123081c7eed
Certificate serial: 0196C728D594FA7EA612D3A1D144C8374CFA
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/UH5YKtyTadqK6F3ZNXQBIwgcfu0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/75/6ed434-cd51-4152-aa43-056bae27288e/1/UH5YKtyTadqK6F3ZNXQBIwgcfu0.mft
Manifest number: 07F3
Signing time: Tue 13 May 2025 01:01:04 +0000
Manifest this update: Tue 13 May 2025 01:01:04 +0000
Manifest next update: Wed 14 May 2025 01:01:04 +0000
Files and hashes: 1: 44dYsozRYENf4ubTHCTQ7hNPzoo.roa (hash: 9g/dOiyadhvu9EEQPUkgGuJzL/QnwS0iPrR2k3LdJdM=)
2: Akrk9AV522kb6SaYDeM3WfYPO7o.roa (hash: ZHsHEgFgctqjdlPRyjI2Dyt+c3//fPJCvQgY9mUz8Ck=)
3: UH5YKtyTadqK6F3ZNXQBIwgcfu0.crl (hash: DY1AtHzbWizrasaJ+wEo9rBkMpUL3GAajm45tOxg1V0=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/75/6ed434-cd51-4152-aa43-056bae27288e/1/UH5YKtyTadqK6F3ZNXQBIwgcfu0.crl
rsync://rpki.ripe.net/repository/DEFAULT/75/6ed434-cd51-4152-aa43-056bae27288e/1/UH5YKtyTadqK6F3ZNXQBIwgcfu0.mft
rsync://rpki.ripe.net/repository/DEFAULT/UH5YKtyTadqK6F3ZNXQBIwgcfu0.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 14 May 2025 01:01:04 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:c7:28:d5:94:fa:7e:a6:12:d3:a1:d1:44:c8:37:4c:fa
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=507e582adc9369da8ae85dd935740123081c7eed
Validity
Not Before: May 13 01:01:04 2025 GMT
Not After : May 14 01:01:04 2025 GMT
Subject: CN=0acf6fa2e043417baefaaa4bf7d8f4f8e1bfe924
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:be:28:55:bd:3d:d4:c5:22:4c:22:6b:5f:54:24:
1e:97:62:8c:53:d3:8d:45:b0:3c:29:d8:d5:b1:c3:
93:45:4a:68:98:78:55:e3:fd:83:39:3f:93:a6:a9:
84:8c:d1:03:04:8e:d3:34:5f:c9:df:a8:90:b0:9d:
64:f8:d6:d2:20:ba:7b:76:5c:f0:73:29:d2:ee:93:
09:a8:1c:59:28:f4:8e:39:b4:ce:47:f5:ff:19:6f:
71:8e:93:4d:b7:91:21:98:ed:0d:da:19:4f:e8:ff:
ca:f9:e9:76:9e:40:c3:f1:40:fc:12:34:89:f3:50:
21:41:a7:88:4f:72:e0:f5:90:46:a5:97:4e:03:db:
32:78:27:6f:6c:ab:fc:15:6b:68:ca:c1:83:ae:f2:
c2:ab:33:d3:dd:f2:50:e9:ac:60:ce:f1:dd:6e:b8:
16:5a:00:3d:c7:c5:6b:1d:5b:22:40:46:8d:96:9c:
6c:5c:6c:97:07:eb:f5:c7:e2:5c:cc:c1:81:59:33:
6d:be:de:04:85:99:9c:12:40:82:d1:14:6a:d6:27:
bf:2c:9e:f7:3f:66:8b:48:c5:31:2c:f3:04:38:97:
5b:71:36:59:c8:57:8c:44:25:8c:7b:c3:ec:94:81:
f6:3b:37:f3:d2:6a:1e:4d:f4:c5:dc:dd:52:2e:8d:
52:ed
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
0A:CF:6F:A2:E0:43:41:7B:AE:FA:AA:4B:F7:D8:F4:F8:E1:BF:E9:24
X509v3 Authority Key Identifier:
keyid:50:7E:58:2A:DC:93:69:DA:8A:E8:5D:D9:35:74:01:23:08:1C:7E:ED
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/UH5YKtyTadqK6F3ZNXQBIwgcfu0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/75/6ed434-cd51-4152-aa43-056bae27288e/1/UH5YKtyTadqK6F3ZNXQBIwgcfu0.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/75/6ed434-cd51-4152-aa43-056bae27288e/1/UH5YKtyTadqK6F3ZNXQBIwgcfu0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
b3:b4:38:17:9f:c1:3a:f4:fc:bf:05:0d:17:c4:33:db:32:4c:
03:7c:c9:ab:73:80:11:1d:9f:b1:cb:5e:2b:c2:22:28:49:3b:
fc:39:47:59:ab:3d:a1:c4:09:ff:3f:7c:c0:fe:97:3a:4a:21:
b6:40:1b:35:73:c4:80:b5:34:bc:fd:f3:1a:22:b4:cf:5e:d8:
68:0b:9b:93:ac:f3:75:6e:da:27:31:1e:64:4a:f7:f6:3a:45:
d7:0c:71:88:1c:dc:5a:90:5b:19:5c:fa:90:b8:1d:f8:d2:4c:
d0:38:ad:34:4c:11:4b:5a:b1:f5:77:83:aa:93:30:99:1c:f0:
85:0d:b5:c1:78:0f:93:77:d8:b7:3f:c4:fe:1f:74:f0:f1:c3:
b0:70:fd:cb:eb:4d:ce:e8:50:5b:9e:68:62:db:dd:f4:03:93:
96:4b:e0:37:ca:ca:14:16:f4:4d:26:7c:85:21:b0:fb:88:11:
13:a7:65:a3:9b:a1:e6:8a:c8:67:ae:cc:ae:e2:d2:de:6c:0a:
cd:44:b7:bf:29:1e:e3:24:a6:98:84:13:5a:c5:39:f2:ea:2a:
d3:77:f4:48:44:8d:ad:e2:04:8b:0e:1a:f1:50:dd:fe:94:0e:
e8:05:b8:8b:f3:4f:5d:f6:e0:f2:6c:b1:35:c7:4a:3a:47:7e:
44:ef:8b:5a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue May 13 11:25:32 2025 by rpki-client