Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/7b/9c6dad-377a-444e-b0dc-063ce6cf460d/1/UMHkJvWOQq4w5Wzbf_TY-d3YWzA.mft
File: UMHkJvWOQq4w5Wzbf_TY-d3YWzA.mft (raw, json)
Hash identifier: Ike00U0+CqlgTejTMZBEbiCxBAQwjbk+y++acRBkpAU=
Subject key identifier: 9B:F4:1C:3A:C4:1B:73:DD:87:E9:E3:4A:DF:FC:86:33:68:51:20:C0
Authority key identifier: 50:C1:E4:26:F5:8E:42:AE:30:E5:6C:DB:7F:F4:D8:F9:DD:D8:5B:30
Certificate issuer: /CN=50c1e426f58e42ae30e56cdb7ff4d8f9ddd85b30
Certificate serial: 0196B6A2C253C71571EF797E4EC07A5E8F17
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/UMHkJvWOQq4w5Wzbf_TY-d3YWzA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/7b/9c6dad-377a-444e-b0dc-063ce6cf460d/1/UMHkJvWOQq4w5Wzbf_TY-d3YWzA.mft
Manifest number: 153D
Signing time: Fri 09 May 2025 20:00:41 +0000
Manifest this update: Fri 09 May 2025 20:00:41 +0000
Manifest next update: Sat 10 May 2025 20:00:41 +0000
Files and hashes: 1: PjUu5bdQ5PWje69bOUaYtU5-JO4.roa (hash: 0J6fRIkfSS+fP0MymnclU0pabDr1Ut5w0Q3G/sVuN0U=)
2: S1ui4XpVCTm1Vm2OpLHGmY_ZuN0.roa (hash: 3qwiok+pffK8+ko0f890CJV54WEIRSPAcVGZFhekYsc=)
3: TQyjECyEBDxHd5gx-OyJlZ_34yY.roa (hash: M5RNaPyCpCIK/N3qNnK5z9iSP22MQyKR8Rdy90hwwOM=)
4: UMHkJvWOQq4w5Wzbf_TY-d3YWzA.crl (hash: 4s0l18JAMb4qYwUamzwpNC3ImFfIHkaPNaJNhgtjKc8=)
5: k9a98NqHjelrZVUWhKMb68LgxUE.roa (hash: 6VyAIEvjXORry2KtmNbj+FoMHc5b899/tsCBJkg8fEY=)
6: ovtcp22HNBJ9uUnNrEbA1Kgt9fo.roa (hash: LSCYzsKYL8WpLFlLkr/4DVnc2AZfaRsxdNXTyUzOti4=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/7b/9c6dad-377a-444e-b0dc-063ce6cf460d/1/UMHkJvWOQq4w5Wzbf_TY-d3YWzA.crl
rsync://rpki.ripe.net/repository/DEFAULT/7b/9c6dad-377a-444e-b0dc-063ce6cf460d/1/UMHkJvWOQq4w5Wzbf_TY-d3YWzA.mft
rsync://rpki.ripe.net/repository/DEFAULT/UMHkJvWOQq4w5Wzbf_TY-d3YWzA.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 10 May 2025 17:53:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:b6:a2:c2:53:c7:15:71:ef:79:7e:4e:c0:7a:5e:8f:17
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=50c1e426f58e42ae30e56cdb7ff4d8f9ddd85b30
Validity
Not Before: May 9 20:00:41 2025 GMT
Not After : May 10 20:00:41 2025 GMT
Subject: CN=9bf41c3ac41b73dd87e9e34adffc8633685120c0
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9b:21:7d:d9:19:5c:aa:ba:0d:af:d6:06:d3:20:
5e:e0:f3:ad:3b:e9:6f:54:30:e3:c7:24:55:df:dc:
d1:ed:28:78:f7:54:91:86:8d:55:81:f6:a4:43:6b:
34:56:7c:5d:3c:fe:bd:8f:3e:1c:b2:3f:5c:bb:3a:
a1:83:5d:3a:ca:f2:09:28:a6:05:65:b1:f4:4e:fb:
3d:7a:bf:a6:3e:c7:3f:13:ed:86:57:85:ae:1e:88:
de:c4:b4:36:a9:bb:93:7f:ae:0e:4b:98:c8:da:00:
aa:45:b9:e3:52:1c:d8:94:ca:9e:59:3e:5a:1d:db:
8b:5f:e0:7d:f9:ff:c6:a9:4d:8a:dd:db:b9:34:61:
7e:40:b4:69:5f:55:c8:f3:8e:06:89:62:cc:16:e1:
19:e1:c2:6f:0b:d4:ee:a0:61:bc:57:bb:d9:36:16:
ab:91:bd:51:3e:08:9d:bd:db:7f:2b:bb:f5:47:cb:
60:8a:2e:34:ba:3b:01:a3:7e:ae:3b:83:5a:d2:34:
18:de:bf:59:40:33:83:0a:53:3a:e3:ca:fa:58:e4:
81:3c:aa:da:50:c2:98:e2:f3:e9:fc:59:74:3c:30:
1b:da:a6:3a:fe:76:c1:2b:a7:a4:22:bc:05:ef:15:
b8:d2:e3:db:92:25:e2:39:94:31:be:8f:0f:78:63:
98:e9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
9B:F4:1C:3A:C4:1B:73:DD:87:E9:E3:4A:DF:FC:86:33:68:51:20:C0
X509v3 Authority Key Identifier:
keyid:50:C1:E4:26:F5:8E:42:AE:30:E5:6C:DB:7F:F4:D8:F9:DD:D8:5B:30
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/UMHkJvWOQq4w5Wzbf_TY-d3YWzA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/7b/9c6dad-377a-444e-b0dc-063ce6cf460d/1/UMHkJvWOQq4w5Wzbf_TY-d3YWzA.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/7b/9c6dad-377a-444e-b0dc-063ce6cf460d/1/UMHkJvWOQq4w5Wzbf_TY-d3YWzA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
67:bb:05:e3:cf:36:2f:3a:1b:c6:34:83:3a:29:f4:1b:f2:58:
ea:c9:85:5e:c8:a0:3f:d1:7c:ae:58:d0:06:6d:fb:56:ef:19:
fe:4d:77:a9:32:ef:6a:ca:8b:1d:4e:ba:47:84:71:47:21:c0:
47:5c:72:d8:d8:10:3a:21:70:dc:17:41:d6:b6:f9:2b:12:72:
42:4d:fd:bd:ad:c4:9f:49:92:74:48:27:76:51:33:f3:77:3f:
9d:1a:cc:b4:fb:75:b3:5e:d0:8b:2b:57:c2:d9:b2:76:d9:e8:
21:0b:8b:99:85:34:bd:c1:07:cd:be:25:12:71:70:8d:c2:8e:
7a:db:1d:04:33:69:0b:97:68:f9:5d:e1:e0:a1:a0:64:69:c1:
86:cb:07:86:b0:d8:fc:ea:5d:9e:25:da:06:c2:2d:13:95:dc:
cc:35:39:32:c5:f4:0e:3a:67:16:b5:14:aa:86:0c:e2:d9:c1:
df:56:25:a7:cb:2f:11:19:f3:63:33:7d:e4:9d:5e:a8:61:39:
3d:56:58:ac:34:7f:5a:11:71:d2:5c:09:24:a0:93:c5:79:f6:
48:30:3c:b4:1d:89:b6:36:e9:68:1f:de:60:5a:99:8f:3a:10:
a6:7a:80:4e:36:a8:80:27:dd:62:70:2a:47:d1:37:b8:21:15:
a7:09:8e:c6
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri May 9 22:37:44 2025 by rpki-client