Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/7c/f7c11f-4e9e-436d-a3df-fedbd4c66a0e/1/UPiOBciYeWyC_wFHVogW6TNCDhg.mft
File: UPiOBciYeWyC_wFHVogW6TNCDhg.mft (raw, json)
Hash identifier: S0onPyWa9CT/Nx55yR1Sk7jcDDc/b75uuWFVAevXt+E=
Subject key identifier: 07:16:73:4E:D6:58:44:57:E0:08:05:EC:93:03:18:B7:41:0E:B9:53
Authority key identifier: 50:F8:8E:05:C8:98:79:6C:82:FF:01:47:56:88:16:E9:33:42:0E:18
Certificate issuer: /CN=50f88e05c898796c82ff0147568816e933420e18
Certificate serial: 0196B28F5B405A012C5C16E978B247904F6C
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/UPiOBciYeWyC_wFHVogW6TNCDhg.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/7c/f7c11f-4e9e-436d-a3df-fedbd4c66a0e/1/UPiOBciYeWyC_wFHVogW6TNCDhg.mft
Manifest number: 152E
Signing time: Fri 09 May 2025 01:01:01 +0000
Manifest this update: Fri 09 May 2025 01:01:01 +0000
Manifest next update: Sat 10 May 2025 01:01:01 +0000
Files and hashes: 1: S6d6ZfQtYglTc5PqBY2Z1atkkFg.roa (hash: t4T7IISC3qIqOuSVfllwo9m13olig0aDm52s2i83g4s=)
2: TunP0FWmuXrf5YzoJj5ZZR9Zd2Q.roa (hash: 7wLHBrznfSkPVYQc5aPKo1rNMxi/Eci6q/qG+jPd+nE=)
3: UPiOBciYeWyC_wFHVogW6TNCDhg.crl (hash: GQKLL2gM0WB0C930rYnTxz0XjASz/cqt57sx9gnGWmc=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/7c/f7c11f-4e9e-436d-a3df-fedbd4c66a0e/1/UPiOBciYeWyC_wFHVogW6TNCDhg.crl
rsync://rpki.ripe.net/repository/DEFAULT/7c/f7c11f-4e9e-436d-a3df-fedbd4c66a0e/1/UPiOBciYeWyC_wFHVogW6TNCDhg.mft
rsync://rpki.ripe.net/repository/DEFAULT/UPiOBciYeWyC_wFHVogW6TNCDhg.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 10 May 2025 00:00:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:b2:8f:5b:40:5a:01:2c:5c:16:e9:78:b2:47:90:4f:6c
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=50f88e05c898796c82ff0147568816e933420e18
Validity
Not Before: May 9 01:01:01 2025 GMT
Not After : May 10 01:01:01 2025 GMT
Subject: CN=0716734ed6584457e00805ec930318b7410eb953
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bb:62:c3:7d:a6:19:61:82:c9:5f:36:b2:64:3b:
94:b4:62:d6:d3:78:57:d3:f2:15:75:31:bb:1e:85:
8b:8d:fd:a9:5d:af:d4:6e:61:57:37:4e:e2:e9:80:
3a:2d:86:87:68:cf:29:35:f3:fb:5f:03:b8:b1:72:
8a:52:e2:b3:34:56:88:40:49:ef:28:66:16:3b:21:
83:0a:c2:f9:bc:a1:0c:82:62:d0:52:ee:76:1f:4f:
ab:5d:c3:02:14:3d:09:a7:25:28:0d:32:b5:a9:7d:
09:9a:74:9b:2f:a8:c3:10:66:1c:3c:6f:49:c2:10:
8b:f3:f3:e4:db:03:d8:19:48:58:d0:5c:a8:0a:97:
66:1f:cc:da:3f:6d:fe:2a:7e:c1:cd:06:82:e6:1c:
b7:3c:a8:cf:22:1b:35:2e:99:32:35:7c:6d:e9:69:
ed:7b:a7:18:ae:e1:90:56:c5:2f:27:50:6c:fb:3c:
33:b2:48:3e:27:1c:e4:a2:e3:84:2c:c9:df:02:0e:
e1:8a:a5:0d:80:f6:c4:77:94:23:e1:59:6f:69:69:
c3:da:9b:05:57:0f:d9:60:a5:38:43:3c:61:9d:51:
04:89:d4:4f:78:d0:a2:3f:ce:e0:0b:cf:59:c6:bf:
00:94:fd:01:5e:c8:ce:19:c1:3b:d3:6a:8a:d3:78:
9b:93
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
07:16:73:4E:D6:58:44:57:E0:08:05:EC:93:03:18:B7:41:0E:B9:53
X509v3 Authority Key Identifier:
keyid:50:F8:8E:05:C8:98:79:6C:82:FF:01:47:56:88:16:E9:33:42:0E:18
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/UPiOBciYeWyC_wFHVogW6TNCDhg.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/7c/f7c11f-4e9e-436d-a3df-fedbd4c66a0e/1/UPiOBciYeWyC_wFHVogW6TNCDhg.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/7c/f7c11f-4e9e-436d-a3df-fedbd4c66a0e/1/UPiOBciYeWyC_wFHVogW6TNCDhg.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
c8:5f:ed:9c:a6:4c:3f:88:c1:57:6d:37:2b:cc:76:eb:2b:08:
e1:3b:c8:fd:c7:dc:9a:d5:2c:5d:b3:a7:95:7e:1a:c5:a3:fb:
99:68:ab:59:01:90:66:ab:2d:39:56:0c:f9:3a:82:de:28:13:
b6:93:7c:fa:b3:58:2f:49:7c:c8:0f:e7:b2:dd:20:09:24:36:
1e:82:ce:28:58:10:75:6e:5a:23:fd:ec:2a:c9:f1:44:a2:a7:
68:96:e0:e0:88:87:54:4b:65:63:3e:8e:d9:7b:6f:85:17:7f:
73:c6:86:54:5e:26:68:38:22:6c:8b:f6:d6:26:97:9a:82:5f:
ea:05:ae:86:c0:8c:f1:f8:cb:e8:d5:88:6b:c5:22:0c:af:1f:
5f:b7:ed:ce:98:59:a9:8c:d0:c7:51:40:66:fd:c1:9d:66:00:
f6:b6:34:80:05:d4:ac:9c:10:10:bf:80:45:df:1d:e2:39:98:
f8:e2:ae:85:99:2f:4d:c6:22:be:5f:ed:c8:42:8f:f3:7d:33:
20:f0:29:dc:09:80:18:6e:11:7c:1f:ed:73:ce:84:72:33:0f:
8d:f3:9a:53:6f:f9:8c:17:5e:94:7c:52:c7:6c:23:3d:9b:45:
49:f7:f8:4c:02:d8:39:84:6b:0e:11:16:a7:5b:2e:d5:14:7b:
71:31:0a:6b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri May 9 08:19:24 2025 by rpki-client