Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/7d/dd543d-d1f5-4f49-890f-5944d8ec273c/1/UD9z_v6dvRZWFDdaGKNM3PtKMe4.mft
File: UD9z_v6dvRZWFDdaGKNM3PtKMe4.mft (raw, json)
Hash identifier: A++mFjmHBsDyrgeO6S6W2l5xGYloL7HK/2Voc/BDE4A=
Subject key identifier: 36:30:F0:4F:28:9A:89:E0:A4:F3:D9:41:6A:19:E7:66:25:B3:C1:2F
Authority key identifier: 50:3F:73:FE:FE:9D:BD:16:56:14:37:5A:18:A3:4C:DC:FB:4A:31:EE
Certificate issuer: /CN=503f73fefe9dbd165614375a18a34cdcfb4a31ee
Certificate serial: 01969FE3DED6A765DAC431132F95F2E38804
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/UD9z_v6dvRZWFDdaGKNM3PtKMe4.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/7d/dd543d-d1f5-4f49-890f-5944d8ec273c/1/UD9z_v6dvRZWFDdaGKNM3PtKMe4.mft
Manifest number: 08DE
Signing time: Mon 05 May 2025 10:00:33 +0000
Manifest this update: Mon 05 May 2025 10:00:33 +0000
Manifest next update: Tue 06 May 2025 10:00:33 +0000
Files and hashes: 1: UD9z_v6dvRZWFDdaGKNM3PtKMe4.crl (hash: tsZ2Tmu1isuqdSB/uYxzarZJdNNKNDscbdu4apLgzMg=)
2: rB2uaCwrLsHd8QP3gzLrvvAfPiA.roa (hash: rFl9lkx1744U+43ipMxs7m2ICQoiTAYXwAH+fMGwgoo=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/7d/dd543d-d1f5-4f49-890f-5944d8ec273c/1/UD9z_v6dvRZWFDdaGKNM3PtKMe4.crl
rsync://rpki.ripe.net/repository/DEFAULT/7d/dd543d-d1f5-4f49-890f-5944d8ec273c/1/UD9z_v6dvRZWFDdaGKNM3PtKMe4.mft
rsync://rpki.ripe.net/repository/DEFAULT/UD9z_v6dvRZWFDdaGKNM3PtKMe4.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 06 May 2025 10:00:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:9f:e3:de:d6:a7:65:da:c4:31:13:2f:95:f2:e3:88:04
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=503f73fefe9dbd165614375a18a34cdcfb4a31ee
Validity
Not Before: May 5 10:00:33 2025 GMT
Not After : May 6 10:00:33 2025 GMT
Subject: CN=3630f04f289a89e0a4f3d9416a19e76625b3c12f
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d0:14:06:0f:98:ce:1c:c4:d5:67:37:0f:cd:d6:
44:3b:1a:b9:98:eb:9c:0e:9c:94:db:3f:32:74:85:
39:32:dd:54:c1:3f:f4:ea:98:82:01:b2:1b:79:98:
a2:9a:8f:4a:1f:70:ab:9e:33:46:27:d1:cf:9e:ab:
09:02:11:b4:ac:9f:d1:34:a4:33:56:13:3d:70:23:
91:b4:d2:4d:97:89:b8:4d:a1:eb:6f:d9:95:ad:f6:
65:bb:df:9d:60:aa:f4:43:aa:f2:4a:b0:a0:47:89:
c5:91:5f:8d:c8:23:70:86:cc:c1:3c:4e:e2:b6:0b:
d9:dd:c2:9e:7c:49:0b:eb:4b:b3:fb:39:96:21:af:
9d:0e:19:17:fd:5f:c7:36:50:18:10:88:1f:cf:a8:
39:e0:a9:eb:32:ce:56:f3:af:75:36:2e:ac:50:a2:
08:46:1f:00:be:44:df:fd:f0:de:6f:ad:1c:ca:d4:
a9:e7:a8:02:e2:eb:28:dd:65:1c:f2:24:74:d3:83:
60:e2:a5:ae:b2:ca:eb:72:6e:41:dd:78:71:ef:94:
f8:3f:9e:ce:c4:9f:e6:6f:19:b9:c5:ef:59:9c:3b:
46:bb:59:32:b9:35:51:62:6a:51:b9:84:df:66:28:
91:07:c9:2b:1d:5e:81:14:0f:61:f4:32:d1:72:a8:
4e:13
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
36:30:F0:4F:28:9A:89:E0:A4:F3:D9:41:6A:19:E7:66:25:B3:C1:2F
X509v3 Authority Key Identifier:
keyid:50:3F:73:FE:FE:9D:BD:16:56:14:37:5A:18:A3:4C:DC:FB:4A:31:EE
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/UD9z_v6dvRZWFDdaGKNM3PtKMe4.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/7d/dd543d-d1f5-4f49-890f-5944d8ec273c/1/UD9z_v6dvRZWFDdaGKNM3PtKMe4.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/7d/dd543d-d1f5-4f49-890f-5944d8ec273c/1/UD9z_v6dvRZWFDdaGKNM3PtKMe4.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
12:97:66:23:ce:b5:90:7e:2a:88:94:26:5f:16:02:37:31:5f:
88:56:d8:59:04:f7:dd:2b:36:ce:67:81:2c:d2:a5:fe:15:c8:
24:60:29:28:1d:42:90:1c:d7:fe:ac:bc:88:1e:ba:bf:83:72:
d3:41:ac:41:22:81:26:34:4f:2f:d4:1b:13:0d:ad:ed:4b:50:
8c:4a:e6:11:39:d3:06:09:eb:01:87:5a:a3:91:d2:16:05:2b:
e9:68:a5:05:db:f4:61:76:53:c7:fa:75:6c:d5:f9:81:1e:6e:
ab:bc:ff:9e:45:28:ef:eb:30:92:0a:4e:d7:ad:48:b8:85:c6:
b1:ef:33:b1:ee:fb:e5:b1:9a:26:44:93:01:99:07:32:7e:19:
51:87:f3:63:a5:f1:34:e1:46:f5:81:25:51:83:6d:33:e9:12:
38:01:2b:72:3a:8e:ab:20:79:36:67:0b:81:0e:bc:6c:0e:34:
39:07:1a:49:11:bd:1f:8a:90:60:bd:c3:a4:3d:77:4c:3f:03:
67:d8:ac:61:0f:20:92:aa:e5:42:10:ec:34:53:ed:b2:58:65:
ac:68:a1:58:10:e2:8f:dc:7f:30:51:42:ce:8e:61:39:b1:8d:
48:8f:21:a9:09:1f:bf:58:25:e3:eb:53:c0:0f:4d:3c:97:da:
4b:2f:90:d2
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon May 5 18:53:42 2025 by rpki-client