Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/80/0a92a1-e594-41ee-855c-2ba6a022d4c9/1/UgO7TxlYEfjXcjygGgsv-963Whs.mft
File: UgO7TxlYEfjXcjygGgsv-963Whs.mft (raw, json)
Hash identifier: TRDEE9V5ooRpND0pK27uH30shmIyc7vo8vyif+Pfjos=
Subject key identifier: F4:16:71:03:97:F0:4E:6E:4A:5A:8D:C9:32:5B:FE:55:C5:97:46:DA
Authority key identifier: 52:03:BB:4F:19:58:11:F8:D7:72:3C:A0:1A:0B:2F:FB:DE:B7:5A:1B
Certificate issuer: /CN=5203bb4f195811f8d7723ca01a0b2ffbdeb75a1b
Certificate serial: 0196C1CAD3D0FA14E45CFDC69E8214F1D8FB
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/UgO7TxlYEfjXcjygGgsv-963Whs.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/80/0a92a1-e594-41ee-855c-2ba6a022d4c9/1/UgO7TxlYEfjXcjygGgsv-963Whs.mft
Manifest number: 016B
Signing time: Mon 12 May 2025 00:00:17 +0000
Manifest this update: Mon 12 May 2025 00:00:17 +0000
Manifest next update: Tue 13 May 2025 00:00:17 +0000
Files and hashes: 1: UgO7TxlYEfjXcjygGgsv-963Whs.crl (hash: sCEFwunrA75pBSJqSm4JBz+5lNnrtllMn/AA4s4gwEM=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/80/0a92a1-e594-41ee-855c-2ba6a022d4c9/1/UgO7TxlYEfjXcjygGgsv-963Whs.crl
rsync://rpki.ripe.net/repository/DEFAULT/80/0a92a1-e594-41ee-855c-2ba6a022d4c9/1/UgO7TxlYEfjXcjygGgsv-963Whs.mft
rsync://rpki.ripe.net/repository/DEFAULT/UgO7TxlYEfjXcjygGgsv-963Whs.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 13 May 2025 00:00:17 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:c1:ca:d3:d0:fa:14:e4:5c:fd:c6:9e:82:14:f1:d8:fb
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=5203bb4f195811f8d7723ca01a0b2ffbdeb75a1b
Validity
Not Before: May 12 00:00:17 2025 GMT
Not After : May 13 00:00:17 2025 GMT
Subject: CN=f416710397f04e6e4a5a8dc9325bfe55c59746da
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c0:26:6c:37:d8:62:52:16:8f:d1:47:3f:2e:6e:
2c:0d:d7:be:d5:9b:e4:6d:e8:b6:2e:fc:b5:8c:32:
80:98:86:26:48:70:92:a5:b7:34:29:f4:d9:ad:52:
39:c7:bb:81:95:b5:9a:e0:b1:49:2d:2e:36:05:be:
04:9f:bc:48:d8:a1:49:9d:77:ea:58:4d:34:92:5b:
d6:31:7e:cc:6e:3c:66:be:86:18:15:f9:6c:6c:f6:
6b:ab:12:39:a0:f6:c7:7d:2c:f6:ec:ef:85:77:c7:
4d:8c:c9:fb:c4:2e:fe:26:8a:b4:db:d1:bf:de:60:
77:54:21:2f:f1:7a:4e:d7:45:e1:13:6b:d9:fc:36:
67:fe:b3:6d:3a:40:7f:53:7d:18:d3:a2:73:d9:a8:
be:f0:f5:17:92:4b:9d:15:ea:c4:75:c5:3a:b6:5e:
6d:a2:41:0e:2d:d3:1e:2a:d0:c8:3a:ae:9e:b7:36:
cf:16:91:84:97:46:6e:34:08:89:79:b0:f9:6f:35:
32:7e:05:9d:cb:de:80:05:00:e4:a8:4b:ed:d5:bd:
34:60:1f:d6:e5:80:5b:30:55:6f:f5:ba:41:e7:b5:
49:f4:c8:af:1e:fc:9f:98:4f:cb:0e:78:55:8d:3b:
3f:f4:1d:50:84:99:a6:e8:86:23:2b:7e:41:a4:54:
b3:f3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F4:16:71:03:97:F0:4E:6E:4A:5A:8D:C9:32:5B:FE:55:C5:97:46:DA
X509v3 Authority Key Identifier:
keyid:52:03:BB:4F:19:58:11:F8:D7:72:3C:A0:1A:0B:2F:FB:DE:B7:5A:1B
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/UgO7TxlYEfjXcjygGgsv-963Whs.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/80/0a92a1-e594-41ee-855c-2ba6a022d4c9/1/UgO7TxlYEfjXcjygGgsv-963Whs.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/80/0a92a1-e594-41ee-855c-2ba6a022d4c9/1/UgO7TxlYEfjXcjygGgsv-963Whs.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
1b:1c:9c:a6:d9:9c:71:d8:4a:90:60:c1:03:c2:e2:df:39:90:
91:3f:1d:4d:f6:9e:01:33:97:3c:e3:ff:c4:94:31:8c:49:c3:
17:97:8e:2a:ee:e5:4d:5a:78:59:19:09:8b:a8:d8:51:58:ab:
df:f4:99:85:0e:db:ab:1f:6b:b2:c8:9b:0b:1b:df:6a:ec:f9:
c6:fd:de:4d:2e:fd:74:7f:19:6b:dc:5a:67:7d:a2:5d:80:df:
7e:b6:26:3f:b8:40:c6:3e:7d:4e:52:80:aa:42:34:6d:67:e9:
c9:30:aa:67:b3:12:e7:27:11:1e:6e:6c:bb:3d:4c:f3:92:45:
e2:8c:39:bc:6e:0b:ac:38:b9:b3:97:47:1a:0e:26:f3:59:c8:
04:c6:60:1b:0e:6a:00:93:d8:5c:fb:80:96:96:b9:af:f8:91:
06:74:ed:90:ad:46:8e:79:68:23:cc:94:97:92:7b:c3:a5:9a:
8d:f3:0f:a1:b2:b6:85:77:60:86:6b:22:71:54:ad:68:1f:a7:
b5:60:33:80:de:f5:cf:77:19:36:21:55:c7:8c:33:81:8c:ff:
08:46:35:79:ba:a4:c6:cb:39:d3:d3:50:f5:44:83:08:9a:a0:
ff:0a:24:27:94:82:93:50:18:02:b3:80:59:65:c7:70:86:93:
51:9c:60:f0
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon May 12 04:33:09 2025 by rpki-client