Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/80/5721b9-f931-4fc6-9c34-d717cf3cc155/1/UEBzuGGe_AcFK57ftcy2Gx9c54E.mft
File: UEBzuGGe_AcFK57ftcy2Gx9c54E.mft (raw, json)
Hash identifier: ffEZEs5WdSvC4yR8F05r/5AcZ63O4mi5k0TrMEgJiqY=
Subject key identifier: 7E:73:70:C8:DF:CB:F4:DA:69:02:6F:8C:B8:FD:19:19:DE:FF:DD:A4
Authority key identifier: 50:40:73:B8:61:9E:FC:07:05:2B:9E:DF:B5:CC:B6:1B:1F:5C:E7:81
Certificate issuer: /CN=504073b8619efc07052b9edfb5ccb61b1f5ce781
Certificate serial: 0196B891530E329086660549991E0B76FEDB
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/UEBzuGGe_AcFK57ftcy2Gx9c54E.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/80/5721b9-f931-4fc6-9c34-d717cf3cc155/1/UEBzuGGe_AcFK57ftcy2Gx9c54E.mft
Manifest number: 1535
Signing time: Sat 10 May 2025 05:00:53 +0000
Manifest this update: Sat 10 May 2025 05:00:53 +0000
Manifest next update: Sun 11 May 2025 05:00:53 +0000
Files and hashes: 1: L4_tSMK5k5kqqbJMWxeueMUP_mA.roa (hash: 9KNzXq4Jj1Ie5L/sgRkqWPLj6rBqACEfWOxUaBMMoF8=)
2: MpgfzBZcCwpGmCHQXOGgVC0SBbw.roa (hash: l1OVDxtg0CoOASKjwgQu29p5CMY+5ES/VliOBwP9wAQ=)
3: UEBzuGGe_AcFK57ftcy2Gx9c54E.crl (hash: Fg5gbqNNWodxVbRP7vc6uHaFXJZcV3U9JVIfzAdgdrg=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/80/5721b9-f931-4fc6-9c34-d717cf3cc155/1/UEBzuGGe_AcFK57ftcy2Gx9c54E.crl
rsync://rpki.ripe.net/repository/DEFAULT/80/5721b9-f931-4fc6-9c34-d717cf3cc155/1/UEBzuGGe_AcFK57ftcy2Gx9c54E.mft
rsync://rpki.ripe.net/repository/DEFAULT/UEBzuGGe_AcFK57ftcy2Gx9c54E.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 11 May 2025 04:00:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:b8:91:53:0e:32:90:86:66:05:49:99:1e:0b:76:fe:db
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=504073b8619efc07052b9edfb5ccb61b1f5ce781
Validity
Not Before: May 10 05:00:53 2025 GMT
Not After : May 11 05:00:53 2025 GMT
Subject: CN=7e7370c8dfcbf4da69026f8cb8fd1919deffdda4
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ae:e0:24:9a:c8:d4:21:ba:73:d9:4f:04:51:ad:
e8:25:dd:0c:18:51:9c:06:79:c9:1a:bc:c6:87:a6:
e3:16:4e:bf:68:da:cd:dc:3e:0a:5d:08:c0:b7:04:
db:ed:95:d8:de:bd:76:83:e9:d2:31:3a:4f:8e:d0:
84:01:a2:63:12:c7:c7:f2:f5:91:50:f3:d4:55:2f:
9f:45:30:37:1e:b5:70:92:ca:95:8f:bb:a5:bb:f7:
4a:24:99:39:35:18:ab:17:2d:1f:f5:17:6d:70:1a:
74:03:ed:2c:7a:3a:25:3b:6f:e9:34:bc:db:40:25:
03:59:54:61:d9:db:1d:65:f9:1d:83:ed:ef:7e:df:
7d:83:22:11:dd:7d:5c:87:05:ae:35:68:47:2b:0c:
8f:4f:9a:78:71:c8:24:4f:10:f1:94:b3:1b:cd:6d:
ee:49:19:05:26:40:bf:19:52:fa:3a:d6:4f:0d:e7:
de:71:7e:46:0d:a8:da:95:d3:e2:ba:8d:54:12:8e:
21:63:02:14:ed:6f:b6:ae:cb:aa:36:4e:49:a3:78:
48:60:71:97:dd:d4:95:cc:42:aa:70:c6:70:c6:70:
d5:9b:8a:2a:d8:34:0e:70:72:c0:cc:c2:f4:24:92:
de:0a:25:d6:3d:21:67:17:a7:12:7d:10:e7:99:1e:
d7:27
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
7E:73:70:C8:DF:CB:F4:DA:69:02:6F:8C:B8:FD:19:19:DE:FF:DD:A4
X509v3 Authority Key Identifier:
keyid:50:40:73:B8:61:9E:FC:07:05:2B:9E:DF:B5:CC:B6:1B:1F:5C:E7:81
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/UEBzuGGe_AcFK57ftcy2Gx9c54E.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/80/5721b9-f931-4fc6-9c34-d717cf3cc155/1/UEBzuGGe_AcFK57ftcy2Gx9c54E.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/80/5721b9-f931-4fc6-9c34-d717cf3cc155/1/UEBzuGGe_AcFK57ftcy2Gx9c54E.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
8b:36:7f:19:a7:de:09:d3:de:54:aa:2a:0c:c1:3b:46:a5:18:
18:03:57:de:26:b1:d4:35:3a:71:0f:c6:86:59:8d:32:b1:4d:
d6:9f:63:31:03:62:c2:89:a2:31:91:51:9a:3b:30:b3:f6:8d:
48:22:8f:f8:eb:8e:1a:be:4c:db:fb:c6:8e:90:be:9c:67:58:
9c:48:e4:fd:7b:26:98:d5:16:ea:90:64:1a:e8:42:f5:96:b2:
e2:e2:46:ae:6a:be:0c:df:61:b6:40:71:dd:d2:0b:39:71:9b:
71:c0:58:78:1a:93:cc:65:ad:f6:55:99:bc:b4:bf:83:be:c0:
0e:ca:ac:4c:5b:f9:b2:90:05:da:49:aa:a4:96:91:42:8a:bc:
11:7f:5b:36:22:18:9f:a0:fd:a7:4a:2a:23:c1:4b:be:fa:85:
ed:27:ca:6e:06:bf:ce:1e:e5:7f:7f:f7:2e:c7:43:82:ec:ca:
c7:06:d5:e4:13:1a:68:28:53:73:d6:69:29:49:06:b9:42:f2:
37:6c:59:2a:ef:9a:38:ac:1d:fd:8d:59:76:36:fb:07:95:1f:
c4:d3:46:61:eb:35:20:bf:2b:91:e2:d0:e1:42:7e:c5:b8:31:
fb:a2:c1:ba:7a:7e:51:82:1a:83:e5:d0:74:18:b8:53:f6:fb:
3b:c5:eb:ce
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat May 10 13:46:44 2025 by rpki-client