Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/8b/84548d-3f3b-46b9-836c-38a3924776e9/1/UJxjxtdWuyrNPxrZKsQV2oV-bJg.mft
File: UJxjxtdWuyrNPxrZKsQV2oV-bJg.mft (raw, json)
Hash identifier: BwCzzcLBDMOwF+IXgPb4Zbz7wfi7QsbFf3gjO4iCvp8=
Subject key identifier: 05:BF:48:0E:68:B3:68:4D:26:88:F8:99:90:DC:D7:90:AA:5E:6B:3F
Authority key identifier: 50:9C:63:C6:D7:56:BB:2A:CD:3F:1A:D9:2A:C4:15:DA:85:7E:6C:98
Certificate issuer: /CN=509c63c6d756bb2acd3f1ad92ac415da857e6c98
Certificate serial: 0196C45E60BDD67586BD0CFA75F345DB9D0A
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/UJxjxtdWuyrNPxrZKsQV2oV-bJg.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/8b/84548d-3f3b-46b9-836c-38a3924776e9/1/UJxjxtdWuyrNPxrZKsQV2oV-bJg.mft
Manifest number: 153E
Signing time: Mon 12 May 2025 12:00:41 +0000
Manifest this update: Mon 12 May 2025 12:00:41 +0000
Manifest next update: Tue 13 May 2025 12:00:41 +0000
Files and hashes: 1: O3S2kKvFZ3ZKfEqSxKEU0hUcMEM.roa (hash: UAJCEcCp2/+1CwINfz4/qAR0IkJC6tKzPu5ouB4y1xo=)
2: UJxjxtdWuyrNPxrZKsQV2oV-bJg.crl (hash: OZarFx3Olea2xIxxOEXlthrffRt62uuYmFIlv3KkUgw=)
3: i386TLXJ3T0t3DEp8z4OsAQZ5gg.roa (hash: 1WJwasmqZfO5Vi7FzjM8cLSApQE5Ou2nBbRnhWtNShk=)
4: mpgyXJ7iE41eH88IcrenXFUA9NI.roa (hash: wZqBDQ4cwcpcocBr4dj1IjCT+ao6cHj31fYRn+uOxj8=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/8b/84548d-3f3b-46b9-836c-38a3924776e9/1/UJxjxtdWuyrNPxrZKsQV2oV-bJg.crl
rsync://rpki.ripe.net/repository/DEFAULT/8b/84548d-3f3b-46b9-836c-38a3924776e9/1/UJxjxtdWuyrNPxrZKsQV2oV-bJg.mft
rsync://rpki.ripe.net/repository/DEFAULT/UJxjxtdWuyrNPxrZKsQV2oV-bJg.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 13 May 2025 12:00:41 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:c4:5e:60:bd:d6:75:86:bd:0c:fa:75:f3:45:db:9d:0a
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=509c63c6d756bb2acd3f1ad92ac415da857e6c98
Validity
Not Before: May 12 12:00:41 2025 GMT
Not After : May 13 12:00:41 2025 GMT
Subject: CN=05bf480e68b3684d2688f89990dcd790aa5e6b3f
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e3:73:fb:83:15:91:8f:62:42:21:b2:d3:12:33:
28:49:aa:93:fc:00:0b:8e:36:96:08:86:cc:4d:5d:
ee:2c:6b:89:07:a1:f7:c5:59:b1:9b:a3:35:96:d7:
d8:83:0d:7c:20:e8:0e:61:f1:5f:84:1d:b9:e0:a4:
21:83:fd:8d:a7:b0:7f:88:59:d6:40:5c:f8:26:fd:
11:05:73:74:92:0f:b2:21:6f:b0:a3:bf:3d:9e:5b:
c6:45:0e:45:4e:da:b9:06:d7:f8:70:76:1c:f1:06:
e6:2b:10:85:6d:7f:f7:5d:92:5d:d1:73:d8:a2:64:
39:2c:cf:29:44:0a:bb:26:b8:d6:ae:2c:77:e6:ca:
fb:4c:b5:76:dd:df:a0:fc:64:fe:52:ea:c2:3c:1c:
d2:fb:43:eb:dc:a8:57:3d:65:41:d8:e6:93:d7:9c:
24:58:08:5d:81:d8:ba:3b:39:66:dc:dd:24:6d:7c:
88:74:52:24:d5:2b:b4:21:95:3b:73:9c:d1:c4:5a:
32:08:28:03:49:99:89:d5:5a:2d:1f:db:20:8f:01:
4f:af:ed:76:dd:11:bd:c6:9f:c9:5f:e3:58:eb:a9:
97:b6:72:f1:b9:9b:6c:1f:63:b2:5b:0b:ed:90:fb:
7e:e5:a5:7b:21:0a:86:00:d0:e1:2a:c7:83:8b:bd:
3a:09
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
05:BF:48:0E:68:B3:68:4D:26:88:F8:99:90:DC:D7:90:AA:5E:6B:3F
X509v3 Authority Key Identifier:
keyid:50:9C:63:C6:D7:56:BB:2A:CD:3F:1A:D9:2A:C4:15:DA:85:7E:6C:98
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/UJxjxtdWuyrNPxrZKsQV2oV-bJg.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/8b/84548d-3f3b-46b9-836c-38a3924776e9/1/UJxjxtdWuyrNPxrZKsQV2oV-bJg.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/8b/84548d-3f3b-46b9-836c-38a3924776e9/1/UJxjxtdWuyrNPxrZKsQV2oV-bJg.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
1c:e6:d5:a8:a5:1b:cb:66:03:fa:d6:c2:5b:96:b5:d5:e2:57:
f3:6e:e6:e3:89:1f:16:cb:96:fc:53:32:fe:2a:d5:5e:57:f8:
86:8b:ab:96:1a:81:11:1c:38:29:f3:26:ed:33:65:3b:c6:70:
49:a7:84:f1:97:e1:b1:4b:98:f1:db:5d:fc:da:4f:51:e1:7b:
18:e6:8c:13:4d:90:b6:7c:d8:02:b9:41:02:1e:f5:1d:58:31:
71:9d:20:a5:dd:ae:21:2e:f3:fe:e2:bd:5e:dc:cb:dd:e4:17:
7d:5b:b5:04:cb:e5:e7:37:6e:a6:2a:13:68:45:37:2d:fe:e3:
0c:c7:06:24:eb:7a:de:e1:e1:1b:ab:7f:f6:92:4d:1e:c1:24:
a7:c9:11:c5:f5:9e:18:34:35:43:77:03:b9:25:07:65:08:c0:
5a:43:eb:a2:7d:b9:30:e6:b0:f8:a4:37:d6:9b:32:d8:ae:0b:
f9:00:c7:21:37:c8:43:4c:75:b3:96:8f:de:02:69:0c:1c:ab:
14:87:c3:ae:9c:bf:c2:aa:fc:4c:8e:13:e4:c5:25:73:90:96:
ba:a4:42:89:e4:7a:4d:0d:b6:51:57:a4:d5:f9:5c:33:55:6d:
79:1c:82:a2:7a:fa:4b:38:b6:aa:28:0d:44:b1:96:ed:7a:21:
81:26:dc:16
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon May 12 20:28:27 2025 by rpki-client