Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/91/9e0c8c-e666-4e72-ae21-7a04bcbd0e46/1/UtLtjEn1Ab8ymRxkI8Ks768CSWk.mft
File: UtLtjEn1Ab8ymRxkI8Ks768CSWk.mft (raw, json)
Hash identifier: O/3pfmOtZSdcFtMMBGxqxWjmKYvDycN8YZIoxRpIbhA=
Subject key identifier: 30:BA:AA:B8:EE:6A:92:63:A4:10:DF:04:90:9A:DC:29:8E:3A:B5:0B
Authority key identifier: 52:D2:ED:8C:49:F5:01:BF:32:99:1C:64:23:C2:AC:EF:AF:02:49:69
Certificate issuer: /CN=52d2ed8c49f501bf32991c6423c2acefaf024969
Certificate serial: 0196BCDB510BDFB64D0F3A2E3A720FC70523
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/UtLtjEn1Ab8ymRxkI8Ks768CSWk.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/91/9e0c8c-e666-4e72-ae21-7a04bcbd0e46/1/UtLtjEn1Ab8ymRxkI8Ks768CSWk.mft
Manifest number: 01A9
Signing time: Sun 11 May 2025 01:00:11 +0000
Manifest this update: Sun 11 May 2025 01:00:11 +0000
Manifest next update: Mon 12 May 2025 01:00:11 +0000
Files and hashes: 1: MKNa-STNNQIC43-YfYTvv0QElrI.roa (hash: 5nl1biPNK+Z/9Gdw9bn2cf84K3XezIkK/OVnwTz/dio=)
2: UtLtjEn1Ab8ymRxkI8Ks768CSWk.crl (hash: FWUwe513zyeKghbu5NoygkQ1ybrb/Xso/nzzXSg05Xw=)
3: ckdLePhoueFIYZx4kGDlV51XN1k.roa (hash: aOA0NbOYFDXcRN0IYoUzlHYQw/Z3WdJX57vq3cILcdo=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/91/9e0c8c-e666-4e72-ae21-7a04bcbd0e46/1/UtLtjEn1Ab8ymRxkI8Ks768CSWk.crl
rsync://rpki.ripe.net/repository/DEFAULT/91/9e0c8c-e666-4e72-ae21-7a04bcbd0e46/1/UtLtjEn1Ab8ymRxkI8Ks768CSWk.mft
rsync://rpki.ripe.net/repository/DEFAULT/UtLtjEn1Ab8ymRxkI8Ks768CSWk.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 11 May 2025 22:00:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:bc:db:51:0b:df:b6:4d:0f:3a:2e:3a:72:0f:c7:05:23
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=52d2ed8c49f501bf32991c6423c2acefaf024969
Validity
Not Before: May 11 01:00:11 2025 GMT
Not After : May 12 01:00:11 2025 GMT
Subject: CN=30baaab8ee6a9263a410df04909adc298e3ab50b
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:89:2b:b9:7f:82:69:66:70:15:17:56:b0:32:87:
17:57:1c:d1:7b:7e:81:0c:f1:46:a0:02:a8:94:aa:
6b:3d:9c:a9:ba:48:b0:19:49:09:da:df:f7:0e:3a:
81:1f:0c:dd:56:90:80:4e:27:79:36:0e:08:d6:e8:
74:a8:40:85:b9:3a:04:1e:6b:04:2b:cf:ab:b5:e2:
a4:cd:e5:de:46:ce:d2:eb:a4:64:1d:3d:12:a4:96:
9b:37:27:dc:38:76:c8:0f:bf:48:63:12:81:d6:e3:
9b:aa:b6:d1:fc:df:56:dc:fd:7e:2e:8c:03:47:6f:
2f:93:77:c4:7b:a5:2f:de:14:dd:3e:87:d3:d6:af:
28:41:0e:ba:0a:59:7b:2f:46:94:51:c7:3d:97:8c:
be:9d:2a:af:df:2f:87:78:b1:1f:ca:37:17:6a:65:
02:f2:e1:ec:10:78:7e:b3:fa:6c:2d:00:20:36:bc:
bc:ad:54:d4:db:fc:f7:cd:cf:51:d9:dc:9a:68:28:
bd:b5:20:09:b3:16:9e:19:50:80:f1:6b:c4:44:0f:
cf:40:fc:df:3c:a2:7e:5c:1c:df:81:48:5d:0d:b7:
99:26:27:be:d7:45:e9:e4:7d:d7:e1:e6:d0:55:a0:
b0:1b:5a:35:1e:55:82:32:8c:06:0a:c7:9d:ab:b3:
70:93
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
30:BA:AA:B8:EE:6A:92:63:A4:10:DF:04:90:9A:DC:29:8E:3A:B5:0B
X509v3 Authority Key Identifier:
keyid:52:D2:ED:8C:49:F5:01:BF:32:99:1C:64:23:C2:AC:EF:AF:02:49:69
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/UtLtjEn1Ab8ymRxkI8Ks768CSWk.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/91/9e0c8c-e666-4e72-ae21-7a04bcbd0e46/1/UtLtjEn1Ab8ymRxkI8Ks768CSWk.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/91/9e0c8c-e666-4e72-ae21-7a04bcbd0e46/1/UtLtjEn1Ab8ymRxkI8Ks768CSWk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
9b:d0:3a:17:25:57:04:8f:b5:b5:08:a6:09:f3:bd:8b:27:e7:
91:3e:6e:21:68:31:b5:61:3e:9a:12:15:82:5a:35:0b:ce:73:
72:56:c7:61:00:a9:0d:df:22:a0:e9:05:da:ad:d9:b9:7d:f3:
5a:7b:d9:7f:45:26:e7:42:94:40:44:3b:88:29:b2:d5:be:58:
a1:0b:58:96:bf:07:14:26:3d:f7:ad:11:ed:30:fc:19:16:f0:
5a:f1:0c:db:64:22:53:ad:dc:e6:a1:ce:0d:d1:b6:00:a1:67:
fa:5c:fd:5e:e4:42:ed:99:08:9b:56:e7:ca:7b:9d:eb:3a:6c:
ee:51:cb:36:a4:1c:a6:49:c3:53:69:c4:e6:c7:05:5d:8d:ca:
91:0b:78:6e:93:bc:da:ad:a2:4f:1e:ea:f7:7c:d8:b5:8e:59:
80:01:f9:c3:11:ed:dd:69:fe:4e:11:63:f7:d8:9c:a1:d0:fa:
bf:6f:0a:3c:bd:ed:0b:6b:e9:89:47:54:9d:b1:11:7f:11:6b:
72:c5:88:5a:44:48:16:c0:33:30:81:5b:37:3e:29:e6:ab:a0:
f3:f7:ec:0a:e1:d3:d5:50:c7:39:b7:19:1d:28:c6:8f:38:6e:
b0:15:72:9c:4a:1a:19:13:0e:6b:a7:3a:d6:bb:16:68:16:94:
1f:da:96:ca
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun May 11 06:35:21 2025 by rpki-client