Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/92/4f3f08-986b-48e4-85dd-34ffdb442113/1/UDmdRDW7hfrpEKvjjmhTMgTf1gs.mft
File: UDmdRDW7hfrpEKvjjmhTMgTf1gs.mft (raw, json)
Hash identifier: 8j+aA9535uMNnc7Vomy/af5O/auvIwPVIgn2F44KKYw=
Subject key identifier: 7A:F4:68:6A:7A:8A:FC:DF:72:98:13:08:D5:BA:CF:B9:6E:66:3E:3C
Authority key identifier: 50:39:9D:44:35:BB:85:FA:E9:10:AB:E3:8E:68:53:32:04:DF:D6:0B
Certificate issuer: /CN=50399d4435bb85fae910abe38e68533204dfd60b
Certificate serial: 0196BF013F9D2DE53033C8E674F9FD9920AE
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/UDmdRDW7hfrpEKvjjmhTMgTf1gs.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/92/4f3f08-986b-48e4-85dd-34ffdb442113/1/UDmdRDW7hfrpEKvjjmhTMgTf1gs.mft
Manifest number: 1533
Signing time: Sun 11 May 2025 11:00:52 +0000
Manifest this update: Sun 11 May 2025 11:00:52 +0000
Manifest next update: Mon 12 May 2025 11:00:52 +0000
Files and hashes: 1: UDmdRDW7hfrpEKvjjmhTMgTf1gs.crl (hash: J0IUTZBKS0ZtGh6NTnSGmA5Rq7jfGl0QzQN3k+bFTRU=)
2: pRF0g-KmjQVzQy4b6X1bq_CpEUE.roa (hash: fou9eP6aKJvlZgNY8H8VBsOY1ef+bJJW7cLSICuAHvo=)
3: qY-nefcH-LOOVfCQihz5CCt5mqI.roa (hash: Dn21UEBAZW+JYaxSGEnZx/UyFGhOmUarhMAoNzBQGQ0=)
4: rFlugNGr-3DyDG3Ypn6kJRgihYw.roa (hash: Moz7baZEmGb60gs946/SMPJbRzqsgdeQtjmQD/8Bfj4=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/92/4f3f08-986b-48e4-85dd-34ffdb442113/1/UDmdRDW7hfrpEKvjjmhTMgTf1gs.crl
rsync://rpki.ripe.net/repository/DEFAULT/92/4f3f08-986b-48e4-85dd-34ffdb442113/1/UDmdRDW7hfrpEKvjjmhTMgTf1gs.mft
rsync://rpki.ripe.net/repository/DEFAULT/UDmdRDW7hfrpEKvjjmhTMgTf1gs.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 12 May 2025 11:00:52 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:bf:01:3f:9d:2d:e5:30:33:c8:e6:74:f9:fd:99:20:ae
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=50399d4435bb85fae910abe38e68533204dfd60b
Validity
Not Before: May 11 11:00:52 2025 GMT
Not After : May 12 11:00:52 2025 GMT
Subject: CN=7af4686a7a8afcdf72981308d5bacfb96e663e3c
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ea:24:56:61:6d:b6:42:d1:c0:8a:e3:51:9b:97:
b0:63:f4:0f:f5:3d:5c:25:fe:00:69:47:5d:b3:a3:
5e:c6:a9:55:34:34:52:eb:d1:14:4f:8d:ba:6a:0a:
a1:81:f1:ce:2a:4b:9d:2e:f7:b7:3c:a3:4f:df:89:
3b:10:2c:74:f0:86:8f:68:23:f5:2d:0b:f5:7f:65:
d9:23:48:1d:15:01:cf:75:c2:01:50:c0:93:14:8e:
cc:62:fc:11:d0:ee:95:e7:bc:d2:d5:1e:3d:9b:9d:
30:04:fa:0d:38:e2:4a:81:6e:6a:98:94:d2:48:a7:
2f:9f:e8:15:55:f7:42:57:e5:41:ff:0a:c4:12:7e:
d9:e1:8f:1a:0e:be:9b:e8:1d:1c:1d:27:cc:42:4f:
a0:80:87:bf:1c:d9:e9:00:86:57:7b:e3:23:43:56:
e5:00:d1:ae:96:f0:70:3b:b0:a8:80:ba:e5:e8:4e:
40:84:6f:b8:af:85:e1:05:4c:2f:00:9a:ca:9d:d5:
d9:f7:40:13:92:6b:6b:17:7a:57:f6:fa:c8:9d:0a:
a7:84:f4:bb:5c:64:c6:25:58:34:b7:28:92:68:77:
ed:5e:e1:1e:6a:e9:62:26:af:26:e8:9e:80:8f:e4:
b8:5d:17:de:d7:50:dd:fa:22:64:2a:17:3b:e8:0e:
09:d5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
7A:F4:68:6A:7A:8A:FC:DF:72:98:13:08:D5:BA:CF:B9:6E:66:3E:3C
X509v3 Authority Key Identifier:
keyid:50:39:9D:44:35:BB:85:FA:E9:10:AB:E3:8E:68:53:32:04:DF:D6:0B
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/UDmdRDW7hfrpEKvjjmhTMgTf1gs.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/92/4f3f08-986b-48e4-85dd-34ffdb442113/1/UDmdRDW7hfrpEKvjjmhTMgTf1gs.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/92/4f3f08-986b-48e4-85dd-34ffdb442113/1/UDmdRDW7hfrpEKvjjmhTMgTf1gs.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
57:d7:fc:81:39:21:2a:fb:83:54:69:df:49:42:6e:bb:9a:29:
cb:64:0e:b0:70:52:51:04:b1:3a:ba:9f:f9:7b:f7:4e:74:bd:
f6:c4:9c:5e:84:d2:d8:6a:6a:bf:b4:4e:87:19:82:86:4f:a2:
f7:08:5d:2c:62:21:99:56:a2:16:e9:ec:66:2b:74:a2:6b:f9:
57:bf:aa:8d:bf:f2:02:4c:46:8b:ba:fd:cf:8a:a9:80:5e:1e:
c7:01:fc:20:64:36:1b:9f:a1:44:cc:35:71:c2:95:88:66:5c:
68:25:db:55:fb:e0:47:b6:1d:63:68:7f:59:94:ef:d8:79:7f:
d2:40:e4:ea:1b:7d:25:a3:4f:d9:1c:b4:2c:fc:53:6c:a4:b0:
1f:9b:24:f7:59:7b:8b:de:60:cb:93:78:61:bf:54:7c:ec:b2:
3a:8f:28:d2:69:a3:26:a3:98:76:12:20:c3:c5:66:3b:06:b1:
61:2c:c9:c5:84:f3:ab:a6:9e:fd:90:1f:51:f2:28:77:4d:33:
46:ae:0d:96:c9:f6:17:87:dd:e7:ea:b8:13:9f:82:89:6d:33:
b5:6e:d1:da:06:ce:6d:18:55:06:89:b1:e3:ba:93:7d:9c:34:
0c:a9:94:a8:59:e1:9e:16:ea:97:12:c7:fe:ca:27:e5:86:1f:
d8:53:eb:07
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun May 11 18:19:11 2025 by rpki-client