Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/92/f9dd1c-317b-41c1-8fcb-7d9eabee15ac/1/UxZZCg6vSN8rGuI7nVWenKwlmX4.mft
File: UxZZCg6vSN8rGuI7nVWenKwlmX4.mft (raw, json)
Hash identifier: +y4OB65R+gLJrKeBF9MnSFErYuxJ5qKE7S9tp+uFOtk=
Subject key identifier: 93:51:DF:6C:27:98:13:8E:26:40:DC:B6:5B:D7:86:3D:55:88:5C:D8
Authority key identifier: 53:16:59:0A:0E:AF:48:DF:2B:1A:E2:3B:9D:55:9E:9C:AC:25:99:7E
Certificate issuer: /CN=5316590a0eaf48df2b1ae23b9d559e9cac25997e
Certificate serial: 0196C64CA6EECB35DF43A3202B0DD5F62254
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/UxZZCg6vSN8rGuI7nVWenKwlmX4.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/92/f9dd1c-317b-41c1-8fcb-7d9eabee15ac/1/UxZZCg6vSN8rGuI7nVWenKwlmX4.mft
Manifest number: 1539
Signing time: Mon 12 May 2025 21:00:34 +0000
Manifest this update: Mon 12 May 2025 21:00:34 +0000
Manifest next update: Tue 13 May 2025 21:00:34 +0000
Files and hashes: 1: IwWglmhS5Zmc1TAwKCoGnND82Hg.roa (hash: yxdnz39K/r0yEcsRsb6jG3Fu9Th+zv6+zwScMkcw/2k=)
2: Slwbbwyy2R4DXhMszcmZSafHRLM.roa (hash: hGzmzAgGBljAorRZaTCZ/rFSgBsMkWs+ukGHvQ5mFco=)
3: UxZZCg6vSN8rGuI7nVWenKwlmX4.crl (hash: eYt8LijH7PluKwL+syxHfu2f7nAsQwvQkm2Frbb5y20=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/92/f9dd1c-317b-41c1-8fcb-7d9eabee15ac/1/UxZZCg6vSN8rGuI7nVWenKwlmX4.crl
rsync://rpki.ripe.net/repository/DEFAULT/92/f9dd1c-317b-41c1-8fcb-7d9eabee15ac/1/UxZZCg6vSN8rGuI7nVWenKwlmX4.mft
rsync://rpki.ripe.net/repository/DEFAULT/UxZZCg6vSN8rGuI7nVWenKwlmX4.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 13 May 2025 14:31:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:c6:4c:a6:ee:cb:35:df:43:a3:20:2b:0d:d5:f6:22:54
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=5316590a0eaf48df2b1ae23b9d559e9cac25997e
Validity
Not Before: May 12 21:00:34 2025 GMT
Not After : May 13 21:00:34 2025 GMT
Subject: CN=9351df6c2798138e2640dcb65bd7863d55885cd8
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d0:2c:79:04:33:2b:57:f4:5a:be:4e:ba:c1:4f:
6c:1b:d0:3d:d7:1b:89:39:9c:15:49:9e:85:f4:11:
9e:1b:16:66:74:52:46:a1:92:77:41:12:bc:91:fe:
66:89:43:64:02:48:f8:d4:62:29:cc:34:c1:30:85:
f0:9e:ad:17:72:3d:a5:4f:62:d8:0c:4e:d2:b9:6b:
f8:27:47:ce:ba:b9:43:a3:e8:05:d9:af:3d:90:93:
3b:ea:55:47:65:1d:09:30:cb:15:0d:40:c0:1d:bb:
d0:50:f4:cf:b8:3c:58:62:d6:b4:8d:ef:73:42:0b:
83:28:f3:cb:10:46:ad:e5:e7:e8:00:82:f4:8a:10:
8c:e8:56:3c:cb:7d:81:37:ff:16:f5:92:b6:41:d6:
5d:37:30:9d:e0:84:42:ef:6a:02:11:67:e5:68:bd:
20:2b:22:cf:ed:ea:8c:25:4b:14:8a:3c:65:39:57:
fc:a5:a1:e1:ce:ba:2e:87:51:d8:3e:95:6c:ec:2f:
4c:de:c9:0e:cd:f3:16:a9:24:10:1b:6b:9b:6b:d4:
8c:2b:8b:bf:61:19:de:19:66:a5:15:2c:0a:a6:c5:
c3:86:38:d6:25:5e:e7:d5:92:e3:22:e1:6c:74:10:
02:31:57:1f:c2:93:3e:f9:a4:72:c2:bb:3a:cc:93:
ef:a5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
93:51:DF:6C:27:98:13:8E:26:40:DC:B6:5B:D7:86:3D:55:88:5C:D8
X509v3 Authority Key Identifier:
keyid:53:16:59:0A:0E:AF:48:DF:2B:1A:E2:3B:9D:55:9E:9C:AC:25:99:7E
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/UxZZCg6vSN8rGuI7nVWenKwlmX4.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/92/f9dd1c-317b-41c1-8fcb-7d9eabee15ac/1/UxZZCg6vSN8rGuI7nVWenKwlmX4.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/92/f9dd1c-317b-41c1-8fcb-7d9eabee15ac/1/UxZZCg6vSN8rGuI7nVWenKwlmX4.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
16:c6:75:ec:b5:3d:2f:e0:7e:05:22:dd:dc:51:cf:d7:94:fd:
a0:18:e0:64:ff:f5:e1:01:a8:c7:3a:ea:61:4b:3c:0b:46:e8:
3f:19:df:dc:a4:5d:67:9c:9a:e4:4a:0d:d7:48:0e:8c:82:25:
9b:29:c9:81:f5:d6:6e:7a:85:a7:5f:68:d7:d7:40:4e:03:38:
7f:79:5b:f4:d3:31:cb:a3:9e:fc:29:ee:24:51:be:71:a2:41:
d5:27:4a:97:45:7c:23:e3:51:48:3a:bd:82:6a:8a:93:7d:3d:
ec:8d:f2:09:e3:ee:51:a5:16:1a:52:61:ea:96:fd:fe:e7:51:
39:45:67:95:96:29:73:29:7f:21:7f:a3:97:39:79:c3:48:9a:
58:41:58:35:87:2b:fa:e9:97:de:cd:32:a7:6d:7a:ad:d9:11:
10:a7:b8:3b:c6:67:21:a3:c2:d3:60:f6:b6:2d:8b:2e:ae:77:
60:12:7b:eb:33:af:4c:6a:b9:9f:70:91:9f:19:dc:7e:4f:be:
99:55:d3:0a:0d:d9:e3:17:6b:97:cc:65:db:64:80:18:7e:19:
0e:09:9c:d3:31:a7:74:59:99:9d:55:1e:d5:cd:7a:d5:2f:17:
56:77:06:be:16:2e:a6:11:03:bf:49:62:8e:86:1b:9a:c6:aa:
e1:d2:2d:5f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue May 13 00:09:32 2025 by rpki-client