Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/a0/d77cf0-905a-4a89-a75e-9f9961dc3851/1/Uuopd4vrKAAYKU4jlcv6AELI94o.mft
File: Uuopd4vrKAAYKU4jlcv6AELI94o.mft (raw, json)
Hash identifier: nMCrYL8V5lE2fwnMSh9acmhun0I9jclIKZOb+9w+o9s=
Subject key identifier: BC:45:A4:96:8A:5D:25:27:D0:21:57:5B:18:6D:C2:DC:C9:DA:10:05
Authority key identifier: 52:EA:29:77:8B:EB:28:00:18:29:4E:23:95:CB:FA:00:42:C8:F7:8A
Certificate issuer: /CN=52ea29778beb280018294e2395cbfa0042c8f78a
Certificate serial: 0196A4658512D5113A58FDCF4E76C55BC4D3
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Uuopd4vrKAAYKU4jlcv6AELI94o.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/a0/d77cf0-905a-4a89-a75e-9f9961dc3851/1/Uuopd4vrKAAYKU4jlcv6AELI94o.mft
Manifest number: 074F
Signing time: Tue 06 May 2025 07:00:38 +0000
Manifest this update: Tue 06 May 2025 07:00:38 +0000
Manifest next update: Wed 07 May 2025 07:00:38 +0000
Files and hashes: 1: Uuopd4vrKAAYKU4jlcv6AELI94o.crl (hash: ThfKvm/y8dIv1Q3FtFWHX/xdI9xilAVwyl77HcWCB8c=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/a0/d77cf0-905a-4a89-a75e-9f9961dc3851/1/Uuopd4vrKAAYKU4jlcv6AELI94o.crl
rsync://rpki.ripe.net/repository/DEFAULT/a0/d77cf0-905a-4a89-a75e-9f9961dc3851/1/Uuopd4vrKAAYKU4jlcv6AELI94o.mft
rsync://rpki.ripe.net/repository/DEFAULT/Uuopd4vrKAAYKU4jlcv6AELI94o.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 07 May 2025 07:00:38 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:a4:65:85:12:d5:11:3a:58:fd:cf:4e:76:c5:5b:c4:d3
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=52ea29778beb280018294e2395cbfa0042c8f78a
Validity
Not Before: May 6 07:00:38 2025 GMT
Not After : May 7 07:00:38 2025 GMT
Subject: CN=bc45a4968a5d2527d021575b186dc2dcc9da1005
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ef:56:55:ef:84:9a:2c:05:44:72:50:2e:88:86:
bb:4b:53:0b:13:5d:77:2f:aa:a7:7e:5f:38:90:c4:
c6:7b:06:9a:a9:3e:40:c7:ad:1e:79:32:e7:4b:1e:
89:de:90:76:cb:ec:da:54:39:46:a4:43:f9:49:2a:
ec:4d:73:c7:8a:ab:f0:3a:ad:6a:4c:57:fb:b2:2f:
9c:8e:2d:ab:ab:ad:ee:e0:7d:16:49:ba:05:89:12:
d8:60:b1:b6:e8:4c:dd:f8:ce:97:a9:14:3e:13:c6:
04:1a:64:96:a5:5c:bd:ce:89:ba:dc:b3:64:2e:75:
ed:cb:02:0a:0d:da:6c:bf:eb:1e:c5:ec:35:28:13:
18:65:6a:7d:61:cf:34:0d:17:16:06:1d:72:51:38:
a3:2e:50:83:be:6b:5b:6a:2a:4a:ef:c2:ae:78:d3:
4b:9c:ea:c6:dc:c6:a3:7a:df:2a:d2:e1:53:b9:42:
0a:06:2f:d5:92:fc:47:2e:38:08:97:66:37:d6:ad:
66:c2:57:4f:96:3c:b8:4e:aa:a0:b1:f0:0f:93:cf:
c7:77:9c:13:c1:13:a4:0e:e3:aa:4d:78:79:df:9d:
03:9f:a2:af:7c:ef:d3:f9:f3:ca:98:c6:32:88:bd:
7a:ab:e6:f8:03:e9:05:90:be:bf:ae:79:a5:90:7e:
db:c7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
BC:45:A4:96:8A:5D:25:27:D0:21:57:5B:18:6D:C2:DC:C9:DA:10:05
X509v3 Authority Key Identifier:
keyid:52:EA:29:77:8B:EB:28:00:18:29:4E:23:95:CB:FA:00:42:C8:F7:8A
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Uuopd4vrKAAYKU4jlcv6AELI94o.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a0/d77cf0-905a-4a89-a75e-9f9961dc3851/1/Uuopd4vrKAAYKU4jlcv6AELI94o.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/a0/d77cf0-905a-4a89-a75e-9f9961dc3851/1/Uuopd4vrKAAYKU4jlcv6AELI94o.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
77:f1:91:ce:7c:3f:02:5e:a7:24:f1:f0:cd:68:61:32:90:d3:
94:ac:00:08:83:dd:6c:27:1e:fc:d1:9d:f7:d9:ee:9c:91:4f:
ed:69:89:90:d0:3d:13:16:32:53:3e:43:0e:c5:28:8a:f3:d0:
15:54:d8:48:1e:67:e4:8d:3c:e2:89:2c:aa:ac:ff:7c:c1:ee:
f6:c0:e1:2c:ca:90:4f:62:ad:6c:b4:c2:fd:a5:62:11:86:ef:
2e:e2:28:3f:6a:b1:16:72:e1:af:81:eb:d6:fe:5e:14:04:41:
4c:20:9c:21:b7:1e:96:27:1f:43:d1:c3:78:20:2f:fe:ae:71:
a2:74:f4:52:b2:d2:82:2a:8d:a7:f1:77:aa:35:fd:c4:84:67:
77:f3:d8:d1:11:75:08:b1:05:cb:7c:ae:24:a1:6a:63:e4:b4:
06:6f:a2:56:5d:a1:d5:14:00:e6:93:45:62:3a:91:89:bb:a2:
f1:7a:d4:bd:c4:50:bf:88:00:48:dc:49:e7:46:60:c7:62:12:
7c:82:e7:33:3e:f0:7e:69:0a:4c:3c:e6:93:22:15:2d:29:3c:
83:cb:43:5f:12:86:7d:d0:b7:a9:78:3d:78:77:82:9b:b1:dd:
10:8c:90:d6:b2:60:fd:aa:f3:4f:6e:f9:7f:ff:70:cd:e8:19:
22:23:74:bc
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue May 6 16:09:36 2025 by rpki-client