Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/a6/f12d80-deb6-4bf5-853c-d5da858e15fb/1/UAm8siUutkaQLMv9TJhssMK5E5g.mft
File: UAm8siUutkaQLMv9TJhssMK5E5g.mft (raw, json)
Hash identifier: wW2FgzVP911A1AZ0rwd50U1mOY0czc3X2EZrKo5AH8Q=
Subject key identifier: 43:17:EA:22:19:51:F3:9A:34:53:49:E5:F9:76:8E:D5:8E:6F:0A:0B
Authority key identifier: 50:09:BC:B2:25:2E:B6:46:90:2C:CB:FD:4C:98:6C:B0:C2:B9:13:98
Certificate issuer: /CN=5009bcb2252eb646902ccbfd4c986cb0c2b91398
Certificate serial: 0196A54193E2A0D29D72BCD501F8D0A69B7C
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/UAm8siUutkaQLMv9TJhssMK5E5g.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/a6/f12d80-deb6-4bf5-853c-d5da858e15fb/1/UAm8siUutkaQLMv9TJhssMK5E5g.mft
Manifest number: 34
Signing time: Tue 06 May 2025 11:01:00 +0000
Manifest this update: Tue 06 May 2025 11:01:00 +0000
Manifest next update: Wed 07 May 2025 11:01:00 +0000
Files and hashes: 1: 2LFR55bzEg917ZVxswXc708avQY.roa (hash: 09G2R5A6VRyPInwdzmXjWMU+vVVMHeHCt8VJGVFJ0ks=)
2: UAm8siUutkaQLMv9TJhssMK5E5g.crl (hash: IHf4YtKlwj0iAVCEcCuaENqdRKcTb4jNW02l9tmtYy8=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/a6/f12d80-deb6-4bf5-853c-d5da858e15fb/1/UAm8siUutkaQLMv9TJhssMK5E5g.crl
rsync://rpki.ripe.net/repository/DEFAULT/a6/f12d80-deb6-4bf5-853c-d5da858e15fb/1/UAm8siUutkaQLMv9TJhssMK5E5g.mft
rsync://rpki.ripe.net/repository/DEFAULT/UAm8siUutkaQLMv9TJhssMK5E5g.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 07 May 2025 04:00:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:a5:41:93:e2:a0:d2:9d:72:bc:d5:01:f8:d0:a6:9b:7c
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=5009bcb2252eb646902ccbfd4c986cb0c2b91398
Validity
Not Before: May 6 11:01:00 2025 GMT
Not After : May 7 11:01:00 2025 GMT
Subject: CN=4317ea221951f39a345349e5f9768ed58e6f0a0b
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:db:5f:36:b5:c6:ea:c2:96:02:08:a4:37:61:f4:
69:8f:10:c5:4c:33:24:5d:9f:98:17:48:ed:ce:50:
6e:3c:dd:1d:77:f6:c1:0a:5b:9f:d0:68:df:68:a8:
a8:51:11:9d:f2:da:7a:3b:36:35:da:16:f9:8d:65:
2b:fd:cd:25:1e:d9:61:ea:cc:fe:92:17:28:33:bb:
17:d1:fa:26:4f:d8:30:f5:88:b6:c3:25:8f:90:42:
89:06:f9:64:b8:6a:5a:41:90:b8:2f:da:4a:8d:14:
31:ce:38:bb:0d:5e:51:6d:ea:9d:8b:18:5f:54:36:
59:24:51:28:39:82:3f:ca:e0:b2:71:78:d7:98:e3:
a3:f3:ff:c9:f3:43:9d:8c:f2:71:a8:0f:0f:73:0d:
71:81:67:94:f1:57:f1:a1:69:19:b1:08:b6:98:83:
e8:7a:78:b4:3a:4d:9a:bb:82:6a:d3:c9:fc:cd:30:
1b:cc:31:52:a9:50:86:d0:36:8b:ee:0c:0b:97:8d:
e5:93:f8:d5:b9:56:a2:5f:af:70:20:5b:c9:40:97:
56:8b:5e:fb:8c:a0:ad:94:b0:fc:4a:6f:d1:9f:8d:
fa:75:17:87:74:78:ca:1d:ee:a3:fd:88:b1:88:86:
54:c4:c1:47:94:f9:84:e7:da:a4:f0:a6:de:3a:4e:
58:1f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
43:17:EA:22:19:51:F3:9A:34:53:49:E5:F9:76:8E:D5:8E:6F:0A:0B
X509v3 Authority Key Identifier:
keyid:50:09:BC:B2:25:2E:B6:46:90:2C:CB:FD:4C:98:6C:B0:C2:B9:13:98
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/UAm8siUutkaQLMv9TJhssMK5E5g.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a6/f12d80-deb6-4bf5-853c-d5da858e15fb/1/UAm8siUutkaQLMv9TJhssMK5E5g.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/a6/f12d80-deb6-4bf5-853c-d5da858e15fb/1/UAm8siUutkaQLMv9TJhssMK5E5g.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
b9:1e:da:d7:7d:a8:9f:bf:f1:ea:0a:0f:52:30:d6:2d:bb:f8:
95:4c:8e:86:40:01:d9:b8:40:8e:8d:fe:39:f2:70:b7:c6:0c:
6d:e2:7c:fa:23:dc:76:76:ae:84:d9:26:7e:b5:b7:45:c5:09:
e5:24:28:37:3d:5b:e7:b5:fe:44:df:65:ae:d7:6f:a2:95:47:
bf:da:82:56:d2:69:c0:7a:a5:e9:d5:13:8a:21:a0:95:19:bf:
80:bd:b5:e6:47:8c:8e:b7:5d:c2:03:db:97:0a:bf:db:d2:00:
07:01:5e:25:f1:c5:6e:ae:77:76:9a:5f:b7:80:5f:67:4c:e5:
fe:f7:b3:4c:01:fc:37:eb:64:af:e1:c8:f5:e9:57:42:c8:42:
42:df:de:f4:9a:11:33:00:1c:1c:33:63:0c:fd:ab:f8:95:c6:
d9:1f:d8:67:8f:3e:1c:fb:8f:c2:0c:ec:01:9c:68:d7:02:ab:
da:59:57:82:6c:c6:78:8f:de:5b:2f:62:2d:59:db:e6:de:47:
f0:15:ad:1a:dd:01:12:15:74:2e:fc:fa:80:19:e4:15:6b:e4:
77:b2:73:b9:3b:f6:73:b2:06:1d:f4:b5:b3:d2:45:38:ff:28:
a1:f2:71:5e:d8:35:d6:f8:b6:f7:78:02:2d:2e:68:9b:52:00:
a9:07:88:d6
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue May 6 14:00:36 2025 by rpki-client