Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/a9/8d58e4-88f6-4aed-ba43-7ae6359d3110/1/UxKdBI3rLgv2InE5mgkLkBAWCzk.mft
File: UxKdBI3rLgv2InE5mgkLkBAWCzk.mft (raw, json)
Hash identifier: sKMOn/G+9tSH/w5uGa+z6KHdZ4E14qfmab7ikSNS9Ww=
Subject key identifier: 95:50:50:8A:0F:6F:1D:6A:72:09:BB:D1:EC:79:92:93:B6:78:5F:C7
Authority key identifier: 53:12:9D:04:8D:EB:2E:0B:F6:22:71:39:9A:09:0B:90:10:16:0B:39
Certificate issuer: /CN=53129d048deb2e0bf62271399a090b9010160b39
Certificate serial: 0196B7108C478E7105FAC5223AD988CCBC4F
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/UxKdBI3rLgv2InE5mgkLkBAWCzk.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/a9/8d58e4-88f6-4aed-ba43-7ae6359d3110/1/UxKdBI3rLgv2InE5mgkLkBAWCzk.mft
Manifest number: 0502
Signing time: Fri 09 May 2025 22:00:36 +0000
Manifest this update: Fri 09 May 2025 22:00:36 +0000
Manifest next update: Sat 10 May 2025 22:00:36 +0000
Files and hashes: 1: UxKdBI3rLgv2InE5mgkLkBAWCzk.crl (hash: J2ehdKe7immWH7GULmaxxjCS7ZZOoQxi9e+VlvQS7jc=)
2: iV0Wv5wAAAuwTZ0gWPXcPSbfCnc.roa (hash: LNWcJcYvVHSoTAScNXiZdlhb/qYL7H8xTSxcF3h+E20=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/a9/8d58e4-88f6-4aed-ba43-7ae6359d3110/1/UxKdBI3rLgv2InE5mgkLkBAWCzk.crl
rsync://rpki.ripe.net/repository/DEFAULT/a9/8d58e4-88f6-4aed-ba43-7ae6359d3110/1/UxKdBI3rLgv2InE5mgkLkBAWCzk.mft
rsync://rpki.ripe.net/repository/DEFAULT/UxKdBI3rLgv2InE5mgkLkBAWCzk.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 10 May 2025 22:00:36 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:b7:10:8c:47:8e:71:05:fa:c5:22:3a:d9:88:cc:bc:4f
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=53129d048deb2e0bf62271399a090b9010160b39
Validity
Not Before: May 9 22:00:36 2025 GMT
Not After : May 10 22:00:36 2025 GMT
Subject: CN=9550508a0f6f1d6a7209bbd1ec799293b6785fc7
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c1:1f:64:d2:d7:0e:34:17:af:9d:ac:14:98:e2:
51:b7:aa:ad:cd:66:be:3f:3d:4f:bd:15:c8:dc:c1:
f3:22:24:0a:d5:d8:a3:32:c8:f1:90:50:53:42:7a:
fd:b8:8e:33:b0:5c:56:e2:3d:ef:07:fc:09:80:61:
45:bb:0c:79:7e:80:e4:a8:f5:85:c2:09:e2:9f:8a:
8f:e3:8f:3b:11:26:5c:2f:01:52:33:32:0f:89:fd:
15:03:db:cf:3f:3e:7e:27:2e:30:34:7e:54:05:be:
03:ac:80:4f:a7:af:44:42:73:b3:b3:41:ab:17:73:
b6:29:92:ba:36:92:a3:f8:e9:25:ed:5b:99:4e:e9:
78:52:29:70:87:1c:29:5d:55:78:cc:ee:db:c7:82:
08:02:0a:45:5a:85:72:3b:b5:8d:cb:e8:16:9b:56:
42:6b:8b:8f:c7:b3:01:6e:33:ef:40:9c:63:fe:ad:
5a:42:c3:0b:60:af:29:32:74:aa:70:8d:6c:41:c3:
5f:c9:f1:90:ed:17:7e:66:69:06:81:bf:0b:f9:c7:
65:d6:9d:b6:fa:75:22:92:79:84:88:16:de:60:91:
eb:62:97:53:b6:4b:dc:ad:ce:3d:81:3a:0b:5f:73:
fc:7b:dc:d8:7a:64:58:2a:9d:20:76:ba:96:70:67:
a3:0d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
95:50:50:8A:0F:6F:1D:6A:72:09:BB:D1:EC:79:92:93:B6:78:5F:C7
X509v3 Authority Key Identifier:
keyid:53:12:9D:04:8D:EB:2E:0B:F6:22:71:39:9A:09:0B:90:10:16:0B:39
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/UxKdBI3rLgv2InE5mgkLkBAWCzk.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a9/8d58e4-88f6-4aed-ba43-7ae6359d3110/1/UxKdBI3rLgv2InE5mgkLkBAWCzk.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/a9/8d58e4-88f6-4aed-ba43-7ae6359d3110/1/UxKdBI3rLgv2InE5mgkLkBAWCzk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
08:8b:5f:6e:39:37:be:79:b2:62:32:b8:1a:71:f3:8e:ea:d5:
c1:bf:03:88:97:5d:15:47:c0:3c:25:4e:8d:13:fc:ab:6b:ba:
82:55:c9:9f:40:2e:d0:5a:14:a5:43:b2:5b:8c:8a:78:e1:30:
ac:9c:cb:b4:76:e6:55:de:59:7a:f4:a2:fe:05:6c:71:d5:97:
13:b5:bc:56:4c:3e:f3:f2:97:05:45:b1:f4:0c:a3:53:a4:e4:
aa:4e:4c:66:9e:7d:91:e4:b1:7f:c4:da:f3:e5:20:c0:3e:f0:
83:5a:50:34:5b:f5:75:e2:be:0d:2c:75:2d:37:91:26:7d:65:
8b:07:75:05:f4:3d:20:09:98:d0:00:86:3e:12:1a:f8:6c:d2:
f2:71:b8:d4:ea:47:e5:64:9e:be:f5:48:29:c1:ed:18:9b:0a:
24:c4:09:a8:10:77:26:38:77:96:85:cb:bf:1d:e3:9a:cf:6a:
ff:ff:ff:4b:1d:fb:a0:49:b8:06:3f:35:82:dd:a7:6b:4a:d6:
ba:5f:d4:6c:bc:a4:c9:69:85:86:f3:dc:07:da:35:aa:26:09:
79:7c:2a:ac:6a:e4:d7:80:c9:f7:f8:8a:7d:25:54:8b:43:21:
98:54:fc:82:63:85:2b:6d:d2:10:f7:eb:94:e1:82:56:f7:bd:
23:90:b6:7a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat May 10 07:23:58 2025 by rpki-client