Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/af/45d284-a373-4552-bc8a-743112b0e771/1/ULsVjSnjdQDVw6JdraFJsqUD9qU.mft
File: ULsVjSnjdQDVw6JdraFJsqUD9qU.mft (raw, json)
Hash identifier: ZGCedwjGjADolYYTZ6785sLfi6ZC+1ov1cLuVdY0xA0=
Subject key identifier: F6:C6:AC:F0:16:57:23:81:31:9B:42:6C:68:AC:A7:1F:D7:02:56:D3
Authority key identifier: 50:BB:15:8D:29:E3:75:00:D5:C3:A2:5D:AD:A1:49:B2:A5:03:F6:A5
Certificate issuer: /CN=50bb158d29e37500d5c3a25dada149b2a503f6a5
Certificate serial: 0196C2DE00ECB7E5211BDD98DC39077100B1
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/ULsVjSnjdQDVw6JdraFJsqUD9qU.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/af/45d284-a373-4552-bc8a-743112b0e771/1/ULsVjSnjdQDVw6JdraFJsqUD9qU.mft
Manifest number: 0427
Signing time: Mon 12 May 2025 05:00:51 +0000
Manifest this update: Mon 12 May 2025 05:00:51 +0000
Manifest next update: Tue 13 May 2025 05:00:51 +0000
Files and hashes: 1: FsCfl3c4Ltiv9Zcfet8sFDK261w.roa (hash: 0KkSs+dGUlPIvwsEqtO4YX2lHrkRDey49/pmSeBkBNg=)
2: ULsVjSnjdQDVw6JdraFJsqUD9qU.crl (hash: WXdoKx+wyXqk64TorWfVWeCkMYpoE0VQdu20+9rQDNk=)
3: dMpsd9wlXgD-cspja3jDD1k9bOA.roa (hash: NYHzPamuN1malposZb2BM/eWGsMUpeT5gZWd7cy50qo=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/af/45d284-a373-4552-bc8a-743112b0e771/1/ULsVjSnjdQDVw6JdraFJsqUD9qU.crl
rsync://rpki.ripe.net/repository/DEFAULT/af/45d284-a373-4552-bc8a-743112b0e771/1/ULsVjSnjdQDVw6JdraFJsqUD9qU.mft
rsync://rpki.ripe.net/repository/DEFAULT/ULsVjSnjdQDVw6JdraFJsqUD9qU.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 13 May 2025 05:00:51 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:c2:de:00:ec:b7:e5:21:1b:dd:98:dc:39:07:71:00:b1
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=50bb158d29e37500d5c3a25dada149b2a503f6a5
Validity
Not Before: May 12 05:00:51 2025 GMT
Not After : May 13 05:00:51 2025 GMT
Subject: CN=f6c6acf016572381319b426c68aca71fd70256d3
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b3:f8:19:3d:fb:65:f5:fa:19:b3:d3:b5:9e:1e:
1a:e4:7f:f2:2d:b0:99:fa:be:89:45:bc:f9:71:16:
22:0a:af:0c:4b:00:c3:c7:3e:bc:c5:54:54:f9:05:
ad:75:ff:6f:f5:7b:ef:05:09:66:90:67:2b:ed:52:
15:50:18:d2:41:32:d0:8d:58:68:55:70:bb:cb:38:
56:8b:66:e1:3f:8b:47:57:9c:79:60:01:62:d8:49:
de:6c:2a:93:40:89:ad:36:e6:7c:0f:86:04:9a:c4:
7d:6b:40:60:cb:ca:bd:36:a0:55:6b:fb:e0:d6:c0:
d2:83:32:b2:01:46:e3:1a:c9:ed:fa:bb:e9:aa:2a:
dd:9f:64:c9:6f:eb:0d:f0:11:5f:be:cc:ad:f2:8a:
3c:34:20:54:c3:18:f2:4e:0d:86:f4:a7:48:34:3a:
cf:b0:7d:37:df:8b:08:bf:0f:06:db:a1:8c:7a:16:
c6:2b:17:bc:e2:62:5b:a3:d2:05:1a:1e:9c:65:b7:
84:b9:2d:20:0c:9c:eb:07:b0:55:16:d0:15:ec:cc:
60:63:61:29:b4:37:b8:60:99:6a:5d:e2:bd:e9:a7:
09:4a:b6:af:53:e7:7e:4d:3c:b4:45:19:93:66:5a:
ae:6f:87:0e:b3:58:4a:02:5f:fd:19:26:dd:6a:fd:
0e:b1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F6:C6:AC:F0:16:57:23:81:31:9B:42:6C:68:AC:A7:1F:D7:02:56:D3
X509v3 Authority Key Identifier:
keyid:50:BB:15:8D:29:E3:75:00:D5:C3:A2:5D:AD:A1:49:B2:A5:03:F6:A5
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ULsVjSnjdQDVw6JdraFJsqUD9qU.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/af/45d284-a373-4552-bc8a-743112b0e771/1/ULsVjSnjdQDVw6JdraFJsqUD9qU.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/af/45d284-a373-4552-bc8a-743112b0e771/1/ULsVjSnjdQDVw6JdraFJsqUD9qU.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
1b:c1:9e:52:34:43:41:6c:fa:33:87:6f:72:0c:6a:4e:a3:99:
31:48:8c:db:f8:85:e0:a1:b9:2b:1a:c8:25:63:cd:2c:46:1a:
97:df:f4:8b:75:02:13:22:0d:21:9b:e3:c2:9e:0d:4d:ad:7f:
97:8e:7e:f5:96:cc:42:b2:f9:99:f3:26:9e:df:d8:93:e9:c9:
c2:5f:3b:19:12:8e:3f:06:da:b4:d8:0e:8b:f6:51:35:c7:df:
fc:36:60:49:f3:2a:27:fc:d3:d7:f5:3d:d2:c9:e1:6f:4e:91:
1c:68:0a:ea:d7:f1:f4:b7:3b:63:e2:65:73:3e:1a:11:14:f2:
7d:50:fe:39:e1:98:d3:bb:84:7e:9e:b4:de:2f:ef:b2:ff:60:
3a:28:d3:51:04:fc:6f:6c:05:a0:3c:0d:13:64:b7:41:6b:31:
78:cd:6c:86:50:9c:95:be:f2:3a:08:df:a1:66:51:c5:de:de:
84:fa:0b:60:87:b8:8d:cb:3b:17:7e:95:62:d1:32:a0:3e:2c:
be:72:e2:48:5f:c6:8e:d9:6d:f5:d6:ef:a1:88:d6:40:3b:4d:
d8:cb:ed:ca:8a:31:1d:e5:27:93:6b:df:73:79:0f:03:5e:f0:
f6:dd:f1:86:29:cd:04:44:f8:19:61:ad:18:1c:0f:67:8c:ad:
32:98:91:72
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon May 12 13:26:54 2025 by rpki-client