Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b4/a2fc18-534b-4454-9bd1-fe6bb049337d/1/UFrRf0xiDVjUU9X218kjP84SZJk.mft
File: UFrRf0xiDVjUU9X218kjP84SZJk.mft (raw, json)
Hash identifier: wkNNdzJG+74Cp5I1sBkOtxIz4SwMNUa7VYrXP8HBDNM=
Subject key identifier: 86:5E:DF:46:8D:46:B8:AC:6E:4F:E0:37:85:1F:4D:1D:51:52:E1:12
Authority key identifier: 50:5A:D1:7F:4C:62:0D:58:D4:53:D5:F6:D7:C9:23:3F:CE:12:64:99
Certificate issuer: /CN=505ad17f4c620d58d453d5f6d7c9233fce126499
Certificate serial: 0196B40F59A1A0F6AA2E0893D067AD75499F
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/UFrRf0xiDVjUU9X218kjP84SZJk.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/b4/a2fc18-534b-4454-9bd1-fe6bb049337d/1/UFrRf0xiDVjUU9X218kjP84SZJk.mft
Manifest number: 05B9
Signing time: Fri 09 May 2025 08:00:26 +0000
Manifest this update: Fri 09 May 2025 08:00:26 +0000
Manifest next update: Sat 10 May 2025 08:00:26 +0000
Files and hashes: 1: UFrRf0xiDVjUU9X218kjP84SZJk.crl (hash: 69qnn1XizHhzI3Umxz4ulGOw4LMwx6iQmz4BtlQHJPk=)
2: z0gK7j1eTNv7dmhYM5fYU83PlcI.roa (hash: F9PSIbqhKjRh7i/sDNMQoDtTGb+P8gRfs9+wZwKnUuY=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/b4/a2fc18-534b-4454-9bd1-fe6bb049337d/1/UFrRf0xiDVjUU9X218kjP84SZJk.crl
rsync://rpki.ripe.net/repository/DEFAULT/b4/a2fc18-534b-4454-9bd1-fe6bb049337d/1/UFrRf0xiDVjUU9X218kjP84SZJk.mft
rsync://rpki.ripe.net/repository/DEFAULT/UFrRf0xiDVjUU9X218kjP84SZJk.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 10 May 2025 08:00:26 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:b4:0f:59:a1:a0:f6:aa:2e:08:93:d0:67:ad:75:49:9f
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=505ad17f4c620d58d453d5f6d7c9233fce126499
Validity
Not Before: May 9 08:00:26 2025 GMT
Not After : May 10 08:00:26 2025 GMT
Subject: CN=865edf468d46b8ac6e4fe037851f4d1d5152e112
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c3:28:41:58:d3:42:1e:59:a5:f6:f0:ed:2c:9f:
83:45:76:ee:52:07:82:0b:3e:ba:17:39:88:9b:ba:
71:d8:be:5f:9a:fe:ff:75:11:89:18:b6:59:7f:24:
34:8b:58:55:6d:02:48:46:ff:62:7b:7c:2c:64:3c:
cb:b5:83:e1:54:3e:8d:4c:e9:4b:d3:d5:5f:a5:24:
f5:18:30:22:13:36:df:b6:83:33:c8:dc:46:12:f3:
88:b5:6e:29:02:fe:b9:bb:f7:41:76:bd:15:df:4b:
e4:f6:26:cd:c0:c9:b5:83:60:70:9a:cb:97:b7:57:
18:62:ca:d8:8e:6a:d2:ed:04:74:d8:f9:fa:0e:f1:
eb:17:e8:b3:05:fd:aa:e2:ae:f6:cb:5b:e8:29:15:
46:d1:9c:2e:f6:44:3d:4a:3b:16:9e:99:c5:14:7a:
d3:7c:3c:0e:85:07:6c:a2:bd:ea:04:d7:e1:c7:be:
b4:10:bd:c0:01:d3:f4:94:99:86:5b:d4:8b:6f:59:
77:ef:e3:9e:12:44:85:a8:30:a1:e8:8e:31:94:62:
99:5a:70:12:42:0f:e9:84:bc:4e:f2:4b:52:2c:10:
fb:84:45:ca:a6:ab:ce:81:9d:46:dc:a6:36:d6:78:
b8:b0:aa:dd:79:b4:31:49:72:df:19:e8:2c:98:89:
4f:ad
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
86:5E:DF:46:8D:46:B8:AC:6E:4F:E0:37:85:1F:4D:1D:51:52:E1:12
X509v3 Authority Key Identifier:
keyid:50:5A:D1:7F:4C:62:0D:58:D4:53:D5:F6:D7:C9:23:3F:CE:12:64:99
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/UFrRf0xiDVjUU9X218kjP84SZJk.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b4/a2fc18-534b-4454-9bd1-fe6bb049337d/1/UFrRf0xiDVjUU9X218kjP84SZJk.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/b4/a2fc18-534b-4454-9bd1-fe6bb049337d/1/UFrRf0xiDVjUU9X218kjP84SZJk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
8b:62:49:55:c4:ec:b5:ae:88:c2:6f:24:90:db:a6:24:3e:72:
2a:8b:70:03:f6:c0:18:59:0b:65:a7:ce:5c:6c:94:64:fd:52:
18:52:a9:99:b9:29:67:37:88:8c:d1:b5:e2:52:17:44:41:51:
08:71:ac:37:3e:3c:fa:0e:df:72:df:a0:68:85:67:7f:2b:39:
f9:b6:b0:ec:ab:d1:97:75:ca:d1:74:42:c5:67:49:bb:8a:33:
b2:c0:4a:70:2e:4f:36:b9:c4:93:ea:0b:ef:01:68:fc:b4:87:
e0:ca:e2:89:4f:15:7d:09:80:a3:45:00:eb:1e:01:92:af:b8:
ad:65:30:89:cd:f8:4c:3d:fa:cd:5d:38:b4:aa:61:59:5b:f6:
ba:58:9a:c3:21:8e:76:72:7f:87:1d:64:77:a9:da:c7:57:f0:
74:c0:32:c3:77:44:df:da:8e:2b:a4:07:44:79:81:bb:14:e4:
79:e2:ef:e3:8f:c7:10:23:42:a6:4c:f0:64:b6:cd:f7:bb:7b:
64:62:e8:62:14:65:2c:ed:80:fe:85:ae:17:48:41:ca:57:50:
3a:cd:4b:92:ab:23:b0:83:76:c0:cb:96:53:42:06:44:9b:ba:
95:7e:24:5f:d2:38:81:09:85:bc:10:48:70:fe:dc:c6:6f:6e:
39:60:e6:1f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri May 9 12:38:26 2025 by rpki-client