Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ba/c9619d-1b3b-49db-89c2-a70bc30a33c3/1/RE_UFLu7UMn_tejPBmVPeftYdsw.mft
File: RE_UFLu7UMn_tejPBmVPeftYdsw.mft (raw, json)
Hash identifier: K652rn7/tp0T7Ggs8ii1os4I4q7ZwwPT7gJ4dP8xFes=
Subject key identifier: 14:2D:41:9F:54:2C:CA:7F:38:A9:AF:91:D3:F3:1A:05:CF:EF:2B:A4
Authority key identifier: 44:4F:D4:14:BB:BB:50:C9:FF:B5:E8:CF:06:65:4F:79:FB:58:76:CC
Certificate issuer: /CN=444fd414bbbb50c9ffb5e8cf06654f79fb5876cc
Certificate serial: 0196ACFAC7C2D500AE080985FBB13C21AF60
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/RE_UFLu7UMn_tejPBmVPeftYdsw.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ba/c9619d-1b3b-49db-89c2-a70bc30a33c3/1/RE_UFLu7UMn_tejPBmVPeftYdsw.mft
Manifest number: 0211
Signing time: Wed 07 May 2025 23:00:38 +0000
Manifest this update: Wed 07 May 2025 23:00:38 +0000
Manifest next update: Thu 08 May 2025 23:00:38 +0000
Files and hashes: 1: RE_UFLu7UMn_tejPBmVPeftYdsw.crl (hash: RT6dl0hDLBSkRIBYChaIgN07wQt6H6GU38Z9GwVOppU=)
2: epx5ZtV1DmNUOssTw71RpRlPSQg.roa (hash: Mn6EWImg2YFEUwlk4S0gZpe8CjG2vGuON1o03HQf5Lw=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/ba/c9619d-1b3b-49db-89c2-a70bc30a33c3/1/RE_UFLu7UMn_tejPBmVPeftYdsw.crl
rsync://rpki.ripe.net/repository/DEFAULT/ba/c9619d-1b3b-49db-89c2-a70bc30a33c3/1/RE_UFLu7UMn_tejPBmVPeftYdsw.mft
rsync://rpki.ripe.net/repository/DEFAULT/RE_UFLu7UMn_tejPBmVPeftYdsw.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 08 May 2025 20:38:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:ac:fa:c7:c2:d5:00:ae:08:09:85:fb:b1:3c:21:af:60
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=444fd414bbbb50c9ffb5e8cf06654f79fb5876cc
Validity
Not Before: May 7 23:00:38 2025 GMT
Not After : May 8 23:00:38 2025 GMT
Subject: CN=142d419f542cca7f38a9af91d3f31a05cfef2ba4
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c4:45:49:12:d3:bf:d2:4c:8a:79:4b:60:61:7f:
f7:ad:22:02:57:9b:bf:c2:0b:b3:b7:ca:08:1d:87:
9b:66:2d:9f:de:9a:01:81:66:f9:88:2e:c4:34:1f:
bb:32:bd:1c:a3:2f:7b:c6:56:2a:25:0c:d6:a9:f8:
dc:8e:0e:ba:8b:97:24:73:59:c7:4d:1c:3a:2a:04:
47:34:64:d4:8a:0f:25:1d:a8:29:15:2b:d6:8d:f8:
98:4d:d0:e5:b8:4f:ac:21:d6:c5:97:dc:e1:c1:27:
a5:bb:0f:70:af:c4:f6:b2:76:1c:1d:c2:d0:b8:bc:
7a:bb:20:01:2d:ca:52:35:1b:5c:9f:c6:94:c0:8c:
bc:2f:5a:b3:fd:08:d3:aa:60:b5:ff:be:f6:82:b9:
f4:e4:43:33:c2:d4:c0:4c:7d:da:b2:0a:86:6f:9f:
7e:36:fe:83:36:91:c7:7f:07:6c:23:f8:59:33:e8:
b0:eb:14:48:a2:e9:df:1c:95:b1:0f:75:b2:f5:5e:
93:1e:af:8f:33:fb:2e:ef:08:89:fb:08:51:64:18:
73:06:6c:92:70:b3:25:48:c7:87:c5:7e:1f:00:14:
80:e2:42:1d:0e:e7:a1:e0:71:5f:97:c1:c2:39:06:
c8:d9:2a:d5:ab:ec:44:b5:d8:13:72:92:b5:32:98:
35:e1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
14:2D:41:9F:54:2C:CA:7F:38:A9:AF:91:D3:F3:1A:05:CF:EF:2B:A4
X509v3 Authority Key Identifier:
keyid:44:4F:D4:14:BB:BB:50:C9:FF:B5:E8:CF:06:65:4F:79:FB:58:76:CC
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/RE_UFLu7UMn_tejPBmVPeftYdsw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ba/c9619d-1b3b-49db-89c2-a70bc30a33c3/1/RE_UFLu7UMn_tejPBmVPeftYdsw.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/ba/c9619d-1b3b-49db-89c2-a70bc30a33c3/1/RE_UFLu7UMn_tejPBmVPeftYdsw.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
26:71:99:ff:53:48:99:4a:82:ce:91:f4:a4:f0:76:1d:84:40:
73:85:6e:b5:4c:59:5a:80:2c:4a:28:86:3e:44:f6:3e:44:e5:
38:fb:4a:23:78:b5:f3:3e:a3:70:51:8e:4e:28:51:d8:ee:bf:
85:5b:01:ff:f3:33:d2:18:e5:6e:3a:93:68:45:d2:ec:f9:9a:
58:ca:7d:8f:5c:f5:ab:71:91:15:16:99:7e:d4:e3:1d:36:00:
c6:1e:33:61:66:9e:28:5e:0e:19:a2:2c:76:0b:6b:90:e6:d0:
34:13:86:37:04:b7:96:1a:c5:1a:d2:b0:40:94:16:30:80:4a:
c3:19:94:03:4d:f5:c7:bc:da:e3:b7:a4:61:1b:62:ba:39:43:
16:b3:ac:b2:9b:70:d8:01:cb:77:75:0d:ee:94:90:45:90:01:
9a:43:5f:ca:dd:0b:74:e9:e4:c5:fc:a5:23:0a:37:fc:35:3f:
5d:96:90:c9:3a:0f:42:ed:18:10:38:69:fb:63:41:08:fd:53:
1d:0f:82:ba:5e:04:08:16:af:a9:39:32:f0:1e:1f:6b:23:f4:
75:7e:77:5c:5b:ed:2d:04:86:35:7d:93:c8:16:27:19:17:6d:
0c:9f:c5:eb:db:29:5b:cb:ef:5b:f6:f4:62:86:20:a0:5a:83:
83:9f:13:a5
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu May 8 01:02:35 2025 by rpki-client