Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ba/ef98e4-01e5-4b88-bbf1-0483d1c01b25/1/UlngAMmR948kP95ZgM1c72SUCeY.mft
File: UlngAMmR948kP95ZgM1c72SUCeY.mft (raw, json)
Hash identifier: P4ZbKOgUy8xvyjD/QyxSBCXmKpUZnOvX6yii92h5b5g=
Subject key identifier: 01:24:B9:C1:27:5F:A7:22:6B:17:C5:73:DE:BC:2B:68:3F:F7:6F:9E
Authority key identifier: 52:59:E0:00:C9:91:F7:8F:24:3F:DE:59:80:CD:5C:EF:64:94:09:E6
Certificate issuer: /CN=5259e000c991f78f243fde5980cd5cef649409e6
Certificate serial: 0196C15D0C48A82F7E90A0EF03C094BCC04E
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/UlngAMmR948kP95ZgM1c72SUCeY.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ba/ef98e4-01e5-4b88-bbf1-0483d1c01b25/1/UlngAMmR948kP95ZgM1c72SUCeY.mft
Manifest number: 08FD
Signing time: Sun 11 May 2025 22:00:22 +0000
Manifest this update: Sun 11 May 2025 22:00:22 +0000
Manifest next update: Mon 12 May 2025 22:00:22 +0000
Files and hashes: 1: UlngAMmR948kP95ZgM1c72SUCeY.crl (hash: 8ck5NT9UOgpluK8uEqsXEeKAa3QFMrH/pnn4nVVkFbA=)
2: sq5AEY7QJIys2vGMgSgXE7FeRjY.roa (hash: aCGTeZMaEctcz9l1gB+wzw0eDWMxaeU9DQux69bQvFE=)
3: uDBXK8T_CYBhR7j4qUX3KNaOzNA.roa (hash: l69OGXgxbADqBf3n8PsE9PC3wGQv9qukdYrOEUN64Sw=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/ba/ef98e4-01e5-4b88-bbf1-0483d1c01b25/1/UlngAMmR948kP95ZgM1c72SUCeY.crl
rsync://rpki.ripe.net/repository/DEFAULT/ba/ef98e4-01e5-4b88-bbf1-0483d1c01b25/1/UlngAMmR948kP95ZgM1c72SUCeY.mft
rsync://rpki.ripe.net/repository/DEFAULT/UlngAMmR948kP95ZgM1c72SUCeY.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 12 May 2025 16:00:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:c1:5d:0c:48:a8:2f:7e:90:a0:ef:03:c0:94:bc:c0:4e
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=5259e000c991f78f243fde5980cd5cef649409e6
Validity
Not Before: May 11 22:00:22 2025 GMT
Not After : May 12 22:00:22 2025 GMT
Subject: CN=0124b9c1275fa7226b17c573debc2b683ff76f9e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b9:56:5e:82:73:2f:fa:23:e4:dc:45:28:34:bc:
7d:93:c1:8b:50:f7:0d:77:d4:c5:5d:fc:09:a4:21:
b8:81:4a:6f:aa:de:d8:cd:fc:11:6f:fd:09:22:6c:
06:70:d7:31:8b:79:4c:b8:bd:a3:dc:dd:75:83:01:
6a:a7:1e:c2:ef:b0:ee:fe:df:52:52:b3:14:dd:20:
34:06:ad:13:f0:44:67:c3:e0:d0:d0:d7:29:8d:d3:
e1:ba:d2:e0:83:0f:03:f9:e2:62:58:f8:3c:20:a2:
8d:14:0e:92:76:ba:a0:45:97:53:13:2c:9a:4d:fe:
0c:35:bb:1e:83:92:b2:e0:78:6c:a1:16:19:51:9c:
83:dc:fb:cd:c5:1d:e3:f1:ac:9a:e3:59:ff:c8:31:
95:46:9c:ae:50:f4:62:73:47:78:be:e6:37:ac:13:
c4:7a:63:f9:3b:d4:f5:0f:00:51:fa:3d:69:94:4f:
61:cf:4f:9c:e3:1a:12:26:26:16:38:ac:45:3d:f9:
62:43:f5:bb:a4:90:af:ab:04:73:81:d4:ce:ac:0a:
23:ef:62:c4:3c:1c:ce:ab:b4:c4:06:0c:ad:3d:8d:
b4:6e:5e:a9:e5:d9:14:e7:6e:5a:88:fd:0e:ae:cf:
2c:4a:0c:16:65:30:a9:eb:1f:96:96:f3:30:e7:17:
3e:af
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
01:24:B9:C1:27:5F:A7:22:6B:17:C5:73:DE:BC:2B:68:3F:F7:6F:9E
X509v3 Authority Key Identifier:
keyid:52:59:E0:00:C9:91:F7:8F:24:3F:DE:59:80:CD:5C:EF:64:94:09:E6
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/UlngAMmR948kP95ZgM1c72SUCeY.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ba/ef98e4-01e5-4b88-bbf1-0483d1c01b25/1/UlngAMmR948kP95ZgM1c72SUCeY.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/ba/ef98e4-01e5-4b88-bbf1-0483d1c01b25/1/UlngAMmR948kP95ZgM1c72SUCeY.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
ad:e6:81:05:8e:a6:8e:39:77:b0:a4:64:f0:65:52:1d:cc:39:
5b:0c:33:e4:8b:96:e1:01:bd:92:d8:b6:a9:ac:ba:a0:59:5a:
87:22:91:89:ce:25:c7:53:1e:c3:52:15:ab:29:fa:17:6e:86:
b5:e9:99:53:91:bb:c2:d2:5d:c1:2f:e5:a4:cc:48:bb:82:8c:
f1:49:2e:18:f8:6c:fc:35:35:00:dd:6d:c4:19:bc:b7:f8:e0:
79:d5:84:48:5e:18:45:0b:d8:0e:a8:5a:59:65:83:d9:7f:a7:
3c:76:03:6d:4f:97:18:76:f0:cf:5c:99:f6:d5:b8:37:ee:b9:
85:e4:06:a0:2d:7a:c5:cf:fa:0d:0c:95:65:fc:e4:35:10:5e:
6f:d6:e7:4c:a2:6c:12:9b:0d:ad:cf:f7:31:0e:ee:39:9e:e4:
19:73:a0:ff:e6:a7:15:80:2c:09:95:44:b6:99:dc:17:5d:e5:
6e:a2:fa:6f:d3:69:15:f3:39:7a:09:56:18:5c:43:1e:2c:e5:
b4:20:18:54:f2:ce:32:3c:7a:1e:42:03:de:3a:dd:6c:0b:3b:
86:cd:86:26:ce:f8:73:dd:b4:32:30:18:1f:d3:de:83:6b:7d:
d4:8a:65:32:87:12:27:a9:02:73:dc:f6:31:5b:d6:57:bc:27:
fe:34:c5:68
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon May 12 02:24:19 2025 by rpki-client