Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c2/b457bb-b5c7-4b54-896f-eb0092a94fca/1/UxR_m8-R0qz49DW6ULgFBUXNH48.mft
File: UxR_m8-R0qz49DW6ULgFBUXNH48.mft (raw, json)
Hash identifier: LBudEkRRdL2Zf/6TW3ucWJXnFClnIInfQd9F3UdCCKM=
Subject key identifier: C2:D5:E7:ED:1D:99:41:CB:F0:89:09:26:1D:81:0F:06:9A:F3:4F:8F
Authority key identifier: 53:14:7F:9B:CF:91:D2:AC:F8:F4:35:BA:50:B8:05:05:45:CD:1F:8F
Certificate issuer: /CN=53147f9bcf91d2acf8f435ba50b8050545cd1f8f
Certificate serial: 0196BC008838CE8DEA98055B15CFD13DC608
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/UxR_m8-R0qz49DW6ULgFBUXNH48.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c2/b457bb-b5c7-4b54-896f-eb0092a94fca/1/UxR_m8-R0qz49DW6ULgFBUXNH48.mft
Manifest number: 0142
Signing time: Sat 10 May 2025 21:01:13 +0000
Manifest this update: Sat 10 May 2025 21:01:13 +0000
Manifest next update: Sun 11 May 2025 21:01:13 +0000
Files and hashes: 1: 6PsTHYIIX51kdSojaJW-z28646w.roa (hash: e4+ExkBHfbgESlNinbHszCcxcrVC7TRY4A/vynG1b6A=)
2: UxR_m8-R0qz49DW6ULgFBUXNH48.crl (hash: 8H6lPTrOUlGsVru6nOWPM8DBX8RIJtuB0A0XeliE4pw=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/c2/b457bb-b5c7-4b54-896f-eb0092a94fca/1/UxR_m8-R0qz49DW6ULgFBUXNH48.crl
rsync://rpki.ripe.net/repository/DEFAULT/c2/b457bb-b5c7-4b54-896f-eb0092a94fca/1/UxR_m8-R0qz49DW6ULgFBUXNH48.mft
rsync://rpki.ripe.net/repository/DEFAULT/UxR_m8-R0qz49DW6ULgFBUXNH48.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 11 May 2025 21:01:13 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:bc:00:88:38:ce:8d:ea:98:05:5b:15:cf:d1:3d:c6:08
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=53147f9bcf91d2acf8f435ba50b8050545cd1f8f
Validity
Not Before: May 10 21:01:13 2025 GMT
Not After : May 11 21:01:13 2025 GMT
Subject: CN=c2d5e7ed1d9941cbf08909261d810f069af34f8f
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c5:e2:0e:c5:c0:6e:6c:21:02:63:63:b5:61:c6:
dd:eb:02:d2:b1:c4:9f:b3:99:d7:4d:91:9e:0d:d9:
36:a0:72:6b:2a:f8:db:9d:c5:5b:6a:f9:2b:be:cb:
05:4d:0f:f4:3d:ad:aa:a8:45:f3:3e:a4:ff:da:70:
2a:49:b6:fc:3f:14:89:76:1e:c7:07:65:83:27:52:
3b:66:8e:26:2a:4c:fa:f9:f3:78:ae:bb:06:32:43:
f1:65:32:e7:33:7d:3c:4d:6a:35:f2:76:c0:c1:23:
85:39:90:c6:97:56:01:96:b3:c6:4d:7c:47:3e:91:
62:fc:15:1b:1b:e0:c5:11:d0:64:45:c1:ce:24:82:
9e:35:52:a0:74:69:8e:09:ad:53:9b:fa:82:e2:2c:
b2:92:ee:a3:34:84:4a:a3:34:ce:0f:26:8b:1f:6e:
a2:79:bd:b0:86:03:9c:43:fd:f1:b8:1b:85:5a:4d:
f1:1b:7f:57:d2:9d:85:51:1a:68:6f:36:0a:13:f7:
21:0a:27:04:ee:c9:f6:65:0f:bd:40:89:c7:21:37:
f1:5d:c4:ef:e5:4f:72:b1:59:91:e7:2c:d7:48:8e:
5a:1e:b3:a8:6a:5d:ec:02:44:c9:f4:33:a4:1c:40:
c6:4a:18:21:19:1c:06:67:da:8b:7f:e2:50:4e:6b:
db:ff
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C2:D5:E7:ED:1D:99:41:CB:F0:89:09:26:1D:81:0F:06:9A:F3:4F:8F
X509v3 Authority Key Identifier:
keyid:53:14:7F:9B:CF:91:D2:AC:F8:F4:35:BA:50:B8:05:05:45:CD:1F:8F
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/UxR_m8-R0qz49DW6ULgFBUXNH48.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c2/b457bb-b5c7-4b54-896f-eb0092a94fca/1/UxR_m8-R0qz49DW6ULgFBUXNH48.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/c2/b457bb-b5c7-4b54-896f-eb0092a94fca/1/UxR_m8-R0qz49DW6ULgFBUXNH48.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
6f:fd:5e:aa:be:f2:b5:75:89:ca:9e:1f:34:fe:64:89:23:5a:
eb:a9:41:4b:62:e6:a0:8a:a3:96:94:4e:fd:a0:21:07:10:2f:
da:7b:a5:34:ff:a5:91:a7:eb:8d:3a:10:76:f1:cd:14:87:0c:
40:18:6c:b8:26:ec:f0:f1:72:c5:3a:e7:87:22:11:c4:b9:ce:
9f:29:9e:42:24:00:e4:ea:68:b6:35:05:ba:62:05:24:2a:5b:
c6:3a:15:a0:f1:b9:35:97:7e:2f:7a:51:88:2d:66:d3:c9:7d:
1c:36:ed:13:09:6f:7c:4a:e5:b5:74:b4:22:45:92:88:66:14:
81:f9:33:6a:60:89:ee:70:81:52:2e:8d:2e:11:fa:27:e7:b2:
57:4d:4a:24:a0:72:a3:5c:aa:e8:fa:17:c5:8d:3b:ea:49:16:
9f:57:19:b1:8a:9b:03:d7:f6:85:aa:54:f6:44:ed:85:d7:bf:
87:4f:38:ed:18:4e:87:dd:c8:a3:71:2d:52:e6:a3:3a:3e:8b:
81:ce:40:02:ad:ba:a5:35:0d:90:c8:a5:33:31:58:e6:18:6a:
03:59:1c:91:33:72:4f:94:f1:70:94:27:53:e5:6d:53:f4:ad:
8a:5a:a1:f5:fd:6e:d2:7d:2d:68:56:b1:33:7c:b6:d6:28:b0:
c1:25:27:c3
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun May 11 06:12:45 2025 by rpki-client