Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c9/75ba72-d7b2-4283-9f0b-e3e5fa36bb2f/1/UjAqRdBWhIYFGn7EZvAxCMMgtMQ.mft
File: UjAqRdBWhIYFGn7EZvAxCMMgtMQ.mft (raw, json)
Hash identifier: E+4UjESWwUaQuWCnsHukclL8dlrKzcYOPkHpngM3Lpk=
Subject key identifier: 55:00:0F:53:DD:54:97:CF:D6:0E:3C:21:23:85:A4:02:6F:C9:11:EA
Authority key identifier: 52:30:2A:45:D0:56:84:86:05:1A:7E:C4:66:F0:31:08:C3:20:B4:C4
Certificate issuer: /CN=52302a45d0568486051a7ec466f03108c320b4c4
Certificate serial: 0196A3C10C32600C56D3936358C3868D5F02
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/UjAqRdBWhIYFGn7EZvAxCMMgtMQ.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c9/75ba72-d7b2-4283-9f0b-e3e5fa36bb2f/1/UjAqRdBWhIYFGn7EZvAxCMMgtMQ.mft
Manifest number: 13D7
Signing time: Tue 06 May 2025 04:00:59 +0000
Manifest this update: Tue 06 May 2025 04:00:59 +0000
Manifest next update: Wed 07 May 2025 04:00:59 +0000
Files and hashes: 1: QT_SK_iR1CMR9onvZvmcZNC40rI.roa (hash: wS3+u+XyjIXltWoW0+plapBWAgUiuQD0ohiZyl3pRxo=)
2: U2CfkbTtx4yBkybUh2khtkvWGcw.roa (hash: 2JyqA2QMb2RljPRBnX+Xy8q+isyJqjDkSXr9/EJxr0I=)
3: UjAqRdBWhIYFGn7EZvAxCMMgtMQ.crl (hash: 9cusCv2RwnasLY6bKmsxtf1XEl+yB8qEtdzJiBYQUTM=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/c9/75ba72-d7b2-4283-9f0b-e3e5fa36bb2f/1/UjAqRdBWhIYFGn7EZvAxCMMgtMQ.crl
rsync://rpki.ripe.net/repository/DEFAULT/c9/75ba72-d7b2-4283-9f0b-e3e5fa36bb2f/1/UjAqRdBWhIYFGn7EZvAxCMMgtMQ.mft
rsync://rpki.ripe.net/repository/DEFAULT/UjAqRdBWhIYFGn7EZvAxCMMgtMQ.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 07 May 2025 03:00:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:a3:c1:0c:32:60:0c:56:d3:93:63:58:c3:86:8d:5f:02
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=52302a45d0568486051a7ec466f03108c320b4c4
Validity
Not Before: May 6 04:00:59 2025 GMT
Not After : May 7 04:00:59 2025 GMT
Subject: CN=55000f53dd5497cfd60e3c212385a4026fc911ea
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e1:b0:d9:1c:f1:4d:81:0d:ab:a6:d3:ab:d6:1f:
95:56:f6:d6:bd:5d:4d:e4:44:a0:62:00:3b:2d:25:
6a:c6:c2:85:de:cd:8d:ae:06:e2:4b:e1:9e:04:8b:
2b:cd:86:7d:dc:9b:43:81:20:df:53:b1:98:10:07:
5c:00:bf:84:0a:f6:ff:24:b7:0a:b4:34:fb:f7:eb:
b3:80:83:5a:3a:b8:24:47:aa:62:cc:c9:9b:e8:c3:
c1:cb:11:ed:26:ce:be:8d:03:84:d2:93:63:f0:20:
ff:f1:1d:f2:dc:da:fe:78:74:bd:fb:63:db:6f:f3:
8b:f4:3c:47:2f:ee:d8:8c:89:34:da:79:b4:51:f8:
f3:a4:49:bd:53:04:82:32:13:95:d4:6d:46:6c:71:
da:e4:a8:e0:49:c8:4c:d0:85:0a:77:b8:27:a6:3e:
20:56:7e:ec:a8:2b:94:03:06:8d:5e:46:a4:2b:c3:
77:05:0b:ec:04:7c:7f:cd:3e:fa:68:da:48:5c:c4:
00:6a:60:69:86:a0:65:e6:ef:2a:78:46:64:4b:df:
88:7d:23:9a:3c:ef:44:2c:81:65:81:18:4d:82:85:
c5:e2:42:62:ec:23:f6:09:01:95:4e:02:c1:63:76:
3c:11:0a:e0:00:23:2c:2a:34:3a:f1:4a:ee:11:f2:
6f:b7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
55:00:0F:53:DD:54:97:CF:D6:0E:3C:21:23:85:A4:02:6F:C9:11:EA
X509v3 Authority Key Identifier:
keyid:52:30:2A:45:D0:56:84:86:05:1A:7E:C4:66:F0:31:08:C3:20:B4:C4
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/UjAqRdBWhIYFGn7EZvAxCMMgtMQ.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c9/75ba72-d7b2-4283-9f0b-e3e5fa36bb2f/1/UjAqRdBWhIYFGn7EZvAxCMMgtMQ.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/c9/75ba72-d7b2-4283-9f0b-e3e5fa36bb2f/1/UjAqRdBWhIYFGn7EZvAxCMMgtMQ.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
23:fb:52:f9:0d:cc:f0:63:f4:72:66:27:ae:61:42:18:8a:f3:
bf:ae:a8:3c:e6:b7:cc:da:65:6e:8d:49:1b:05:d8:58:e7:42:
30:66:d9:d7:77:20:31:9b:0f:c6:ae:4d:4e:fd:d4:a3:7f:7f:
83:c6:cc:8f:2a:bd:b0:7f:96:7a:ce:c8:11:bc:90:e2:2e:25:
a3:cc:f9:7e:43:09:df:39:d3:0e:9a:a4:3e:63:69:dd:af:9d:
cf:36:8e:6b:34:61:6b:da:76:b2:a3:45:a7:45:84:fe:f2:93:
18:9d:9a:7a:8e:80:5b:68:92:14:af:88:4a:43:81:89:67:6e:
37:85:e9:c7:ab:60:48:01:41:f4:d4:e6:9b:be:aa:75:2d:6a:
53:c0:da:c4:ec:2a:6f:4d:38:c8:31:34:f9:ae:9e:30:c8:2e:
c7:0f:d1:39:27:7c:7a:fb:ae:63:a4:27:d0:2f:02:84:6e:fe:
fd:36:67:03:64:1f:4d:84:fa:08:8e:ad:3f:67:1a:73:f5:f6:
9e:84:4e:98:1d:e3:0f:3f:74:98:3f:19:88:5c:d3:e0:d0:e9:
dd:c6:55:40:d4:a3:db:32:bb:a9:81:24:e5:34:de:56:4c:e6:
d0:3b:ab:2a:95:73:9e:f9:94:c6:d8:35:10:8c:d9:eb:0d:e3:
80:46:58:79
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue May 6 05:39:42 2025 by rpki-client