Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/cf/063e59-9e94-4e91-8b7e-6f4de020aae6/1/1UfPnyd2dHcSCx07JsxXphCZpyQ.mft
File: 1UfPnyd2dHcSCx07JsxXphCZpyQ.mft (raw, json)
Hash identifier: XTQUxGb/VKnxtBoRycMpRY2xTokJr7YdEWh8/CrzbnE=
Subject key identifier: E3:72:02:24:DB:3F:7D:89:9D:22:E4:92:C1:D8:1D:E7:AC:15:C6:6F
Authority key identifier: D5:47:CF:9F:27:76:74:77:12:0B:1D:3B:26:CC:57:A6:10:99:A7:24
Certificate issuer: /CN=d547cf9f27767477120b1d3b26cc57a61099a724
Certificate serial: 0196A61CD5C8A7E8B9E02D336AB716A704A4
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/1UfPnyd2dHcSCx07JsxXphCZpyQ.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/cf/063e59-9e94-4e91-8b7e-6f4de020aae6/1/1UfPnyd2dHcSCx07JsxXphCZpyQ.mft
Manifest number: 02D7
Signing time: Tue 06 May 2025 15:00:29 +0000
Manifest this update: Tue 06 May 2025 15:00:29 +0000
Manifest next update: Wed 07 May 2025 15:00:29 +0000
Files and hashes: 1: 1UfPnyd2dHcSCx07JsxXphCZpyQ.crl (hash: zVwwBTMqUrYXiOeOTMg8v5rV13tiXaYmYsSxkPg+XR0=)
2: loFt9UkmmZ1FwU6GuBvE7wOCBXI.roa (hash: EBLJxo6VHYAxrO4XWEk670Ig6ARB7G0deWDK0JqRpRk=)
3: uEe7yxEzwBqxOdiy6kW5K2akSMQ.roa (hash: 4vrYRNv3vEFbdxt4zd7lm78u8NLMmrbvWa8ivtjvkwA=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/cf/063e59-9e94-4e91-8b7e-6f4de020aae6/1/1UfPnyd2dHcSCx07JsxXphCZpyQ.crl
rsync://rpki.ripe.net/repository/DEFAULT/cf/063e59-9e94-4e91-8b7e-6f4de020aae6/1/1UfPnyd2dHcSCx07JsxXphCZpyQ.mft
rsync://rpki.ripe.net/repository/DEFAULT/1UfPnyd2dHcSCx07JsxXphCZpyQ.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 07 May 2025 14:16:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:a6:1c:d5:c8:a7:e8:b9:e0:2d:33:6a:b7:16:a7:04:a4
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=d547cf9f27767477120b1d3b26cc57a61099a724
Validity
Not Before: May 6 15:00:29 2025 GMT
Not After : May 7 15:00:29 2025 GMT
Subject: CN=e3720224db3f7d899d22e492c1d81de7ac15c66f
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b5:9c:6c:07:8b:c1:a6:b1:5b:0f:81:c1:07:b2:
04:2a:cd:6a:ab:00:2b:54:42:e1:3a:95:55:3e:28:
40:23:36:4c:88:f9:fb:fc:e1:6a:9c:65:c4:13:4b:
0a:27:9a:47:26:c9:6c:8e:46:6c:2b:a6:e5:3c:d7:
d6:47:e5:f8:b8:a1:58:08:6b:1a:3f:2f:27:e8:5c:
c6:d4:4c:28:c3:81:e0:51:1e:a9:7f:79:a4:67:74:
fd:34:cc:5c:dd:a4:31:70:37:22:e0:e4:45:30:cd:
1c:51:2c:ae:30:9f:0c:bf:05:21:be:d1:90:90:19:
78:e9:8f:75:8b:01:63:b1:c2:7d:96:48:3c:92:8b:
5e:0e:30:76:5a:fa:e3:09:87:02:b3:3e:5b:dd:19:
b5:f2:e7:8e:2f:7a:c2:1a:93:81:6a:e9:af:d7:81:
5f:a0:c5:2c:aa:01:5f:65:b3:e2:f9:27:32:d3:8f:
8b:a8:7e:36:9d:e8:51:86:67:d5:3e:19:09:92:7b:
90:66:0e:87:9f:41:1c:0b:2a:51:59:36:40:40:70:
dc:9f:f7:da:89:42:29:c5:b5:2d:5f:a4:1b:57:12:
64:f6:88:c4:5d:a9:95:a8:4a:3c:0c:cb:70:6a:f8:
ea:c5:8e:99:fb:14:d3:ba:d5:26:df:f6:ef:73:6a:
c5:f3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E3:72:02:24:DB:3F:7D:89:9D:22:E4:92:C1:D8:1D:E7:AC:15:C6:6F
X509v3 Authority Key Identifier:
keyid:D5:47:CF:9F:27:76:74:77:12:0B:1D:3B:26:CC:57:A6:10:99:A7:24
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/1UfPnyd2dHcSCx07JsxXphCZpyQ.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/cf/063e59-9e94-4e91-8b7e-6f4de020aae6/1/1UfPnyd2dHcSCx07JsxXphCZpyQ.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/cf/063e59-9e94-4e91-8b7e-6f4de020aae6/1/1UfPnyd2dHcSCx07JsxXphCZpyQ.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
7f:89:d6:a9:09:2a:69:de:1b:16:47:91:41:22:24:bd:64:dc:
af:a5:f7:5b:de:03:7c:a0:e3:11:11:4c:b1:ff:eb:4a:9d:c8:
a0:22:28:f8:28:21:18:4d:e8:a8:78:8b:ca:c0:12:c1:26:22:
c6:19:82:74:d9:88:60:92:ab:c3:de:24:fd:0b:03:75:7c:92:
f4:f7:41:36:f5:93:d2:f9:57:06:52:60:75:d5:49:08:01:78:
7b:ca:43:85:32:01:f2:fb:f4:1e:f6:fe:e3:f9:7f:d5:8a:f9:
60:d1:fa:8c:c0:9a:2f:64:d2:59:a6:d5:64:b4:e2:42:ad:09:
9d:07:bf:74:9c:bb:cd:8a:26:3f:67:b0:92:b4:a3:c3:18:9e:
06:3f:94:26:29:cb:f2:ce:1b:20:bb:90:1a:61:24:9c:b9:93:
45:01:ca:bb:a3:1d:60:39:2f:f8:76:73:a4:27:8f:c4:6b:c0:
0c:c0:f8:1f:56:b8:5a:01:2b:65:b0:16:f2:6e:1e:a3:d3:11:
64:d1:3f:e4:53:84:6b:a7:19:10:6b:20:91:02:32:63:9b:65:
12:a9:75:d3:4f:83:62:10:95:97:34:22:a0:f0:08:e7:1e:74:
65:d3:eb:d1:cf:42:5d:19:b3:91:b4:6c:8d:38:14:18:fc:a9:
ac:f3:5e:68
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue May 6 21:11:09 2025 by rpki-client