Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d0/d348b5-151c-4aa5-bd09-ef5d5011ca77/1/UKBqRT_NXyb69IIsS0WQmNyv8Dk.mft
File: UKBqRT_NXyb69IIsS0WQmNyv8Dk.mft (raw, json)
Hash identifier: DPlvTQXf0cLYNxDvSbBjEJPYz+1rwEuzoHthbbpLO7k=
Subject key identifier: FA:89:06:55:20:EE:88:82:CF:AC:B4:C2:13:54:3B:12:8A:DB:46:A9
Authority key identifier: 50:A0:6A:45:3F:CD:5F:26:FA:F4:82:2C:4B:45:90:98:DC:AF:F0:39
Certificate issuer: /CN=50a06a453fcd5f26faf4822c4b459098dcaff039
Certificate serial: 0196A68A9DE9CF8C2A9BCD30EA11C279D443
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/UKBqRT_NXyb69IIsS0WQmNyv8Dk.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/d0/d348b5-151c-4aa5-bd09-ef5d5011ca77/1/UKBqRT_NXyb69IIsS0WQmNyv8Dk.mft
Manifest number: 152A
Signing time: Tue 06 May 2025 17:00:24 +0000
Manifest this update: Tue 06 May 2025 17:00:24 +0000
Manifest next update: Wed 07 May 2025 17:00:24 +0000
Files and hashes: 1: UKBqRT_NXyb69IIsS0WQmNyv8Dk.crl (hash: YvaK2Q/uc5B/t9hNqZvzNw0A0ez91D7DPnsiTOR5JNo=)
2: XmJ8vYGbQYVnd8y-h4wRzi3J_pE.roa (hash: exnN1l7i5NuQ19i+bMh7iG0NXDBSnKZN8vpjyWS2vRc=)
3: XrhvNCYQn9v_ZtENdKVZ3VLduJc.roa (hash: aN/R4IVeQqrz28tH9akl71ra6TmpBihdrIjUuL23MYA=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/d0/d348b5-151c-4aa5-bd09-ef5d5011ca77/1/UKBqRT_NXyb69IIsS0WQmNyv8Dk.crl
rsync://rpki.ripe.net/repository/DEFAULT/d0/d348b5-151c-4aa5-bd09-ef5d5011ca77/1/UKBqRT_NXyb69IIsS0WQmNyv8Dk.mft
rsync://rpki.ripe.net/repository/DEFAULT/UKBqRT_NXyb69IIsS0WQmNyv8Dk.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 07 May 2025 14:16:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:a6:8a:9d:e9:cf:8c:2a:9b:cd:30:ea:11:c2:79:d4:43
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=50a06a453fcd5f26faf4822c4b459098dcaff039
Validity
Not Before: May 6 17:00:24 2025 GMT
Not After : May 7 17:00:24 2025 GMT
Subject: CN=fa89065520ee8882cfacb4c213543b128adb46a9
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b2:06:14:9c:3d:02:a6:ca:3f:eb:2f:c4:ba:47:
71:67:1b:c5:45:c7:f1:68:14:42:e0:d8:27:72:73:
1d:24:5b:f0:b1:1d:ff:37:85:e5:85:60:1b:7e:b8:
e5:7d:37:ef:8d:3e:35:12:b5:32:22:71:48:ff:f0:
54:28:ec:d7:f1:b9:4e:9e:d7:b2:29:18:94:1f:4a:
75:56:37:ee:00:0f:65:a7:43:af:db:69:d8:c9:13:
08:86:fe:85:a3:e0:a9:92:8e:3a:ad:6e:9c:2c:8f:
d0:fc:a8:fb:bd:b0:0c:35:a2:31:a3:c2:94:28:a7:
6e:31:32:03:c7:b6:c1:83:b0:2a:38:10:e7:02:7c:
51:42:31:b8:20:25:9e:5a:f0:aa:7a:de:e7:d6:35:
c5:b7:62:7f:be:d8:76:15:16:9c:93:37:d1:01:67:
23:cc:75:8a:9e:8b:29:6f:e5:1e:65:73:29:cb:8e:
81:f8:39:1c:46:94:12:bf:8e:03:7c:89:91:f0:8f:
39:48:60:f3:62:e2:da:43:ed:df:ad:fe:be:04:48:
3e:0c:7c:55:8c:c0:ab:ba:b6:a7:22:63:cd:4e:36:
9c:04:04:98:38:28:da:d2:58:aa:78:af:c7:1d:8a:
f9:0b:7e:12:8f:67:9e:28:95:cb:a9:d9:82:34:a3:
38:fb
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
FA:89:06:55:20:EE:88:82:CF:AC:B4:C2:13:54:3B:12:8A:DB:46:A9
X509v3 Authority Key Identifier:
keyid:50:A0:6A:45:3F:CD:5F:26:FA:F4:82:2C:4B:45:90:98:DC:AF:F0:39
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/UKBqRT_NXyb69IIsS0WQmNyv8Dk.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d0/d348b5-151c-4aa5-bd09-ef5d5011ca77/1/UKBqRT_NXyb69IIsS0WQmNyv8Dk.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/d0/d348b5-151c-4aa5-bd09-ef5d5011ca77/1/UKBqRT_NXyb69IIsS0WQmNyv8Dk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
26:7e:e6:7c:a9:d5:4f:48:29:96:57:e5:57:af:b3:0a:05:f1:
18:12:ba:4a:b6:3c:cb:a8:65:4c:7f:cc:0c:22:2d:93:8a:7b:
95:66:d1:33:25:f7:fc:49:9f:c3:9d:ac:80:0e:f7:ec:65:85:
9c:28:9d:f3:a7:f3:39:eb:ae:77:d8:c1:d2:0c:cb:68:27:9b:
cb:d7:d2:e1:eb:10:85:4a:60:1e:60:11:b3:8e:59:7d:73:f9:
5e:9e:e0:25:81:67:ba:2d:a2:50:49:cf:be:69:3b:f4:2f:1f:
d5:55:a6:df:e4:ea:76:19:db:67:00:a6:ea:3f:10:f0:fa:d7:
1f:60:c4:e0:67:a6:a6:5f:63:63:fa:87:8d:22:fd:72:07:0e:
d5:38:ce:8f:d5:bd:3b:ca:48:c4:96:c3:99:4a:42:12:1d:f1:
a9:3c:54:b8:3b:99:f5:48:78:d7:3c:f2:63:67:1c:8e:41:1e:
a2:c1:1a:80:97:f3:8e:13:9d:59:51:a6:16:ae:1b:cd:fd:de:
cf:d0:ab:15:e5:68:df:82:39:10:28:a3:09:66:17:4e:27:50:
c7:53:2b:57:2d:42:be:85:11:2b:0f:34:0d:33:83:0d:86:1b:
21:b2:b8:4e:3b:17:80:15:e8:d8:9f:30:51:0a:50:b4:2d:1d:
47:f6:45:46
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue May 6 19:43:18 2025 by rpki-client