Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d5/e0f3bb-a099-4785-8929-3d7f92c23a8b/1/Ue4aZ3JetKdkpYe8Nwed676B-2Q.mft
File: Ue4aZ3JetKdkpYe8Nwed676B-2Q.mft (raw, json)
Hash identifier: OQLeNzrEtm3d1TRzXScakZG24OAj6Eoi7F3In3QPoWs=
Subject key identifier: D3:E6:32:EC:7D:6F:39:94:D7:AA:95:37:CC:4B:AE:BD:66:97:FA:62
Authority key identifier: 51:EE:1A:67:72:5E:B4:A7:64:A5:87:BC:37:07:9D:EB:BE:81:FB:64
Certificate issuer: /CN=51ee1a67725eb4a764a587bc37079debbe81fb64
Certificate serial: 01969F75DC0041C6AE0A75FCCB1F29CE2441
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Ue4aZ3JetKdkpYe8Nwed676B-2Q.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/d5/e0f3bb-a099-4785-8929-3d7f92c23a8b/1/Ue4aZ3JetKdkpYe8Nwed676B-2Q.mft
Manifest number: 1427
Signing time: Mon 05 May 2025 08:00:23 +0000
Manifest this update: Mon 05 May 2025 08:00:23 +0000
Manifest next update: Tue 06 May 2025 08:00:23 +0000
Files and hashes: 1: 4ve1bR44fXpzC4OLaMdoWgSf4Wg.roa (hash: ORYpvPkbfZNFI/vr3Fjdbyn/Yoia3e4Tx4qioep5WQs=)
2: Ue4aZ3JetKdkpYe8Nwed676B-2Q.crl (hash: c7mZz+QJ+DIL/OpZRtDm3WBsL7ML+4mN4iq5ofYbzz0=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/d5/e0f3bb-a099-4785-8929-3d7f92c23a8b/1/Ue4aZ3JetKdkpYe8Nwed676B-2Q.crl
rsync://rpki.ripe.net/repository/DEFAULT/d5/e0f3bb-a099-4785-8929-3d7f92c23a8b/1/Ue4aZ3JetKdkpYe8Nwed676B-2Q.mft
rsync://rpki.ripe.net/repository/DEFAULT/Ue4aZ3JetKdkpYe8Nwed676B-2Q.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 06 May 2025 08:00:23 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:9f:75:dc:00:41:c6:ae:0a:75:fc:cb:1f:29:ce:24:41
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=51ee1a67725eb4a764a587bc37079debbe81fb64
Validity
Not Before: May 5 08:00:23 2025 GMT
Not After : May 6 08:00:23 2025 GMT
Subject: CN=d3e632ec7d6f3994d7aa9537cc4baebd6697fa62
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ba:d7:79:29:0a:b0:92:b8:c0:35:3c:a3:21:7a:
83:16:e0:c7:96:c5:5b:13:e9:78:2a:7f:d1:fa:9b:
6c:75:58:13:48:46:99:cf:5c:42:1d:26:f9:26:79:
4e:65:34:da:f2:42:69:09:a3:6c:68:07:4a:cb:cb:
9c:5d:84:60:f1:57:0e:08:fd:4a:38:53:1d:3a:24:
df:35:ac:0e:dd:1c:93:87:4c:75:9c:d2:44:68:2c:
7f:e3:27:b6:cd:37:61:43:c9:61:60:77:55:fb:26:
49:77:61:c0:64:cc:d8:f6:3d:be:e5:68:f9:b8:bc:
42:13:fb:e9:a3:73:2f:7a:a0:6c:28:5f:da:30:89:
ca:25:b2:a3:86:de:5d:fd:55:30:85:ca:8c:53:d8:
9f:9e:1d:3b:dc:97:ee:82:b9:dd:a1:96:ac:57:47:
08:85:66:62:5d:98:fd:6f:a9:44:03:d3:1c:2e:fc:
ac:a2:89:c5:ff:e2:f5:45:62:64:06:79:72:3b:8b:
12:71:ea:fc:53:75:10:fe:4c:00:9d:6d:10:19:e9:
b7:33:e5:9a:c8:7b:f4:76:bb:78:20:be:bb:e3:b9:
b0:2c:03:a0:8c:ca:a8:6f:70:3e:6d:b5:3a:e4:57:
41:24:21:a0:ce:30:46:37:75:ff:e3:b7:16:fd:4c:
99:57
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D3:E6:32:EC:7D:6F:39:94:D7:AA:95:37:CC:4B:AE:BD:66:97:FA:62
X509v3 Authority Key Identifier:
keyid:51:EE:1A:67:72:5E:B4:A7:64:A5:87:BC:37:07:9D:EB:BE:81:FB:64
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Ue4aZ3JetKdkpYe8Nwed676B-2Q.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d5/e0f3bb-a099-4785-8929-3d7f92c23a8b/1/Ue4aZ3JetKdkpYe8Nwed676B-2Q.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/d5/e0f3bb-a099-4785-8929-3d7f92c23a8b/1/Ue4aZ3JetKdkpYe8Nwed676B-2Q.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
4a:10:0a:5d:01:e2:5b:3f:3b:7a:2c:2f:ec:66:78:c2:f5:9b:
d9:1c:61:08:a1:69:3d:69:6c:77:4a:87:e7:b5:46:0b:09:25:
4a:ed:26:72:a0:12:33:ab:a7:52:64:25:00:7b:4e:b4:e6:34:
48:72:c7:9c:2c:8e:ac:3f:8e:2d:60:8b:31:d1:41:ea:b7:d9:
ee:9f:06:d1:a3:3c:75:47:5e:39:77:7c:19:3d:fc:80:ea:bd:
f5:64:aa:93:c1:77:fe:fc:26:5f:47:10:03:aa:f5:97:a5:ca:
e3:d0:b7:1e:f1:0a:a0:9a:e6:29:93:39:cd:dc:ef:9a:b7:3a:
ac:67:d4:ab:24:d9:70:44:50:7f:4d:12:c6:27:9d:25:9f:8d:
c5:8e:ab:c4:9f:8e:74:8d:81:7d:71:87:26:71:aa:7e:07:42:
d1:ee:45:69:1e:8a:58:df:c3:9b:3a:ee:d1:af:1d:a1:4e:85:
a3:ac:d4:c3:a8:ec:93:d5:59:36:61:ef:85:c3:90:a1:6f:1e:
ca:b5:34:18:f0:25:de:52:a7:9a:af:8e:50:8b:b5:7d:8f:66:
77:3b:bc:2a:bf:54:ec:ee:2e:b3:08:63:2f:db:c6:a2:dc:36:
02:8f:70:00:8f:16:3d:d9:27:ba:3c:3a:e1:b9:d8:48:ab:e0:
56:ae:95:04
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon May 5 15:48:30 2025 by rpki-client