Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d6/d3ab28-7f47-41f3-b231-78844e101133/1/UfSwsEaesNBxmUzYI480vvAMb74.mft
File: UfSwsEaesNBxmUzYI480vvAMb74.mft (raw, json)
Hash identifier: D/kTBqzVPn2Dd5jKOm/yddhhpPh6RBmfuxVJ8/ScOHw=
Subject key identifier: C3:03:C7:B9:10:64:47:36:B7:FD:41:19:A0:AC:9C:AB:EA:C9:25:25
Authority key identifier: 51:F4:B0:B0:46:9E:B0:D0:71:99:4C:D8:23:8F:34:BE:F0:0C:6F:BE
Certificate issuer: /CN=51f4b0b0469eb0d071994cd8238f34bef00c6fbe
Certificate serial: 01969ED15AF79CE1051D5B814DF287BBBB49
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/UfSwsEaesNBxmUzYI480vvAMb74.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/d6/d3ab28-7f47-41f3-b231-78844e101133/1/UfSwsEaesNBxmUzYI480vvAMb74.mft
Manifest number: 0498
Signing time: Mon 05 May 2025 05:00:42 +0000
Manifest this update: Mon 05 May 2025 05:00:42 +0000
Manifest next update: Tue 06 May 2025 05:00:42 +0000
Files and hashes: 1: UfSwsEaesNBxmUzYI480vvAMb74.crl (hash: b/RcrDmNHWW963otov9pQTkmRLJo4acy3Ql37Ai+eDg=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/d6/d3ab28-7f47-41f3-b231-78844e101133/1/UfSwsEaesNBxmUzYI480vvAMb74.crl
rsync://rpki.ripe.net/repository/DEFAULT/d6/d3ab28-7f47-41f3-b231-78844e101133/1/UfSwsEaesNBxmUzYI480vvAMb74.mft
rsync://rpki.ripe.net/repository/DEFAULT/UfSwsEaesNBxmUzYI480vvAMb74.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 06 May 2025 01:00:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:9e:d1:5a:f7:9c:e1:05:1d:5b:81:4d:f2:87:bb:bb:49
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=51f4b0b0469eb0d071994cd8238f34bef00c6fbe
Validity
Not Before: May 5 05:00:42 2025 GMT
Not After : May 6 05:00:42 2025 GMT
Subject: CN=c303c7b910644736b7fd4119a0ac9cabeac92525
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ba:7b:da:a5:75:9e:8e:b9:fe:25:35:1a:5c:d7:
dd:b7:6a:aa:f5:79:05:16:cd:66:c5:c4:84:b5:57:
3f:4f:1b:2f:e6:2b:d8:d2:c6:a8:cd:f4:f2:67:a1:
21:36:6a:a3:0f:ba:1f:fa:c7:96:21:aa:86:46:33:
d5:6b:7b:cb:d2:18:a8:79:b9:6a:6a:c8:18:8f:28:
d5:55:39:4c:e5:28:dc:5a:86:a3:7a:47:de:64:a8:
4c:75:f3:ae:5b:4a:f5:4e:cb:43:3d:ae:65:63:c6:
bd:62:ac:0d:d5:94:1a:55:35:73:ed:b3:b2:22:df:
16:0e:dd:c2:2e:5c:56:d0:11:46:9f:89:fe:a0:a9:
cd:56:d6:87:e3:9b:c6:4e:b9:c0:a0:1b:8e:b9:fd:
a2:45:ea:cf:04:29:9c:e6:5f:9f:b5:2d:20:a0:0b:
a5:46:3c:31:f2:b6:e0:ac:e4:3d:30:6b:c0:e1:21:
db:7c:95:fe:ce:bd:61:5b:2f:28:45:e8:cc:20:59:
bd:fe:ff:b9:11:ee:de:4d:08:16:dc:ac:74:74:9a:
fb:eb:ef:59:65:4c:97:33:60:eb:af:64:ad:c2:4f:
51:41:eb:00:4a:2d:c2:a0:ea:b9:c4:a5:81:85:93:
2d:f6:e2:41:08:86:31:01:cc:a4:28:c1:9d:83:dc:
d9:bd
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C3:03:C7:B9:10:64:47:36:B7:FD:41:19:A0:AC:9C:AB:EA:C9:25:25
X509v3 Authority Key Identifier:
keyid:51:F4:B0:B0:46:9E:B0:D0:71:99:4C:D8:23:8F:34:BE:F0:0C:6F:BE
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/UfSwsEaesNBxmUzYI480vvAMb74.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d6/d3ab28-7f47-41f3-b231-78844e101133/1/UfSwsEaesNBxmUzYI480vvAMb74.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/d6/d3ab28-7f47-41f3-b231-78844e101133/1/UfSwsEaesNBxmUzYI480vvAMb74.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
17:b9:6b:c7:95:d9:e5:86:15:26:f9:92:74:03:67:27:00:fa:
43:10:49:49:9a:97:6e:75:88:45:01:c4:26:09:14:99:90:76:
d4:09:bf:0b:08:1e:f4:8f:1a:f4:b7:9c:1d:f8:f4:b7:e8:4c:
70:03:6b:e2:e5:1d:c4:13:ec:bd:80:46:68:b6:d2:01:4e:26:
76:62:89:a1:39:7b:66:74:45:1a:e5:63:62:f9:72:a0:87:9e:
77:fd:b6:94:c8:fc:ca:9e:d5:29:f0:3c:61:13:fd:a6:56:33:
ca:b7:62:f6:5d:cd:a4:3c:42:8a:e6:03:1b:0d:81:be:e7:f9:
00:64:70:c9:76:90:3f:be:e7:1d:d8:38:91:46:2b:8c:33:33:
16:47:c4:dd:19:d8:a3:2c:38:04:f9:12:27:85:33:2d:85:55:
13:87:08:cd:1e:10:cd:6b:f8:c7:77:0c:25:f2:e2:33:04:ef:
a2:5d:66:85:b1:26:dd:0d:67:b1:eb:ce:9f:26:ac:bd:e8:e9:
87:e8:11:ba:bf:df:81:4c:d1:ec:e9:4c:8e:75:c5:89:85:8d:
ae:9a:7b:55:45:1e:0d:06:ff:84:be:32:cb:3f:09:72:21:75:
8e:97:0a:94:76:bf:e3:b8:84:8a:95:da:8b:04:71:22:41:30:
e1:41:ee:fa
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon May 5 10:19:40 2025 by rpki-client