Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/da/088677-80be-4130-b360-1cf6fd9f80fa/1/UKqZ64wbGLGqfUJFzkgfuIj78lQ.mft
File: UKqZ64wbGLGqfUJFzkgfuIj78lQ.mft (raw, json)
Hash identifier: OBNxYORQ76IhLcqG4RYxsU84JkUllKgDXBeBJS+5T5s=
Subject key identifier: C1:9F:25:8B:88:F4:1E:F6:C8:D0:CD:69:D0:3E:91:CA:0E:69:E1:14
Authority key identifier: 50:AA:99:EB:8C:1B:18:B1:AA:7D:42:45:CE:48:1F:B8:88:FB:F2:54
Certificate issuer: /CN=50aa99eb8c1b18b1aa7d4245ce481fb888fbf254
Certificate serial: 0196E155DE7F42867FC8BBFCD107152B9484
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/UKqZ64wbGLGqfUJFzkgfuIj78lQ.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/da/088677-80be-4130-b360-1cf6fd9f80fa/1/UKqZ64wbGLGqfUJFzkgfuIj78lQ.mft
Manifest number: 0C4D
Signing time: Sun 18 May 2025 03:00:23 +0000
Manifest this update: Sun 18 May 2025 03:00:23 +0000
Manifest next update: Mon 19 May 2025 03:00:23 +0000
Files and hashes: 1: LRROMH8PWkT6bvGRkMnS0JWxYn4.roa (hash: GIDYrP6C060YCYEpIBANWaiaIMglvY/1aJs51j6+Nek=)
2: UKqZ64wbGLGqfUJFzkgfuIj78lQ.crl (hash: 9Ee5kPFd2oHgs9j/xcpqIf4qSaiUjg0oIrUcIO6jaxk=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/da/088677-80be-4130-b360-1cf6fd9f80fa/1/UKqZ64wbGLGqfUJFzkgfuIj78lQ.crl
rsync://rpki.ripe.net/repository/DEFAULT/da/088677-80be-4130-b360-1cf6fd9f80fa/1/UKqZ64wbGLGqfUJFzkgfuIj78lQ.mft
rsync://rpki.ripe.net/repository/DEFAULT/UKqZ64wbGLGqfUJFzkgfuIj78lQ.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 19 May 2025 03:00:23 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:e1:55:de:7f:42:86:7f:c8:bb:fc:d1:07:15:2b:94:84
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=50aa99eb8c1b18b1aa7d4245ce481fb888fbf254
Validity
Not Before: May 18 03:00:23 2025 GMT
Not After : May 19 03:00:23 2025 GMT
Subject: CN=c19f258b88f41ef6c8d0cd69d03e91ca0e69e114
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b8:32:de:ae:ed:fa:d6:3d:f3:ab:80:69:a6:09:
cf:6b:06:7f:a1:6c:10:9c:87:9f:7e:36:07:de:b6:
bb:83:a9:8f:7c:33:0d:0b:3a:22:74:07:d9:e0:ce:
14:26:d7:e6:3d:bd:6f:45:ea:1a:e5:77:58:47:04:
05:b3:b4:fa:93:23:5d:46:bd:80:0a:31:72:8a:34:
85:9a:6f:1c:e7:dc:ef:57:b4:6e:dd:3e:c9:9a:71:
9a:3b:7e:d0:24:6e:4a:bf:6c:89:fe:93:55:00:eb:
1c:cf:52:1f:7c:0e:3e:ad:24:da:48:7a:31:b0:3d:
36:ac:92:54:90:a7:1d:88:37:c4:d9:0b:b1:cf:35:
84:c8:e6:bd:ea:7b:26:fd:a9:12:7b:1d:20:55:32:
42:0b:96:88:79:56:5d:fe:3e:f6:be:8f:f4:8f:70:
db:a8:a9:bc:59:76:d2:68:07:60:17:2a:63:28:ad:
f5:29:db:29:23:bf:19:64:0c:3b:1d:a8:9e:18:6c:
13:54:dd:c6:fe:5f:a7:bf:92:a0:c8:34:1f:b9:a9:
f2:f3:69:38:0c:d2:b4:6c:58:42:08:ab:0a:1c:2c:
18:05:ac:3a:ef:69:0d:5d:19:be:22:8c:95:e4:82:
c2:72:0b:47:c5:4b:a3:3b:7e:b1:ad:70:da:b3:77:
21:fb
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C1:9F:25:8B:88:F4:1E:F6:C8:D0:CD:69:D0:3E:91:CA:0E:69:E1:14
X509v3 Authority Key Identifier:
keyid:50:AA:99:EB:8C:1B:18:B1:AA:7D:42:45:CE:48:1F:B8:88:FB:F2:54
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/UKqZ64wbGLGqfUJFzkgfuIj78lQ.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/da/088677-80be-4130-b360-1cf6fd9f80fa/1/UKqZ64wbGLGqfUJFzkgfuIj78lQ.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/da/088677-80be-4130-b360-1cf6fd9f80fa/1/UKqZ64wbGLGqfUJFzkgfuIj78lQ.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
50:9e:3a:48:61:0b:98:54:c8:6f:df:09:3d:5e:e9:29:39:12:
65:e2:0a:21:bc:93:74:aa:1a:4e:f0:c6:cc:84:17:e2:d0:e8:
a1:4d:39:61:ed:91:df:fd:53:f5:2a:b2:cf:ab:7b:74:39:15:
f6:4b:66:e3:d3:f0:5e:cb:c2:60:7c:b4:f0:5d:cb:d4:d1:b3:
ea:a3:69:e3:1b:81:97:76:d8:cf:36:91:3b:66:36:9b:e3:67:
ae:be:94:6a:f7:e3:33:50:e0:f6:3f:6d:0a:e6:7a:ef:04:6d:
fa:9a:e7:a2:e8:f5:b8:b9:f2:1b:42:d6:01:94:c6:4e:e0:a2:
9e:70:19:5e:0c:76:31:43:37:c5:51:b8:44:68:5b:ec:12:57:
a3:b4:51:f6:cc:89:45:fa:42:10:8a:7c:78:df:49:c4:fb:65:
e6:8d:db:63:e1:54:72:d3:52:e7:32:6d:e5:2b:22:de:39:c5:
22:7a:2f:3c:98:86:47:dc:10:c9:5e:7e:eb:bd:74:21:a2:62:
52:2f:91:00:28:64:c6:80:3a:cf:e5:22:5a:d6:a3:c2:58:9a:
7e:65:4b:ea:55:27:99:1d:ec:76:0f:ee:84:65:14:80:a3:80:
65:f5:cc:0a:23:8d:fc:c1:69:15:b0:55:99:d3:97:fb:d3:e4:
5d:e0:7d:e1
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun May 18 10:52:59 2025 by rpki-client