Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/dd/260cf2-8850-43f8-a7f2-9273fc016f7d/1/UmxhjRW7cS4-uuBqixgWl6XkB7g.mft
File: UmxhjRW7cS4-uuBqixgWl6XkB7g.mft (raw, json)
Hash identifier: q/PqCkL/P2ONdhqkEOQhfGiA15dtUuL94EcZH7aPTl8=
Subject key identifier: 87:9F:33:8D:31:DB:73:AE:95:B5:5C:B5:8A:CD:CA:EC:F5:94:31:CB
Authority key identifier: 52:6C:61:8D:15:BB:71:2E:3E:BA:E0:6A:8B:18:16:97:A5:E4:07:B8
Certificate issuer: /CN=526c618d15bb712e3ebae06a8b181697a5e407b8
Certificate serial: 01969CE2B0CB2E0679FAFDF6C2791418523C
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/UmxhjRW7cS4-uuBqixgWl6XkB7g.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/dd/260cf2-8850-43f8-a7f2-9273fc016f7d/1/UmxhjRW7cS4-uuBqixgWl6XkB7g.mft
Manifest number: 13ED
Signing time: Sun 04 May 2025 20:00:24 +0000
Manifest this update: Sun 04 May 2025 20:00:24 +0000
Manifest next update: Mon 05 May 2025 20:00:24 +0000
Files and hashes: 1: 0fnHFCseCp-dowzjSO_W0ajo1TU.roa (hash: 6EWDnuvDaw8wNIkQ3MlMpyUilwRHG1UBmr10Bi9Kodc=)
2: UmxhjRW7cS4-uuBqixgWl6XkB7g.crl (hash: WUwbj1NuNJgPBDesUKnMXR8clkmgRki3iC6Fd+rysVQ=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/dd/260cf2-8850-43f8-a7f2-9273fc016f7d/1/UmxhjRW7cS4-uuBqixgWl6XkB7g.crl
rsync://rpki.ripe.net/repository/DEFAULT/dd/260cf2-8850-43f8-a7f2-9273fc016f7d/1/UmxhjRW7cS4-uuBqixgWl6XkB7g.mft
rsync://rpki.ripe.net/repository/DEFAULT/UmxhjRW7cS4-uuBqixgWl6XkB7g.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 05 May 2025 20:00:24 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:9c:e2:b0:cb:2e:06:79:fa:fd:f6:c2:79:14:18:52:3c
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=526c618d15bb712e3ebae06a8b181697a5e407b8
Validity
Not Before: May 4 20:00:24 2025 GMT
Not After : May 5 20:00:24 2025 GMT
Subject: CN=879f338d31db73ae95b55cb58acdcaecf59431cb
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d1:71:fb:1d:12:a2:bb:8c:50:99:c5:69:22:72:
93:d3:c0:1c:27:07:66:2e:2c:c3:b0:88:2c:c9:f0:
c2:7f:44:c5:63:cb:e7:08:56:1a:2d:28:74:93:39:
d8:b5:45:67:37:ab:69:d0:91:06:73:5e:1a:89:8e:
34:10:b5:a9:90:98:74:5b:e1:6d:dc:cb:3f:f4:2e:
06:11:fe:0d:4b:31:59:b6:32:1d:7e:31:93:bb:da:
5a:34:e2:54:0f:b6:e3:e5:b1:72:1d:55:58:ad:dd:
9b:23:54:56:e6:47:8e:c8:a9:fa:83:f7:7d:11:8f:
5a:b1:c7:fd:cc:54:90:fd:d9:f3:c2:10:81:21:3a:
37:12:ba:80:fe:c5:05:46:7c:28:96:be:d2:05:12:
cc:f4:1a:6d:6c:a8:05:ca:75:4f:0f:96:72:f0:95:
9f:fc:14:1e:ec:ab:82:10:ed:3c:90:a2:06:b8:50:
33:d8:28:1d:b3:cd:5c:46:77:36:3c:7a:03:65:cc:
e6:8a:47:68:b4:8d:de:ad:42:6d:1d:a3:bf:28:14:
c0:de:e1:f7:83:d1:84:5f:00:21:dc:0b:73:54:c5:
69:8b:89:c8:a9:82:c9:36:f2:73:f5:f9:37:36:dd:
92:0e:90:fd:8d:35:0a:07:bb:d8:52:2f:b8:93:7a:
c3:b5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
87:9F:33:8D:31:DB:73:AE:95:B5:5C:B5:8A:CD:CA:EC:F5:94:31:CB
X509v3 Authority Key Identifier:
keyid:52:6C:61:8D:15:BB:71:2E:3E:BA:E0:6A:8B:18:16:97:A5:E4:07:B8
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/UmxhjRW7cS4-uuBqixgWl6XkB7g.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/dd/260cf2-8850-43f8-a7f2-9273fc016f7d/1/UmxhjRW7cS4-uuBqixgWl6XkB7g.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/dd/260cf2-8850-43f8-a7f2-9273fc016f7d/1/UmxhjRW7cS4-uuBqixgWl6XkB7g.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
26:b8:e1:4b:e4:71:72:3c:3b:1f:1e:4c:d4:6c:1f:8a:f5:00:
d1:50:2b:45:be:66:1c:f1:5f:39:92:5a:f0:3a:c7:e0:e3:4b:
0d:2b:f9:5a:e4:35:76:4a:c7:5f:b8:68:35:a8:d6:29:c8:05:
65:8b:c8:fe:7f:74:15:41:09:ac:0d:a2:be:f5:1b:a6:b7:cd:
2c:56:bd:fe:8d:c0:32:e0:1c:74:70:80:d9:ab:31:a6:7a:21:
1f:e5:39:bc:f0:e9:0c:1b:29:c6:fb:15:d9:10:17:ce:ef:d5:
af:38:7c:d2:b6:23:9b:cd:a0:c9:ea:ef:36:0d:d1:02:84:9f:
2a:98:21:ec:14:c2:0a:d0:69:40:4c:2e:97:05:39:ad:ba:a7:
82:45:ce:f2:b4:95:1a:b2:d8:e3:b9:13:67:55:89:93:e6:22:
2f:69:00:24:73:5c:5e:3d:c0:92:23:31:0a:61:b6:cf:af:77:
2c:66:ca:43:00:fa:a9:fb:ed:f8:69:a8:b7:8e:44:a4:c8:6b:
eb:8f:f8:35:84:0d:85:90:d6:a1:47:49:30:dd:97:99:bc:fc:
a2:c0:50:52:97:b9:0f:98:9f:15:0f:da:cd:fe:18:3f:27:c0:
c5:ca:96:38:12:b4:fd:26:13:d1:32:06:87:2e:68:44:c8:a7:
4a:90:c1:61
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon May 5 04:36:51 2025 by rpki-client