Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e0/47c2da-9c68-4f6f-9798-282fa2c01153/1/UFBG2nJq75m-uIowyKb67-dSB1M.mft
File: UFBG2nJq75m-uIowyKb67-dSB1M.mft (raw, json)
Hash identifier: 7cIcMVw9GRRmqovAG8RorEAzc2J6I6cTfN9jOvuChZs=
Subject key identifier: F0:27:5C:FE:E2:63:2E:99:81:45:D1:83:60:8F:F1:DD:47:B3:D2:F6
Authority key identifier: 50:50:46:DA:72:6A:EF:99:BE:B8:8A:30:C8:A6:FA:EF:E7:52:07:53
Certificate issuer: /CN=505046da726aef99beb88a30c8a6faefe7520753
Certificate serial: 0196A9C2B3955FB8DD2F161C8C20B667B258
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/UFBG2nJq75m-uIowyKb67-dSB1M.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/e0/47c2da-9c68-4f6f-9798-282fa2c01153/1/UFBG2nJq75m-uIowyKb67-dSB1M.mft
Manifest number: 0DA8
Signing time: Wed 07 May 2025 08:00:31 +0000
Manifest this update: Wed 07 May 2025 08:00:31 +0000
Manifest next update: Thu 08 May 2025 08:00:31 +0000
Files and hashes: 1: UFBG2nJq75m-uIowyKb67-dSB1M.crl (hash: bQ5nKXKKkqClloApMR4WLR/fTErIJRwLdD33JFritiM=)
2: jhae41lBxgum19Q0YmdVzc2ofw0.roa (hash: x1mZ5Yned7zFdt78wzWndyqBFeaTJjBaYlvrRS6j15I=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/e0/47c2da-9c68-4f6f-9798-282fa2c01153/1/UFBG2nJq75m-uIowyKb67-dSB1M.crl
rsync://rpki.ripe.net/repository/DEFAULT/e0/47c2da-9c68-4f6f-9798-282fa2c01153/1/UFBG2nJq75m-uIowyKb67-dSB1M.mft
rsync://rpki.ripe.net/repository/DEFAULT/UFBG2nJq75m-uIowyKb67-dSB1M.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 08 May 2025 08:00:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:a9:c2:b3:95:5f:b8:dd:2f:16:1c:8c:20:b6:67:b2:58
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=505046da726aef99beb88a30c8a6faefe7520753
Validity
Not Before: May 7 08:00:31 2025 GMT
Not After : May 8 08:00:31 2025 GMT
Subject: CN=f0275cfee2632e998145d183608ff1dd47b3d2f6
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a7:30:5b:29:f4:e4:c8:45:23:60:17:d4:21:a3:
f1:1e:eb:20:70:b9:8d:75:42:4b:70:da:b0:58:f6:
72:f1:71:e0:75:ae:fe:9b:02:53:21:91:bf:57:51:
0e:a1:f6:78:df:d8:de:3e:fa:7e:dc:65:e4:a8:bd:
14:d9:80:5a:c0:f5:71:4a:c5:ee:a5:6a:cf:6e:fc:
8b:a0:03:c2:25:fa:46:c2:0f:19:b9:37:d3:b0:04:
9c:d2:07:fd:5f:94:78:90:6a:cf:d8:02:73:c1:9c:
10:d7:90:b5:5b:16:79:72:36:b4:e8:af:8f:84:47:
1b:28:03:c4:06:3e:6e:39:34:0d:82:a5:77:ba:a2:
42:c4:e1:8a:2b:6b:9b:ac:1c:a6:ef:ff:84:6d:27:
ae:65:9a:c3:7e:b0:d6:0b:4a:a6:77:17:0c:c6:31:
a1:73:d1:4f:19:4e:b6:06:c0:17:36:48:49:2d:e7:
1c:e2:3c:47:50:b8:85:8d:75:22:df:44:94:ab:84:
5d:f1:38:10:d5:36:e7:81:4d:79:cc:03:6b:a7:32:
da:ef:ec:62:d7:29:22:94:98:95:60:ba:44:1c:82:
1c:e4:e9:c9:de:97:d7:f0:a4:25:d5:58:ea:2d:59:
bf:d7:d7:a2:03:54:1b:11:b4:e3:13:49:17:44:c6:
5d:d7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F0:27:5C:FE:E2:63:2E:99:81:45:D1:83:60:8F:F1:DD:47:B3:D2:F6
X509v3 Authority Key Identifier:
keyid:50:50:46:DA:72:6A:EF:99:BE:B8:8A:30:C8:A6:FA:EF:E7:52:07:53
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/UFBG2nJq75m-uIowyKb67-dSB1M.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e0/47c2da-9c68-4f6f-9798-282fa2c01153/1/UFBG2nJq75m-uIowyKb67-dSB1M.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/e0/47c2da-9c68-4f6f-9798-282fa2c01153/1/UFBG2nJq75m-uIowyKb67-dSB1M.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
63:2e:fb:34:26:60:1a:f0:de:21:6e:8b:c4:4d:d4:3b:06:2b:
ba:b0:80:35:a5:4c:70:ab:b3:8a:45:a4:7a:08:47:f3:9a:73:
90:ad:ba:4c:6f:b9:3c:95:ff:99:16:39:6f:c0:1b:29:12:5a:
1a:00:98:cc:4f:fe:ee:6a:68:0e:4e:eb:73:0e:e5:2c:f2:b9:
1e:23:f1:a5:b0:ee:51:7d:7f:c4:11:57:ac:cf:1c:bd:ac:28:
be:cf:2c:36:51:5c:4b:bb:08:90:52:cd:6b:11:58:b0:e9:4b:
c9:e8:a5:b6:63:59:ad:a5:08:e3:51:4d:3d:89:72:20:3e:19:
45:45:4c:d4:07:b6:9c:92:bc:ea:2d:0d:66:16:93:b3:21:a0:
3a:fc:24:85:a0:ea:f6:16:ce:e2:a9:15:3c:ce:5d:ce:18:61:
f1:8f:f9:93:6d:69:de:de:99:61:d8:76:77:13:01:d7:b1:1c:
eb:7b:20:be:29:4f:25:2c:32:64:da:e1:e4:50:e9:c4:34:79:
95:dc:d8:42:d2:66:18:d4:c7:07:71:9d:a6:6b:19:37:ae:8a:
72:2e:46:94:4e:01:3b:64:97:37:32:8b:34:72:08:c6:50:7b:
4f:a1:3e:17:8e:20:dd:02:5c:43:63:fe:67:b2:b2:ea:69:14:
85:d5:91:9d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed May 7 14:10:39 2025 by rpki-client