Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f0/ce58d5-126a-44aa-aa08-0f3c1658d0b7/1/UJY_Dmf02JPPPXAaI2EObziVkmA.mft
File: UJY_Dmf02JPPPXAaI2EObziVkmA.mft (raw, json)
Hash identifier: /lZXyME0Uz4MOhL87/sR6cKr4tscNyiM7ZgtypF+4GM=
Subject key identifier: 93:C8:38:CD:5E:34:CF:2A:86:CC:DA:77:EF:93:E1:7E:40:34:CD:BE
Authority key identifier: 50:96:3F:0E:67:F4:D8:93:CF:3D:70:1A:23:61:0E:6F:38:95:92:60
Certificate issuer: /CN=50963f0e67f4d893cf3d701a23610e6f38959260
Certificate serial: 0196A653EDFF02B8279A40CE5B0DBF928943
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/UJY_Dmf02JPPPXAaI2EObziVkmA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/f0/ce58d5-126a-44aa-aa08-0f3c1658d0b7/1/UJY_Dmf02JPPPXAaI2EObziVkmA.mft
Manifest number: 045B
Signing time: Tue 06 May 2025 16:00:40 +0000
Manifest this update: Tue 06 May 2025 16:00:40 +0000
Manifest next update: Wed 07 May 2025 16:00:40 +0000
Files and hashes: 1: 0EbACDVL2fDivnf5KUiVukCW6AM.roa (hash: 2EVhZ0rS+lj6U3ajXAU+8FEPpDbqGDvioQB8YdIkUmc=)
2: UJY_Dmf02JPPPXAaI2EObziVkmA.crl (hash: JdVQmttDK3NlvzcGGXEtmW5LfU6tewaKfWMv1FpV25Q=)
3: mqm7Jg5-zPabxGFXHWcZsQaK2dY.roa (hash: /oBnHrhig1strh5pSaVLSZyr3E+b/5bhNvAnJC6HiAM=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/f0/ce58d5-126a-44aa-aa08-0f3c1658d0b7/1/UJY_Dmf02JPPPXAaI2EObziVkmA.crl
rsync://rpki.ripe.net/repository/DEFAULT/f0/ce58d5-126a-44aa-aa08-0f3c1658d0b7/1/UJY_Dmf02JPPPXAaI2EObziVkmA.mft
rsync://rpki.ripe.net/repository/DEFAULT/UJY_Dmf02JPPPXAaI2EObziVkmA.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 07 May 2025 16:00:40 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:a6:53:ed:ff:02:b8:27:9a:40:ce:5b:0d:bf:92:89:43
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=50963f0e67f4d893cf3d701a23610e6f38959260
Validity
Not Before: May 6 16:00:40 2025 GMT
Not After : May 7 16:00:40 2025 GMT
Subject: CN=93c838cd5e34cf2a86ccda77ef93e17e4034cdbe
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c3:5d:52:f1:99:08:19:36:63:ed:78:3b:5f:e5:
87:b2:0b:c3:d6:1a:4c:7a:6e:df:31:76:30:85:1a:
a5:e6:a7:4c:ce:88:a8:72:8c:a2:11:99:e5:de:20:
f2:14:da:a4:8a:43:35:2d:d8:40:ec:62:2a:12:17:
e2:49:62:63:04:36:eb:97:25:a1:66:93:42:e1:12:
38:fb:69:98:06:3e:5e:9d:a2:7e:1e:2b:fe:a9:14:
7b:ac:a0:b8:46:0e:09:78:b6:3b:8b:0c:2c:39:13:
22:cf:4e:e3:3f:be:6e:42:d8:e3:74:35:f8:55:93:
f3:a9:e3:b0:36:bf:80:26:40:96:ca:06:b3:91:65:
fd:90:a2:a8:3f:2b:72:07:96:f7:d2:b9:a5:a2:6d:
d6:22:81:c5:39:e1:f3:61:01:43:6a:e4:bc:2b:d0:
c7:80:73:44:04:16:28:21:d6:b2:ab:72:a8:b9:f1:
04:da:35:e2:4a:fa:58:5c:53:63:cb:6d:82:36:b2:
8e:a7:a1:c4:09:b7:7d:f9:4a:35:f5:af:5a:d7:20:
e9:ab:49:3d:43:1c:06:9d:69:28:aa:a8:42:c0:87:
04:f5:de:ca:d3:7a:7c:bb:ed:3f:77:72:84:cb:22:
02:ba:95:49:5f:cb:7c:5b:19:07:b7:80:28:3d:ce:
97:6f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
93:C8:38:CD:5E:34:CF:2A:86:CC:DA:77:EF:93:E1:7E:40:34:CD:BE
X509v3 Authority Key Identifier:
keyid:50:96:3F:0E:67:F4:D8:93:CF:3D:70:1A:23:61:0E:6F:38:95:92:60
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/UJY_Dmf02JPPPXAaI2EObziVkmA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f0/ce58d5-126a-44aa-aa08-0f3c1658d0b7/1/UJY_Dmf02JPPPXAaI2EObziVkmA.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/f0/ce58d5-126a-44aa-aa08-0f3c1658d0b7/1/UJY_Dmf02JPPPXAaI2EObziVkmA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
4d:74:39:41:e2:75:99:56:f2:8b:ea:bf:5d:ff:c4:98:8e:48:
f5:72:47:09:17:86:7a:6e:02:9b:7c:76:b9:37:aa:eb:6b:4c:
c9:ec:90:53:ef:9b:9d:dd:ad:e8:a6:be:0a:99:85:b9:77:ab:
c0:44:ab:7a:c6:90:4d:dc:c0:8c:8e:1f:aa:9a:9e:d1:81:0c:
18:dc:ee:3c:71:85:58:48:43:00:2c:68:08:ed:e3:9f:49:0e:
08:87:8d:1b:5b:43:1b:9a:c4:5f:a6:e0:80:9e:66:26:94:a9:
28:02:6c:a1:0f:1a:cf:bd:32:b0:5b:72:46:25:ff:65:32:94:
f4:eb:01:f4:af:8a:79:f7:a5:d1:ee:0b:7e:8d:69:33:bf:d4:
22:d2:3e:9f:41:5f:89:2a:72:cb:df:8d:0f:ad:9d:c3:16:38:
82:05:78:72:1e:91:09:e1:ac:db:42:96:a5:59:4d:e8:3b:04:
f9:3d:f8:48:10:26:77:fe:84:02:04:08:bd:ff:7b:92:c2:ca:
7d:1d:9a:02:81:c8:61:be:9c:fe:79:0d:c3:ad:db:bb:1e:bf:
bf:fc:04:0e:51:10:5c:28:21:ac:06:a9:f8:0a:02:e5:0f:ee:
84:f8:fd:95:18:5a:33:d3:ae:a5:72:8f:89:93:6b:22:1f:36:
9f:1e:36:c2
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed May 7 01:42:40 2025 by rpki-client