
Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f3/a73900-b34f-4ffc-9e39-2315cd9b9fa2/1/UcPMVEFPtEK-OdbhpK9yTP_u7v8.mft
File: UcPMVEFPtEK-OdbhpK9yTP_u7v8.mft (raw, json)
Hash identifier: 5WIMISCJgxbElexRoKyZStv47yvWvYggtushJb0uYc4=
Subject key identifier: D3:58:F9:ED:E1:89:0C:D8:84:62:29:BC:1E:D0:E1:BC:51:8A:95:77
Authority key identifier: 51:C3:CC:54:41:4F:B4:42:BE:39:D6:E1:A4:AF:72:4C:FF:EE:EE:FF
Certificate issuer: /CN=51c3cc54414fb442be39d6e1a4af724cffeeeeff
Certificate serial: 01969CABB934F55AA0421F3D8F8D2105D84C
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/UcPMVEFPtEK-OdbhpK9yTP_u7v8.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/f3/a73900-b34f-4ffc-9e39-2315cd9b9fa2/1/UcPMVEFPtEK-OdbhpK9yTP_u7v8.mft
Manifest number: 1428
Signing time: Sun 04 May 2025 19:00:21 +0000
Manifest this update: Sun 04 May 2025 19:00:21 +0000
Manifest next update: Mon 05 May 2025 19:00:21 +0000
Files and hashes: 1: UcPMVEFPtEK-OdbhpK9yTP_u7v8.crl (hash: IJv2H3O2zv3kqiiUwq8f+rtP8Op7f3If2DCEVjgjfPk=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/f3/a73900-b34f-4ffc-9e39-2315cd9b9fa2/1/UcPMVEFPtEK-OdbhpK9yTP_u7v8.crl
rsync://rpki.ripe.net/repository/DEFAULT/f3/a73900-b34f-4ffc-9e39-2315cd9b9fa2/1/UcPMVEFPtEK-OdbhpK9yTP_u7v8.mft
rsync://rpki.ripe.net/repository/DEFAULT/UcPMVEFPtEK-OdbhpK9yTP_u7v8.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 05 May 2025 19:00:21 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:9c:ab:b9:34:f5:5a:a0:42:1f:3d:8f:8d:21:05:d8:4c
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=51c3cc54414fb442be39d6e1a4af724cffeeeeff
Validity
Not Before: May 4 19:00:21 2025 GMT
Not After : May 5 19:00:21 2025 GMT
Subject: CN=d358f9ede1890cd8846229bc1ed0e1bc518a9577
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ae:07:19:35:85:02:68:ef:1f:4f:61:6b:f7:b2:
9f:c3:38:bc:ff:b2:79:b8:7d:0d:55:90:ba:58:38:
5e:a6:2d:79:1d:d1:48:a1:63:2d:27:e4:fe:4b:5d:
af:4c:13:d6:90:f7:bb:fd:53:28:11:06:94:7d:17:
29:38:0a:2f:8f:0c:3f:15:23:32:8f:95:01:7a:58:
41:81:da:27:01:d4:d7:e0:5b:27:f6:d6:7f:9e:a1:
f9:b1:3d:ec:aa:11:b0:11:56:28:ad:2d:2f:00:56:
16:78:77:ef:6b:d7:a9:ce:bf:3c:80:79:50:cf:5a:
c7:02:8f:f6:5b:db:74:27:25:4e:e6:06:1d:d8:48:
42:7a:b8:a5:e8:66:e2:a9:92:1d:01:c6:58:f7:04:
5b:01:99:42:a3:68:bc:69:2a:72:a1:51:36:69:8b:
41:95:cd:8b:5b:14:f6:b3:72:a6:46:95:1e:7f:3e:
48:64:31:77:b4:df:a1:13:e4:43:11:d8:27:cc:cc:
11:37:3f:bf:5f:c5:53:38:4d:94:f8:3e:8b:d5:56:
71:a0:46:bc:6f:a3:09:cc:05:0c:6f:bf:eb:1c:d6:
f4:2f:54:6c:0a:09:6d:d1:c9:00:46:7a:ea:12:cc:
22:b5:84:45:06:2f:57:b9:24:78:11:51:d1:0b:17:
23:25
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D3:58:F9:ED:E1:89:0C:D8:84:62:29:BC:1E:D0:E1:BC:51:8A:95:77
X509v3 Authority Key Identifier:
keyid:51:C3:CC:54:41:4F:B4:42:BE:39:D6:E1:A4:AF:72:4C:FF:EE:EE:FF
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/UcPMVEFPtEK-OdbhpK9yTP_u7v8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f3/a73900-b34f-4ffc-9e39-2315cd9b9fa2/1/UcPMVEFPtEK-OdbhpK9yTP_u7v8.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/f3/a73900-b34f-4ffc-9e39-2315cd9b9fa2/1/UcPMVEFPtEK-OdbhpK9yTP_u7v8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
3c:5f:f9:b2:9c:8e:c9:fa:c0:10:9f:8d:89:56:4c:89:81:d7:
b2:2a:8a:1a:39:91:a8:b8:77:77:41:47:4a:30:90:e1:f5:a3:
7d:2e:22:f0:d2:f0:0d:03:12:d0:ac:c1:4d:09:75:4f:c0:01:
ca:89:28:ef:de:47:93:a2:2e:21:0d:fa:50:a4:ff:5e:88:cb:
ab:85:81:ee:8f:ba:02:76:04:30:bd:97:b3:d2:ea:47:48:6e:
87:1e:d1:4c:92:45:5c:18:8e:d9:6c:c8:a4:5c:a6:4d:e7:55:
4a:a8:7b:34:b3:84:b2:e7:96:ed:ed:34:03:1b:53:27:c3:73:
3c:74:3c:24:65:18:e1:be:0f:8f:bc:ad:b8:e8:58:3d:22:38:
3b:f9:42:65:66:bf:df:6f:ba:1a:c8:44:6e:43:80:fa:e7:da:
f5:f0:e0:20:55:a7:32:86:15:ba:3b:e0:0e:c5:a6:2c:cf:5a:
7f:77:24:88:b5:28:bb:b1:99:0d:4d:d4:b0:52:6e:4d:4f:b7:
00:3f:f6:14:23:8f:df:c1:71:07:fb:4b:05:44:90:ac:0b:03:
4a:91:d6:b4:3a:ac:68:9b:ba:9b:8f:1d:4a:10:8a:99:10:7c:
e0:2a:4e:f4:2a:f8:25:8a:a1:e4:04:36:7a:11:fc:86:e4:59:
45:41:82:3f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon May 5 03:37:05 2025 by rpki-client