Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f5/851708-19f9-4ecc-a442-0ce3a2efc8dd/1/UlkVtMckB6-3lB5b4pSscTOxB7M.mft
File: UlkVtMckB6-3lB5b4pSscTOxB7M.mft (raw, json)
Hash identifier: pbloHbqFZvQ70ozkbcYISlr0VEJP271ifpyt82OGchI=
Subject key identifier: 5E:57:98:69:75:63:98:06:B0:94:7B:DF:91:E3:17:23:74:65:E4:8A
Authority key identifier: 52:59:15:B4:C7:24:07:AF:B7:94:1E:5B:E2:94:AC:71:33:B1:07:B3
Certificate issuer: /CN=525915b4c72407afb7941e5be294ac7133b107b3
Certificate serial: 0196AC55E802DD710F37EEBB0BBB01BDD558
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/UlkVtMckB6-3lB5b4pSscTOxB7M.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/f5/851708-19f9-4ecc-a442-0ce3a2efc8dd/1/UlkVtMckB6-3lB5b4pSscTOxB7M.mft
Manifest number: 121C
Signing time: Wed 07 May 2025 20:00:33 +0000
Manifest this update: Wed 07 May 2025 20:00:33 +0000
Manifest next update: Thu 08 May 2025 20:00:33 +0000
Files and hashes: 1: UlkVtMckB6-3lB5b4pSscTOxB7M.crl (hash: vdraC/Lvop8k4KHqT3t9HugX2engt3RMHr4fdOHKsgw=)
2: ci7D-gavzkR5lRu-Y8rw6gTVt8k.roa (hash: e5+WwJtdUyHAODWheWNyNbbf9/GmybmxPgwjpdHpaL8=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/f5/851708-19f9-4ecc-a442-0ce3a2efc8dd/1/UlkVtMckB6-3lB5b4pSscTOxB7M.crl
rsync://rpki.ripe.net/repository/DEFAULT/f5/851708-19f9-4ecc-a442-0ce3a2efc8dd/1/UlkVtMckB6-3lB5b4pSscTOxB7M.mft
rsync://rpki.ripe.net/repository/DEFAULT/UlkVtMckB6-3lB5b4pSscTOxB7M.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 08 May 2025 13:31:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:ac:55:e8:02:dd:71:0f:37:ee:bb:0b:bb:01:bd:d5:58
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=525915b4c72407afb7941e5be294ac7133b107b3
Validity
Not Before: May 7 20:00:33 2025 GMT
Not After : May 8 20:00:33 2025 GMT
Subject: CN=5e57986975639806b0947bdf91e317237465e48a
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ab:ee:0d:c4:58:1f:15:ee:69:cf:66:e3:21:91:
3a:9d:5f:df:b5:67:02:4a:4d:12:83:da:31:87:a9:
2e:1e:89:a3:a6:fd:28:94:cb:fb:d1:8f:c9:fd:5b:
8a:d6:99:bf:80:12:7d:41:3b:85:db:b6:30:79:3e:
2c:80:55:68:24:73:9c:e3:15:28:6b:3e:d2:d9:16:
55:0b:f3:f3:f2:54:29:d8:75:db:28:8d:91:b2:99:
28:a8:50:60:bf:72:09:51:1c:c5:69:b3:86:1c:34:
cc:f3:c3:af:94:32:72:b4:2f:d1:4d:c1:83:5e:b4:
16:aa:0b:10:2b:2b:f1:c7:85:b2:d8:ac:0b:84:35:
6c:5f:8f:f1:b2:67:70:d4:b8:5b:6a:f7:0a:dc:b5:
58:22:80:1d:c1:73:90:b6:31:67:4a:b6:91:c3:8c:
e0:04:ee:84:e3:56:92:78:5f:4a:ad:52:3c:41:09:
be:bd:d4:26:52:0a:b8:a4:7f:5c:cc:a1:c2:38:f3:
31:7b:2e:cb:71:37:73:35:7c:34:ae:65:e6:a5:96:
40:01:db:76:b8:af:5e:96:c0:3b:c5:cb:94:cd:ce:
73:54:7b:d1:c3:d3:d9:c8:af:aa:b6:d0:d7:a3:4c:
a6:88:64:25:bb:60:76:0e:cb:e7:65:b8:b4:51:c5:
18:af
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
5E:57:98:69:75:63:98:06:B0:94:7B:DF:91:E3:17:23:74:65:E4:8A
X509v3 Authority Key Identifier:
keyid:52:59:15:B4:C7:24:07:AF:B7:94:1E:5B:E2:94:AC:71:33:B1:07:B3
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/UlkVtMckB6-3lB5b4pSscTOxB7M.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f5/851708-19f9-4ecc-a442-0ce3a2efc8dd/1/UlkVtMckB6-3lB5b4pSscTOxB7M.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/f5/851708-19f9-4ecc-a442-0ce3a2efc8dd/1/UlkVtMckB6-3lB5b4pSscTOxB7M.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
55:05:d2:c1:05:b4:4c:1f:cc:5b:23:0c:cd:fa:e5:87:37:7a:
b3:ac:81:13:2d:c2:56:c9:38:32:f1:e4:ea:7e:40:84:5e:1f:
60:24:41:d8:12:28:38:7b:e1:64:7e:ea:4d:13:0a:00:0b:25:
ec:b9:ae:45:a2:c0:a1:21:ac:7c:f1:b4:45:b8:2f:41:0f:f2:
4f:dd:a8:c4:5b:13:82:ea:46:12:b0:7d:5d:2c:53:97:02:19:
6d:21:ed:3c:6e:f2:01:1f:7d:d2:57:f3:74:8e:a9:3f:7b:f2:
db:41:c4:3f:c0:d5:e7:11:a3:ee:9c:21:72:69:0b:27:09:04:
1b:73:e8:39:1c:93:8b:c1:d3:cb:c1:8c:41:68:9c:f5:1e:dc:
fd:a4:84:72:88:b5:dc:58:f2:9e:b0:da:67:ce:fa:a1:a0:a0:
96:bb:c5:19:24:f5:c0:0e:fd:b5:4e:9f:cc:07:c5:42:26:85:
35:8b:51:71:15:12:c1:3c:39:ea:3b:7b:cb:61:f6:d6:fa:45:
2f:9a:c3:e3:d8:b4:cb:41:a4:ed:0b:48:c9:c4:3a:a2:80:32:
21:05:20:cf:f2:50:91:63:c3:e6:10:bc:94:ea:40:f6:98:dd:
fd:1d:65:46:1d:50:2d:29:f6:26:08:7e:de:5b:3d:5c:d0:67:
dd:b3:82:07
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed May 7 22:58:57 2025 by rpki-client