Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/01/f52cea-3f41-482b-8ce8-2e2548310df3/1/u2Hfcfl0YcaztFSP3P7Nd7Z5Aw8.mft
File: u2Hfcfl0YcaztFSP3P7Nd7Z5Aw8.mft (raw, json)
Hash identifier: L0K/2xkzmdwY16gE6gmxXiyDsgaX3XxKN4BcLDFlAEU=
Subject key identifier: 1C:E2:89:00:C4:15:99:38:A9:17:ED:44:5A:46:B5:D7:D9:45:CE:11
Authority key identifier: BB:61:DF:71:F9:74:61:C6:B3:B4:54:8F:DC:FE:CD:77:B6:79:03:0F
Certificate issuer: /CN=bb61df71f97461c6b3b4548fdcfecd77b679030f
Certificate serial: 0196BCDBD0DB21EB64D1C705EFC2F0E13BDD
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/u2Hfcfl0YcaztFSP3P7Nd7Z5Aw8.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/01/f52cea-3f41-482b-8ce8-2e2548310df3/1/u2Hfcfl0YcaztFSP3P7Nd7Z5Aw8.mft
Manifest number: 1533
Signing time: Sun 11 May 2025 01:00:44 +0000
Manifest this update: Sun 11 May 2025 01:00:44 +0000
Manifest next update: Mon 12 May 2025 01:00:44 +0000
Files and hashes: 1: Lhe1dIcaQ8uYC-tM4_HlulQzvCo.roa (hash: tTALYzIFh4izYkRayS1lcrRII4GdMnV6mKHpYnfWfmk=)
2: u2Hfcfl0YcaztFSP3P7Nd7Z5Aw8.crl (hash: u2ZSGgD9ZBPkQZYRKuLMCZtiE4C0pSq+o0rqtoss6fY=)
3: xG6V-ZBOkUvyT-WvdOCbpNGBhno.roa (hash: Naq65ENl+tsrgyE3t3NO3AfPirgJokBnbdzMIvkSOwo=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/01/f52cea-3f41-482b-8ce8-2e2548310df3/1/u2Hfcfl0YcaztFSP3P7Nd7Z5Aw8.crl
rsync://rpki.ripe.net/repository/DEFAULT/01/f52cea-3f41-482b-8ce8-2e2548310df3/1/u2Hfcfl0YcaztFSP3P7Nd7Z5Aw8.mft
rsync://rpki.ripe.net/repository/DEFAULT/u2Hfcfl0YcaztFSP3P7Nd7Z5Aw8.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 11 May 2025 22:00:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:bc:db:d0:db:21:eb:64:d1:c7:05:ef:c2:f0:e1:3b:dd
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=bb61df71f97461c6b3b4548fdcfecd77b679030f
Validity
Not Before: May 11 01:00:44 2025 GMT
Not After : May 12 01:00:44 2025 GMT
Subject: CN=1ce28900c4159938a917ed445a46b5d7d945ce11
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ae:ff:63:d2:e3:8d:10:77:cb:33:46:18:b3:18:
ab:fa:c7:54:cd:ad:1f:7f:72:5e:0f:68:b3:da:6f:
bd:63:8b:0d:27:a0:bd:f8:1d:08:fd:22:b0:25:d2:
32:aa:64:f3:6a:63:70:24:f9:47:54:06:14:17:79:
d2:f5:55:67:5e:80:74:06:cd:65:58:a5:fe:fe:6f:
18:33:cc:8c:c9:0e:5d:48:c6:04:fc:88:7e:51:f8:
9d:48:a3:c3:41:3e:0d:c6:14:d3:1d:8e:6f:d5:2a:
a1:50:31:e6:d7:64:44:28:ca:25:44:47:9f:dd:72:
1a:c2:46:a3:35:b5:15:3b:79:33:28:53:12:3d:f2:
ef:f5:10:03:7d:6d:28:66:65:1e:af:e6:9d:30:88:
19:bf:17:04:48:c8:5e:73:1f:3c:3c:fb:63:dc:fe:
cd:5a:e2:76:bd:c5:27:64:ad:69:2c:2f:85:af:e6:
9b:68:50:e6:36:9b:75:5b:51:23:71:45:ef:68:d5:
52:33:b5:67:e3:58:50:68:35:22:f6:46:a6:56:aa:
ba:cc:02:a4:1a:d2:bf:96:d0:fd:70:63:dd:ca:1c:
88:ed:34:3e:d2:cd:ec:5c:e0:78:cf:5d:9f:8d:4e:
a1:ed:dc:d8:29:c2:b6:d6:4d:83:ae:6d:0b:54:25:
7e:45
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
1C:E2:89:00:C4:15:99:38:A9:17:ED:44:5A:46:B5:D7:D9:45:CE:11
X509v3 Authority Key Identifier:
keyid:BB:61:DF:71:F9:74:61:C6:B3:B4:54:8F:DC:FE:CD:77:B6:79:03:0F
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/u2Hfcfl0YcaztFSP3P7Nd7Z5Aw8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/01/f52cea-3f41-482b-8ce8-2e2548310df3/1/u2Hfcfl0YcaztFSP3P7Nd7Z5Aw8.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/01/f52cea-3f41-482b-8ce8-2e2548310df3/1/u2Hfcfl0YcaztFSP3P7Nd7Z5Aw8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
42:b0:2c:f3:22:b0:de:dc:8a:3c:93:a3:58:b8:e3:c3:49:80:
ff:fb:04:b5:f8:71:db:b5:20:ac:d6:74:5b:e7:41:6e:81:e0:
fe:f6:2c:f9:7e:47:35:28:0d:60:a9:7c:65:a2:2b:3f:3e:f4:
0c:89:f0:a2:b2:98:9f:ee:a1:3d:87:30:bb:59:79:ae:52:3d:
eb:f6:65:a6:63:3c:4a:19:d7:7c:8d:15:bd:69:d0:e9:1b:48:
db:a5:94:0d:46:c2:46:73:57:c5:d0:b6:1e:bc:89:cc:d5:d9:
1a:47:b7:04:92:1d:66:42:6d:92:c9:65:c6:a6:23:76:3d:88:
de:1b:d7:fa:6e:05:3f:9d:09:10:cb:54:69:e8:a1:61:bd:8b:
dc:f6:87:a3:fd:8a:65:40:06:22:e6:b7:0e:95:a6:54:38:19:
35:96:9b:65:1f:f7:8e:74:00:4f:fd:a3:50:3c:e8:b4:a5:4b:
e2:05:92:f7:b1:b9:cf:09:f7:ae:64:dc:8f:46:bd:c2:53:04:
d9:60:4e:b4:9b:08:ba:c3:24:1d:58:5c:87:97:db:f6:ee:03:
4b:37:1e:f3:03:58:e0:7d:fb:dd:e7:b7:b7:1a:c3:51:c6:f1:
a9:0e:d4:2c:e4:37:68:42:36:7e:fb:0a:e6:67:14:11:b0:17:
7c:7a:94:7d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun May 11 05:34:50 2025 by rpki-client