Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/0b/89c4ab-984b-4f6c-bdd0-33d7ac370979/1/UzkLE8nvSvz9CBJBEeb2PcMBZao.mft
File: UzkLE8nvSvz9CBJBEeb2PcMBZao.mft (raw, json)
Hash identifier: V3f2Ck+z4zljrEQL7c/E1R4aCK7iiLMhPA/2zzcENLI=
Subject key identifier: 3D:1B:85:42:99:65:7A:53:E4:A4:59:E0:D1:B7:85:8F:D2:A8:62:B7
Authority key identifier: 53:39:0B:13:C9:EF:4A:FC:FD:08:12:41:11:E6:F6:3D:C3:01:65:AA
Certificate issuer: /CN=53390b13c9ef4afcfd08124111e6f63dc30165aa
Certificate serial: 0196B8FEE0402BFC32DD07F1EEFFE09EB452
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/UzkLE8nvSvz9CBJBEeb2PcMBZao.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/0b/89c4ab-984b-4f6c-bdd0-33d7ac370979/1/UzkLE8nvSvz9CBJBEeb2PcMBZao.mft
Manifest number: 1504
Signing time: Sat 10 May 2025 07:00:33 +0000
Manifest this update: Sat 10 May 2025 07:00:33 +0000
Manifest next update: Sun 11 May 2025 07:00:33 +0000
Files and hashes: 1: FNCzHrm4Mhf_pUlLlpWPWnQnnOo.roa (hash: m1dgFfAYSERrYZAtXBbjJ6qPJN5B/vD9qgbql5DrAM0=)
2: UzkLE8nvSvz9CBJBEeb2PcMBZao.crl (hash: TpfKbyESemSYCmiaCWhiAx0ymA8r59Q1i48aZpdZAI0=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/0b/89c4ab-984b-4f6c-bdd0-33d7ac370979/1/UzkLE8nvSvz9CBJBEeb2PcMBZao.crl
rsync://rpki.ripe.net/repository/DEFAULT/0b/89c4ab-984b-4f6c-bdd0-33d7ac370979/1/UzkLE8nvSvz9CBJBEeb2PcMBZao.mft
rsync://rpki.ripe.net/repository/DEFAULT/UzkLE8nvSvz9CBJBEeb2PcMBZao.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 11 May 2025 04:00:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:b8:fe:e0:40:2b:fc:32:dd:07:f1:ee:ff:e0:9e:b4:52
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=53390b13c9ef4afcfd08124111e6f63dc30165aa
Validity
Not Before: May 10 07:00:33 2025 GMT
Not After : May 11 07:00:33 2025 GMT
Subject: CN=3d1b854299657a53e4a459e0d1b7858fd2a862b7
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:98:d9:da:85:a7:8e:11:ff:fe:0e:0f:97:d5:61:
ff:b9:8d:b6:d6:be:23:ea:67:f4:ba:8d:ad:e6:aa:
9c:8c:d6:05:d4:20:be:91:38:68:e2:45:71:55:05:
1a:4f:08:93:71:be:c4:9a:96:85:f7:f9:55:eb:53:
d1:7b:aa:43:84:5e:a9:3e:95:ee:a4:98:bb:bf:29:
91:99:d1:e3:52:99:63:be:1b:d1:23:ff:2b:bd:ad:
c3:9f:4e:52:29:13:c3:50:e2:8e:ee:2c:e6:e7:a1:
e3:f6:b5:75:1f:80:17:29:0f:3d:3b:bc:16:ea:d5:
f1:9c:75:4d:80:d3:b3:2d:50:10:7d:d9:4f:ae:87:
f8:12:43:8d:71:54:d0:54:50:47:ee:82:29:b5:94:
a0:5b:66:b7:a1:92:d0:07:f1:fd:84:8c:26:6c:cf:
22:c2:4b:51:35:2a:90:0a:24:ac:a3:60:7f:8c:77:
2a:df:9f:ec:d7:f2:25:e2:b5:03:8c:2d:6a:c4:ca:
68:57:79:93:58:55:6d:86:d9:82:cd:5d:b1:10:ab:
5c:a1:3f:9a:2e:ad:3b:f2:f0:3d:fa:02:d5:b9:38:
f9:16:b6:74:a0:01:4d:62:82:e9:04:b3:f5:7b:ec:
f2:5a:9b:f2:d2:69:55:07:30:7c:60:75:33:d5:a5:
1b:07
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
3D:1B:85:42:99:65:7A:53:E4:A4:59:E0:D1:B7:85:8F:D2:A8:62:B7
X509v3 Authority Key Identifier:
keyid:53:39:0B:13:C9:EF:4A:FC:FD:08:12:41:11:E6:F6:3D:C3:01:65:AA
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/UzkLE8nvSvz9CBJBEeb2PcMBZao.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/0b/89c4ab-984b-4f6c-bdd0-33d7ac370979/1/UzkLE8nvSvz9CBJBEeb2PcMBZao.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/0b/89c4ab-984b-4f6c-bdd0-33d7ac370979/1/UzkLE8nvSvz9CBJBEeb2PcMBZao.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
92:71:f0:5f:f1:0e:27:64:4c:9d:7e:30:d4:1f:a7:07:af:bd:
98:e3:1b:fe:ee:6b:86:e4:5d:f8:a3:2a:55:ed:99:84:7a:db:
80:71:80:4f:fc:17:9e:5b:8e:0a:98:4c:76:4f:da:c7:05:88:
08:f9:b9:c5:bc:e6:78:b4:a0:4a:93:68:7d:3f:db:73:52:ed:
c9:36:fc:16:35:a8:78:21:71:3b:f2:82:26:75:50:51:95:89:
f2:91:36:31:7a:d2:b0:18:bc:9c:e2:71:17:ea:0e:a7:b6:d3:
38:d7:2f:41:63:d9:40:ce:88:30:60:63:d6:2f:47:f0:d9:90:
3c:bb:50:40:7d:ab:d0:88:1d:49:34:b5:00:15:56:3f:40:ff:
53:41:49:46:3a:9d:84:33:b6:d6:16:3f:b0:83:1c:92:0f:18:
d6:05:57:3d:41:a7:a0:72:28:36:78:c4:48:ca:8e:dc:cc:30:
9c:5c:11:63:b9:9b:4e:33:0a:87:d2:44:3e:35:e9:8f:5d:7e:
d2:5e:f9:9d:0d:5f:8a:a9:ab:d3:a2:d4:b1:e5:8f:56:e7:75:
75:7a:93:05:1d:f5:1b:c7:53:86:32:df:64:09:76:6c:92:19:
27:08:8c:ad:8b:aa:51:b4:a9:ab:11:44:6e:53:74:74:81:bc:
ae:aa:8e:d8
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat May 10 12:46:24 2025 by rpki-client