Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/0c/0e2714-9dd6-4fe8-ab24-94415690ddfd/1/U1KZJLIzrFY8CODDE-KSE_2Wlmk.mft
File: U1KZJLIzrFY8CODDE-KSE_2Wlmk.mft (raw, json)
Hash identifier: XmO8F3E+bouaiz9FZCV5WfaTEuDhxSQEZUVrXuBSRN4=
Subject key identifier: 09:55:13:61:6D:B4:6E:A4:19:4E:CF:1B:5B:BF:9F:5B:78:BA:16:4E
Authority key identifier: 53:52:99:24:B2:33:AC:56:3C:08:E0:C3:13:E2:92:13:FD:96:96:69
Certificate issuer: /CN=53529924b233ac563c08e0c313e29213fd969669
Certificate serial: 0196C64CB1EDA545514ED16D11BC1BE03FA5
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/U1KZJLIzrFY8CODDE-KSE_2Wlmk.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/0c/0e2714-9dd6-4fe8-ab24-94415690ddfd/1/U1KZJLIzrFY8CODDE-KSE_2Wlmk.mft
Manifest number: 1537
Signing time: Mon 12 May 2025 21:00:36 +0000
Manifest this update: Mon 12 May 2025 21:00:36 +0000
Manifest next update: Tue 13 May 2025 21:00:36 +0000
Files and hashes: 1: 2ZWGjOJRjPHh5vUmuBkXmOeyAXA.roa (hash: kLXH6SccoLYnkJO+CuKpGrRpPoXv66yopZLZsS2CgSg=)
2: U1KZJLIzrFY8CODDE-KSE_2Wlmk.crl (hash: LbxYDKYHz2InXdjjDtmgeMFIJVeH96Uuen4FXwy1BM0=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/0c/0e2714-9dd6-4fe8-ab24-94415690ddfd/1/U1KZJLIzrFY8CODDE-KSE_2Wlmk.crl
rsync://rpki.ripe.net/repository/DEFAULT/0c/0e2714-9dd6-4fe8-ab24-94415690ddfd/1/U1KZJLIzrFY8CODDE-KSE_2Wlmk.mft
rsync://rpki.ripe.net/repository/DEFAULT/U1KZJLIzrFY8CODDE-KSE_2Wlmk.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 13 May 2025 14:31:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:c6:4c:b1:ed:a5:45:51:4e:d1:6d:11:bc:1b:e0:3f:a5
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=53529924b233ac563c08e0c313e29213fd969669
Validity
Not Before: May 12 21:00:36 2025 GMT
Not After : May 13 21:00:36 2025 GMT
Subject: CN=095513616db46ea4194ecf1b5bbf9f5b78ba164e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8a:3b:ec:35:03:83:b0:b5:f8:bb:7b:c0:49:1c:
0e:73:42:f4:39:8a:9d:b8:35:0c:25:7e:20:8e:a4:
2b:c8:45:82:b0:6d:5c:7c:47:5d:71:5a:61:98:b9:
af:6c:9f:b7:90:9f:ab:0d:55:bf:60:b7:70:b8:75:
55:5f:4e:bf:3f:d1:da:dd:de:0b:2b:93:50:fe:a6:
66:3c:67:60:62:cf:11:f0:95:a7:94:62:d3:df:ab:
40:f5:7c:bc:34:e5:4c:98:fa:7c:67:30:3e:73:bf:
9c:63:69:3e:d3:57:a8:d7:0a:81:39:47:61:32:de:
a1:2d:ae:8f:ec:d4:f7:3b:02:34:de:9e:75:4d:28:
0f:bf:31:53:00:30:ed:dc:5b:05:02:e8:66:3b:32:
0b:5e:c7:8b:d5:d6:ec:6b:4a:03:8d:42:ef:8c:49:
3c:95:3a:3a:83:c0:67:19:0a:a0:9a:f4:29:95:fd:
34:5f:a8:f0:07:c2:c1:37:b2:24:c1:0e:b4:df:a1:
84:dd:68:54:e5:83:80:fe:06:1d:db:a8:65:90:03:
09:75:2b:05:2f:9c:67:b5:22:49:96:c8:8f:fa:5f:
39:41:f2:f6:79:05:aa:7d:60:60:a8:1f:56:f1:b3:
4b:da:d1:c7:e4:13:ef:46:c6:31:22:e9:6d:82:98:
72:df
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
09:55:13:61:6D:B4:6E:A4:19:4E:CF:1B:5B:BF:9F:5B:78:BA:16:4E
X509v3 Authority Key Identifier:
keyid:53:52:99:24:B2:33:AC:56:3C:08:E0:C3:13:E2:92:13:FD:96:96:69
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/U1KZJLIzrFY8CODDE-KSE_2Wlmk.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/0c/0e2714-9dd6-4fe8-ab24-94415690ddfd/1/U1KZJLIzrFY8CODDE-KSE_2Wlmk.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/0c/0e2714-9dd6-4fe8-ab24-94415690ddfd/1/U1KZJLIzrFY8CODDE-KSE_2Wlmk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
5f:12:3d:a3:6b:3b:15:2b:a6:1e:85:d7:e4:8c:ea:a0:0d:b6:
43:7d:59:21:dd:48:58:72:b2:6a:98:e2:49:de:83:d8:45:73:
b5:49:88:26:16:6b:8f:21:17:26:3d:b3:b3:25:bd:6e:27:91:
20:25:26:37:28:f1:dd:bd:c8:2c:a8:e3:25:c9:d5:36:37:1f:
5a:02:07:20:4d:b0:20:fd:67:9e:3d:91:d7:b6:e8:df:f0:3c:
87:04:a1:05:27:bf:49:85:39:0a:8e:db:08:f6:f2:73:fe:eb:
87:67:66:cd:ec:2c:c8:12:39:22:f9:5d:c2:b8:03:15:ed:1c:
dc:d7:fb:03:41:2b:0a:44:20:cf:7e:c6:85:ab:0a:73:73:3e:
d3:32:5d:f7:bc:f7:7c:11:5b:0b:83:c9:23:7c:bf:27:27:a4:
41:f3:89:17:8e:35:94:40:4c:d9:22:7f:b9:9e:40:0a:30:22:
2f:f2:18:a7:44:96:7c:38:7f:d9:f1:4f:b1:78:d2:15:61:02:
b0:46:17:a0:24:c9:50:fc:4a:59:0e:71:45:d6:4f:fa:f3:8b:
2d:39:dc:73:cd:42:14:5c:9f:95:1f:9c:00:64:af:a5:ed:05:
9c:f5:18:14:45:42:68:62:99:cc:d6:60:57:48:d1:d1:dc:32:
22:3c:ed:4d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue May 13 00:31:10 2025 by rpki-client