Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/10/9cb0e9-537d-4f6e-b98e-2eb70a3602e9/1/U43RixaS2KPncS0-a5KLCaoK5mw.mft
File: U43RixaS2KPncS0-a5KLCaoK5mw.mft (raw, json)
Hash identifier: olR6JAn0mZD3HUxmiFwdHtJo2VN3W634E9jQq8p4pDY=
Subject key identifier: 94:3E:B1:DF:8F:71:A6:10:6F:5F:9B:37:D3:D3:04:C9:C2:A3:24:CB
Authority key identifier: 53:8D:D1:8B:16:92:D8:A3:E7:71:2D:3E:6B:92:8B:09:AA:0A:E6:6C
Certificate issuer: /CN=538dd18b1692d8a3e7712d3e6b928b09aa0ae66c
Certificate serial: 0196AEE903AF99732DEF7A88F25B5A78707D
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/U43RixaS2KPncS0-a5KLCaoK5mw.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/10/9cb0e9-537d-4f6e-b98e-2eb70a3602e9/1/U43RixaS2KPncS0-a5KLCaoK5mw.mft
Manifest number: 09
Signing time: Thu 08 May 2025 08:00:28 +0000
Manifest this update: Thu 08 May 2025 08:00:28 +0000
Manifest next update: Fri 09 May 2025 08:00:28 +0000
Files and hashes: 1: SwaXTGGr0ahjQ1G33wMOq2yL9kc.roa (hash: s75fnBdKMDFGDlAd01pq/TKHtxWMXcAxczgmSdWq70s=)
2: U43RixaS2KPncS0-a5KLCaoK5mw.crl (hash: UMfUOPrSr1nu0fAi/a5i2CsnCz1P73QB77Ogad/dPXw=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/10/9cb0e9-537d-4f6e-b98e-2eb70a3602e9/1/U43RixaS2KPncS0-a5KLCaoK5mw.crl
rsync://rpki.ripe.net/repository/DEFAULT/10/9cb0e9-537d-4f6e-b98e-2eb70a3602e9/1/U43RixaS2KPncS0-a5KLCaoK5mw.mft
rsync://rpki.ripe.net/repository/DEFAULT/U43RixaS2KPncS0-a5KLCaoK5mw.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 09 May 2025 08:00:28 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:ae:e9:03:af:99:73:2d:ef:7a:88:f2:5b:5a:78:70:7d
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=538dd18b1692d8a3e7712d3e6b928b09aa0ae66c
Validity
Not Before: May 8 08:00:28 2025 GMT
Not After : May 9 08:00:28 2025 GMT
Subject: CN=943eb1df8f71a6106f5f9b37d3d304c9c2a324cb
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cf:e8:6d:99:28:c6:bc:ef:bb:65:d3:3a:fe:bf:
24:30:83:a9:ac:c3:f9:c0:91:80:1f:a7:a1:79:22:
26:b4:a6:37:a8:4a:f7:7a:9a:35:b9:37:00:2c:05:
e5:f2:81:15:11:83:64:92:46:c7:81:8a:9f:b3:dd:
e7:34:ef:df:eb:4f:1b:f4:cd:10:93:9f:ca:e4:69:
0f:db:5d:c7:d8:a3:e3:7c:26:ae:d7:48:7b:df:55:
ca:f1:6b:ca:5d:9d:45:d5:90:f3:ff:72:9e:a6:90:
89:64:45:fd:56:13:6a:61:f1:4d:df:e6:08:35:46:
cc:09:e8:2f:2d:d7:27:c2:35:9d:75:c7:06:e0:24:
a0:1f:9e:87:a8:cf:60:ad:0c:89:48:eb:e2:38:96:
1f:ee:c7:30:30:2c:63:f6:cf:33:c7:f8:5d:00:89:
c1:17:45:cd:f5:f1:fb:69:cc:82:26:d2:d9:54:68:
e4:ee:7c:d0:4a:4c:04:e2:0f:0a:8b:bb:48:44:cc:
9e:fd:b7:69:04:82:de:8f:18:7a:21:19:d6:0b:c2:
48:e3:65:7f:18:22:6f:75:9e:a4:4a:54:db:66:40:
e3:8e:49:4d:ac:c7:46:df:b3:d9:da:be:e1:09:c5:
8b:b8:37:60:31:de:62:81:40:e3:81:71:8b:c1:20:
d3:35
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
94:3E:B1:DF:8F:71:A6:10:6F:5F:9B:37:D3:D3:04:C9:C2:A3:24:CB
X509v3 Authority Key Identifier:
keyid:53:8D:D1:8B:16:92:D8:A3:E7:71:2D:3E:6B:92:8B:09:AA:0A:E6:6C
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/U43RixaS2KPncS0-a5KLCaoK5mw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/10/9cb0e9-537d-4f6e-b98e-2eb70a3602e9/1/U43RixaS2KPncS0-a5KLCaoK5mw.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/10/9cb0e9-537d-4f6e-b98e-2eb70a3602e9/1/U43RixaS2KPncS0-a5KLCaoK5mw.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
7b:85:51:2e:2e:06:3e:02:f9:e8:09:e7:75:ac:10:a5:81:66:
cd:17:66:77:ea:71:46:96:31:e4:5a:eb:b4:8c:36:2a:a3:b6:
ea:76:ad:49:40:c8:2a:88:6c:7f:68:e3:58:ad:68:25:b3:f3:
a5:32:76:d7:f4:a3:0c:9a:d7:7c:f7:5f:b7:9f:81:dc:b6:20:
4b:e8:50:24:74:30:85:7e:19:f9:cc:9a:6a:9c:7b:9f:85:45:
43:b6:9b:39:ea:5a:67:63:8e:26:f0:43:f4:14:0a:0f:47:01:
8c:3e:3a:3b:6a:0a:b2:c6:cc:58:9e:a5:e2:20:c0:d7:a9:2a:
19:40:03:15:33:0d:f4:10:76:fe:19:a2:e6:73:ef:86:2a:c8:
f8:24:b0:74:bc:1c:d2:85:b9:ce:16:11:b5:43:36:fe:03:fa:
9d:83:8c:cc:23:c8:2d:02:68:72:74:c7:d9:73:b5:e5:e7:58:
89:54:af:8b:54:3f:3e:c3:62:82:61:a5:a1:4e:73:66:29:db:
b7:92:09:78:b2:cc:4d:6e:dc:eb:61:96:2d:cb:aa:7c:f2:49:
af:fd:1d:af:6f:0e:0a:dd:d5:98:f5:8e:e4:df:60:92:fa:ca:
28:49:98:d4:09:8f:6e:9d:3c:46:eb:ca:ab:8e:ba:8c:dd:70:
32:0b:d3:f9
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu May 8 17:53:04 2025 by rpki-client