Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/15/decaeb-3f95-4f2a-af65-0c020a7e4a44/1/Us7uLW16UMkkmdoaIfKrt6KndMg.mft
File: Us7uLW16UMkkmdoaIfKrt6KndMg.mft (raw, json)
Hash identifier: kb9OK0ouW0GGp7WgQ53XQj6vWAd+o/pC5Cl+WIYQq98=
Subject key identifier: F4:DA:03:95:E4:A9:80:8A:78:03:53:5A:2C:8E:1E:78:6E:8C:3D:A3
Authority key identifier: 52:CE:EE:2D:6D:7A:50:C9:24:99:DA:1A:21:F2:AB:B7:A2:A7:74:C8
Certificate issuer: /CN=52ceee2d6d7a50c92499da1a21f2abb7a2a774c8
Certificate serial: 0196C26FFF4409DC840C2A20DE402E0FA9A8
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Us7uLW16UMkkmdoaIfKrt6KndMg.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/15/decaeb-3f95-4f2a-af65-0c020a7e4a44/1/Us7uLW16UMkkmdoaIfKrt6KndMg.mft
Manifest number: 09D4
Signing time: Mon 12 May 2025 03:00:41 +0000
Manifest this update: Mon 12 May 2025 03:00:41 +0000
Manifest next update: Tue 13 May 2025 03:00:41 +0000
Files and hashes: 1: HgzDmPqeZBdX21PHNQn3j0-FDSk.roa (hash: jL+abeK7Dj613IZkXcAHwX1ldRNUAWLyPE0MF0XmQTs=)
2: JmahROWNlzzWLOhj6faRjwc1jmM.roa (hash: 8En7I8LLB7AUar/hMjwx3dkXSNApjPuQ8H4paRvFqeg=)
3: Us7uLW16UMkkmdoaIfKrt6KndMg.crl (hash: aLC4GHl2ij9MgYjjW6OeA7Ux7VaE88E0pbFh0o+6Mu0=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/15/decaeb-3f95-4f2a-af65-0c020a7e4a44/1/Us7uLW16UMkkmdoaIfKrt6KndMg.crl
rsync://rpki.ripe.net/repository/DEFAULT/15/decaeb-3f95-4f2a-af65-0c020a7e4a44/1/Us7uLW16UMkkmdoaIfKrt6KndMg.mft
rsync://rpki.ripe.net/repository/DEFAULT/Us7uLW16UMkkmdoaIfKrt6KndMg.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 13 May 2025 01:00:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:c2:6f:ff:44:09:dc:84:0c:2a:20:de:40:2e:0f:a9:a8
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=52ceee2d6d7a50c92499da1a21f2abb7a2a774c8
Validity
Not Before: May 12 03:00:41 2025 GMT
Not After : May 13 03:00:41 2025 GMT
Subject: CN=f4da0395e4a9808a7803535a2c8e1e786e8c3da3
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:aa:ae:3b:e4:a2:d7:c8:7b:2d:67:03:a4:e2:ce:
2e:1e:c8:ef:4a:53:74:16:6c:40:9b:c0:fe:9d:5a:
d2:21:07:06:fe:14:d3:28:25:97:0c:1f:80:26:91:
80:4c:a9:0c:56:6c:30:86:ee:8c:ae:74:d7:51:78:
cc:a5:bc:49:14:9b:1c:c1:45:d7:39:13:1e:22:f8:
12:ec:27:e5:f6:44:3c:6a:16:c5:b2:a5:5b:7d:48:
b6:df:90:79:5b:09:32:b8:1e:b9:02:b2:85:a6:b9:
50:90:3d:ff:ad:59:da:9a:9b:da:18:0e:87:e9:c9:
bd:24:c8:d3:c0:5e:c8:c8:d7:1d:18:d4:62:45:47:
87:84:8d:7d:1a:92:65:9e:13:e5:d0:da:b5:43:ea:
2f:2a:4a:8b:a9:08:67:eb:4e:97:01:a6:cb:3b:66:
b8:f2:e6:da:a5:d5:30:18:d3:31:13:2a:e9:fc:ea:
94:23:bc:8e:b3:ca:10:10:97:51:c2:24:45:96:89:
1b:60:aa:f4:05:56:d4:81:d5:cd:4e:92:07:29:be:
52:8a:d9:a8:6a:71:85:2b:19:17:b7:8f:af:6b:d0:
56:9d:82:86:95:51:19:b1:f8:49:11:55:db:cd:83:
c0:2d:67:f6:cd:7d:0d:dc:37:82:cc:5f:04:56:e0:
4e:fb
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F4:DA:03:95:E4:A9:80:8A:78:03:53:5A:2C:8E:1E:78:6E:8C:3D:A3
X509v3 Authority Key Identifier:
keyid:52:CE:EE:2D:6D:7A:50:C9:24:99:DA:1A:21:F2:AB:B7:A2:A7:74:C8
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Us7uLW16UMkkmdoaIfKrt6KndMg.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/15/decaeb-3f95-4f2a-af65-0c020a7e4a44/1/Us7uLW16UMkkmdoaIfKrt6KndMg.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/15/decaeb-3f95-4f2a-af65-0c020a7e4a44/1/Us7uLW16UMkkmdoaIfKrt6KndMg.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
be:e3:5a:20:6b:96:d1:b7:b2:ed:0c:6e:e5:77:4e:4e:9a:37:
d8:79:17:e7:3f:3a:38:fd:16:ba:e7:3e:12:5e:00:09:2e:9b:
e7:77:fd:82:5f:7e:3c:59:9a:6d:74:b7:e5:1d:e4:c2:52:bc:
fe:7b:9c:ff:5b:30:f5:d3:43:04:7c:87:16:01:b4:85:6c:32:
5c:70:7f:82:20:e8:a9:6f:b0:41:24:b1:32:57:5a:b8:10:e7:
2b:d4:0a:54:b4:c4:8a:c5:a1:96:27:f7:d4:c2:e0:20:4a:d8:
9c:d0:af:ec:7e:bb:29:4e:68:78:4e:34:d8:86:e4:9b:bc:66:
23:2f:b4:00:dd:b7:de:67:72:6f:a6:10:97:53:bf:d6:76:d0:
0c:dd:2c:67:e7:30:aa:cb:7e:a5:40:2f:b3:e4:89:20:f1:69:
6c:00:c0:f5:4e:ce:e9:ae:55:2a:ab:15:32:ed:8b:55:e9:23:
8d:94:dc:96:e2:40:b3:51:be:51:c9:19:c2:5f:2b:95:02:6b:
40:61:c2:63:46:c0:35:5b:0d:37:f3:21:88:75:4e:3e:bb:d3:
d6:cf:1f:2b:0a:43:9c:10:5c:a3:00:f3:7d:ab:ad:31:53:f1:
11:c8:5a:2d:9d:6d:4c:85:b6:0c:e4:86:e7:63:3c:a2:90:75:
5e:ec:7a:94
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon May 12 08:04:00 2025 by rpki-client