Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/16/90cf3e-d468-443c-afa4-f34a8f72eec4/1/UzXKxwoZioXzJL_toPNe15kcKus.mft
File: UzXKxwoZioXzJL_toPNe15kcKus.mft (raw, json)
Hash identifier: T1Y+n1idaNkPrW4TAA//v5CDvIJmJFYQHn1O8NUIycI=
Subject key identifier: 72:54:68:CC:36:1D:F4:22:9C:42:77:D2:D0:60:67:E0:F0:9D:6C:FB
Authority key identifier: 53:35:CA:C7:0A:19:8A:85:F3:24:BF:ED:A0:F3:5E:D7:99:1C:2A:EB
Certificate issuer: /CN=5335cac70a198a85f324bfeda0f35ed7991c2aeb
Certificate serial: 0196C45E8C06841675DD99FB2AA16E3678FF
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/UzXKxwoZioXzJL_toPNe15kcKus.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/16/90cf3e-d468-443c-afa4-f34a8f72eec4/1/UzXKxwoZioXzJL_toPNe15kcKus.mft
Manifest number: 87
Signing time: Mon 12 May 2025 12:00:52 +0000
Manifest this update: Mon 12 May 2025 12:00:52 +0000
Manifest next update: Tue 13 May 2025 12:00:52 +0000
Files and hashes: 1: UzXKxwoZioXzJL_toPNe15kcKus.crl (hash: lVdhpuCPKN7vh3jdZ5B7vvs8Da3Yds6qeHkA9gyAHk0=)
2: ePyQopOScagWFzEkE8JnltAqMeo.roa (hash: HBo6Q0ESBQ76lXOKaYzIqOC//rtW1Zw5+A47hcrlRkM=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/16/90cf3e-d468-443c-afa4-f34a8f72eec4/1/UzXKxwoZioXzJL_toPNe15kcKus.crl
rsync://rpki.ripe.net/repository/DEFAULT/16/90cf3e-d468-443c-afa4-f34a8f72eec4/1/UzXKxwoZioXzJL_toPNe15kcKus.mft
rsync://rpki.ripe.net/repository/DEFAULT/UzXKxwoZioXzJL_toPNe15kcKus.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 13 May 2025 12:00:52 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:c4:5e:8c:06:84:16:75:dd:99:fb:2a:a1:6e:36:78:ff
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=5335cac70a198a85f324bfeda0f35ed7991c2aeb
Validity
Not Before: May 12 12:00:52 2025 GMT
Not After : May 13 12:00:52 2025 GMT
Subject: CN=725468cc361df4229c4277d2d06067e0f09d6cfb
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a2:d0:ba:0f:21:75:4a:f1:4f:a7:e9:8d:a9:f8:
ec:ca:3c:d8:94:d1:7c:69:36:03:6a:33:a4:20:a4:
80:ca:91:03:f5:c4:f0:8d:28:fa:16:e8:49:5b:fe:
dd:68:82:dd:80:cc:3c:78:ed:70:c0:76:c9:1d:13:
ad:86:7d:68:fd:5b:0a:37:1c:b0:1c:34:b7:47:9c:
c4:d9:a8:c8:ad:40:d6:a5:49:8a:a6:d2:b3:0b:b2:
64:e7:47:2c:de:e3:40:97:ea:68:78:eb:24:9a:5f:
68:4f:09:56:1b:d8:01:c7:38:1c:f1:a1:98:7c:4d:
62:cd:ce:63:03:f8:c4:fb:a0:87:4d:41:45:24:d8:
9d:af:76:a7:9a:cf:fc:79:5f:b8:79:ab:91:25:d7:
52:6c:d0:58:ee:7e:02:6e:f7:75:d9:fd:2e:2b:61:
14:d4:dd:22:69:66:70:93:dc:37:45:df:f0:7f:3b:
27:c3:46:a7:6a:41:b0:48:34:e2:67:5a:91:b4:b6:
5d:a9:f9:17:5c:6f:76:7d:a1:e8:87:66:5a:ea:f6:
ec:e5:47:69:7f:d4:ce:e1:a2:87:7c:33:b1:c5:91:
44:0b:80:b3:d7:c3:39:0a:ca:d9:6f:f2:19:a4:7d:
3c:63:b5:2d:5e:a5:54:6f:bc:db:25:37:94:ac:30:
53:b9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
72:54:68:CC:36:1D:F4:22:9C:42:77:D2:D0:60:67:E0:F0:9D:6C:FB
X509v3 Authority Key Identifier:
keyid:53:35:CA:C7:0A:19:8A:85:F3:24:BF:ED:A0:F3:5E:D7:99:1C:2A:EB
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/UzXKxwoZioXzJL_toPNe15kcKus.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/16/90cf3e-d468-443c-afa4-f34a8f72eec4/1/UzXKxwoZioXzJL_toPNe15kcKus.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/16/90cf3e-d468-443c-afa4-f34a8f72eec4/1/UzXKxwoZioXzJL_toPNe15kcKus.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
03:cd:3e:a6:e3:5b:4b:88:c4:8c:ee:ca:dd:a6:bd:ab:04:d3:
2a:f6:4d:ed:5f:ee:d2:0e:fc:f2:67:df:6d:a6:58:b6:f5:a7:
b4:c7:15:23:71:8e:10:9b:7f:94:95:9e:6a:24:c1:66:fd:3b:
84:80:97:d3:8b:96:91:80:73:aa:5a:62:26:ff:b7:7f:7b:aa:
94:01:e4:a7:10:44:cf:ff:00:b5:30:8b:c6:4c:de:14:81:f0:
46:66:35:d5:5e:77:d4:64:81:f3:84:f0:35:9e:53:cf:8d:23:
6f:87:a7:76:c8:be:5f:3e:5f:79:82:25:06:16:d8:87:8d:3b:
94:b7:99:17:71:5d:7d:f1:9d:06:06:dc:5e:05:f1:59:2a:1f:
d4:d0:b7:2a:9a:b2:91:a4:e8:fb:b3:39:70:2f:86:d9:de:07:
13:4b:22:6f:e6:ae:a7:45:0d:ef:88:66:46:3d:3c:a2:77:e1:
ce:11:be:35:62:7a:57:36:32:14:6e:34:aa:74:46:20:cc:b9:
81:cd:ee:e5:99:cc:7c:13:f5:6a:7c:99:07:da:5d:0a:bc:ec:
b3:68:18:19:bc:d0:ab:03:b0:f2:c8:76:d0:ef:9a:6c:98:fb:
a3:10:4f:22:79:c6:85:43:7f:e5:6f:e5:df:43:a9:a0:4e:b8:
58:98:fd:ee
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon May 12 17:04:26 2025 by rpki-client