Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/2b/a97e21-b5fe-4a56-a98a-bdd4af5f35d1/1/8Uebg8Ug14REXCSCi6tjPw1wLPM.mft
File: 8Uebg8Ug14REXCSCi6tjPw1wLPM.mft (raw, json)
Hash identifier: 9qNwOPKjgQQLFi9uUKPrfNB2D2CI9TRAM9MOOSloyCI=
Subject key identifier: AB:85:6E:14:D9:AE:65:B8:01:C1:59:51:26:1C:06:7E:B0:09:F2:48
Authority key identifier: F1:47:9B:83:C5:20:D7:84:44:5C:24:82:8B:AB:63:3F:0D:70:2C:F3
Certificate issuer: /CN=f1479b83c520d784445c24828bab633f0d702cf3
Certificate serial: 01969D1985D1C64685D41A97012965A57F71
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/8Uebg8Ug14REXCSCi6tjPw1wLPM.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/2b/a97e21-b5fe-4a56-a98a-bdd4af5f35d1/1/8Uebg8Ug14REXCSCi6tjPw1wLPM.mft
Manifest number: 1553
Signing time: Sun 04 May 2025 21:00:17 +0000
Manifest this update: Sun 04 May 2025 21:00:17 +0000
Manifest next update: Mon 05 May 2025 21:00:17 +0000
Files and hashes: 1: 8Uebg8Ug14REXCSCi6tjPw1wLPM.crl (hash: Va6HLzew1MWy52X5ujZBEJyhdVAvY4Qz6PbnFJq8ng8=)
2: TQKhSi8Awccw4XCNSJ1aruVNLAk.roa (hash: sIBHk/GyN9LYf2GBmbzqMybhc4XcRHVc+6LBWV3OWQY=)
3: UzzaZe2IBnqaAlUC3PzUQU79vek.roa (hash: 0lOgrSdqev4Q++AWXwQLula9bZznJKXyC0Jsns6HfWI=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/2b/a97e21-b5fe-4a56-a98a-bdd4af5f35d1/1/8Uebg8Ug14REXCSCi6tjPw1wLPM.crl
rsync://rpki.ripe.net/repository/DEFAULT/2b/a97e21-b5fe-4a56-a98a-bdd4af5f35d1/1/8Uebg8Ug14REXCSCi6tjPw1wLPM.mft
rsync://rpki.ripe.net/repository/DEFAULT/8Uebg8Ug14REXCSCi6tjPw1wLPM.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 05 May 2025 21:00:17 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:9d:19:85:d1:c6:46:85:d4:1a:97:01:29:65:a5:7f:71
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=f1479b83c520d784445c24828bab633f0d702cf3
Validity
Not Before: May 4 21:00:17 2025 GMT
Not After : May 5 21:00:17 2025 GMT
Subject: CN=ab856e14d9ae65b801c15951261c067eb009f248
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a5:47:6c:b3:1a:56:f9:77:5d:7f:4b:a9:52:9d:
3b:0c:bc:86:fe:f2:7a:41:f1:20:eb:14:05:65:51:
36:9d:95:57:44:88:bf:00:07:fb:6a:31:7e:ac:f2:
bc:7e:3a:d3:90:ff:23:e6:34:ea:78:91:48:95:d2:
13:57:72:b0:97:3a:69:52:64:94:b9:b5:01:ce:ff:
94:f5:c6:22:39:eb:44:fa:68:a9:1e:7f:89:bf:d6:
9f:3b:32:23:25:72:bb:cb:06:52:69:d5:ac:12:2b:
bd:2f:c5:38:e5:a6:b0:05:95:28:f6:4a:c6:ba:c1:
e4:74:ca:e6:c8:c6:74:d1:32:f2:78:9a:84:e4:02:
29:bb:e3:15:30:db:c5:a1:67:38:57:d0:2e:3e:b8:
cb:4b:62:1e:e5:4b:b0:59:9a:8c:76:36:70:fc:e1:
62:63:1c:06:b7:14:89:d7:9d:6f:c8:ec:37:3d:e3:
9a:86:07:f7:f1:18:bd:44:03:69:aa:de:81:9f:a7:
6d:8d:1f:8a:c7:49:58:a1:95:8f:2f:65:7b:4b:a9:
2d:f4:42:a6:b0:6c:51:45:f1:58:d2:7d:d9:12:f8:
f7:32:31:ce:57:7e:bf:10:84:58:4a:93:02:b4:fe:
28:8f:23:be:c3:3b:21:22:b4:1e:ff:72:6f:c3:0e:
ec:5f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
AB:85:6E:14:D9:AE:65:B8:01:C1:59:51:26:1C:06:7E:B0:09:F2:48
X509v3 Authority Key Identifier:
keyid:F1:47:9B:83:C5:20:D7:84:44:5C:24:82:8B:AB:63:3F:0D:70:2C:F3
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/8Uebg8Ug14REXCSCi6tjPw1wLPM.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/2b/a97e21-b5fe-4a56-a98a-bdd4af5f35d1/1/8Uebg8Ug14REXCSCi6tjPw1wLPM.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/2b/a97e21-b5fe-4a56-a98a-bdd4af5f35d1/1/8Uebg8Ug14REXCSCi6tjPw1wLPM.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
28:45:d3:76:e5:61:87:2f:20:b0:97:3f:40:74:0d:c0:19:a6:
48:98:03:3c:e9:a5:64:ac:de:33:04:db:8f:96:24:b5:6c:bb:
af:05:88:a0:47:bd:7d:07:fa:14:ad:56:9b:15:ac:6c:a6:e2:
e4:d9:40:42:71:d0:62:6b:e6:86:a5:bf:0b:97:34:cc:63:91:
8d:a9:20:32:d1:59:75:37:b6:f6:a8:fd:76:02:70:19:bf:8f:
85:ff:61:54:f2:86:b3:3d:67:c3:a9:c7:7c:e3:ed:75:d2:fd:
45:c8:c1:12:7b:3a:7f:af:16:9f:eb:f3:db:50:18:aa:82:59:
fa:2a:a7:75:2c:f6:b0:0b:ef:99:bd:e6:a4:d7:bc:94:36:e3:
a4:3a:41:26:02:ab:72:7d:38:92:18:41:31:6e:e3:20:f4:e4:
d2:64:86:89:98:85:d4:b1:7e:02:c9:e0:52:1c:bd:b3:2e:ca:
e8:4e:f0:74:15:92:e1:5a:f7:79:ef:0e:3b:c4:60:f7:97:19:
f6:2c:ba:de:20:87:0c:24:8f:3c:b7:08:51:0a:0a:3f:a8:4f:
0c:e7:a1:67:c4:58:1a:44:0c:1c:ee:38:96:2d:80:4c:70:91:
89:ac:2f:7d:07:42:c4:cd:dc:3e:c5:00:31:55:94:a8:f6:c1:
b0:ab:c8:a0
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon May 5 03:37:59 2025 by rpki-client