Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/3a/9f00a9-b60f-4e32-9037-04dfc3663e35/1/U1dhkT9XXEEcmSMi67Bs0vN_AqI.mft
File: U1dhkT9XXEEcmSMi67Bs0vN_AqI.mft (raw, json)
Hash identifier: Iksz/IPijc2/ItEmvNEyLdxrQfOavBHfMrmv12+Olx8=
Subject key identifier: 6B:84:D7:A4:04:89:32:F2:C2:14:FA:4C:BF:5C:DE:35:F0:86:B2:5B
Authority key identifier: 53:57:61:91:3F:57:5C:41:1C:99:23:22:EB:B0:6C:D2:F3:7F:02:A2
Certificate issuer: /CN=535761913f575c411c992322ebb06cd2f37f02a2
Certificate serial: 0196C239800FC3708E551D51079B17D16DB9
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/U1dhkT9XXEEcmSMi67Bs0vN_AqI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/3a/9f00a9-b60f-4e32-9037-04dfc3663e35/1/U1dhkT9XXEEcmSMi67Bs0vN_AqI.mft
Manifest number: 1538
Signing time: Mon 12 May 2025 02:01:10 +0000
Manifest this update: Mon 12 May 2025 02:01:10 +0000
Manifest next update: Tue 13 May 2025 02:01:10 +0000
Files and hashes: 1: 9jLVpGilYmQEGxg1WpK2yNt9KVk.roa (hash: z5eyd/uvSVUU4CsN83uQVJdluniXFQjAaunOHdc2Khs=)
2: U1dhkT9XXEEcmSMi67Bs0vN_AqI.crl (hash: ZByD6EsnkY/Vw9aoCKMFto1XyE/6S1HgeCE+8UORs0U=)
3: bjlUEqaZF5EwCSDk_Sxf_mEHztc.roa (hash: RU5KJnOEEBCQibHDxtY5+aLGfLDV7MxXDGkjvgxmqg8=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/3a/9f00a9-b60f-4e32-9037-04dfc3663e35/1/U1dhkT9XXEEcmSMi67Bs0vN_AqI.crl
rsync://rpki.ripe.net/repository/DEFAULT/3a/9f00a9-b60f-4e32-9037-04dfc3663e35/1/U1dhkT9XXEEcmSMi67Bs0vN_AqI.mft
rsync://rpki.ripe.net/repository/DEFAULT/U1dhkT9XXEEcmSMi67Bs0vN_AqI.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 13 May 2025 01:00:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:c2:39:80:0f:c3:70:8e:55:1d:51:07:9b:17:d1:6d:b9
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=535761913f575c411c992322ebb06cd2f37f02a2
Validity
Not Before: May 12 02:01:10 2025 GMT
Not After : May 13 02:01:10 2025 GMT
Subject: CN=6b84d7a4048932f2c214fa4cbf5cde35f086b25b
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:96:aa:73:5d:2c:e1:cf:84:ee:58:35:32:47:76:
6e:0d:06:aa:4b:04:5c:b1:88:bd:7e:71:a0:82:c1:
ad:28:59:cc:09:70:4b:68:11:1e:04:7d:0f:f9:7c:
68:ca:45:34:8b:66:89:40:1f:ce:7a:2f:c8:20:34:
6f:62:89:19:82:8c:7b:63:1f:34:b0:13:1b:3a:f5:
ed:6b:ea:f8:a0:e5:2e:04:86:3a:ae:20:c7:72:8d:
17:07:8b:eb:da:cd:81:10:df:b1:e5:05:84:a9:e7:
59:b7:50:46:28:d5:ad:f0:4e:97:82:93:b3:fc:98:
ea:77:bc:3d:f2:22:ff:2d:31:c2:99:8c:81:b4:50:
fa:23:81:05:c5:c8:33:6d:d1:72:93:77:ca:94:ff:
fb:a8:1c:20:5e:97:8f:16:f2:13:5b:69:65:56:1a:
12:fc:6c:93:73:a9:a4:6a:33:0c:2e:43:4e:2b:99:
74:22:ef:97:14:36:d7:df:be:4f:41:6b:d2:3d:b3:
ff:4a:70:4d:57:21:0f:c2:66:eb:3d:f9:81:98:8d:
eb:0a:e0:a1:ab:93:8c:55:6a:ce:0c:b4:c8:8f:77:
3f:c9:84:c0:a6:5e:23:c2:59:97:55:62:6c:c2:d3:
07:69:b7:6e:50:42:70:35:22:a2:36:95:7e:f6:5d:
b5:23
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
6B:84:D7:A4:04:89:32:F2:C2:14:FA:4C:BF:5C:DE:35:F0:86:B2:5B
X509v3 Authority Key Identifier:
keyid:53:57:61:91:3F:57:5C:41:1C:99:23:22:EB:B0:6C:D2:F3:7F:02:A2
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/U1dhkT9XXEEcmSMi67Bs0vN_AqI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/3a/9f00a9-b60f-4e32-9037-04dfc3663e35/1/U1dhkT9XXEEcmSMi67Bs0vN_AqI.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/3a/9f00a9-b60f-4e32-9037-04dfc3663e35/1/U1dhkT9XXEEcmSMi67Bs0vN_AqI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
11:02:0c:16:a9:b4:38:c7:4d:5e:92:7c:d5:82:36:34:79:a2:
6c:db:71:fd:f9:0b:95:c1:7d:cb:8c:f7:95:04:1f:ee:db:1c:
12:78:9e:59:0b:2e:db:40:61:97:2b:91:5d:d6:e4:06:21:85:
ed:b1:2c:e9:08:87:75:67:80:db:a9:a1:30:34:7b:c0:81:84:
d9:8c:cc:42:6d:32:60:e7:95:53:cf:62:0c:17:5c:52:92:21:
70:8c:76:60:42:e0:95:9e:31:4a:a0:c3:d2:38:aa:46:ba:c7:
52:fd:59:b0:63:cf:3f:6f:c7:5c:62:e0:40:64:8a:e0:11:66:
09:5f:93:b3:5d:27:ac:00:2a:bd:95:55:ae:c9:db:12:b5:92:
d4:72:03:28:34:1b:0a:8e:64:04:af:3b:e8:02:be:06:8c:fa:
c2:52:dc:d1:13:27:2c:87:90:59:52:35:6b:1b:dc:4b:59:a6:
61:27:aa:f9:b2:d4:de:16:d0:4f:36:83:19:e1:82:38:47:fb:
1f:92:06:19:f5:40:4c:94:29:17:c2:96:95:b5:ac:c8:85:cd:
c2:75:1d:08:21:a8:ce:45:d3:f3:39:a5:36:d4:38:b1:b2:a7:
a6:01:5a:39:c2:2b:65:91:2b:c7:5e:78:87:00:a8:21:d3:68:
af:2a:65:f0
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon May 12 05:41:28 2025 by rpki-client