Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/4c/77a9f1-f1fb-485f-923f-7c3789405bd6/1/U170D69INDOz4zaY5NHulfPJS-w.mft
File: U170D69INDOz4zaY5NHulfPJS-w.mft (raw, json)
Hash identifier: unQ4UPisTwXz6Yrqya4u8j1pddQj4vxR1h9eVhs6gIg=
Subject key identifier: 7C:B1:DF:0B:7C:0D:19:54:D4:21:52:2D:2C:63:AD:EA:AC:36:36:9A
Authority key identifier: 53:5E:F4:0F:AF:48:34:33:B3:E3:36:98:E4:D1:EE:95:F3:C9:4B:EC
Certificate issuer: /CN=535ef40faf483433b3e33698e4d1ee95f3c94bec
Certificate serial: 0196A0887FB6580442CEB3EA7ED31EC9CD3B
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/U170D69INDOz4zaY5NHulfPJS-w.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/4c/77a9f1-f1fb-485f-923f-7c3789405bd6/1/U170D69INDOz4zaY5NHulfPJS-w.mft
Manifest number: 1524
Signing time: Mon 05 May 2025 13:00:22 +0000
Manifest this update: Mon 05 May 2025 13:00:22 +0000
Manifest next update: Tue 06 May 2025 13:00:22 +0000
Files and hashes: 1: U170D69INDOz4zaY5NHulfPJS-w.crl (hash: l4ro8b1HBGTRm7NvTou+0e57GSdZah/BYKUstJITaqI=)
2: a9R4a72Ce3HtrFyUZj2Jrpn9DLE.roa (hash: lEQCssDpqykyZtTNm3b2/t+M2Xlx2R2hbaDbanTEKE4=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/4c/77a9f1-f1fb-485f-923f-7c3789405bd6/1/U170D69INDOz4zaY5NHulfPJS-w.crl
rsync://rpki.ripe.net/repository/DEFAULT/4c/77a9f1-f1fb-485f-923f-7c3789405bd6/1/U170D69INDOz4zaY5NHulfPJS-w.mft
rsync://rpki.ripe.net/repository/DEFAULT/U170D69INDOz4zaY5NHulfPJS-w.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 06 May 2025 13:00:22 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:a0:88:7f:b6:58:04:42:ce:b3:ea:7e:d3:1e:c9:cd:3b
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=535ef40faf483433b3e33698e4d1ee95f3c94bec
Validity
Not Before: May 5 13:00:22 2025 GMT
Not After : May 6 13:00:22 2025 GMT
Subject: CN=7cb1df0b7c0d1954d421522d2c63adeaac36369a
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cf:dc:6e:70:d7:c6:4d:ac:d2:a1:5f:55:57:61:
b4:ac:ba:1b:50:4d:a6:86:36:58:67:3f:4a:45:9c:
8d:88:b8:b7:0c:82:a9:dd:50:fc:2d:f4:54:f2:9e:
42:37:29:bf:b5:81:dc:78:05:8a:32:11:d4:ef:80:
6e:2c:4e:d2:3d:4f:ca:06:9f:ef:a8:13:78:87:eb:
bd:45:1f:49:e2:af:5a:c6:0a:1a:03:43:bc:64:25:
4d:45:e7:03:92:d3:57:f4:e6:fe:07:02:76:3e:78:
11:b4:29:5a:f0:eb:e3:29:95:10:6c:f9:46:1b:91:
52:59:a8:36:9b:dd:20:d9:c1:b0:21:00:8e:e8:56:
33:08:ed:49:be:4c:3c:d0:3d:d5:1b:41:65:f5:cb:
b2:6f:77:f7:ce:2a:07:ef:ec:76:83:26:15:0d:c2:
d1:6f:56:f3:f8:2f:da:7e:e9:19:8a:cc:68:48:cd:
4e:a4:43:ee:19:88:26:cb:51:2e:08:41:c2:40:e3:
3b:ec:f0:56:1e:3c:e3:84:73:d4:cb:ce:99:06:97:
93:82:3b:aa:14:ad:4d:bf:14:99:ee:28:a8:dd:38:
25:76:5e:6a:32:7c:9b:8a:82:09:18:37:75:59:55:
17:75:60:e1:8c:98:c0:19:f2:86:38:fb:10:df:27:
92:7b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
7C:B1:DF:0B:7C:0D:19:54:D4:21:52:2D:2C:63:AD:EA:AC:36:36:9A
X509v3 Authority Key Identifier:
keyid:53:5E:F4:0F:AF:48:34:33:B3:E3:36:98:E4:D1:EE:95:F3:C9:4B:EC
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/U170D69INDOz4zaY5NHulfPJS-w.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/4c/77a9f1-f1fb-485f-923f-7c3789405bd6/1/U170D69INDOz4zaY5NHulfPJS-w.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/4c/77a9f1-f1fb-485f-923f-7c3789405bd6/1/U170D69INDOz4zaY5NHulfPJS-w.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
b4:7d:7b:2d:7c:28:09:ec:36:bc:d4:0d:3f:03:aa:76:6a:ce:
ea:33:b6:6f:4b:ca:60:fa:78:89:70:4d:17:01:dd:e9:68:c3:
ae:38:86:3e:55:bd:3d:01:af:76:63:af:4d:82:bf:d3:fe:23:
44:34:f4:68:56:cd:98:96:91:44:e8:4e:31:88:d0:08:cc:61:
07:bd:d1:55:59:a3:67:e2:fc:0e:21:c0:ad:28:a4:fc:f9:50:
69:67:b9:b4:e9:20:14:c0:49:11:0c:48:67:0b:66:9d:68:cf:
48:1b:08:7e:cc:0b:d7:9b:44:97:2a:20:dc:f0:06:9d:df:22:
b6:ab:b4:e1:82:aa:55:62:aa:00:50:97:db:98:b8:99:ea:9e:
7d:d8:a6:2c:e5:63:75:6e:a5:48:ba:3b:8e:af:61:19:34:24:
7c:77:d6:99:fd:6a:4f:15:82:1a:0a:31:6c:73:47:a2:da:8d:
be:6c:a8:2c:b5:b2:20:89:96:95:01:3f:60:80:55:07:df:a9:
41:86:87:4b:8d:e4:ce:40:47:de:9f:66:27:cd:a2:a4:ea:8e:
ce:de:35:f9:98:fd:5b:3f:de:b5:df:4d:ac:63:76:9f:c4:c4:
f5:cd:4c:5c:26:4d:0c:11:ab:cc:74:54:c8:4c:66:10:03:1c:
2d:25:7e:3a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon May 5 21:20:39 2025 by rpki-client