Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/50/83cf73-b7ce-4440-a4ad-7c523b58decf/1/U3AHMcWtxwvLcT5XpRpAPmTtkcg.mft
File: U3AHMcWtxwvLcT5XpRpAPmTtkcg.mft (raw, json)
Hash identifier: EN3deFOHYYE8c2Rs3f6hWjUgTkJT4ftX9uOlw4St4Tg=
Subject key identifier: C6:4D:3B:D3:74:EB:11:82:82:4F:64:D5:D4:36:1C:BD:23:8C:0E:69
Authority key identifier: 53:70:07:31:C5:AD:C7:0B:CB:71:3E:57:A5:1A:40:3E:64:ED:91:C8
Certificate issuer: /CN=53700731c5adc70bcb713e57a51a403e64ed91c8
Certificate serial: 0196B1EA3C3406DF8A38DB6EAAF1E7AF033F
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/U3AHMcWtxwvLcT5XpRpAPmTtkcg.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/50/83cf73-b7ce-4440-a4ad-7c523b58decf/1/U3AHMcWtxwvLcT5XpRpAPmTtkcg.mft
Manifest number: 86
Signing time: Thu 08 May 2025 22:00:40 +0000
Manifest this update: Thu 08 May 2025 22:00:40 +0000
Manifest next update: Fri 09 May 2025 22:00:40 +0000
Files and hashes: 1: U3AHMcWtxwvLcT5XpRpAPmTtkcg.crl (hash: 5gg4cB0BnE1rbqP+TXfq5Apm0HqokXEjavjpt8FmX8s=)
2: d_MgrBI_XqLm3vPMbVfOHRCRjlM.roa (hash: 8wS5nxJpvzUto4TBQuuJYHRS4iSYHZpu3buUsV2eb9o=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/50/83cf73-b7ce-4440-a4ad-7c523b58decf/1/U3AHMcWtxwvLcT5XpRpAPmTtkcg.crl
rsync://rpki.ripe.net/repository/DEFAULT/50/83cf73-b7ce-4440-a4ad-7c523b58decf/1/U3AHMcWtxwvLcT5XpRpAPmTtkcg.mft
rsync://rpki.ripe.net/repository/DEFAULT/U3AHMcWtxwvLcT5XpRpAPmTtkcg.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 09 May 2025 16:00:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:b1:ea:3c:34:06:df:8a:38:db:6e:aa:f1:e7:af:03:3f
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=53700731c5adc70bcb713e57a51a403e64ed91c8
Validity
Not Before: May 8 22:00:40 2025 GMT
Not After : May 9 22:00:40 2025 GMT
Subject: CN=c64d3bd374eb1182824f64d5d4361cbd238c0e69
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a9:15:73:d5:e9:30:77:cd:f9:38:b0:23:1e:37:
30:fb:49:2e:f6:33:73:4d:cb:96:ae:c4:89:bd:42:
41:5f:86:d4:dd:56:31:29:60:c2:63:cd:06:c8:a0:
8e:b3:cc:f5:e6:c4:a1:9c:da:bc:85:10:45:b5:24:
96:84:c6:02:26:af:9c:3a:30:cc:7a:07:c3:52:3e:
48:c3:ae:ca:39:e2:0e:00:e4:41:cf:7c:fa:2e:75:
fa:2e:32:35:ad:87:c7:61:0e:ff:37:d3:3b:39:f6:
fb:4b:05:f9:00:cc:65:6e:33:a7:91:69:5f:5c:89:
2a:aa:87:f6:85:0d:66:ad:13:c0:ac:60:72:73:b9:
3e:a4:08:3c:7d:70:79:49:f7:41:86:c6:bf:02:3f:
cc:70:74:8d:fb:c4:b5:5a:de:1e:d8:81:58:9e:2a:
a5:41:70:f7:bf:9c:73:65:a7:ea:62:d8:2c:4f:20:
6b:91:83:3f:04:4f:e9:8b:8b:59:3e:9d:a8:e1:9d:
f3:18:33:d7:f0:43:16:bb:5a:3c:c4:f7:2c:7b:2a:
8a:c3:33:91:22:18:8b:05:30:28:ff:33:16:c8:00:
1e:51:dc:eb:fb:04:f1:fd:cd:f6:e0:ae:7f:6c:49:
d3:19:d9:5e:cf:b3:01:93:50:4a:40:19:83:50:60:
5e:cb
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C6:4D:3B:D3:74:EB:11:82:82:4F:64:D5:D4:36:1C:BD:23:8C:0E:69
X509v3 Authority Key Identifier:
keyid:53:70:07:31:C5:AD:C7:0B:CB:71:3E:57:A5:1A:40:3E:64:ED:91:C8
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/U3AHMcWtxwvLcT5XpRpAPmTtkcg.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/50/83cf73-b7ce-4440-a4ad-7c523b58decf/1/U3AHMcWtxwvLcT5XpRpAPmTtkcg.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/50/83cf73-b7ce-4440-a4ad-7c523b58decf/1/U3AHMcWtxwvLcT5XpRpAPmTtkcg.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
7b:46:5d:cf:42:bd:85:ed:af:a4:9e:7b:57:e8:22:a5:db:80:
1c:6a:ad:82:4f:88:ca:b1:73:8e:d9:df:85:cb:bf:0f:52:49:
17:9e:75:bb:cb:dd:16:db:df:42:cf:5a:c5:fd:c6:15:84:7d:
0b:d1:bd:f0:c9:94:d6:32:1b:45:00:62:43:7f:fa:25:1e:6b:
75:3a:63:51:01:09:da:82:72:a4:34:24:40:3c:af:dc:f8:42:
4a:89:ad:13:10:14:66:9f:24:6c:5a:55:e9:61:c6:52:aa:f1:
09:0e:46:b8:fd:07:44:8b:19:d0:e2:88:6c:21:d8:11:21:8b:
84:2f:18:90:80:2d:7c:50:e7:09:99:3d:19:59:9b:67:28:6a:
57:ee:ef:cb:50:a6:58:a7:4e:35:08:ea:9d:28:33:6b:29:3a:
f5:6b:a3:fc:88:a4:2e:02:39:71:10:98:ac:cd:f3:93:d3:91:
61:0b:0c:b7:54:83:b9:4d:3b:4b:90:e9:9f:a8:0c:87:d1:e0:
76:e4:1b:27:b8:33:8c:a1:e5:12:b8:0b:91:03:1a:34:30:3b:
81:aa:ca:cb:d7:0a:56:63:ea:2b:03:bd:8f:b4:f8:b1:9b:ba:
cb:a3:0c:5e:12:d7:0f:13:96:8f:f4:c3:f5:c7:51:f7:37:ad:
0e:22:3b:52
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri May 9 02:46:21 2025 by rpki-client