Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/50/b929ce-ec17-4d50-a6ae-79d934e4a99a/1/U1OpqF-hH8S_FW-rTY2EoI5dZvk.mft
File: U1OpqF-hH8S_FW-rTY2EoI5dZvk.mft (raw, json)
Hash identifier: b3qeH+KrXMCTRYAYY4CXw+WdDInZ+1jiCaVkdurs4JU=
Subject key identifier: 84:35:F5:35:A0:E4:9E:A6:87:9D:B7:9E:D4:66:AA:A0:66:DB:51:A6
Authority key identifier: 53:53:A9:A8:5F:A1:1F:C4:BF:15:6F:AB:4D:8D:84:A0:8E:5D:66:F9
Certificate issuer: /CN=5353a9a85fa11fc4bf156fab4d8d84a08e5d66f9
Certificate serial: 0196D51ACA74127B4D67891A149ADC89ACB1
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/U1OpqF-hH8S_FW-rTY2EoI5dZvk.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/50/b929ce-ec17-4d50-a6ae-79d934e4a99a/1/U1OpqF-hH8S_FW-rTY2EoI5dZvk.mft
Manifest number: 1543
Signing time: Thu 15 May 2025 18:00:24 +0000
Manifest this update: Thu 15 May 2025 18:00:24 +0000
Manifest next update: Fri 16 May 2025 18:00:24 +0000
Files and hashes: 1: U1OpqF-hH8S_FW-rTY2EoI5dZvk.crl (hash: wc9YxU6sH4H3zU2WO15rG/HOEBeQEn/ChVj3Xi/ZXMA=)
2: fhzBsi8rU0jUB3-KHFWy_MPxr3s.roa (hash: +sQEtymDtkukDBlTZusUXGi5sWkBAEA4spvgFTkKSlo=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/50/b929ce-ec17-4d50-a6ae-79d934e4a99a/1/U1OpqF-hH8S_FW-rTY2EoI5dZvk.crl
rsync://rpki.ripe.net/repository/DEFAULT/50/b929ce-ec17-4d50-a6ae-79d934e4a99a/1/U1OpqF-hH8S_FW-rTY2EoI5dZvk.mft
rsync://rpki.ripe.net/repository/DEFAULT/U1OpqF-hH8S_FW-rTY2EoI5dZvk.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 16 May 2025 14:01:21 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:d5:1a:ca:74:12:7b:4d:67:89:1a:14:9a:dc:89:ac:b1
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=5353a9a85fa11fc4bf156fab4d8d84a08e5d66f9
Validity
Not Before: May 15 18:00:24 2025 GMT
Not After : May 16 18:00:24 2025 GMT
Subject: CN=8435f535a0e49ea6879db79ed466aaa066db51a6
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a9:98:2c:0f:4a:3a:59:ce:5d:a2:05:59:0d:2b:
79:8e:08:55:1e:d3:c7:4a:87:79:a9:43:12:0a:39:
98:ae:e9:79:50:e4:60:e6:58:5b:a2:2f:4b:25:d2:
ae:95:5e:a6:52:6d:38:fd:c8:e9:48:28:ea:d4:ae:
78:90:4a:48:fc:9f:ec:20:f3:df:c1:4e:95:7f:af:
fc:55:9a:aa:cc:e4:61:2a:3e:6f:59:0d:30:63:db:
00:8e:b3:67:41:63:e1:f2:07:7f:85:45:f8:62:fa:
48:b9:d5:79:59:6f:c0:e1:ff:65:e1:15:30:94:da:
f1:f0:d6:53:ad:76:c9:00:38:08:7b:7c:e6:75:1a:
59:a8:46:2d:84:2c:f4:aa:a2:e5:27:b9:72:bc:f5:
d1:21:26:a4:55:6a:d3:c2:2f:e0:32:8b:11:aa:89:
df:05:a2:93:25:49:17:2d:bb:fe:6f:94:1e:98:4c:
b4:c8:54:2f:10:0e:64:f3:13:44:5e:56:a8:91:d3:
a3:ff:2c:d7:05:c9:fe:43:85:8c:53:4e:72:30:a9:
ba:5d:04:bf:99:82:0d:b2:11:c3:0e:b7:29:78:59:
a4:fa:06:54:d9:85:b8:59:3f:65:c3:cc:9d:68:31:
86:cb:aa:43:3c:6d:93:0f:ee:73:0e:4c:03:8b:81:
c9:ef
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
84:35:F5:35:A0:E4:9E:A6:87:9D:B7:9E:D4:66:AA:A0:66:DB:51:A6
X509v3 Authority Key Identifier:
keyid:53:53:A9:A8:5F:A1:1F:C4:BF:15:6F:AB:4D:8D:84:A0:8E:5D:66:F9
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/U1OpqF-hH8S_FW-rTY2EoI5dZvk.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/50/b929ce-ec17-4d50-a6ae-79d934e4a99a/1/U1OpqF-hH8S_FW-rTY2EoI5dZvk.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/50/b929ce-ec17-4d50-a6ae-79d934e4a99a/1/U1OpqF-hH8S_FW-rTY2EoI5dZvk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
71:13:56:75:ef:5d:e6:88:93:6a:fa:d7:70:18:fd:cb:ab:8c:
2b:f9:58:5c:f3:ab:e3:94:c6:c5:5e:7d:3f:a5:65:9f:e6:63:
4f:9f:18:63:1d:19:a4:ff:a1:ee:e6:7a:38:c3:2c:26:ed:0e:
b2:ae:4b:55:13:1b:80:0a:08:0e:23:30:fc:17:d1:9c:19:1c:
8b:1a:f7:b1:da:92:b3:f9:bd:18:c7:f3:93:db:91:68:a5:03:
45:c2:c6:25:62:0e:5b:69:e8:bb:5c:f2:47:da:2f:f0:68:3f:
06:a3:67:ec:72:1a:e3:c9:05:ba:3b:19:65:30:6d:b6:07:0b:
d5:aa:a9:2b:2d:bc:01:65:3c:90:85:d6:5e:07:4b:3f:50:f7:
5f:63:22:10:98:27:50:77:6a:ce:24:48:da:e0:4f:de:4e:18:
00:45:d7:7d:68:3c:36:ce:5a:10:4a:46:8d:ce:14:3b:2e:86:
80:dc:e0:00:95:91:86:09:88:6e:b6:b1:1d:e1:bc:75:ee:26:
ff:1c:84:10:67:85:00:36:4d:69:55:84:a5:7f:9d:62:e6:5d:
eb:2d:3e:22:e1:5e:95:c9:58:ba:e8:aa:e0:7a:73:dd:18:41:
f7:e7:ec:d9:95:34:6c:92:99:d0:24:5c:9c:9a:03:57:36:34:
6e:0a:ac:a0
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu May 15 23:42:48 2025 by rpki-client