Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/51/cc0692-cc99-4545-bc50-eaf3ddb0a1bb/1/1-14u6ugu75tlf-J5UmcmECD5RMk.mft
File: 1-14u6ugu75tlf-J5UmcmECD5RMk.mft (raw, json)
Hash identifier: OvzZGMbb5PsueuGtuGVxj/pQg5FJIWUe0M7C0B+EGaI=
Subject key identifier: 21:C9:71:A6:42:47:CF:2D:48:5A:F0:77:A4:78:E4:46:48:7B:FA:0F
Authority key identifier: FB:5E:2E:EA:E8:2E:EF:9B:65:7F:E2:79:52:67:26:10:20:F9:44:C9
Certificate issuer: /CN=fb5e2eeae82eef9b657fe2795267261020f944c9
Certificate serial: 0196C5DF003CBC8763E615D78833ACB911E9
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/1-14u6ugu75tlf-J5UmcmECD5RMk.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/51/cc0692-cc99-4545-bc50-eaf3ddb0a1bb/1/1-14u6ugu75tlf-J5UmcmECD5RMk.mft
Manifest number: C2
Signing time: Mon 12 May 2025 19:00:48 +0000
Manifest this update: Mon 12 May 2025 19:00:48 +0000
Manifest next update: Tue 13 May 2025 19:00:48 +0000
Files and hashes: 1: 1-14u6ugu75tlf-J5UmcmECD5RMk.crl (hash: sS2XCS3XqNQfe1BsAyfy/sUjaHgGpt/HEbVmtxDb0ns=)
2: Dr_PQO2BPHoa4Gl0AZtI905-d-M.roa (hash: +sFVK8H7AnsXd5rUe7kR0o92ssiFNiEpWCKNsSev/NE=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/51/cc0692-cc99-4545-bc50-eaf3ddb0a1bb/1/1-14u6ugu75tlf-J5UmcmECD5RMk.crl
rsync://rpki.ripe.net/repository/DEFAULT/51/cc0692-cc99-4545-bc50-eaf3ddb0a1bb/1/1-14u6ugu75tlf-J5UmcmECD5RMk.mft
rsync://rpki.ripe.net/repository/DEFAULT/1-14u6ugu75tlf-J5UmcmECD5RMk.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 13 May 2025 14:31:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:c5:df:00:3c:bc:87:63:e6:15:d7:88:33:ac:b9:11:e9
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=fb5e2eeae82eef9b657fe2795267261020f944c9
Validity
Not Before: May 12 19:00:48 2025 GMT
Not After : May 13 19:00:48 2025 GMT
Subject: CN=21c971a64247cf2d485af077a478e446487bfa0f
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d8:ea:69:59:47:6f:23:f6:50:86:51:a8:24:a7:
d4:ce:8f:d0:c3:26:b7:21:e0:fe:b2:67:a3:67:83:
82:99:e8:8f:a5:71:97:55:b2:6b:25:61:0b:19:cd:
2d:e9:ee:30:02:e8:5d:00:e8:e5:c5:ed:8f:d8:78:
58:70:cd:87:92:47:6d:b2:1b:bf:9b:3e:ce:69:aa:
87:52:79:36:1f:ff:7a:7f:05:f6:29:74:98:87:c2:
99:ac:e4:0c:67:c9:82:7b:86:f1:a3:d4:f1:e3:3c:
7b:a3:3b:25:d2:60:e9:57:82:5f:63:3f:c3:62:1c:
04:94:31:ba:ca:11:63:4f:d2:cf:cb:6f:7c:40:b5:
7c:69:6c:f3:56:35:c3:b3:22:fa:f0:d2:2b:37:5d:
d1:3e:e6:3b:96:ae:d9:0d:e1:94:a0:93:68:0a:7f:
20:4f:9a:a4:a9:e0:7f:c1:7b:d6:7b:73:ba:4a:da:
c5:a9:14:f4:34:1c:89:15:2e:37:8a:f5:28:0d:f0:
2b:47:56:6e:17:b7:04:28:bd:b6:51:b7:f9:50:91:
52:44:72:26:4f:b0:b3:a5:58:60:9f:5b:62:ce:5a:
d0:7f:b6:9a:8d:f1:0d:0b:ee:89:f1:7a:7d:ca:8c:
f5:0b:01:0d:37:7a:6b:a6:2d:47:9f:53:81:77:72:
6c:c1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
21:C9:71:A6:42:47:CF:2D:48:5A:F0:77:A4:78:E4:46:48:7B:FA:0F
X509v3 Authority Key Identifier:
keyid:FB:5E:2E:EA:E8:2E:EF:9B:65:7F:E2:79:52:67:26:10:20:F9:44:C9
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/1-14u6ugu75tlf-J5UmcmECD5RMk.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/51/cc0692-cc99-4545-bc50-eaf3ddb0a1bb/1/1-14u6ugu75tlf-J5UmcmECD5RMk.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/51/cc0692-cc99-4545-bc50-eaf3ddb0a1bb/1/1-14u6ugu75tlf-J5UmcmECD5RMk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
35:c7:0e:be:bd:fa:1f:a4:9a:b8:2c:85:37:fd:dd:9d:f5:b7:
77:8f:c3:c7:4f:d1:a2:3b:34:57:bc:ad:94:34:d9:8f:4c:28:
95:51:ac:4c:82:a4:94:9a:a8:89:b3:4d:a1:b2:44:ba:5b:fd:
93:d0:3f:1a:6b:72:3d:af:0d:5e:93:7e:97:ea:88:75:44:bc:
70:40:b0:bc:cd:ec:87:6f:4d:a9:0d:0c:08:1a:e1:49:b7:71:
b9:a3:3a:21:dd:5b:d4:b0:62:e0:f6:6d:a9:82:ee:f3:e4:ac:
c9:e6:11:d2:50:20:47:26:3c:57:39:8e:76:17:39:c8:e5:ef:
e4:14:1f:05:d3:d2:4f:41:bf:bc:07:d3:99:1d:38:12:99:2d:
ac:1c:ff:05:96:84:3f:e6:0f:ee:2a:62:a9:de:80:94:63:d9:
55:48:59:87:4c:31:f9:c8:97:af:bb:23:4c:f2:93:0d:2e:eb:
3c:9d:29:50:dc:e3:ab:ff:a6:4b:ea:d1:db:31:90:5b:eb:7e:
ae:a8:12:b6:88:21:c4:74:5a:18:87:d0:8c:e1:c2:47:0d:1d:
ad:12:cd:d0:85:c7:1c:d3:2e:7c:c9:4b:ec:08:b6:29:1b:aa:
7d:2f:02:c0:82:c0:3d:70:09:e8:17:01:d8:5e:ed:8b:47:45:
24:04:fe:6e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue May 13 00:26:50 2025 by rpki-client