Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/53/3394c0-4587-444e-9a25-00ecf0c4d0ef/1/U7u7qj7iTHrZssYEMuFO2jhJteI.mft
File: U7u7qj7iTHrZssYEMuFO2jhJteI.mft (raw, json)
Hash identifier: FpnrO/ojH+spCduF2wxCeoNGDMmp8z4GpcMBNXGRkDQ=
Subject key identifier: 30:A5:91:26:8F:50:33:CC:53:32:B3:36:4F:C1:DA:5E:62:A6:D5:5C
Authority key identifier: 53:BB:BB:AA:3E:E2:4C:7A:D9:B2:C6:04:32:E1:4E:DA:38:49:B5:E2
Certificate issuer: /CN=53bbbbaa3ee24c7ad9b2c60432e14eda3849b5e2
Certificate serial: 0196CF866A0B5D4A5FEC6E1D36EAAB8322C9
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/U7u7qj7iTHrZssYEMuFO2jhJteI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/53/3394c0-4587-444e-9a25-00ecf0c4d0ef/1/U7u7qj7iTHrZssYEMuFO2jhJteI.mft
Manifest number: 0B2D
Signing time: Wed 14 May 2025 16:00:14 +0000
Manifest this update: Wed 14 May 2025 16:00:14 +0000
Manifest next update: Thu 15 May 2025 16:00:14 +0000
Files and hashes: 1: QAlZxJpPNS1rmQL4HuNAcE7lmik.roa (hash: S0+MsekOjpK1fn9TgliC/Ks4ugN2LoEukjLPMsOlGQY=)
2: U7u7qj7iTHrZssYEMuFO2jhJteI.crl (hash: bkCR7dHJGJDj4HAlDfaOB6T5WpxjMy/DE615a3Fezgw=)
3: Z_ui10teqBpVvNo5dUa4DuR76CQ.roa (hash: SYTASM6M634fXgyVbz3RoahkooDJ+2ks9JmISF1d0rg=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/53/3394c0-4587-444e-9a25-00ecf0c4d0ef/1/U7u7qj7iTHrZssYEMuFO2jhJteI.crl
rsync://rpki.ripe.net/repository/DEFAULT/53/3394c0-4587-444e-9a25-00ecf0c4d0ef/1/U7u7qj7iTHrZssYEMuFO2jhJteI.mft
rsync://rpki.ripe.net/repository/DEFAULT/U7u7qj7iTHrZssYEMuFO2jhJteI.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 15 May 2025 14:01:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:cf:86:6a:0b:5d:4a:5f:ec:6e:1d:36:ea:ab:83:22:c9
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=53bbbbaa3ee24c7ad9b2c60432e14eda3849b5e2
Validity
Not Before: May 14 16:00:14 2025 GMT
Not After : May 15 16:00:14 2025 GMT
Subject: CN=30a591268f5033cc5332b3364fc1da5e62a6d55c
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ad:b6:8d:fa:d8:a6:45:a6:e1:37:4c:31:14:b8:
4d:22:c4:6a:19:b2:77:c0:d9:32:5a:38:ac:66:34:
f2:72:25:0b:7a:f6:6b:2a:59:af:61:3c:57:b4:1f:
2a:ae:b1:27:ba:7f:7f:49:6d:4c:92:08:1b:27:64:
aa:2e:da:92:b5:43:34:d8:a1:a0:06:08:74:c1:39:
73:f7:7d:95:0b:a8:b1:d3:6a:55:3f:38:3d:a5:15:
77:55:ab:c9:ba:bd:3f:bc:8f:40:ee:f7:78:51:70:
d1:db:bc:4e:fa:a4:3d:31:63:8f:08:bf:f1:56:4a:
9b:a4:a2:f6:d3:48:37:18:10:47:b1:11:ba:e4:9d:
84:f2:91:21:81:28:f6:c8:e2:31:99:e9:ea:31:94:
86:a8:6c:74:2f:b3:1e:95:20:4d:2b:21:d0:dc:4f:
aa:89:2e:51:eb:6b:d9:fe:81:89:41:8a:c3:52:6b:
a9:e4:aa:c2:6f:80:60:cd:69:8c:67:6f:f0:46:72:
cf:b2:58:ac:83:01:74:bd:26:51:84:a2:0c:df:f7:
de:21:ba:3f:9f:55:32:06:c1:0c:c6:7b:f5:20:39:
73:e2:35:d7:07:8d:e1:b3:6c:42:3f:5d:aa:50:91:
11:e9:8a:8d:4d:bd:02:12:4e:6a:93:0b:26:97:d5:
53:eb
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
30:A5:91:26:8F:50:33:CC:53:32:B3:36:4F:C1:DA:5E:62:A6:D5:5C
X509v3 Authority Key Identifier:
keyid:53:BB:BB:AA:3E:E2:4C:7A:D9:B2:C6:04:32:E1:4E:DA:38:49:B5:E2
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/U7u7qj7iTHrZssYEMuFO2jhJteI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/53/3394c0-4587-444e-9a25-00ecf0c4d0ef/1/U7u7qj7iTHrZssYEMuFO2jhJteI.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/53/3394c0-4587-444e-9a25-00ecf0c4d0ef/1/U7u7qj7iTHrZssYEMuFO2jhJteI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
05:84:8c:a0:32:f7:94:e4:30:0a:65:2b:fa:10:f2:87:ac:c7:
52:f6:48:2d:d2:89:b7:0c:7a:f1:dd:6b:28:f1:2f:a6:a0:f7:
10:17:f6:cc:35:3d:07:b9:53:ec:ee:79:a3:9a:48:52:c0:08:
f0:76:3b:da:ff:22:68:8c:cf:2f:94:b1:c6:43:e8:45:db:ab:
14:6b:65:79:b0:4e:b4:34:bb:60:9d:a4:c9:f5:10:8f:a1:17:
57:9f:e9:f9:85:df:cb:85:82:2d:46:c7:10:72:f1:1b:d5:15:
e6:d3:76:93:a5:f0:4b:a7:fc:04:3c:bc:10:31:84:43:65:81:
9d:29:c7:c6:93:91:f9:26:4a:34:02:fa:41:a5:4b:ba:d4:e7:
01:6c:cc:db:ba:fe:38:57:21:68:e9:e8:ca:0a:d6:b2:11:94:
ff:fc:d1:1c:ec:38:8c:33:b8:df:6b:e2:98:8f:0e:ce:1f:03:
1a:3a:b1:03:85:af:ec:e5:ee:53:87:a1:09:6c:cd:49:6d:d9:
0b:b3:4f:64:b2:a3:b5:79:e3:cd:09:71:69:db:cd:c1:6c:60:
73:d7:ec:ed:61:48:53:8c:73:d3:09:30:a0:dc:6d:e5:f7:8b:
64:84:4d:7a:1b:c6:af:13:cf:eb:6f:7a:35:27:6f:41:be:fc:
63:c9:1c:a1
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZbPhmoLXUpf7G4dNuqrgyLJMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDUzYmJiYmFhM2VlMjRjN2FkOWIyYzYwNDMyZTE0ZWRhMzg0
OWI1ZTIwHhcNMjUwNTE0MTYwMDE0WhcNMjUwNTE1MTYwMDE0WjAzMTEwLwYDVQQD
EygzMGE1OTEyNjhmNTAzM2NjNTMzMmIzMzY0ZmMxZGE1ZTYyYTZkNTVjMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEArbaN+timRabhN0wxFLhNIsRqGbJ3
wNkyWjisZjTyciULevZrKlmvYTxXtB8qrrEnun9/SW1MkggbJ2SqLtqStUM02KGg
Bgh0wTlz932VC6ix02pVPzg9pRV3VavJur0/vI9A7vd4UXDR27xO+qQ9MWOPCL/x
VkqbpKL200g3GBBHsRG65J2E8pEhgSj2yOIxmenqMZSGqGx0L7MelSBNKyHQ3E+q
iS5R62vZ/oGJQYrDUmup5KrCb4BgzWmMZ2/wRnLPslisgwF0vSZRhKIM3/feIbo/
n1UyBsEMxnv1IDlz4jXXB43hs2xCP12qUJER6YqNTb0CEk5qkwsml9VT6wIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFDClkSaPUDPMUzKzNk/B2l5iptVcMB8GA1UdIwQY
MBaAFFO7u6o+4kx62bLGBDLhTto4SbXiMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvVTd1N3FqN2lUSHJac3NZRU11Rk8yamhKdGVJLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC81My8zMzk0YzAtNDU4Ny00NDRlLTlhMjUt
MDBlY2YwYzRkMGVmLzEvVTd1N3FqN2lUSHJac3NZRU11Rk8yamhKdGVJLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC81My8zMzk0YzAtNDU4Ny00NDRlLTlhMjUtMDBlY2YwYzRkMGVm
LzEvVTd1N3FqN2lUSHJac3NZRU11Rk8yamhKdGVJLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEABYSMoDL3
lOQwCmUr+hDyh6zHUvZILdKJtwx68d1rKPEvpqD3EBf2zDU9B7lT7O55o5pIUsAI
8HY72v8iaIzPL5SxxkPoRdurFGtlebBOtDS7YJ2kyfUQj6EXV5/p+YXfy4WCLUbH
EHLxG9UV5tN2k6XwS6f8BDy8EDGEQ2WBnSnHxpOR+SZKNAL6QaVLutTnAWzM27r+
OFchaOnoygrWshGU//zRHOw4jDO432vimI8Ozh8DGjqxA4Wv7OXuU4ehCWzNSW3Z
C7NPZLKjtXnjzQlxadvNwWxgc9fs7WFIU4xz0wkwoNxt5feLZIRNehvGrxPP6296
NSdvQb78Y8kcoQ==
-----END CERTIFICATE-----
Generated at Wed May 14 22:54:58 2025 by rpki-client