Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/53/e5ce8f-5ea0-479f-93e9-89d5c60f501f/1/lUYfvuHAbj6vrA8vlSU8qGA6zPI.mft
File: lUYfvuHAbj6vrA8vlSU8qGA6zPI.mft (raw, json)
Hash identifier: oqVwDSuFb4iBEDG4oYEO4PsXU5qnaDvQIeI5fXidw3s=
Subject key identifier: C3:2D:A4:EC:F9:F5:84:3E:B2:5D:3F:3F:02:4A:55:3C:EC:2B:17:6F
Authority key identifier: 95:46:1F:BE:E1:C0:6E:3E:AF:AC:0F:2F:95:25:3C:A8:60:3A:CC:F2
Certificate issuer: /CN=95461fbee1c06e3eafac0f2f95253ca8603accf2
Certificate serial: 0196B2580997D60E0E65E81BED1987E919D5
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/lUYfvuHAbj6vrA8vlSU8qGA6zPI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/53/e5ce8f-5ea0-479f-93e9-89d5c60f501f/1/lUYfvuHAbj6vrA8vlSU8qGA6zPI.mft
Manifest number: 06A4
Signing time: Fri 09 May 2025 00:00:36 +0000
Manifest this update: Fri 09 May 2025 00:00:36 +0000
Manifest next update: Sat 10 May 2025 00:00:36 +0000
Files and hashes: 1: _HX0nKUguEjDK_UXSZxDRu7j10o.roa (hash: nDwDdh/G4BS8EpikB8I09Ea4NwJkgiqchJXpY1cDAL4=)
2: lUYfvuHAbj6vrA8vlSU8qGA6zPI.crl (hash: mcTrUTTIy4GWS6aDsCjPCXQIOr+Rz7L0E8wLPvrhiBk=)
3: zuaQcYGr_SOorxrrm1R8vFKkh3o.roa (hash: +Frydy4vUNiwXuYX5nBMIXixa4+W5EMNDEkn6Iy0AhY=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/53/e5ce8f-5ea0-479f-93e9-89d5c60f501f/1/lUYfvuHAbj6vrA8vlSU8qGA6zPI.crl
rsync://rpki.ripe.net/repository/DEFAULT/53/e5ce8f-5ea0-479f-93e9-89d5c60f501f/1/lUYfvuHAbj6vrA8vlSU8qGA6zPI.mft
rsync://rpki.ripe.net/repository/DEFAULT/lUYfvuHAbj6vrA8vlSU8qGA6zPI.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 10 May 2025 00:00:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:b2:58:09:97:d6:0e:0e:65:e8:1b:ed:19:87:e9:19:d5
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=95461fbee1c06e3eafac0f2f95253ca8603accf2
Validity
Not Before: May 9 00:00:36 2025 GMT
Not After : May 10 00:00:36 2025 GMT
Subject: CN=c32da4ecf9f5843eb25d3f3f024a553cec2b176f
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ed:b9:61:b9:5c:fd:62:ec:16:c8:f3:51:f1:2b:
8b:ab:65:b0:19:90:0a:66:3e:fe:5b:b6:cb:d0:56:
9a:fd:84:81:83:d1:05:aa:10:3c:84:d8:9f:5a:14:
97:33:f1:b5:82:d5:79:9e:aa:3c:2f:ae:35:17:53:
71:74:09:dc:52:a8:40:75:64:1f:ac:78:c4:b8:99:
90:18:05:8c:bb:bd:01:d7:36:a0:e2:bc:51:df:b2:
67:0f:3d:6d:06:64:15:59:b8:36:8b:4f:75:94:05:
42:25:a1:46:d1:35:06:e3:91:e9:a3:17:32:8a:40:
58:26:2f:dd:e3:80:32:a1:20:2c:92:9c:0d:d4:dc:
34:96:0d:0c:3b:0d:f7:fa:65:74:e6:3f:58:1b:70:
0f:37:0c:74:23:6b:6c:36:41:7c:ac:a5:b2:1b:f0:
5f:5b:74:25:85:aa:5c:39:56:f9:4f:82:00:c2:98:
92:99:89:92:37:42:1a:ca:b3:30:5f:d4:22:f5:b3:
a5:ac:d3:9f:54:78:c0:d3:22:cf:33:fa:1f:ef:bb:
8a:9c:80:09:2f:93:a0:5f:72:c7:ca:94:25:c2:4a:
f5:02:ee:d8:37:4c:79:97:99:0d:af:04:93:cd:a0:
20:a7:ee:50:71:65:d2:d1:e3:a9:f2:7c:5e:12:54:
7d:fb
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C3:2D:A4:EC:F9:F5:84:3E:B2:5D:3F:3F:02:4A:55:3C:EC:2B:17:6F
X509v3 Authority Key Identifier:
keyid:95:46:1F:BE:E1:C0:6E:3E:AF:AC:0F:2F:95:25:3C:A8:60:3A:CC:F2
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/lUYfvuHAbj6vrA8vlSU8qGA6zPI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/53/e5ce8f-5ea0-479f-93e9-89d5c60f501f/1/lUYfvuHAbj6vrA8vlSU8qGA6zPI.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/53/e5ce8f-5ea0-479f-93e9-89d5c60f501f/1/lUYfvuHAbj6vrA8vlSU8qGA6zPI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
8f:e5:94:8e:15:2e:64:bd:21:6e:7a:03:1c:a6:88:df:ec:50:
a9:6a:94:f9:c0:4b:53:8d:07:fc:c9:18:61:90:80:cf:12:ec:
e8:a1:5a:a6:c1:41:52:97:76:a4:23:8b:6f:c7:09:d0:8e:f9:
50:33:a4:45:75:66:73:f6:d2:f9:17:3a:da:36:34:d5:94:c3:
cc:fe:2e:6f:c4:7f:ee:17:39:be:32:68:50:a0:50:01:85:26:
99:d5:83:ef:f2:66:cf:e7:5a:ce:e6:c2:2e:23:b1:f0:32:af:
b1:1d:25:2b:1a:7f:0d:fd:54:c7:f5:37:d7:d2:62:eb:96:8c:
40:47:63:78:25:4d:1d:f5:9a:60:45:bb:e3:24:5c:bb:83:b2:
e1:c2:37:5a:87:63:0b:2f:09:7c:af:47:cc:64:4d:4f:60:08:
10:a6:f1:21:d2:75:2d:43:99:ee:00:80:d5:ca:bd:2b:bc:1d:
7f:a3:71:63:ea:69:97:d2:7f:8c:dd:d2:78:e7:86:1e:f3:a5:
70:c2:bb:2f:69:0c:80:3b:04:f8:4c:3e:0a:d8:90:37:ec:44:
3f:66:ce:7b:7d:f4:ea:59:b9:22:8d:4e:65:c3:65:67:2f:5f:
6e:04:ae:07:12:f5:20:71:ee:2c:4d:93:4f:dc:d9:52:b4:e6:
7a:04:bf:2b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri May 9 06:15:02 2025 by rpki-client