Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/5f/8ccbcc-cd51-44ae-8f05-36fd233514f9/1/uSEnfz55VKSvVSCpkEL7CJOvgE0.mft
File: uSEnfz55VKSvVSCpkEL7CJOvgE0.mft (raw, json)
Hash identifier: ZYecHZjl7Pz3MBatqjAEQmoCo6IGvobYi9Hu1GAaBDg=
Subject key identifier: 66:D5:6C:B2:B9:52:06:CA:11:1B:8D:6D:82:56:2E:8C:EB:B0:33:C4
Authority key identifier: B9:21:27:7F:3E:79:54:A4:AF:55:20:A9:90:42:FB:08:93:AF:80:4D
Certificate issuer: /CN=b921277f3e7954a4af5520a99042fb0893af804d
Certificate serial: 0196BD12721405DC3D6D51D85DF554152054
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/uSEnfz55VKSvVSCpkEL7CJOvgE0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/5f/8ccbcc-cd51-44ae-8f05-36fd233514f9/1/uSEnfz55VKSvVSCpkEL7CJOvgE0.mft
Manifest number: 1534
Signing time: Sun 11 May 2025 02:00:24 +0000
Manifest this update: Sun 11 May 2025 02:00:24 +0000
Manifest next update: Mon 12 May 2025 02:00:24 +0000
Files and hashes: 1: J2krWsZ_nrVo68RmuJg6gtIP5Cc.roa (hash: edy80RXVye8xP8f43mCgyStXMeEBN6IE5pQ7y7lCAc8=)
2: RNunNkTlRavCIWC6GWUuTV58ZmQ.roa (hash: gKrJFKjacm0BkE8pyBxq+mcxr78x3vhWqOMKiIcTERc=)
3: TV8n2Nhf92M5RowrecsMHv_G6_Q.roa (hash: gbZyNyumFupj0Q0mMep5WOuD2tZvRRISK0wECqrhMRg=)
4: uSEnfz55VKSvVSCpkEL7CJOvgE0.crl (hash: UNCDUha9MM04hOXs/+WiIrl/tLm0Js/598nV+vbHEuQ=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/5f/8ccbcc-cd51-44ae-8f05-36fd233514f9/1/uSEnfz55VKSvVSCpkEL7CJOvgE0.crl
rsync://rpki.ripe.net/repository/DEFAULT/5f/8ccbcc-cd51-44ae-8f05-36fd233514f9/1/uSEnfz55VKSvVSCpkEL7CJOvgE0.mft
rsync://rpki.ripe.net/repository/DEFAULT/uSEnfz55VKSvVSCpkEL7CJOvgE0.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 11 May 2025 22:00:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:bd:12:72:14:05:dc:3d:6d:51:d8:5d:f5:54:15:20:54
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=b921277f3e7954a4af5520a99042fb0893af804d
Validity
Not Before: May 11 02:00:24 2025 GMT
Not After : May 12 02:00:24 2025 GMT
Subject: CN=66d56cb2b95206ca111b8d6d82562e8cebb033c4
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8a:f7:65:66:f7:97:dd:02:de:09:a8:a9:46:8a:
10:ab:a4:a1:42:58:ec:64:19:72:6d:25:6f:4f:51:
d3:ff:dd:f8:89:b9:bb:6d:62:2e:9c:66:c2:cb:c7:
0f:5f:12:0a:17:fb:1a:cd:0f:c5:a9:32:82:fb:b3:
7b:1f:c3:2d:e4:7d:3b:55:07:95:8d:7d:7d:fa:c2:
00:ee:81:2f:d5:98:8f:01:90:d4:b5:aa:1f:87:84:
f8:5d:2e:42:ba:86:9d:c0:6f:c9:74:c6:10:3a:a8:
3c:ea:43:ed:ad:b5:0e:55:da:24:7c:b6:31:50:29:
9f:6f:26:40:3e:98:b7:3e:1e:e5:cb:c7:f5:61:68:
d6:5e:05:9d:c3:63:31:0e:6c:6c:58:7f:9d:b7:c5:
bb:e0:cd:1b:73:b5:ae:d1:92:1c:e5:24:3b:e5:c9:
1d:9f:fa:c9:1e:5b:b8:16:97:d9:73:03:70:ff:19:
1e:11:b4:df:dd:27:07:d9:ab:00:c4:7b:66:ec:af:
89:53:98:ac:a3:db:07:8c:b1:29:af:31:ed:b8:69:
29:b4:6d:0b:f7:01:4f:4d:13:a2:58:4e:85:39:22:
84:d6:4f:0f:84:68:bd:d7:c4:e4:d4:28:22:f2:f2:
51:13:43:50:ed:4b:87:bd:ed:b0:36:4d:a1:b9:c4:
0a:5b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
66:D5:6C:B2:B9:52:06:CA:11:1B:8D:6D:82:56:2E:8C:EB:B0:33:C4
X509v3 Authority Key Identifier:
keyid:B9:21:27:7F:3E:79:54:A4:AF:55:20:A9:90:42:FB:08:93:AF:80:4D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/uSEnfz55VKSvVSCpkEL7CJOvgE0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5f/8ccbcc-cd51-44ae-8f05-36fd233514f9/1/uSEnfz55VKSvVSCpkEL7CJOvgE0.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/5f/8ccbcc-cd51-44ae-8f05-36fd233514f9/1/uSEnfz55VKSvVSCpkEL7CJOvgE0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
29:8d:c3:1c:47:f6:61:b6:12:bb:f9:08:b6:b4:95:e4:5e:00:
e6:b1:03:bd:be:b1:ff:86:b7:61:a5:5b:b5:cf:d2:99:52:26:
05:4f:59:be:8b:fb:15:83:49:0b:e2:65:37:85:2e:11:d2:c2:
bf:db:2f:b1:58:db:5b:d9:78:69:23:78:ff:88:a4:67:66:25:
65:03:b6:fd:02:59:37:3b:80:5d:79:f1:f7:17:88:f7:3c:9c:
7e:bb:04:ce:0c:ca:38:94:a3:2d:80:0b:5f:f4:a0:0f:01:c9:
e6:6d:06:44:bb:a1:03:17:58:34:d5:9e:fa:33:32:5f:05:af:
aa:32:da:36:0c:31:54:9b:15:59:77:48:2d:96:91:4c:7e:58:
c1:52:47:06:cb:de:ea:43:e8:56:5d:9e:06:f9:90:8e:e3:c4:
35:7d:4b:aa:03:40:60:7f:bc:9a:50:23:2e:82:de:ee:b0:a8:
5f:1b:a4:db:88:a6:1f:72:a0:36:1f:0f:30:3b:dc:09:36:7d:
f8:b4:77:e0:84:e7:38:c0:2e:da:20:24:a5:91:fc:70:dc:85:
d4:e2:d0:94:08:8d:06:f1:c9:6d:93:27:ea:f0:76:eb:cf:8d:
15:ba:45:dc:8b:3e:23:6f:20:26:09:2b:9b:c8:93:1c:61:29:
68:20:f4:e2
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun May 11 04:16:15 2025 by rpki-client