Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/67/583543-e331-4592-8d89-9f302c20ae70/1/U9qZ-TUY4pqUWwf2ChjvhumznmU.mft
File: U9qZ-TUY4pqUWwf2ChjvhumznmU.mft (raw, json)
Hash identifier: cPIqswow9xBLMp+lK7Rv97QjkrRgSsqIxVQ01X5i3a4=
Subject key identifier: 2E:03:9C:A4:9A:B8:93:F0:66:C6:8F:B3:5B:87:CF:9A:1F:D8:71:08
Authority key identifier: 53:DA:99:F9:35:18:E2:9A:94:5B:07:F6:0A:18:EF:86:E9:B3:9E:65
Certificate issuer: /CN=53da99f93518e29a945b07f60a18ef86e9b39e65
Certificate serial: 0196C7CD67001A663D7E33C369685D2E239F
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/U9qZ-TUY4pqUWwf2ChjvhumznmU.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/67/583543-e331-4592-8d89-9f302c20ae70/1/U9qZ-TUY4pqUWwf2ChjvhumznmU.mft
Manifest number: 127D
Signing time: Tue 13 May 2025 04:00:49 +0000
Manifest this update: Tue 13 May 2025 04:00:49 +0000
Manifest next update: Wed 14 May 2025 04:00:49 +0000
Files and hashes: 1: U9qZ-TUY4pqUWwf2ChjvhumznmU.crl (hash: 9xbCGrNT6Sx1YSmn7xdcDht/7ChBypHEChwc2nTfM1k=)
2: p1W2xtpypFZeS4V60u-1DjDqTds.roa (hash: 34oWoq20u1/mqtBm1kWh1Zu5DKZerBQ57c/ZC8RMnIo=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/67/583543-e331-4592-8d89-9f302c20ae70/1/U9qZ-TUY4pqUWwf2ChjvhumznmU.crl
rsync://rpki.ripe.net/repository/DEFAULT/67/583543-e331-4592-8d89-9f302c20ae70/1/U9qZ-TUY4pqUWwf2ChjvhumznmU.mft
rsync://rpki.ripe.net/repository/DEFAULT/U9qZ-TUY4pqUWwf2ChjvhumznmU.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 14 May 2025 04:00:49 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:c7:cd:67:00:1a:66:3d:7e:33:c3:69:68:5d:2e:23:9f
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=53da99f93518e29a945b07f60a18ef86e9b39e65
Validity
Not Before: May 13 04:00:49 2025 GMT
Not After : May 14 04:00:49 2025 GMT
Subject: CN=2e039ca49ab893f066c68fb35b87cf9a1fd87108
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c0:66:c5:cc:99:fa:06:ac:3a:59:a9:3b:df:19:
a1:2a:d1:c3:a1:75:14:5d:07:a6:aa:ba:3c:4c:b7:
12:58:53:ca:b8:c1:07:15:15:f7:5e:8f:52:84:09:
60:b9:22:4d:04:09:5a:0b:a5:a3:41:a0:25:00:f5:
0d:d8:cc:d4:de:a8:07:9e:bb:a1:aa:da:d2:99:07:
5b:50:30:74:2c:54:03:5b:1f:b4:da:c2:93:6e:ad:
2a:d0:c1:45:69:10:e8:c4:4c:cf:ab:36:e7:5b:8d:
e9:cd:e3:6b:13:c4:cb:4e:87:c7:b6:e8:f5:23:7a:
55:13:10:1c:a7:72:62:f9:0b:71:76:02:99:3f:33:
66:c8:d7:1d:88:c9:52:2f:fa:37:a7:2f:79:95:c9:
f1:d5:b4:ee:44:70:fd:3f:7f:16:37:31:c2:8d:e9:
23:51:70:92:69:4f:a8:1f:88:40:68:ea:0a:89:c2:
ec:40:ba:0f:ae:84:f4:8e:b4:00:ee:1c:a5:4c:2e:
ee:d0:c6:37:4e:93:f7:77:a1:ca:80:95:58:cf:ee:
d0:c1:c1:f1:fe:e3:4f:25:29:3d:4b:fe:a0:3a:49:
e0:fa:86:5c:2c:26:e9:9b:97:3e:4d:15:d8:21:07:
5d:d8:af:53:57:79:d8:01:c9:d6:98:8e:a1:51:88:
c7:f5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
2E:03:9C:A4:9A:B8:93:F0:66:C6:8F:B3:5B:87:CF:9A:1F:D8:71:08
X509v3 Authority Key Identifier:
keyid:53:DA:99:F9:35:18:E2:9A:94:5B:07:F6:0A:18:EF:86:E9:B3:9E:65
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/U9qZ-TUY4pqUWwf2ChjvhumznmU.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/67/583543-e331-4592-8d89-9f302c20ae70/1/U9qZ-TUY4pqUWwf2ChjvhumznmU.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/67/583543-e331-4592-8d89-9f302c20ae70/1/U9qZ-TUY4pqUWwf2ChjvhumznmU.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
8d:8d:77:b5:ff:72:a6:8f:ad:bc:58:7e:e0:ae:f6:38:cc:81:
11:b1:e2:d5:ae:e2:69:0f:8f:98:bd:5f:8f:c0:f1:a2:01:ee:
0d:96:23:4b:39:d8:1a:b5:04:6f:d9:3d:48:ad:10:e5:45:20:
c6:60:fd:11:91:9a:82:41:ca:2d:c3:f3:cd:e8:55:c2:a4:33:
74:76:24:c9:0c:b6:b0:14:f4:fe:98:2e:6c:e8:3a:50:76:58:
13:dc:eb:88:fa:ba:10:46:02:55:ce:b5:e3:da:f1:cb:8c:9d:
df:45:82:7f:19:01:ee:87:2b:f5:98:e3:aa:25:92:54:e8:23:
7a:b9:d5:8b:11:f9:17:08:4c:80:b5:1d:05:94:89:15:14:9c:
af:bc:51:2c:42:af:65:d5:ca:0e:6a:b4:72:71:e5:8e:91:a9:
46:f5:f4:23:60:74:30:53:c7:9c:6a:7b:93:41:18:ff:2a:38:
97:0c:ab:13:9d:a2:de:37:60:2c:5b:11:40:d7:4f:3a:d6:dc:
d0:4d:04:62:1f:41:87:70:30:4d:bf:3e:fc:8b:7e:e8:f5:e3:
df:63:7a:63:33:dc:4f:50:1a:7b:5e:5a:e8:6b:9d:93:32:13:
7c:d2:9e:7a:8c:f4:6c:aa:e8:cd:63:5a:38:e4:56:96:52:be:
38:b3:7c:69
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue May 13 12:25:06 2025 by rpki-client