Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/6d/56d502-c5d8-4b14-9836-a67f95f2de5e/1/U2xMlP7U-ouQP29vtTQEhMDkpNM.mft
File: U2xMlP7U-ouQP29vtTQEhMDkpNM.mft (raw, json)
Hash identifier: BISSKGpTEuo6lklxFgajft/a7VRL+QfMZ9voZky6Jgk=
Subject key identifier: F9:67:3E:FA:D2:99:36:43:2F:65:97:06:17:82:3F:CD:E9:38:4B:AC
Authority key identifier: 53:6C:4C:94:FE:D4:FA:8B:90:3F:6F:6F:B5:34:04:84:C0:E4:A4:D3
Certificate issuer: /CN=536c4c94fed4fa8b903f6f6fb5340484c0e4a4d3
Certificate serial: 0196BAECFA15528CC526A277B2F08B015457
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/U2xMlP7U-ouQP29vtTQEhMDkpNM.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/6d/56d502-c5d8-4b14-9836-a67f95f2de5e/1/U2xMlP7U-ouQP29vtTQEhMDkpNM.mft
Manifest number: 1536
Signing time: Sat 10 May 2025 16:00:14 +0000
Manifest this update: Sat 10 May 2025 16:00:14 +0000
Manifest next update: Sun 11 May 2025 16:00:14 +0000
Files and hashes: 1: U2xMlP7U-ouQP29vtTQEhMDkpNM.crl (hash: 3AOlM50rSDtdVFft7ibwwYvm6y5WOPnOFKXhyqzjp5I=)
2: njJ08DLk77AkZ1iIEBC7jMkFvlQ.roa (hash: GEX/RSN8tQvNqg+ko8rD3JrvjgsOgbyicEDl49n/sdU=)
3: pn8rq8qDOUBuZ0-b31eLiOCLyZg.roa (hash: l5Xr+6tnilajkPRMuk4w2ggc4ncvbbGis+a2SkOogMk=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/6d/56d502-c5d8-4b14-9836-a67f95f2de5e/1/U2xMlP7U-ouQP29vtTQEhMDkpNM.crl
rsync://rpki.ripe.net/repository/DEFAULT/6d/56d502-c5d8-4b14-9836-a67f95f2de5e/1/U2xMlP7U-ouQP29vtTQEhMDkpNM.mft
rsync://rpki.ripe.net/repository/DEFAULT/U2xMlP7U-ouQP29vtTQEhMDkpNM.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 11 May 2025 13:00:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:ba:ec:fa:15:52:8c:c5:26:a2:77:b2:f0:8b:01:54:57
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=536c4c94fed4fa8b903f6f6fb5340484c0e4a4d3
Validity
Not Before: May 10 16:00:14 2025 GMT
Not After : May 11 16:00:14 2025 GMT
Subject: CN=f9673efad29936432f65970617823fcde9384bac
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e7:b4:83:0b:90:ff:0f:53:c7:7f:9c:1f:2a:8f:
5b:b3:36:03:3d:e8:3e:83:dc:e3:12:2a:4b:15:28:
4f:89:df:a0:b9:d5:d5:ad:ef:5e:7e:7c:de:cb:71:
6d:9f:96:ed:84:27:c5:87:5e:f2:25:84:26:e8:77:
4c:08:5e:17:bf:be:27:29:46:6b:00:b8:1e:4c:4b:
db:ca:72:51:83:25:b9:c4:3b:e9:83:bc:b9:32:fe:
43:d0:2c:bc:7d:2a:c3:7f:97:4c:4b:3f:38:3f:20:
73:40:ec:34:d9:55:18:eb:64:94:be:31:eb:b6:eb:
c2:49:ca:cd:88:15:e0:56:4d:6c:b1:89:18:cf:da:
12:94:1e:24:62:73:c3:2c:a0:a0:b8:85:a4:ee:e3:
6d:82:ef:b1:99:fe:99:22:24:7e:d0:1b:bc:ae:74:
7d:1e:a8:85:14:5c:3f:a9:69:71:95:da:a1:ae:49:
97:f9:4a:f2:0a:d9:f0:f1:e5:64:30:e0:85:57:f9:
70:9f:34:88:81:c1:c2:cd:26:f5:56:e2:c7:bb:26:
bd:d1:17:3c:6a:44:a1:62:41:da:97:fa:a5:4b:31:
54:9f:0d:ad:6c:e7:66:af:33:60:46:26:05:8f:59:
7e:be:9a:ea:20:65:c2:28:a8:c2:28:8a:d2:f3:c7:
81:73
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F9:67:3E:FA:D2:99:36:43:2F:65:97:06:17:82:3F:CD:E9:38:4B:AC
X509v3 Authority Key Identifier:
keyid:53:6C:4C:94:FE:D4:FA:8B:90:3F:6F:6F:B5:34:04:84:C0:E4:A4:D3
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/U2xMlP7U-ouQP29vtTQEhMDkpNM.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/6d/56d502-c5d8-4b14-9836-a67f95f2de5e/1/U2xMlP7U-ouQP29vtTQEhMDkpNM.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/6d/56d502-c5d8-4b14-9836-a67f95f2de5e/1/U2xMlP7U-ouQP29vtTQEhMDkpNM.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
a9:f8:58:4f:53:3a:b5:e1:c3:0e:51:d4:94:e7:07:ba:8d:39:
9f:4e:ca:54:06:69:be:7e:39:3a:ed:e0:2b:a2:f6:2a:cf:26:
d0:ba:f8:1a:33:01:af:e9:fa:9b:28:8e:30:ce:77:fe:a5:93:
f4:4a:23:15:b7:8b:38:1b:b8:2f:06:9c:aa:96:ad:69:bf:d6:
12:94:dd:58:77:71:49:07:c0:71:d7:4b:2c:7d:1e:91:c1:08:
27:d5:8b:9d:8e:8d:c2:e8:bc:cf:43:57:0e:50:20:94:12:9b:
d3:59:b4:d1:a8:71:61:e1:4e:a1:51:ee:6d:70:87:77:f3:c0:
13:f4:30:e2:1b:7f:62:41:62:97:ac:8c:24:89:e7:a5:09:79:
b6:0b:6b:49:84:94:47:de:14:4f:fb:d5:9a:f1:ee:19:a4:7f:
19:02:e5:b1:27:03:02:1c:a7:5e:01:8e:33:89:43:80:07:c3:
95:49:6d:ff:e0:87:4a:b7:51:ac:b7:f4:97:02:1e:be:9c:5c:
d8:b4:33:04:e2:b6:50:75:78:81:36:d6:2c:32:0a:1c:84:50:
85:95:52:e8:6c:8c:38:0e:fa:08:cd:8c:dd:e6:30:9d:11:20:
33:e4:cf:87:bc:bd:58:23:1a:a5:12:e8:63:76:10:20:99:17:
ad:de:8e:f7
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat May 10 22:23:35 2025 by rpki-client