Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/6d/e931e6-a152-4a1a-b08a-1081aeb121b3/1/usA65sVFitKAdlulUnmAoG_sI6g.mft
File: usA65sVFitKAdlulUnmAoG_sI6g.mft (raw, json)
Hash identifier: kABpx7DRl4dpP+o8uRSC/l3cFnF81AzfqfTnYBSjVSs=
Subject key identifier: 75:3C:AF:7B:3C:23:91:6F:40:4D:49:D0:09:EB:6B:64:96:F3:6D:F4
Authority key identifier: BA:C0:3A:E6:C5:45:8A:D2:80:76:5B:A5:52:79:80:A0:6F:EC:23:A8
Certificate issuer: /CN=bac03ae6c5458ad280765ba5527980a06fec23a8
Certificate serial: 0196BAB68DDA7A19126F76949EF8CF02A171
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/usA65sVFitKAdlulUnmAoG_sI6g.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/6d/e931e6-a152-4a1a-b08a-1081aeb121b3/1/usA65sVFitKAdlulUnmAoG_sI6g.mft
Manifest number: 1532
Signing time: Sat 10 May 2025 15:00:48 +0000
Manifest this update: Sat 10 May 2025 15:00:48 +0000
Manifest next update: Sun 11 May 2025 15:00:48 +0000
Files and hashes: 1: umBmq8XFX-zXziXQ4pyACUgy-FQ.roa (hash: JuI2qHr6MZgrFWdKqrf8sXobXSWHVnMHISH4QdZzmLE=)
2: usA65sVFitKAdlulUnmAoG_sI6g.crl (hash: IqFgG8fRrKVfoqRvrVbDuUarltM1DF4vWAVICvSyPos=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/6d/e931e6-a152-4a1a-b08a-1081aeb121b3/1/usA65sVFitKAdlulUnmAoG_sI6g.crl
rsync://rpki.ripe.net/repository/DEFAULT/6d/e931e6-a152-4a1a-b08a-1081aeb121b3/1/usA65sVFitKAdlulUnmAoG_sI6g.mft
rsync://rpki.ripe.net/repository/DEFAULT/usA65sVFitKAdlulUnmAoG_sI6g.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 11 May 2025 13:00:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:ba:b6:8d:da:7a:19:12:6f:76:94:9e:f8:cf:02:a1:71
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=bac03ae6c5458ad280765ba5527980a06fec23a8
Validity
Not Before: May 10 15:00:48 2025 GMT
Not After : May 11 15:00:48 2025 GMT
Subject: CN=753caf7b3c23916f404d49d009eb6b6496f36df4
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bf:ee:93:ee:4f:bd:31:4d:86:16:10:5a:87:45:
3f:d2:7c:56:0a:28:98:5b:f9:45:68:42:c3:06:f7:
b4:38:25:e7:94:9c:b2:6e:cf:89:a5:ad:31:3c:a5:
23:fe:d1:d3:4b:af:86:3b:45:d5:6e:aa:d0:a1:58:
94:f5:a0:c5:f0:89:91:45:58:4a:bc:2e:3a:60:13:
a3:70:89:06:1c:fb:ea:c4:a5:d9:1c:4e:00:23:cd:
80:a3:50:d7:8e:8f:1b:21:a7:33:55:fc:1a:54:cb:
41:8a:59:47:e6:f1:20:52:59:11:f0:64:b2:93:22:
63:9c:b0:e8:3a:b0:59:d4:4e:28:87:4e:94:5b:40:
59:67:37:b2:b7:fe:1b:a4:6f:09:06:19:fc:b5:d2:
48:45:9f:7a:4b:c4:b2:d0:cd:48:16:a9:41:a3:bf:
d0:8d:32:86:f5:a8:4d:e5:ba:21:72:2e:b7:19:a0:
74:b3:7b:59:7b:b6:ea:57:bd:03:24:5b:da:6a:70:
b2:c2:51:12:c5:c6:8f:1d:77:5a:b2:59:74:2e:ab:
13:47:3a:82:69:c7:8c:87:70:85:23:fb:1e:5c:a4:
d2:a9:47:65:a8:25:68:47:38:c5:82:94:9a:81:b4:
af:d0:3d:ca:3e:22:45:1e:dd:b2:f5:85:7e:6d:7f:
33:1d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
75:3C:AF:7B:3C:23:91:6F:40:4D:49:D0:09:EB:6B:64:96:F3:6D:F4
X509v3 Authority Key Identifier:
keyid:BA:C0:3A:E6:C5:45:8A:D2:80:76:5B:A5:52:79:80:A0:6F:EC:23:A8
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/usA65sVFitKAdlulUnmAoG_sI6g.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/6d/e931e6-a152-4a1a-b08a-1081aeb121b3/1/usA65sVFitKAdlulUnmAoG_sI6g.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/6d/e931e6-a152-4a1a-b08a-1081aeb121b3/1/usA65sVFitKAdlulUnmAoG_sI6g.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
85:11:5c:23:15:39:ee:a2:8d:84:3a:62:2a:5b:f0:b2:b3:92:
f7:b7:ba:2f:3c:c5:92:66:8d:86:62:a4:40:fc:38:24:31:07:
c5:dc:30:d5:ab:8c:d3:cc:0c:de:ed:05:cf:94:ad:8f:05:61:
b7:8a:fe:e3:cc:91:1b:59:b3:64:db:48:fd:e5:8f:56:76:9b:
b9:a7:6f:cd:69:93:81:5f:da:e0:ef:e7:ad:0d:98:b0:93:8a:
44:88:73:a9:e7:e1:b2:23:9d:73:7a:7d:29:ca:30:12:a1:a1:
4a:d1:dd:5f:9c:1e:bb:22:b2:7e:36:d2:e3:2f:9b:c4:6f:5b:
03:46:0c:53:4e:42:7a:59:26:e9:33:01:32:d3:57:91:a0:39:
72:44:f2:95:42:4f:e0:dd:0e:ae:84:c3:3f:91:bb:e0:18:70:
cc:d1:3c:7a:fb:17:2d:e0:4f:c4:fa:f8:65:02:9d:44:ac:eb:
3f:3c:ac:b5:13:74:c3:0d:63:9b:f2:b3:a9:54:19:63:3c:cf:
9f:a8:b0:be:72:da:21:e6:8c:03:c1:1d:e9:74:70:78:89:f2:
00:97:d0:da:6e:e3:3a:f5:c2:78:93:f2:c3:f9:64:c9:24:1a:
b9:ff:a8:27:72:40:68:6f:22:d4:82:fd:9c:67:f0:5c:58:69:
2d:4e:71:72
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat May 10 17:51:24 2025 by rpki-client