Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/71/81df33-7538-40d8-b81e-d18610075efc/1/UzYQcXlxVgncpCK8B6CYRoxSlFI.mft
File: UzYQcXlxVgncpCK8B6CYRoxSlFI.mft (raw, json)
Hash identifier: A/0oH0F9BOrsQeP8jhadGE87EYZzm4IHciO+gGTwfFU=
Subject key identifier: AD:4F:23:07:05:B4:71:45:AF:77:48:42:D3:12:72:31:49:80:8D:59
Authority key identifier: 53:36:10:71:79:71:56:09:DC:A4:22:BC:07:A0:98:46:8C:52:94:52
Certificate issuer: /CN=5336107179715609dca422bc07a098468c529452
Certificate serial: 0196C539DBC2BEC7011BA0F1DE08544E869A
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/UzYQcXlxVgncpCK8B6CYRoxSlFI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/71/81df33-7538-40d8-b81e-d18610075efc/1/UzYQcXlxVgncpCK8B6CYRoxSlFI.mft
Manifest number: 1546
Signing time: Mon 12 May 2025 16:00:25 +0000
Manifest this update: Mon 12 May 2025 16:00:25 +0000
Manifest next update: Tue 13 May 2025 16:00:25 +0000
Files and hashes: 1: UzYQcXlxVgncpCK8B6CYRoxSlFI.crl (hash: QXhsrb/qmHoqzDy0J21O33RoACQ5wZF36QE+GE3qbgM=)
2: y90pAfzLQMR55Sa5PvGbioONASA.roa (hash: n9aRyUE5bDJ/tLya1U0ZStHeIcqZXIPWtBR2+GDXo8s=)
3: zFplkI-jekZ1WexKJkNCvR3gKDE.roa (hash: 1q8DoRCpAh+3qke5582Epuo/79FVU0mcOLaI7R/pGvc=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/71/81df33-7538-40d8-b81e-d18610075efc/1/UzYQcXlxVgncpCK8B6CYRoxSlFI.crl
rsync://rpki.ripe.net/repository/DEFAULT/71/81df33-7538-40d8-b81e-d18610075efc/1/UzYQcXlxVgncpCK8B6CYRoxSlFI.mft
rsync://rpki.ripe.net/repository/DEFAULT/UzYQcXlxVgncpCK8B6CYRoxSlFI.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 13 May 2025 14:31:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:c5:39:db:c2:be:c7:01:1b:a0:f1:de:08:54:4e:86:9a
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=5336107179715609dca422bc07a098468c529452
Validity
Not Before: May 12 16:00:25 2025 GMT
Not After : May 13 16:00:25 2025 GMT
Subject: CN=ad4f230705b47145af774842d312723149808d59
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b0:80:a7:58:13:53:7e:27:fc:f3:1e:69:35:17:
06:26:f3:0e:01:ea:c2:7e:3c:76:2e:6d:f4:7d:60:
a7:88:69:ae:09:c1:de:9e:db:4b:88:a8:37:da:63:
11:1c:73:14:9a:c4:56:0b:f4:4f:6f:ac:ba:22:72:
66:76:82:af:74:8c:70:90:07:19:98:25:8a:19:63:
db:76:75:3d:42:9f:ed:20:84:56:59:49:ad:37:0a:
16:84:a0:77:fd:13:48:61:92:4a:45:80:c4:ae:94:
2e:be:9e:6a:0e:2b:a4:44:64:8e:8c:cf:cf:00:77:
03:e8:a3:21:82:dc:83:d5:6a:4b:06:26:35:cd:50:
fd:7d:e4:af:c2:da:db:5d:6d:1f:5e:59:53:78:d5:
68:9a:24:15:90:92:e7:ec:28:1b:74:ba:79:b9:72:
49:2e:88:d2:9b:5e:5c:93:f8:d8:a2:36:59:28:9c:
b0:f5:4e:c6:31:f3:f6:f1:f7:f2:9d:03:b2:6b:0b:
45:c2:cf:56:42:fc:5b:a0:d2:bf:4b:1e:9c:60:1b:
ec:9e:fd:ab:6f:8c:95:09:59:44:19:74:d4:1f:37:
bb:e0:9b:97:dc:98:de:e9:ff:8d:5b:bb:28:2a:f7:
fa:56:64:f4:78:de:4e:96:25:07:aa:e0:1b:b6:87:
3e:fd
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
AD:4F:23:07:05:B4:71:45:AF:77:48:42:D3:12:72:31:49:80:8D:59
X509v3 Authority Key Identifier:
keyid:53:36:10:71:79:71:56:09:DC:A4:22:BC:07:A0:98:46:8C:52:94:52
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/UzYQcXlxVgncpCK8B6CYRoxSlFI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/71/81df33-7538-40d8-b81e-d18610075efc/1/UzYQcXlxVgncpCK8B6CYRoxSlFI.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/71/81df33-7538-40d8-b81e-d18610075efc/1/UzYQcXlxVgncpCK8B6CYRoxSlFI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
af:91:1b:54:d8:5b:4e:f8:22:e6:52:ba:6c:96:d7:3b:5e:2b:
b8:1e:ee:8e:9e:f9:1c:4a:c9:6f:82:24:49:6d:d5:cc:0c:f9:
22:f3:ab:32:24:9d:60:c1:64:67:f9:cd:24:c7:28:98:5d:03:
b1:c2:05:05:76:2e:25:ec:08:f1:ca:59:62:e8:b3:7a:55:d4:
af:65:8c:21:55:26:7c:ee:9a:4d:48:3a:7c:7b:60:93:6f:45:
0b:9c:d7:90:44:47:0d:72:c7:29:eb:ad:d3:a6:33:f3:ce:66:
23:96:32:b0:1f:bf:24:0e:c7:e2:a4:7c:ec:15:ce:dc:18:93:
8c:66:3f:8b:81:af:28:57:af:a9:b9:75:ce:da:34:3d:06:a1:
29:82:81:bb:cb:00:86:63:78:6f:88:4f:89:1f:8b:8b:73:f6:
cf:10:60:22:54:db:60:f1:e2:88:86:40:6f:01:e2:92:08:21:
a9:ba:f8:8f:e4:59:f7:e3:ad:73:f4:e4:38:50:13:a3:a4:9f:
4e:5f:a0:b7:4b:e7:42:73:9b:b9:1a:67:0a:9d:17:3c:61:01:
d4:db:bf:c8:7e:f3:91:a5:ac:48:e4:e5:de:99:ff:ab:75:63:
5b:90:b5:40:1b:69:e5:49:2a:6b:8a:ce:6f:3c:92:f1:1d:ae:
97:e1:83:54
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon May 12 19:48:45 2025 by rpki-client