Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/71/b60fb5-2fda-4def-96f9-e2b9f6dbe000/1/U1sc1e5esD379tQl1peejVNQFbw.mft
File: U1sc1e5esD379tQl1peejVNQFbw.mft (raw, json)
Hash identifier: GijgDPOyL6ZegL5fyDLNP0eW5bpkRsGo0bcDa2+OzCk=
Subject key identifier: 84:EC:E3:BF:CA:13:37:AE:40:F4:95:02:F4:65:3A:A1:2E:A0:30:BD
Authority key identifier: 53:5B:1C:D5:EE:5E:B0:3D:FB:F6:D4:25:D6:97:9E:8D:53:50:15:BC
Certificate issuer: /CN=535b1cd5ee5eb03dfbf6d425d6979e8d535015bc
Certificate serial: 0196BBFFA58D841C431E55FABF5AE5033186
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/U1sc1e5esD379tQl1peejVNQFbw.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/71/b60fb5-2fda-4def-96f9-e2b9f6dbe000/1/U1sc1e5esD379tQl1peejVNQFbw.mft
Manifest number: 0219
Signing time: Sat 10 May 2025 21:00:15 +0000
Manifest this update: Sat 10 May 2025 21:00:15 +0000
Manifest next update: Sun 11 May 2025 21:00:15 +0000
Files and hashes: 1: U1sc1e5esD379tQl1peejVNQFbw.crl (hash: 9SBCxaF1gegwVdqUG4HzneqDDXskbVEexmCiRf0BWUA=)
2: Uug84sytKC8kkK1Rr2IkRJKpHOE.roa (hash: AF85GnR/Tasw2A05JHhZPxVHlXBJOl2ToM5QI44AuPM=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/71/b60fb5-2fda-4def-96f9-e2b9f6dbe000/1/U1sc1e5esD379tQl1peejVNQFbw.crl
rsync://rpki.ripe.net/repository/DEFAULT/71/b60fb5-2fda-4def-96f9-e2b9f6dbe000/1/U1sc1e5esD379tQl1peejVNQFbw.mft
rsync://rpki.ripe.net/repository/DEFAULT/U1sc1e5esD379tQl1peejVNQFbw.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 11 May 2025 21:00:15 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:bb:ff:a5:8d:84:1c:43:1e:55:fa:bf:5a:e5:03:31:86
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=535b1cd5ee5eb03dfbf6d425d6979e8d535015bc
Validity
Not Before: May 10 21:00:15 2025 GMT
Not After : May 11 21:00:15 2025 GMT
Subject: CN=84ece3bfca1337ae40f49502f4653aa12ea030bd
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:99:ca:5c:1c:49:e2:ce:3b:a9:95:83:58:77:87:
92:e4:61:8a:b9:39:d3:85:4f:fe:fa:74:85:c6:f3:
7b:af:8c:d6:d4:ef:dd:d4:fa:6e:33:3d:6f:3f:e8:
8f:35:90:d3:68:05:9b:07:05:dd:cc:d6:58:17:b2:
af:52:02:a5:9d:aa:c1:f3:de:05:82:42:bb:87:45:
b1:8d:83:2a:b9:76:63:2d:e9:7e:25:92:c8:55:4b:
2c:be:65:86:e9:67:b9:35:e8:95:51:16:f1:d0:a3:
b2:64:a7:3d:0b:fe:3b:7b:dd:56:e4:d0:53:3d:d8:
ef:45:d7:df:2d:68:a3:f8:6f:9a:4f:81:57:56:63:
17:48:04:00:e8:cc:42:92:2d:49:2f:b7:dd:d5:b0:
be:53:b1:41:e9:01:e2:52:f2:27:23:71:85:f3:0a:
1a:a1:60:d8:95:00:34:cc:c2:c4:35:3f:4f:7d:79:
60:29:45:c4:57:4a:ed:5b:75:8b:e5:4d:b6:a8:7e:
ba:b5:f4:f0:b7:fe:40:af:e7:9b:d0:67:13:de:28:
8d:33:2c:b3:bf:3e:28:32:93:57:1b:3e:63:b8:bd:
5a:e5:e5:c1:42:b8:1e:82:2b:bc:10:f1:61:5c:6e:
76:74:a1:04:75:0f:c0:2b:c7:97:35:55:99:18:5c:
ce:c9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
84:EC:E3:BF:CA:13:37:AE:40:F4:95:02:F4:65:3A:A1:2E:A0:30:BD
X509v3 Authority Key Identifier:
keyid:53:5B:1C:D5:EE:5E:B0:3D:FB:F6:D4:25:D6:97:9E:8D:53:50:15:BC
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/U1sc1e5esD379tQl1peejVNQFbw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/71/b60fb5-2fda-4def-96f9-e2b9f6dbe000/1/U1sc1e5esD379tQl1peejVNQFbw.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/71/b60fb5-2fda-4def-96f9-e2b9f6dbe000/1/U1sc1e5esD379tQl1peejVNQFbw.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
0c:c4:fb:a6:7c:c5:0d:3a:33:a8:62:c2:23:07:2c:9b:38:8a:
53:32:ca:cb:5a:3b:32:10:c9:25:fd:fd:a9:0b:2b:18:ab:8d:
d9:31:31:e7:dc:f9:cb:67:67:29:b3:05:0a:3f:d5:e8:04:14:
56:01:99:d3:94:4f:bf:45:5a:ae:2e:50:c0:27:86:f7:66:e4:
06:19:af:be:ed:13:eb:f8:fc:22:05:00:a6:6e:a9:f6:c4:e8:
0d:37:f0:83:36:e5:dc:4f:67:66:2f:52:37:c7:69:66:ad:c1:
b9:4e:42:af:d1:54:53:21:78:bb:0e:50:cc:9e:74:76:44:2a:
e3:2a:9a:52:19:82:90:59:79:13:d2:fa:7c:29:c7:fb:b5:33:
bb:dd:09:b7:48:c3:e9:a0:0b:cf:21:fc:fe:ff:c8:9e:95:5f:
23:36:32:e6:0c:ce:54:fb:fa:8d:c4:fd:d2:b0:f7:3b:28:d0:
83:44:2f:5b:5c:78:fd:b3:ec:c2:21:15:42:1b:d4:3d:47:b4:
b5:b4:7b:8b:d7:77:85:bc:e6:9e:b6:5c:37:6d:1c:1f:d3:81:
b1:b0:3c:26:54:b3:8e:c4:12:00:2c:c7:92:f7:7e:56:d7:cb:
ba:44:ee:d0:ef:e5:8a:7c:1f:ff:fa:b5:b2:b4:cc:22:c2:31:
08:7f:6a:58
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun May 11 05:29:34 2025 by rpki-client