Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/75/f35fb5-0f67-44e4-9a54-fd6f235daf0b/1/UZ5x0bhgWjO53WVLo43fq8HO9es.mft
File: UZ5x0bhgWjO53WVLo43fq8HO9es.mft (raw, json)
Hash identifier: nekgcilrEu5lvHKeE1LQfa1bPRGrQGRNejOIugD3f7A=
Subject key identifier: 38:2C:DB:BF:5E:61:2D:AF:B4:7E:0F:51:F0:D7:3B:32:AE:8E:2F:01
Authority key identifier: 51:9E:71:D1:B8:60:5A:33:B9:DD:65:4B:A3:8D:DF:AB:C1:CE:F5:EB
Certificate issuer: /CN=519e71d1b8605a33b9dd654ba38ddfabc1cef5eb
Certificate serial: 0196CA97320B111823B952E58E72A5C5A2E4
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/UZ5x0bhgWjO53WVLo43fq8HO9es.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/75/f35fb5-0f67-44e4-9a54-fd6f235daf0b/1/UZ5x0bhgWjO53WVLo43fq8HO9es.mft
Manifest number: 04F4
Signing time: Tue 13 May 2025 17:00:28 +0000
Manifest this update: Tue 13 May 2025 17:00:28 +0000
Manifest next update: Wed 14 May 2025 17:00:28 +0000
Files and hashes: 1: UZ5x0bhgWjO53WVLo43fq8HO9es.crl (hash: 5LzmfmnCL5V5vdzSKCCzf0CauJs31nAPlC6152osCSw=)
2: hQEUB92m80TtbOvBRID9BabLTbg.roa (hash: FkI5eSVTSgPh2a3D5h7cuawbzfvlNnMVkDchwgutjQU=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/75/f35fb5-0f67-44e4-9a54-fd6f235daf0b/1/UZ5x0bhgWjO53WVLo43fq8HO9es.crl
rsync://rpki.ripe.net/repository/DEFAULT/75/f35fb5-0f67-44e4-9a54-fd6f235daf0b/1/UZ5x0bhgWjO53WVLo43fq8HO9es.mft
rsync://rpki.ripe.net/repository/DEFAULT/UZ5x0bhgWjO53WVLo43fq8HO9es.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 14 May 2025 14:31:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:ca:97:32:0b:11:18:23:b9:52:e5:8e:72:a5:c5:a2:e4
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=519e71d1b8605a33b9dd654ba38ddfabc1cef5eb
Validity
Not Before: May 13 17:00:28 2025 GMT
Not After : May 14 17:00:28 2025 GMT
Subject: CN=382cdbbf5e612dafb47e0f51f0d73b32ae8e2f01
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ab:e9:f9:15:af:fa:0e:bf:5e:a9:17:26:6f:84:
fb:d3:4a:a1:bf:25:99:50:e3:f8:eb:f6:62:52:c0:
a9:e5:5e:7e:32:86:9c:dd:b8:b8:64:32:7e:47:b3:
48:f3:db:32:df:ec:fa:12:bb:c9:46:39:eb:46:f3:
b4:39:52:6c:ec:ff:a4:53:2b:7b:6e:17:87:51:d5:
70:f1:5f:78:e5:21:40:68:62:57:b8:e0:63:c2:eb:
4d:ec:a4:b3:48:db:b2:87:2f:31:57:da:74:77:4d:
fa:ca:49:ce:1c:29:66:e1:42:98:c7:de:f3:94:89:
df:e7:48:19:81:b6:23:60:aa:49:28:85:84:67:08:
97:9a:b9:71:bc:e0:94:0c:84:51:7e:77:01:68:e7:
63:0a:df:b4:bc:35:24:bf:d9:61:95:35:1f:f1:1c:
f4:eb:16:ab:38:44:eb:8c:13:a5:3d:2a:29:15:1b:
87:69:6c:11:86:09:ed:73:32:f7:9f:83:46:c0:40:
78:ee:e2:bb:d0:fe:42:59:c3:bd:ee:67:66:84:d5:
7f:71:20:f1:06:02:a9:4f:24:a9:96:93:29:04:50:
ec:00:6b:7f:3a:06:df:29:28:2f:cb:4c:80:41:76:
ed:46:71:36:bc:1e:fe:52:b1:13:59:d3:12:39:b8:
de:75
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
38:2C:DB:BF:5E:61:2D:AF:B4:7E:0F:51:F0:D7:3B:32:AE:8E:2F:01
X509v3 Authority Key Identifier:
keyid:51:9E:71:D1:B8:60:5A:33:B9:DD:65:4B:A3:8D:DF:AB:C1:CE:F5:EB
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/UZ5x0bhgWjO53WVLo43fq8HO9es.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/75/f35fb5-0f67-44e4-9a54-fd6f235daf0b/1/UZ5x0bhgWjO53WVLo43fq8HO9es.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/75/f35fb5-0f67-44e4-9a54-fd6f235daf0b/1/UZ5x0bhgWjO53WVLo43fq8HO9es.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
04:77:03:c0:1c:0c:8c:2f:4b:f0:d3:c2:c0:86:c5:8a:18:6c:
87:3b:d7:7b:b7:82:ce:2f:ea:dd:5d:1b:ae:28:b4:a3:32:cd:
17:40:ea:8b:ad:21:bb:ce:cc:2c:44:9a:7b:51:11:6c:14:92:
92:a2:23:ab:68:82:d1:6d:50:6d:3a:27:b9:88:37:d1:9f:a5:
1e:55:9a:1e:cb:b3:ce:c2:f9:81:bb:29:09:e8:f5:c3:40:8c:
a6:50:73:30:2e:05:1a:f1:60:f8:34:5d:97:ab:03:e8:53:c1:
02:f2:17:d4:e0:c2:94:5b:82:8c:4b:53:d8:d3:d8:98:a1:65:
2c:47:9c:85:08:fa:f7:39:f6:30:d6:d9:a2:5c:8b:56:4c:8b:
b8:31:30:31:d6:e2:6d:74:68:bb:40:a7:2b:70:58:0d:c2:08:
df:61:ce:90:4b:1a:9a:89:ca:98:38:a9:de:a9:67:88:fc:36:
9e:e5:38:84:aa:da:55:ba:0e:04:6c:ed:b7:5a:ef:fd:c2:0c:
63:fc:84:94:e6:21:49:fc:18:10:ac:45:fd:aa:2f:ca:ee:0d:
9b:0e:f0:4f:ec:71:2a:e2:5b:d6:de:3f:56:3b:41:29:6a:d4:
bf:71:fd:f6:fc:74:80:b6:cd:6d:8d:d5:12:77:b5:16:06:7c:
fb:a0:da:4c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue May 13 20:37:17 2025 by rpki-client