Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/79/4c0413-ce81-4dc8-8a4d-a70eee3db5e5/1/U0lylWvf-DsNiB4Br9PWxSZR4Es.mft
File: U0lylWvf-DsNiB4Br9PWxSZR4Es.mft (raw, json)
Hash identifier: uhME5TXIhUbKe3TwtenpeR+aC2poqTjTGLSX4/BQXFY=
Subject key identifier: D2:0D:B4:20:8C:F1:A9:30:25:3F:92:1E:88:49:FD:6D:37:67:95:AF
Authority key identifier: 53:49:72:95:6B:DF:F8:3B:0D:88:1E:01:AF:D3:D6:C5:26:51:E0:4B
Certificate issuer: /CN=534972956bdff83b0d881e01afd3d6c52651e04b
Certificate serial: 0196BECA69B984B4B13FD1C01AB68D057B75
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/U0lylWvf-DsNiB4Br9PWxSZR4Es.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/79/4c0413-ce81-4dc8-8a4d-a70eee3db5e5/1/U0lylWvf-DsNiB4Br9PWxSZR4Es.mft
Manifest number: 05E3
Signing time: Sun 11 May 2025 10:00:58 +0000
Manifest this update: Sun 11 May 2025 10:00:58 +0000
Manifest next update: Mon 12 May 2025 10:00:58 +0000
Files and hashes: 1: U0lylWvf-DsNiB4Br9PWxSZR4Es.crl (hash: 5jj3xN/Ini+Q/8uC1WiMl6NZ9pQRWThl3z9/+62lh4g=)
2: gB1MwA1mtIVkiFQ2EqzsfbYOK18.roa (hash: xnYJIQNoCXwxomDZp5xDNLGopiNTka87rzFXVihnDvs=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/79/4c0413-ce81-4dc8-8a4d-a70eee3db5e5/1/U0lylWvf-DsNiB4Br9PWxSZR4Es.crl
rsync://rpki.ripe.net/repository/DEFAULT/79/4c0413-ce81-4dc8-8a4d-a70eee3db5e5/1/U0lylWvf-DsNiB4Br9PWxSZR4Es.mft
rsync://rpki.ripe.net/repository/DEFAULT/U0lylWvf-DsNiB4Br9PWxSZR4Es.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 12 May 2025 10:00:58 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:be:ca:69:b9:84:b4:b1:3f:d1:c0:1a:b6:8d:05:7b:75
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=534972956bdff83b0d881e01afd3d6c52651e04b
Validity
Not Before: May 11 10:00:58 2025 GMT
Not After : May 12 10:00:58 2025 GMT
Subject: CN=d20db4208cf1a930253f921e8849fd6d376795af
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ea:5f:5b:81:98:ba:bb:35:07:61:87:52:58:99:
35:3b:ae:fc:cc:70:3d:a4:36:77:bb:ac:11:c3:af:
88:fd:6b:91:e2:01:10:87:bf:46:37:24:70:35:fc:
d2:07:f7:47:08:7c:02:42:23:0b:c8:79:d6:a6:dc:
79:4b:ab:5d:54:22:47:b7:7e:5f:c0:09:7e:81:75:
6a:23:c7:94:84:6f:9f:f2:36:7a:3a:d6:a2:8d:81:
0e:ee:33:53:88:9c:7e:b0:2f:40:0d:93:ec:ac:e2:
4b:ee:12:d6:ba:77:65:e9:40:af:8d:7a:f6:d6:c7:
ef:53:8f:84:7f:4b:41:e1:27:bc:bb:71:15:ef:b3:
e2:00:85:2e:fc:8b:36:4b:6d:96:41:88:38:c2:71:
47:93:1a:99:75:37:14:47:9d:09:2a:53:2f:8b:0c:
26:28:3f:f5:e7:e6:8a:fd:47:b4:ad:a9:ca:c8:aa:
44:f3:7e:98:39:1e:19:08:0b:f2:02:f8:c3:5a:7d:
83:62:6f:5b:7b:a2:c7:f4:ed:fa:2e:df:12:ca:3e:
73:7c:da:8a:06:0b:51:06:f6:03:2e:91:bd:e5:37:
b5:c3:92:dd:58:3b:f0:38:22:cf:26:be:f7:48:a4:
d1:86:83:9a:d8:70:5f:92:d3:3e:96:62:f2:46:09:
dc:fb
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D2:0D:B4:20:8C:F1:A9:30:25:3F:92:1E:88:49:FD:6D:37:67:95:AF
X509v3 Authority Key Identifier:
keyid:53:49:72:95:6B:DF:F8:3B:0D:88:1E:01:AF:D3:D6:C5:26:51:E0:4B
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/U0lylWvf-DsNiB4Br9PWxSZR4Es.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/79/4c0413-ce81-4dc8-8a4d-a70eee3db5e5/1/U0lylWvf-DsNiB4Br9PWxSZR4Es.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/79/4c0413-ce81-4dc8-8a4d-a70eee3db5e5/1/U0lylWvf-DsNiB4Br9PWxSZR4Es.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
aa:bc:3a:f6:23:ad:1a:dc:de:ef:79:4f:61:b6:9f:64:0a:db:
97:21:a1:bf:a7:71:2e:03:75:d8:8f:3d:fb:4d:2a:fa:cf:39:
14:e0:75:33:b0:1a:b0:8e:05:3e:0a:48:04:74:48:fe:b1:56:
20:35:2e:cf:68:a1:f3:86:65:86:29:7b:0f:66:42:47:ec:db:
97:5d:1a:f5:d5:46:d6:b9:79:ad:8d:b1:48:e2:3a:a0:0d:ac:
f8:3b:81:0b:26:c8:25:8a:2f:1d:11:c2:fa:ad:57:4a:71:69:
23:b7:2d:c6:3f:b1:ce:f6:1c:7e:a3:77:54:38:15:eb:d5:19:
12:ab:a3:bf:1f:37:ae:a9:d1:45:59:2e:a2:79:f7:64:10:be:
54:f4:fe:79:5b:3d:d6:4a:0c:18:39:93:53:35:07:ef:a2:7e:
bd:01:23:e9:b5:5b:e2:05:d7:96:0b:c0:13:cc:74:83:89:f4:
c6:c5:9b:04:9b:1a:95:14:c1:4e:e9:68:f1:76:0f:23:c2:09:
9f:56:bf:2c:9e:bc:fe:d6:ab:72:37:66:f1:89:8e:bb:a1:8b:
3a:ab:08:28:fb:9f:89:9b:35:6a:e7:d7:c7:ee:d5:44:6d:7d:
11:55:71:a3:58:bc:26:16:e2:98:e1:54:66:4c:32:5f:14:18:
38:70:f4:c3
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun May 11 19:18:16 2025 by rpki-client