Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/92/df94ff-de9c-48a8-976d-965f1763782c/1/U7i0zqlMhn00wr_5rOdkC_9R0Gs.mft
File: U7i0zqlMhn00wr_5rOdkC_9R0Gs.mft (raw, json)
Hash identifier: i0ys5eGQUzq8+RzNCbR8sTtHuHb8VACaP269bJhdKZo=
Subject key identifier: 2B:63:8F:ED:00:91:E2:8E:70:B0:62:A8:B8:75:07:C9:FB:35:55:F4
Authority key identifier: 53:B8:B4:CE:A9:4C:86:7D:34:C2:BF:F9:AC:E7:64:0B:FF:51:D0:6B
Certificate issuer: /CN=53b8b4cea94c867d34c2bff9ace7640bff51d06b
Certificate serial: 0196B9A35F99A35245307C24A4DB59ABE611
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/U7i0zqlMhn00wr_5rOdkC_9R0Gs.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/92/df94ff-de9c-48a8-976d-965f1763782c/1/U7i0zqlMhn00wr_5rOdkC_9R0Gs.mft
Manifest number: 127F
Signing time: Sat 10 May 2025 10:00:13 +0000
Manifest this update: Sat 10 May 2025 10:00:13 +0000
Manifest next update: Sun 11 May 2025 10:00:13 +0000
Files and hashes: 1: U7i0zqlMhn00wr_5rOdkC_9R0Gs.crl (hash: Yjv7y+zMrtkhJbJSZcBwT/PNUfCmwT8tMlB028o9MaE=)
2: lbTglUB_cuWwuUtQ0HuYFd1iErc.roa (hash: SqLRBaYjg0lLeWRsw+zkUvg9dbqxK2qZeJXDb+7pMGY=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/92/df94ff-de9c-48a8-976d-965f1763782c/1/U7i0zqlMhn00wr_5rOdkC_9R0Gs.crl
rsync://rpki.ripe.net/repository/DEFAULT/92/df94ff-de9c-48a8-976d-965f1763782c/1/U7i0zqlMhn00wr_5rOdkC_9R0Gs.mft
rsync://rpki.ripe.net/repository/DEFAULT/U7i0zqlMhn00wr_5rOdkC_9R0Gs.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 11 May 2025 04:00:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:b9:a3:5f:99:a3:52:45:30:7c:24:a4:db:59:ab:e6:11
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=53b8b4cea94c867d34c2bff9ace7640bff51d06b
Validity
Not Before: May 10 10:00:13 2025 GMT
Not After : May 11 10:00:13 2025 GMT
Subject: CN=2b638fed0091e28e70b062a8b87507c9fb3555f4
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b1:d3:25:e3:70:c3:0b:8d:ef:31:e6:8f:11:20:
36:96:f2:ad:c6:10:86:ee:79:f2:0a:4e:8e:7b:cd:
e4:43:e7:69:ac:b9:28:90:1d:8d:bc:45:04:07:27:
15:43:22:18:ca:67:20:62:97:b9:fc:7c:db:ec:cc:
32:07:58:78:ee:20:f5:a7:2a:db:bd:0c:3b:a3:be:
2f:f3:65:8c:71:49:f3:cd:60:2b:bb:ab:41:30:00:
11:a5:ac:c7:e0:3b:0e:85:7f:1c:68:d5:91:69:46:
c5:f2:47:1b:b1:0f:8f:fd:90:cf:e1:46:65:f4:29:
53:3e:d3:4a:69:0c:4d:50:80:58:fa:c8:e6:14:b8:
a2:90:a6:99:5a:93:b5:3c:79:d4:48:c1:2f:3a:bf:
fc:2c:af:6d:b4:05:09:ae:03:39:85:bb:89:8b:05:
3e:da:c8:49:6e:f8:ae:c2:06:8a:9f:40:0c:9b:9e:
5e:17:c3:59:11:59:00:c9:e9:94:e9:19:d9:53:1f:
8c:3d:3b:bd:c0:bc:ba:a0:01:b4:b3:fb:48:f1:3e:
91:1a:b0:d4:58:d0:78:27:13:49:b8:dd:bc:f3:55:
83:1b:d4:2d:df:4c:b0:df:06:e5:a9:82:e5:d4:36:
3a:ea:19:0f:9b:d5:a5:5b:f7:c5:ee:4d:e2:5e:83:
01:55
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
2B:63:8F:ED:00:91:E2:8E:70:B0:62:A8:B8:75:07:C9:FB:35:55:F4
X509v3 Authority Key Identifier:
keyid:53:B8:B4:CE:A9:4C:86:7D:34:C2:BF:F9:AC:E7:64:0B:FF:51:D0:6B
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/U7i0zqlMhn00wr_5rOdkC_9R0Gs.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/92/df94ff-de9c-48a8-976d-965f1763782c/1/U7i0zqlMhn00wr_5rOdkC_9R0Gs.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/92/df94ff-de9c-48a8-976d-965f1763782c/1/U7i0zqlMhn00wr_5rOdkC_9R0Gs.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
55:1f:fe:75:64:b0:16:68:b0:bb:1d:e4:de:33:3a:2e:98:a0:
80:5d:d6:0e:9f:40:49:44:73:47:16:0c:e2:35:7b:c4:2f:93:
20:b6:e5:34:59:7c:1d:c2:d2:77:00:44:3b:11:bd:b4:c6:09:
eb:b1:38:6b:9f:14:bc:b2:ab:88:5c:62:30:5a:60:11:01:54:
a5:f3:32:29:6e:32:db:77:10:dc:e7:9c:da:d9:56:78:84:5e:
bb:6d:c4:56:7a:d8:dc:fe:57:3c:c1:8c:45:f4:3b:7f:26:e6:
c3:7c:72:52:c6:6a:ad:26:3d:b0:af:7b:c3:ad:02:61:53:7d:
4f:4d:6c:05:3f:cb:71:2f:52:e9:21:36:a5:84:92:55:98:49:
85:b8:d4:e5:31:19:01:a8:29:a8:0f:d5:91:2b:21:e1:77:c1:
36:9f:b1:4e:96:27:50:da:e0:1f:0c:fb:13:eb:a4:f4:c1:ba:
10:95:01:97:d6:ac:94:5d:0e:02:bb:2b:79:37:76:b8:92:91:
13:c4:62:c6:e4:f0:9a:1a:a1:6a:6f:77:53:ce:09:d6:54:ac:
37:e8:a0:30:81:ff:1d:98:af:76:7b:d4:f4:de:f1:c6:de:05:
ab:5d:d2:f1:83:60:d5:ff:bc:cb:8b:b0:3c:cc:ea:df:6d:09:
61:3d:50:99
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat May 10 12:06:23 2025 by rpki-client