Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/95/b27baf-e681-4ab6-b903-6a10c6e3222d/1/U1oJBa1WhPQUGCyZ4e2ZgWMJMAE.mft
File: U1oJBa1WhPQUGCyZ4e2ZgWMJMAE.mft (raw, json)
Hash identifier: pNkEEkYyXZxCkVBYpElXxlBlpVt7yb0vk1AJDO+1Q4Y=
Subject key identifier: 93:85:24:99:15:B0:7A:FA:12:26:B2:F0:99:40:FE:F3:A9:65:9B:AA
Authority key identifier: 53:5A:09:05:AD:56:84:F4:14:18:2C:99:E1:ED:99:81:63:09:30:01
Certificate issuer: /CN=535a0905ad5684f414182c99e1ed998163093001
Certificate serial: 0196BA485CEC58DE14A811B659BCE985B310
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/U1oJBa1WhPQUGCyZ4e2ZgWMJMAE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/95/b27baf-e681-4ab6-b903-6a10c6e3222d/1/U1oJBa1WhPQUGCyZ4e2ZgWMJMAE.mft
Manifest number: 1532
Signing time: Sat 10 May 2025 13:00:26 +0000
Manifest this update: Sat 10 May 2025 13:00:26 +0000
Manifest next update: Sun 11 May 2025 13:00:26 +0000
Files and hashes: 1: 7SN7zcCvYfxuFlfhHOApOkQRiJo.roa (hash: 3PArA/Gbu4mqUDahb41KthgCQL2QFV8tBeKTUZBovcI=)
2: U1oJBa1WhPQUGCyZ4e2ZgWMJMAE.crl (hash: qArIUi2JMSM4YLP4VR7tXCu/8zQPtLkci6GGqctv4L4=)
3: obJncD_0pTUlPPD-AcEn_M1zGfo.roa (hash: RuqdX0YCoJMcWHJ0m+d97tTxosEY+ohGr3DZreCWswY=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/95/b27baf-e681-4ab6-b903-6a10c6e3222d/1/U1oJBa1WhPQUGCyZ4e2ZgWMJMAE.crl
rsync://rpki.ripe.net/repository/DEFAULT/95/b27baf-e681-4ab6-b903-6a10c6e3222d/1/U1oJBa1WhPQUGCyZ4e2ZgWMJMAE.mft
rsync://rpki.ripe.net/repository/DEFAULT/U1oJBa1WhPQUGCyZ4e2ZgWMJMAE.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 11 May 2025 13:00:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:ba:48:5c:ec:58:de:14:a8:11:b6:59:bc:e9:85:b3:10
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=535a0905ad5684f414182c99e1ed998163093001
Validity
Not Before: May 10 13:00:26 2025 GMT
Not After : May 11 13:00:26 2025 GMT
Subject: CN=9385249915b07afa1226b2f09940fef3a9659baa
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:dd:d0:eb:4c:d4:aa:fb:cf:88:37:27:21:ba:ad:
34:e4:c7:55:16:4d:ca:ad:bd:28:5c:cb:6b:55:a2:
40:98:63:9d:9a:10:f1:4d:7a:c6:91:3f:09:35:ce:
c0:81:c2:53:8d:d8:c8:58:a5:aa:40:ae:aa:84:86:
ef:7d:83:ec:e0:a8:95:bb:16:41:5e:4b:e1:5a:3e:
de:8d:d9:a0:f5:5b:f6:eb:11:e6:b6:34:cc:0e:47:
2c:ae:a9:6b:c8:12:36:0e:90:e7:dc:98:2f:d7:ac:
c7:0b:e5:20:f2:0e:85:93:5e:69:ca:39:8e:38:c4:
83:08:0b:e2:e6:b6:bd:62:bf:46:ae:b9:a6:69:2d:
79:d3:aa:e9:55:9b:fc:61:4d:7c:39:d1:c7:45:24:
c8:ad:55:83:1c:c2:72:02:5b:18:2c:a2:57:eb:4f:
dc:4c:66:eb:6c:13:6c:45:db:d7:40:12:66:9d:19:
97:84:d8:b9:a8:51:fb:26:33:d2:61:dc:e6:55:6f:
ca:5f:b9:47:4a:19:68:30:2d:a7:53:b5:f9:b7:51:
b5:9c:d4:fe:21:25:f7:80:bb:36:c7:41:2f:d6:5f:
3a:70:af:fb:12:d9:17:a6:2f:65:f8:eb:83:ad:41:
44:80:a8:60:19:d7:7e:44:dd:3c:d3:86:81:86:66:
a5:75
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
93:85:24:99:15:B0:7A:FA:12:26:B2:F0:99:40:FE:F3:A9:65:9B:AA
X509v3 Authority Key Identifier:
keyid:53:5A:09:05:AD:56:84:F4:14:18:2C:99:E1:ED:99:81:63:09:30:01
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/U1oJBa1WhPQUGCyZ4e2ZgWMJMAE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/95/b27baf-e681-4ab6-b903-6a10c6e3222d/1/U1oJBa1WhPQUGCyZ4e2ZgWMJMAE.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/95/b27baf-e681-4ab6-b903-6a10c6e3222d/1/U1oJBa1WhPQUGCyZ4e2ZgWMJMAE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
1b:e2:88:f6:90:5d:cf:aa:49:6d:67:2e:63:b7:91:a4:fe:8e:
a2:38:70:a2:54:6c:08:e1:eb:96:47:50:88:51:93:7d:f0:3c:
1e:e2:6a:16:15:24:55:58:8f:7b:e4:ab:7f:19:43:95:7d:31:
ee:35:8c:86:4a:34:24:dc:73:af:a8:7d:c3:04:06:60:21:dc:
cf:40:5d:c1:6b:9c:58:ae:04:3a:bf:d9:91:0f:fa:48:8d:2d:
12:10:ec:e0:d1:38:c3:46:0a:6c:06:4d:fe:74:11:e8:0a:8b:
47:37:37:f5:e3:c0:97:07:a8:f5:38:2d:f0:77:7a:f2:26:e0:
09:04:72:cf:0a:95:53:22:c7:ff:9a:64:ed:8f:8d:c4:ef:56:
91:0d:6b:a6:b5:7c:5c:6a:e2:72:e4:79:3e:18:05:32:a3:95:
58:1d:20:b1:ff:4a:30:9b:b3:0d:c2:bf:d9:ee:07:7f:9a:8c:
d8:84:a9:7f:0d:b4:2b:2a:da:d3:cf:9b:e9:3f:a4:a8:48:82:
44:fc:43:5f:bb:e0:7b:02:bf:6a:42:4f:2a:75:61:11:76:8c:
40:d7:81:92:f1:1f:2a:e5:ae:5c:88:3d:1b:2d:ea:09:6a:bb:
57:a6:f4:0d:b7:c7:fb:3d:ac:70:51:f3:1c:2f:22:94:67:b4:
b4:81:80:c0
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat May 10 20:11:42 2025 by rpki-client