
Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/a7/94ecc4-f4fd-4fce-8054-ed1774adbf2f/1/U0eCGSFVj2agN_6coNzBBGz0hOA.mft
File: U0eCGSFVj2agN_6coNzBBGz0hOA.mft (raw, json)
Hash identifier: VDBFfo+rixcEDyshoVbEBVHY+w6nHJONUYYtl0nOZas=
Subject key identifier: F0:78:19:43:A0:15:D7:8E:6D:B5:25:02:B1:3F:10:57:B5:C4:E5:C8
Authority key identifier: 53:47:82:19:21:55:8F:66:A0:37:FE:9C:A0:DC:C1:04:6C:F4:84:E0
Certificate issuer: /CN=5347821921558f66a037fe9ca0dcc1046cf484e0
Certificate serial: 0196CB05BE7B5F1566EB87B0D4A9D9212C3F
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/U0eCGSFVj2agN_6coNzBBGz0hOA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/a7/94ecc4-f4fd-4fce-8054-ed1774adbf2f/1/U0eCGSFVj2agN_6coNzBBGz0hOA.mft
Manifest number: 1537
Signing time: Tue 13 May 2025 19:01:13 +0000
Manifest this update: Tue 13 May 2025 19:01:13 +0000
Manifest next update: Wed 14 May 2025 19:01:13 +0000
Files and hashes: 1: B4WLDJveFZVT_m8u5hStR6xu-pU.roa (hash: Nm6S6CMIoGZCCHyW+OnF60p//0+/EWirysqpstDuGNc=)
2: U0eCGSFVj2agN_6coNzBBGz0hOA.crl (hash: DOsQ/7rRlzlj0yiDoPzavX5e55Oyqn4Tw2eQ72v3SOU=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/a7/94ecc4-f4fd-4fce-8054-ed1774adbf2f/1/U0eCGSFVj2agN_6coNzBBGz0hOA.crl
rsync://rpki.ripe.net/repository/DEFAULT/a7/94ecc4-f4fd-4fce-8054-ed1774adbf2f/1/U0eCGSFVj2agN_6coNzBBGz0hOA.mft
rsync://rpki.ripe.net/repository/DEFAULT/U0eCGSFVj2agN_6coNzBBGz0hOA.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 14 May 2025 14:31:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:cb:05:be:7b:5f:15:66:eb:87:b0:d4:a9:d9:21:2c:3f
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=5347821921558f66a037fe9ca0dcc1046cf484e0
Validity
Not Before: May 13 19:01:13 2025 GMT
Not After : May 14 19:01:13 2025 GMT
Subject: CN=f0781943a015d78e6db52502b13f1057b5c4e5c8
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ad:f7:b7:f2:a7:c9:7f:71:f4:92:91:53:e7:8a:
2e:29:40:29:b1:21:7d:0c:d3:57:0a:a9:bb:4e:ad:
2b:4d:cb:c8:79:26:9b:43:c7:83:cc:e0:8d:ef:de:
b3:bf:4d:8d:cb:08:cf:11:cf:8f:59:6f:82:f7:af:
08:74:49:93:8f:d9:5e:15:bf:d5:d8:4f:de:ec:c1:
c0:e3:82:58:6d:f7:c4:dc:02:c7:2a:e8:a5:60:86:
02:e2:fc:04:ba:16:6e:48:78:24:af:c1:40:fa:92:
94:18:4f:a8:6e:88:3e:12:be:a9:ba:4a:85:48:1a:
56:8d:6c:6e:3e:79:55:c4:e3:80:a7:8b:9e:d5:d1:
a6:a3:07:a3:ba:db:04:8e:c4:3d:5b:96:26:01:4b:
eb:52:ba:32:8f:41:8e:5e:3e:00:5d:82:fe:2b:6d:
1b:21:8e:05:39:cd:73:64:ca:13:9c:87:7a:ba:2f:
d1:e9:8a:9f:a9:2a:76:83:f4:28:c0:56:ad:54:1c:
d6:48:59:17:7e:19:16:58:97:5e:53:0f:24:ac:7a:
e4:bd:ee:86:50:63:92:a7:b2:91:54:21:d2:f4:98:
7e:ea:a6:81:00:b0:ee:25:bf:98:69:4e:60:12:3d:
a5:9b:f3:17:d5:5b:00:6e:44:33:12:64:41:d7:22:
19:15
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F0:78:19:43:A0:15:D7:8E:6D:B5:25:02:B1:3F:10:57:B5:C4:E5:C8
X509v3 Authority Key Identifier:
keyid:53:47:82:19:21:55:8F:66:A0:37:FE:9C:A0:DC:C1:04:6C:F4:84:E0
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/U0eCGSFVj2agN_6coNzBBGz0hOA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a7/94ecc4-f4fd-4fce-8054-ed1774adbf2f/1/U0eCGSFVj2agN_6coNzBBGz0hOA.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/a7/94ecc4-f4fd-4fce-8054-ed1774adbf2f/1/U0eCGSFVj2agN_6coNzBBGz0hOA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
63:1a:f8:78:db:18:6a:5b:2a:8b:fa:b0:ed:da:7a:0e:b6:40:
25:a7:f4:a9:3d:e4:be:df:19:f8:f7:7f:e8:06:00:7a:df:fb:
c5:bc:a3:b5:89:c5:8a:c8:ab:81:83:fd:e8:d1:07:7d:e5:38:
a5:dc:a4:3f:93:80:88:0c:df:5e:5c:58:49:33:eb:47:cc:85:
3b:99:27:67:44:95:7f:2b:46:60:72:d3:18:95:08:6c:65:2f:
15:00:b4:a9:4f:f0:a9:db:f6:0d:2b:bf:49:7f:77:8e:d1:c9:
22:3b:34:10:9b:39:23:b2:92:ae:81:51:32:ee:0c:8a:7a:43:
55:b4:8c:5c:d7:22:04:bf:55:48:3b:92:a6:17:de:8b:10:30:
74:ef:ab:c7:f2:a9:12:98:6a:a3:1a:a2:2d:53:fb:24:6b:a0:
dd:f4:dc:61:51:e4:0c:bf:5e:f4:cb:77:3b:c6:02:d0:44:18:
a7:ac:43:80:64:a3:51:07:9a:3e:0a:fd:a6:82:70:4b:3d:b1:
08:b7:2d:d2:be:76:7e:0d:a5:6f:c3:90:c3:d0:cb:8f:00:ec:
da:39:78:96:aa:ed:7e:39:59:1a:5b:fb:53:03:cc:bd:48:ec:
0b:9d:f7:4f:6e:e0:55:71:12:98:2b:18:27:62:c4:ed:95:fc:
e7:3f:1b:1e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue May 13 23:58:06 2025 by rpki-client