Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ac/091e11-ee0c-49ec-95d7-6dbad31dbc41/1/U_azaGcjiqcYvhfm5zzkCpiVeKA.mft
File: U_azaGcjiqcYvhfm5zzkCpiVeKA.mft (raw, json)
Hash identifier: LWrrNi5+enkuyubrulOdZLpx6TsYB37HiJ7vKbKZWGw=
Subject key identifier: 81:6A:EF:9A:C6:53:32:4A:4B:53:5E:4B:34:9B:B1:5E:F9:98:19:C5
Authority key identifier: 53:F6:B3:68:67:23:8A:A7:18:BE:17:E6:E7:3C:E4:0A:98:95:78:A0
Certificate issuer: /CN=53f6b36867238aa718be17e6e73ce40a989578a0
Certificate serial: 0196BA115BC9A1EAD532CC2FDAD877147973
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/U_azaGcjiqcYvhfm5zzkCpiVeKA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ac/091e11-ee0c-49ec-95d7-6dbad31dbc41/1/U_azaGcjiqcYvhfm5zzkCpiVeKA.mft
Manifest number: 123F
Signing time: Sat 10 May 2025 12:00:21 +0000
Manifest this update: Sat 10 May 2025 12:00:21 +0000
Manifest next update: Sun 11 May 2025 12:00:21 +0000
Files and hashes: 1: U_azaGcjiqcYvhfm5zzkCpiVeKA.crl (hash: tS+UZD6pFufT+BcHfcn/IQCo8ET4t7y43DclxMIUnSg=)
2: qm8-rtz9dvYOYtDUdJhFuQx2T1s.roa (hash: nzPHoD1cZfssTTQypaloowKyO3PlyRu1kf/LUUjI60k=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/ac/091e11-ee0c-49ec-95d7-6dbad31dbc41/1/U_azaGcjiqcYvhfm5zzkCpiVeKA.crl
rsync://rpki.ripe.net/repository/DEFAULT/ac/091e11-ee0c-49ec-95d7-6dbad31dbc41/1/U_azaGcjiqcYvhfm5zzkCpiVeKA.mft
rsync://rpki.ripe.net/repository/DEFAULT/U_azaGcjiqcYvhfm5zzkCpiVeKA.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 11 May 2025 12:00:21 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:ba:11:5b:c9:a1:ea:d5:32:cc:2f:da:d8:77:14:79:73
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=53f6b36867238aa718be17e6e73ce40a989578a0
Validity
Not Before: May 10 12:00:21 2025 GMT
Not After : May 11 12:00:21 2025 GMT
Subject: CN=816aef9ac653324a4b535e4b349bb15ef99819c5
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e0:27:ce:46:99:6c:1c:29:e1:6d:09:d7:7e:df:
43:a6:e9:08:30:f8:23:41:1c:85:b2:a2:c1:48:78:
80:38:14:60:7c:56:25:08:6b:af:1c:f7:5d:2e:44:
00:12:5d:07:1e:4c:25:b5:8a:f4:3c:c7:e8:4e:60:
b7:b7:92:c0:d0:91:a6:f4:51:8c:7e:fd:0c:a3:8d:
00:15:af:5f:1a:50:30:19:60:12:55:e2:61:d7:3c:
93:b1:64:1f:cc:a2:ec:4e:f3:66:fe:26:8a:6d:e4:
3d:ae:14:be:79:98:c9:9c:e0:25:3b:31:0b:ee:97:
00:23:01:d2:c5:3e:ff:cc:f7:14:bc:03:89:69:ad:
8a:10:d6:e0:58:18:fd:61:79:1e:38:28:2f:bb:11:
8e:45:36:13:dd:90:7f:09:ce:61:bd:3a:ec:50:0d:
7e:8e:ca:4f:44:b0:ff:38:4b:7a:8b:5b:a7:a6:92:
9f:73:4f:49:d0:1a:70:d6:2d:ad:6d:55:e9:b8:33:
f9:5d:5f:5c:b0:a7:48:a0:1c:fe:ba:00:8e:39:13:
72:b8:35:35:73:10:db:ca:6b:34:d3:13:6e:3a:50:
27:68:5d:c6:be:b6:0d:4d:c2:5f:49:22:56:74:35:
1b:f4:6a:34:8a:6c:65:61:0b:a4:1e:d4:35:73:6f:
32:cd
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
81:6A:EF:9A:C6:53:32:4A:4B:53:5E:4B:34:9B:B1:5E:F9:98:19:C5
X509v3 Authority Key Identifier:
keyid:53:F6:B3:68:67:23:8A:A7:18:BE:17:E6:E7:3C:E4:0A:98:95:78:A0
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/U_azaGcjiqcYvhfm5zzkCpiVeKA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ac/091e11-ee0c-49ec-95d7-6dbad31dbc41/1/U_azaGcjiqcYvhfm5zzkCpiVeKA.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/ac/091e11-ee0c-49ec-95d7-6dbad31dbc41/1/U_azaGcjiqcYvhfm5zzkCpiVeKA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
9d:59:3c:09:43:0b:5e:10:01:ce:5e:20:33:cc:d8:66:c7:34:
0e:7c:8e:aa:91:db:04:ce:63:4f:9a:cd:12:3e:f8:73:9b:5d:
b4:dc:35:4b:70:a8:e9:8e:38:51:3a:de:32:82:6d:5f:27:29:
c3:0d:6f:00:64:d9:1f:2a:67:25:99:2b:ea:6d:ab:0b:d0:97:
93:ce:e8:b0:48:1b:8c:22:5f:ba:db:a4:35:9a:61:2b:a5:16:
e6:05:f3:33:4b:4a:d6:a6:cf:98:51:0c:b4:0a:07:77:00:b8:
f6:bd:ca:9f:af:58:e6:c4:26:9b:1d:a8:7d:ae:a4:28:64:79:
90:d0:df:ef:2c:59:83:a0:7a:f5:c9:b3:33:d4:bb:90:33:4e:
1d:61:89:98:01:c5:3d:ad:85:1e:8b:ff:36:d7:c1:79:36:6f:
9d:12:6c:9b:1c:f5:9b:4e:13:a4:1a:80:33:4e:2b:8b:0b:91:
d4:76:f7:23:87:fa:5c:a7:e1:5e:e7:9b:01:10:99:b2:9b:b6:
c7:c9:75:78:2e:dc:d5:ff:c1:b1:60:97:cd:d6:b4:48:2a:41:
8a:94:56:95:ad:1a:4a:d4:ff:0b:cf:b7:17:a8:65:a4:6f:53:
d1:28:b8:81:6c:df:9d:ba:7f:c4:60:fb:65:91:e6:e3:7b:e8:
e1:89:3a:8f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat May 10 19:05:07 2025 by rpki-client