Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ad/04e64b-924c-48a0-89a4-a00944fd7d9d/1/U0Z21mkyx3oldhE2rJnrm3TYAaY.mft
File: U0Z21mkyx3oldhE2rJnrm3TYAaY.mft (raw, json)
Hash identifier: E35AwSQITug5bpoYvciW6YvDG7sH9cxg1K7AixCEUJY=
Subject key identifier: 6A:AD:CE:B5:A9:49:67:D7:F3:87:CE:00:D1:00:BC:C5:F3:7D:8F:52
Authority key identifier: 53:46:76:D6:69:32:C7:7A:25:76:11:36:AC:99:EB:9B:74:D8:01:A6
Certificate issuer: /CN=534676d66932c77a25761136ac99eb9b74d801a6
Certificate serial: 0196DA40EFAA9062FF51FD1CA2CC69237205
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/U0Z21mkyx3oldhE2rJnrm3TYAaY.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ad/04e64b-924c-48a0-89a4-a00944fd7d9d/1/U0Z21mkyx3oldhE2rJnrm3TYAaY.mft
Manifest number: 0214
Signing time: Fri 16 May 2025 18:00:10 +0000
Manifest this update: Fri 16 May 2025 18:00:10 +0000
Manifest next update: Sat 17 May 2025 18:00:10 +0000
Files and hashes: 1: 2dOfhpir5Q5tClQufxJ63VN9ATs.roa (hash: MXA0vJK0httbWsLOJ5Lc4f/NDFMY7G+nyTtUUbrssPM=)
2: U0Z21mkyx3oldhE2rJnrm3TYAaY.crl (hash: LPa+TwbaqTZTEBX6CphZJ6CEBWucyfo7vYKfmeZTRn8=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/ad/04e64b-924c-48a0-89a4-a00944fd7d9d/1/U0Z21mkyx3oldhE2rJnrm3TYAaY.crl
rsync://rpki.ripe.net/repository/DEFAULT/ad/04e64b-924c-48a0-89a4-a00944fd7d9d/1/U0Z21mkyx3oldhE2rJnrm3TYAaY.mft
rsync://rpki.ripe.net/repository/DEFAULT/U0Z21mkyx3oldhE2rJnrm3TYAaY.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 17 May 2025 17:00:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:da:40:ef:aa:90:62:ff:51:fd:1c:a2:cc:69:23:72:05
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=534676d66932c77a25761136ac99eb9b74d801a6
Validity
Not Before: May 16 18:00:10 2025 GMT
Not After : May 17 18:00:10 2025 GMT
Subject: CN=6aadceb5a94967d7f387ce00d100bcc5f37d8f52
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:f8:45:e7:7e:d3:18:76:23:51:03:7f:1a:95:a0:
06:c0:2e:15:e5:77:e5:8b:de:e6:a4:17:fd:0f:75:
51:d8:80:bc:db:2e:d9:10:de:d1:2b:2b:77:9e:e2:
7e:4a:fa:6d:35:42:ee:ed:5e:cc:f6:a0:ff:7a:2f:
62:74:bd:a2:d9:65:8c:cb:0a:f2:ee:dd:b9:e2:b9:
7f:80:78:d7:a9:20:03:fa:c9:dc:7f:15:87:e7:5b:
80:34:0c:a4:d9:62:17:87:ae:63:da:15:fc:66:86:
d0:93:72:71:28:3e:df:56:c2:22:95:07:fc:80:da:
36:97:72:71:53:b6:43:07:bc:85:41:5b:a2:8f:74:
84:08:c0:66:37:94:40:fd:40:c1:16:fe:6a:24:98:
1d:1a:15:c0:70:69:3e:63:c6:41:25:ef:1e:96:17:
f9:2b:a4:fe:af:3d:b6:64:ab:74:53:2d:9d:1d:13:
f2:c8:cb:51:38:92:77:57:1f:88:b4:4e:18:a3:ac:
87:e4:a8:1d:9e:e0:9b:95:cc:65:b8:95:9f:9d:2d:
12:55:f4:4b:80:25:7a:54:68:36:98:12:1b:86:a8:
95:e0:b2:84:44:6f:c9:bd:f0:11:81:fd:b1:fa:1c:
b3:29:11:d0:2f:c6:94:ce:0a:d5:43:1d:32:19:ab:
13:1d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
6A:AD:CE:B5:A9:49:67:D7:F3:87:CE:00:D1:00:BC:C5:F3:7D:8F:52
X509v3 Authority Key Identifier:
keyid:53:46:76:D6:69:32:C7:7A:25:76:11:36:AC:99:EB:9B:74:D8:01:A6
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/U0Z21mkyx3oldhE2rJnrm3TYAaY.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ad/04e64b-924c-48a0-89a4-a00944fd7d9d/1/U0Z21mkyx3oldhE2rJnrm3TYAaY.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/ad/04e64b-924c-48a0-89a4-a00944fd7d9d/1/U0Z21mkyx3oldhE2rJnrm3TYAaY.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
96:3e:c3:be:b5:8b:36:ed:af:58:5a:fd:f6:7f:d1:f6:f9:11:
d4:51:22:21:3a:88:7a:f2:3f:9b:72:73:1a:e2:d1:0b:45:07:
98:64:d6:c2:e4:a7:ee:af:0c:e7:91:87:9f:1e:96:d9:b1:4f:
9a:47:38:ad:7b:75:13:e5:b0:de:2a:e2:9c:28:01:1e:38:a4:
c0:8e:99:5c:53:66:b2:2d:87:a5:b1:a8:e3:9f:14:21:0b:ef:
f2:d0:c7:3c:84:05:3e:ee:9c:81:d6:96:85:08:91:c2:41:c6:
99:e0:b3:87:f9:75:47:2a:fb:10:9f:38:f0:c4:1d:16:d8:ad:
17:4f:32:22:48:31:2d:75:1c:87:68:21:3c:5a:58:1a:be:fc:
68:54:af:84:14:b2:30:a8:08:37:04:32:06:c2:e6:bf:76:4c:
87:ac:b4:39:d7:62:9c:14:e0:0d:10:e8:17:a7:9e:cb:72:5a:
ac:f8:3c:ce:81:27:8b:bb:e1:e7:1f:f6:66:24:96:5e:64:10:
f9:42:7f:92:ac:7e:18:dc:a3:af:db:00:7e:63:d2:8f:53:fe:
e8:9b:80:da:80:30:6f:4d:de:78:0b:7a:1c:86:43:73:3f:cc:
2e:2d:de:f8:62:56:05:75:96:b9:0d:51:21:be:a7:cf:36:ef:
b8:a8:4f:e5
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat May 17 02:20:28 2025 by rpki-client