Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b6/793283-e304-4270-b300-1b15b25879f2/1/U8jE-VEgbxq9hqc9HLuzmQfobh8.mft
File: U8jE-VEgbxq9hqc9HLuzmQfobh8.mft (raw, json)
Hash identifier: osSaSwdPYhoKvWczw3h9bQkIL+edAmsIl9mzPl367ZA=
Subject key identifier: 20:6B:95:98:33:30:A5:95:37:04:F3:6F:E6:98:10:BC:79:2A:08:55
Authority key identifier: 53:C8:C4:F9:51:20:6F:1A:BD:86:A7:3D:1C:BB:B3:99:07:E8:6E:1F
Certificate issuer: /CN=53c8c4f951206f1abd86a73d1cbbb39907e86e1f
Certificate serial: 0196E07A3943309D8833F9096D64F520C702
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/U8jE-VEgbxq9hqc9HLuzmQfobh8.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/b6/793283-e304-4270-b300-1b15b25879f2/1/U8jE-VEgbxq9hqc9HLuzmQfobh8.mft
Manifest number: 1547
Signing time: Sat 17 May 2025 23:00:28 +0000
Manifest this update: Sat 17 May 2025 23:00:28 +0000
Manifest next update: Sun 18 May 2025 23:00:28 +0000
Files and hashes: 1: U8jE-VEgbxq9hqc9HLuzmQfobh8.crl (hash: FFIAkgiO18dMiltoKCn14V1wV0eMYlubNXq4g/H9pxs=)
2: gj6Yi2KQAGes4eI6WnlmwiQ6kdA.roa (hash: U/KvyTRHoYm4+lr8DamrffptLgYZWzqgWZ1VwobHzuA=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/b6/793283-e304-4270-b300-1b15b25879f2/1/U8jE-VEgbxq9hqc9HLuzmQfobh8.crl
rsync://rpki.ripe.net/repository/DEFAULT/b6/793283-e304-4270-b300-1b15b25879f2/1/U8jE-VEgbxq9hqc9HLuzmQfobh8.mft
rsync://rpki.ripe.net/repository/DEFAULT/U8jE-VEgbxq9hqc9HLuzmQfobh8.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 18 May 2025 20:00:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:e0:7a:39:43:30:9d:88:33:f9:09:6d:64:f5:20:c7:02
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=53c8c4f951206f1abd86a73d1cbbb39907e86e1f
Validity
Not Before: May 17 23:00:28 2025 GMT
Not After : May 18 23:00:28 2025 GMT
Subject: CN=206b95983330a5953704f36fe69810bc792a0855
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c6:33:f8:99:a2:d4:a0:58:b5:e3:a0:1c:67:32:
4a:a0:65:ad:05:8e:0e:cb:61:5d:28:29:ee:ba:25:
b3:29:1d:86:a8:74:d4:55:2e:bb:c4:c1:ad:a8:0a:
62:ae:6d:5c:75:1f:42:0f:ec:92:c0:5e:ad:dc:e8:
54:58:4a:48:36:58:d0:b6:68:f6:11:8b:49:86:1c:
8c:75:17:5d:b1:aa:ed:15:6d:df:a1:7e:5f:5b:32:
0f:24:77:de:d0:dc:3f:2a:96:8d:9c:bc:af:ee:1f:
97:58:04:a0:22:18:a1:85:14:2a:72:1f:08:fd:1a:
bc:5c:30:6f:20:2d:d9:8c:ed:2e:2b:8d:e9:2d:18:
00:35:e7:5e:10:99:dd:4b:2c:1c:e1:f2:a3:a3:f8:
92:fc:fd:4d:3f:62:9d:ba:dd:97:da:70:9e:64:0b:
d4:4f:b5:5a:e7:98:2c:60:8e:a4:b9:08:d9:1b:84:
ae:c3:3f:60:a0:6f:74:2f:d0:38:a6:d4:62:d9:ae:
4d:13:22:74:cc:ba:a3:85:fe:80:42:71:b2:6c:93:
4e:ea:ae:5e:52:4e:11:9c:c2:bc:00:01:99:52:dd:
3b:1e:54:a3:90:14:8f:b7:a6:89:bd:fe:4b:f5:4e:
30:48:7b:b9:e7:e2:ec:32:ae:bb:6e:ce:bc:7c:4c:
8d:91
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
20:6B:95:98:33:30:A5:95:37:04:F3:6F:E6:98:10:BC:79:2A:08:55
X509v3 Authority Key Identifier:
keyid:53:C8:C4:F9:51:20:6F:1A:BD:86:A7:3D:1C:BB:B3:99:07:E8:6E:1F
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/U8jE-VEgbxq9hqc9HLuzmQfobh8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b6/793283-e304-4270-b300-1b15b25879f2/1/U8jE-VEgbxq9hqc9HLuzmQfobh8.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/b6/793283-e304-4270-b300-1b15b25879f2/1/U8jE-VEgbxq9hqc9HLuzmQfobh8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
6f:da:88:2a:2b:e1:8b:0a:44:66:2c:0d:f2:02:25:37:6f:01:
68:38:48:f8:43:36:92:66:9b:89:45:c5:09:73:10:6f:be:eb:
5c:ab:23:b0:44:86:8a:c4:ac:82:9b:4c:ea:1a:2a:b6:63:5d:
aa:21:b9:f0:ea:bf:97:11:2d:63:2c:f6:2d:50:fb:d5:0d:eb:
89:1a:e9:fd:d6:61:b3:70:19:b4:d0:b9:a3:24:d8:99:27:f1:
59:5d:a7:58:6d:31:93:7a:67:47:d2:5a:a3:00:a5:bb:f2:6f:
61:2f:9d:ad:55:cf:08:7c:99:0b:b8:36:4d:95:71:56:8b:a7:
b9:23:14:b5:93:23:b5:36:28:70:77:2f:06:d4:f1:ee:fb:fd:
cb:a5:0e:61:6d:d7:1b:42:63:9b:6f:c1:43:23:08:42:fc:60:
14:9c:f9:f3:8c:65:b8:22:65:fd:9d:ac:7b:c5:42:c0:a0:92:
13:a3:e0:3e:40:9a:1e:3f:1f:38:8e:ab:de:47:0c:89:b6:e3:
bc:fc:17:85:42:d4:7f:8d:24:ff:9d:f5:41:c7:1e:10:1a:3e:
fa:95:0c:02:d8:50:02:87:f5:f9:b2:aa:37:25:69:56:75:2e:
8e:0e:12:25:61:e0:31:d8:41:6a:31:52:09:1a:19:aa:99:67:
1c:3f:3c:09
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun May 18 04:42:04 2025 by rpki-client