Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/be/553dc6-12d0-4d4a-a294-97c5d59b0bbf/1/pu1EK5HU6Dpt45-2eXGh55xrHtU.mft
File: pu1EK5HU6Dpt45-2eXGh55xrHtU.mft (raw, json)
Hash identifier: BIqX+rsowAPLuiP3l8PbXuRu0B6ppNybLSt7YqTWwZk=
Subject key identifier: 7C:89:46:84:E3:85:20:2F:2A:A8:CD:C3:B8:D3:BF:B6:B3:2A:9E:C1
Authority key identifier: A6:ED:44:2B:91:D4:E8:3A:6D:E3:9F:B6:79:71:A1:E7:9C:6B:1E:D5
Certificate issuer: /CN=a6ed442b91d4e83a6de39fb67971a1e79c6b1ed5
Certificate serial: 0196B7B4F7CE86536C7452EA8F13999A5F0D
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/pu1EK5HU6Dpt45-2eXGh55xrHtU.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/be/553dc6-12d0-4d4a-a294-97c5d59b0bbf/1/pu1EK5HU6Dpt45-2eXGh55xrHtU.mft
Manifest number: 1533
Signing time: Sat 10 May 2025 01:00:12 +0000
Manifest this update: Sat 10 May 2025 01:00:12 +0000
Manifest next update: Sun 11 May 2025 01:00:12 +0000
Files and hashes: 1: SC2XN_diYt_QukHaap0r8T6Wdak.roa (hash: 9K19NSoBm7IcK9urRxPzzijH4A8PV0f6iVI/4Q272ew=)
2: lfrC4B88Afpo1TBPZMxOLIcU1Ck.roa (hash: t/3zF86JRbmij67yXF/+H8nTDumbM7s5DdE5qv8C5Js=)
3: pu1EK5HU6Dpt45-2eXGh55xrHtU.crl (hash: kNnVhddMNPGDyETBl9nHevBvOCycPf4uxBk5Dqe86DU=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/be/553dc6-12d0-4d4a-a294-97c5d59b0bbf/1/pu1EK5HU6Dpt45-2eXGh55xrHtU.crl
rsync://rpki.ripe.net/repository/DEFAULT/be/553dc6-12d0-4d4a-a294-97c5d59b0bbf/1/pu1EK5HU6Dpt45-2eXGh55xrHtU.mft
rsync://rpki.ripe.net/repository/DEFAULT/pu1EK5HU6Dpt45-2eXGh55xrHtU.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 11 May 2025 01:00:12 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:b7:b4:f7:ce:86:53:6c:74:52:ea:8f:13:99:9a:5f:0d
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=a6ed442b91d4e83a6de39fb67971a1e79c6b1ed5
Validity
Not Before: May 10 01:00:12 2025 GMT
Not After : May 11 01:00:12 2025 GMT
Subject: CN=7c894684e385202f2aa8cdc3b8d3bfb6b32a9ec1
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b2:cc:46:f1:0b:a9:0b:35:d3:6d:f4:6c:1a:32:
eb:48:41:33:bb:00:c3:40:50:af:40:fd:a9:94:b8:
ad:d6:7b:1e:85:58:a6:14:36:8b:d3:ba:5e:b1:b7:
5d:14:07:92:9d:37:36:5e:e9:71:c8:e2:5b:5c:49:
7f:62:3c:88:ca:15:a5:3a:a0:f2:51:32:da:a0:dc:
78:0f:1f:b0:35:89:95:01:72:6f:a5:e8:94:64:57:
7a:2e:34:19:36:02:5f:22:74:ac:4b:ac:4a:5e:6d:
b4:d2:e5:e4:97:f6:51:63:64:81:3d:e1:da:33:fb:
ba:f2:44:3a:8d:12:3d:b1:b1:ae:d3:b4:b8:e3:b9:
50:4d:47:e1:a6:c9:9d:aa:df:af:45:9d:a9:1d:dc:
7c:e1:94:f9:ba:25:a2:f1:95:d2:30:9b:b4:5c:29:
f7:28:c0:82:2e:41:c4:e2:58:84:42:d4:a9:dd:16:
1a:46:6a:e5:c9:cd:4f:c0:f6:29:0c:c8:2b:42:35:
9c:06:39:9b:bf:04:f1:e7:8c:e0:f8:3f:4f:67:f3:
b8:75:ba:5e:64:a8:98:88:c3:cb:78:53:a2:ce:70:
15:de:77:d3:ea:77:8d:e0:a4:d2:3e:88:1b:b7:b2:
03:50:b0:53:66:f0:5a:dc:d0:dd:2e:cf:c5:3b:22:
de:b9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
7C:89:46:84:E3:85:20:2F:2A:A8:CD:C3:B8:D3:BF:B6:B3:2A:9E:C1
X509v3 Authority Key Identifier:
keyid:A6:ED:44:2B:91:D4:E8:3A:6D:E3:9F:B6:79:71:A1:E7:9C:6B:1E:D5
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/pu1EK5HU6Dpt45-2eXGh55xrHtU.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/be/553dc6-12d0-4d4a-a294-97c5d59b0bbf/1/pu1EK5HU6Dpt45-2eXGh55xrHtU.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/be/553dc6-12d0-4d4a-a294-97c5d59b0bbf/1/pu1EK5HU6Dpt45-2eXGh55xrHtU.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
2d:67:5c:f9:fe:f2:c5:8e:76:f5:74:71:73:f6:7b:e7:07:80:
53:55:4a:cf:ae:af:0c:aa:87:10:b6:fb:4a:0c:77:f3:91:98:
a0:3a:94:c8:e1:72:86:8b:91:15:fd:cd:35:d1:83:86:1d:97:
11:f1:da:14:3b:37:0a:1d:ac:39:76:a2:4b:bb:cd:83:ea:bb:
0d:3b:26:2f:f7:fb:60:0c:8c:6e:c0:4a:ad:88:8b:53:38:9b:
8e:08:e7:5a:01:04:a2:61:e4:e0:bd:4f:e3:0e:16:a9:57:46:
e3:13:59:de:7d:99:88:b9:56:a4:92:67:9e:ad:87:ce:ae:3e:
d3:a9:4f:ff:e0:ae:a3:3a:27:20:a4:d4:11:77:cd:ed:bc:b1:
0d:2d:94:3f:95:a7:0f:b7:52:a0:2a:47:29:ce:c5:70:ca:f5:
55:eb:be:dd:6f:61:00:be:b9:79:0e:6c:84:1d:2d:e0:6a:11:
b1:06:f1:bc:97:74:26:a8:e4:86:8e:7a:5e:21:41:c9:cd:8c:
d9:e4:b7:f8:34:2d:b2:95:9a:35:80:aa:2b:a0:0a:44:6f:a0:
2c:ff:b1:9d:51:ce:1e:7a:ea:ab:f8:4c:07:3b:de:d9:ba:c9:
ad:60:3b:7b:36:9b:0a:e2:5a:b9:17:bb:af:50:95:ba:16:b9:
e4:3d:5e:81
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat May 10 08:19:19 2025 by rpki-client