Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/bf/fb04c8-7057-45b7-a34c-dcfc6a9e0dc7/1/Uez5urycprrpCFzikvscLMGNNE8.mft
File: Uez5urycprrpCFzikvscLMGNNE8.mft (raw, json)
Hash identifier: WuVoO0ElDEaU+bHEn1EiitABIDRoF1Z9rRQZDTdfQe0=
Subject key identifier: 85:53:A4:6D:B1:1A:B4:09:8F:9E:49:21:1E:B8:13:C2:35:00:59:6B
Authority key identifier: 51:EC:F9:BA:BC:9C:A6:BA:E9:08:5C:E2:92:FB:1C:2C:C1:8D:34:4F
Certificate issuer: /CN=51ecf9babc9ca6bae9085ce292fb1c2cc18d344f
Certificate serial: 0196BB927E6BA385C88FFE34F255BA10F65F
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Uez5urycprrpCFzikvscLMGNNE8.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/bf/fb04c8-7057-45b7-a34c-dcfc6a9e0dc7/1/Uez5urycprrpCFzikvscLMGNNE8.mft
Manifest number: 1540
Signing time: Sat 10 May 2025 19:01:01 +0000
Manifest this update: Sat 10 May 2025 19:01:01 +0000
Manifest next update: Sun 11 May 2025 19:01:01 +0000
Files and hashes: 1: Uez5urycprrpCFzikvscLMGNNE8.crl (hash: 1LUjx+46agrP2B58hnPRs14m2/uWXbQTZ1RssVoux38=)
2: j2k6ZwwCoYdbRXccWL_N8jGmvQI.roa (hash: w7ebwT3KJy3faWUvy2fWfZ0lAeoGXL67yLrINDXPUpk=)
3: xxWFbF3tgwbzUuCNrDoHcp9Qoi0.roa (hash: nF/SPLRIzHvrKRFZBuGbHBJ7AWT0/rnH1yU0BqremkQ=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/bf/fb04c8-7057-45b7-a34c-dcfc6a9e0dc7/1/Uez5urycprrpCFzikvscLMGNNE8.crl
rsync://rpki.ripe.net/repository/DEFAULT/bf/fb04c8-7057-45b7-a34c-dcfc6a9e0dc7/1/Uez5urycprrpCFzikvscLMGNNE8.mft
rsync://rpki.ripe.net/repository/DEFAULT/Uez5urycprrpCFzikvscLMGNNE8.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 11 May 2025 19:01:01 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:bb:92:7e:6b:a3:85:c8:8f:fe:34:f2:55:ba:10:f6:5f
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=51ecf9babc9ca6bae9085ce292fb1c2cc18d344f
Validity
Not Before: May 10 19:01:01 2025 GMT
Not After : May 11 19:01:01 2025 GMT
Subject: CN=8553a46db11ab4098f9e49211eb813c23500596b
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b8:81:e3:11:a7:66:ab:77:cd:cc:76:7b:af:5a:
fc:93:16:ef:b5:bc:5e:fa:cf:6f:e5:4a:62:90:b4:
5e:9f:6e:c7:46:4a:f2:25:b5:05:e5:95:73:ae:b8:
d3:c1:ba:a0:2a:a9:bf:06:e6:bb:2c:69:84:a5:27:
89:ac:b0:c5:33:64:d1:bb:d4:e6:76:98:92:a7:98:
db:37:a4:75:4f:0f:5f:33:c8:bc:5c:05:21:98:9b:
34:e8:85:1e:72:ac:dd:32:56:46:af:41:b7:fa:c0:
5a:a7:d1:b3:a1:82:4c:f2:8d:be:fd:33:f5:76:63:
17:fa:01:bf:98:63:b9:f9:c6:e2:4a:e9:fc:e6:a2:
33:49:77:40:05:fd:c2:51:8c:2e:cc:16:73:6f:a8:
89:1f:8b:8c:37:d0:e9:21:07:84:b3:ba:a4:f9:69:
96:c4:b9:5f:f2:74:8b:61:8d:59:42:05:5e:40:45:
fe:96:96:9e:b5:ee:e3:9e:05:87:5b:87:23:17:aa:
83:e2:b3:ff:3e:50:81:23:a4:42:3c:91:bc:25:ca:
e9:c2:46:73:2d:ed:f3:ed:2b:97:7f:dd:cc:8e:e3:
91:8b:74:85:40:3a:fd:4b:e2:d0:4a:37:ad:70:81:
6b:e5:66:90:bc:1c:a6:ba:01:2d:71:f0:f0:2f:c9:
69:ad
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
85:53:A4:6D:B1:1A:B4:09:8F:9E:49:21:1E:B8:13:C2:35:00:59:6B
X509v3 Authority Key Identifier:
keyid:51:EC:F9:BA:BC:9C:A6:BA:E9:08:5C:E2:92:FB:1C:2C:C1:8D:34:4F
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Uez5urycprrpCFzikvscLMGNNE8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/bf/fb04c8-7057-45b7-a34c-dcfc6a9e0dc7/1/Uez5urycprrpCFzikvscLMGNNE8.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/bf/fb04c8-7057-45b7-a34c-dcfc6a9e0dc7/1/Uez5urycprrpCFzikvscLMGNNE8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
00:a4:e9:9b:c4:84:e9:e0:06:ef:43:ab:0e:cb:08:1c:0a:12:
34:81:c6:75:f0:64:eb:a0:08:07:ee:48:71:c9:d3:b8:8e:3d:
91:7f:35:f3:b1:e9:da:0a:c7:91:52:41:31:36:ba:db:d3:30:
58:eb:e4:a8:4d:1e:38:40:ed:42:e8:b9:8f:3f:34:58:d4:59:
ed:60:32:7b:ca:07:0a:27:11:db:87:3e:f2:b0:04:e4:32:92:
f1:d0:5e:c9:1f:40:6e:cc:8a:74:a7:83:75:bc:0d:76:4d:8a:
ef:07:44:46:61:59:2c:a5:30:80:22:9c:64:3b:d6:fd:0f:8f:
ae:36:d2:d9:9d:1c:31:86:5a:bb:d6:3e:d7:95:da:f4:9e:29:
5a:bd:3c:c2:a1:e2:2b:d0:4f:a6:2a:df:00:28:48:9c:12:12:
fa:db:86:00:7e:38:38:b8:5a:3b:1a:b4:12:50:57:60:96:f1:
b9:9b:a0:7a:08:bb:4b:b1:27:87:df:93:e8:38:b8:e9:98:98:
45:12:9c:1b:c2:d1:d9:80:06:11:d4:59:f5:62:a7:17:ef:83:
24:45:4c:2c:09:fc:ec:25:15:47:fd:cc:5c:e6:b1:e5:80:fd:
d4:8d:08:71:1a:94:32:07:c9:c2:c5:88:09:5f:0a:ba:4b:d4:
2a:5a:61:75
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun May 11 01:14:55 2025 by rpki-client