Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c0/1aaf5d-4e6f-4974-bfe4-c572cf867cbf/1/1UCrGFzzmd5s2zykXe0pa2vmj-o.mft
File: 1UCrGFzzmd5s2zykXe0pa2vmj-o.mft (raw, json)
Hash identifier: f9zhEDBRgTuGzNpAQtlUQvSN5j787IBGZUEvIOhssAg=
Subject key identifier: EA:FD:A8:37:87:AE:5B:EE:48:5B:D6:C0:A9:9C:0E:47:99:D6:48:B7
Authority key identifier: D5:40:AB:18:5C:F3:99:DE:6C:DB:3C:A4:5D:ED:29:6B:6B:E6:8F:EA
Certificate issuer: /CN=d540ab185cf399de6cdb3ca45ded296b6be68fea
Certificate serial: 0196C94DB245F266BF00073ADB681F141D62
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/1UCrGFzzmd5s2zykXe0pa2vmj-o.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c0/1aaf5d-4e6f-4974-bfe4-c572cf867cbf/1/1UCrGFzzmd5s2zykXe0pa2vmj-o.mft
Manifest number: 153C
Signing time: Tue 13 May 2025 11:00:34 +0000
Manifest this update: Tue 13 May 2025 11:00:34 +0000
Manifest next update: Wed 14 May 2025 11:00:34 +0000
Files and hashes: 1: 1UCrGFzzmd5s2zykXe0pa2vmj-o.crl (hash: BugUnCp6pwOfM83uqsvLYQxMSrydmjeGC1zKYDQiu3g=)
2: evwk9Zfy0oSug_OT-JqAYLVFN48.roa (hash: p8vwbzaWZAlgsI4s0YE3pDc8vzWrcDuiDp7ZJjKpleM=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/c0/1aaf5d-4e6f-4974-bfe4-c572cf867cbf/1/1UCrGFzzmd5s2zykXe0pa2vmj-o.crl
rsync://rpki.ripe.net/repository/DEFAULT/c0/1aaf5d-4e6f-4974-bfe4-c572cf867cbf/1/1UCrGFzzmd5s2zykXe0pa2vmj-o.mft
rsync://rpki.ripe.net/repository/DEFAULT/1UCrGFzzmd5s2zykXe0pa2vmj-o.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 14 May 2025 11:00:34 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:c9:4d:b2:45:f2:66:bf:00:07:3a:db:68:1f:14:1d:62
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=d540ab185cf399de6cdb3ca45ded296b6be68fea
Validity
Not Before: May 13 11:00:34 2025 GMT
Not After : May 14 11:00:34 2025 GMT
Subject: CN=eafda83787ae5bee485bd6c0a99c0e4799d648b7
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e5:d0:e9:61:22:b0:86:d5:89:11:b4:21:38:6d:
48:d4:f7:15:c0:c9:f3:8c:61:2e:0c:57:c1:a5:e1:
51:8c:db:85:3c:28:3b:c4:11:d4:a2:c6:42:bb:80:
a9:4e:82:61:62:dd:1e:b0:1e:c4:55:71:b5:c8:c6:
c7:e1:3a:5b:59:06:ad:d5:1d:7d:ab:d5:16:aa:18:
b1:a1:a4:b9:4d:71:93:d4:5f:c5:79:39:b7:18:74:
f2:d4:98:5a:52:92:fa:04:c3:5c:b7:0e:41:68:9b:
53:5f:1e:ea:77:e5:a5:e4:2b:7d:bd:56:79:63:67:
b1:34:06:32:d4:bc:1f:1e:b7:bd:79:cf:15:ac:ad:
2d:ea:4d:82:f2:62:f5:20:9f:9d:77:f8:44:ca:8c:
59:a2:6a:9e:86:d7:c7:07:d0:81:66:5b:8b:1a:de:
14:cf:bd:e5:bc:20:fe:6c:6a:49:b6:ac:1d:99:03:
b0:b6:b1:09:4e:de:2c:4c:2a:41:a2:7d:b5:5a:ec:
f5:ee:c7:89:5d:54:04:90:40:7b:a7:b7:be:6c:f6:
57:bf:3f:75:7d:be:84:b8:6f:19:93:31:d3:3e:6b:
57:2b:94:62:ee:a5:c9:8c:21:fd:51:ec:57:a0:0b:
aa:f7:96:cc:66:8d:2a:ea:ad:99:6d:46:76:1e:7c:
67:d7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
EA:FD:A8:37:87:AE:5B:EE:48:5B:D6:C0:A9:9C:0E:47:99:D6:48:B7
X509v3 Authority Key Identifier:
keyid:D5:40:AB:18:5C:F3:99:DE:6C:DB:3C:A4:5D:ED:29:6B:6B:E6:8F:EA
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/1UCrGFzzmd5s2zykXe0pa2vmj-o.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c0/1aaf5d-4e6f-4974-bfe4-c572cf867cbf/1/1UCrGFzzmd5s2zykXe0pa2vmj-o.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/c0/1aaf5d-4e6f-4974-bfe4-c572cf867cbf/1/1UCrGFzzmd5s2zykXe0pa2vmj-o.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
28:6d:04:01:b1:a6:c4:f3:2a:b3:f2:79:bc:d0:74:0a:9c:31:
03:71:44:ba:74:cb:1d:02:ef:7f:b9:ab:c8:f4:b7:0d:04:fe:
1a:b3:ce:94:d9:8e:be:6b:53:87:3f:ee:95:fb:0b:f5:e3:b3:
94:50:8d:ae:f7:d0:48:10:dd:68:78:ee:e0:de:f7:19:1c:f0:
84:f3:64:07:85:ac:9d:f0:2a:d6:a4:7c:d3:a7:51:89:4c:c6:
60:61:01:63:79:aa:a8:c8:ae:7f:c3:a7:b0:87:82:b2:ab:d3:
08:26:33:44:90:ba:e8:51:80:9e:76:f6:6e:f4:ad:87:4c:1d:
fa:29:68:d2:42:38:fc:f2:df:b5:75:1c:5e:52:c2:de:57:b7:
d0:5a:3d:ac:7c:fe:0b:7d:65:96:47:74:69:f5:e6:ad:ea:db:
3b:35:79:cd:51:7e:45:77:c2:7d:a0:65:90:f6:1c:58:bb:9c:
24:9d:22:80:7d:ef:db:a4:ee:7d:b3:0f:bd:ac:71:b7:45:c1:
f9:a5:79:4e:81:03:67:cd:2c:58:90:b6:be:62:46:a4:b2:31:
1e:02:2c:2c:f6:99:e2:eb:72:dc:a5:30:25:89:ec:62:82:67:
7d:df:11:6e:f3:58:0d:8b:e0:d3:dc:7b:5b:3f:91:61:5a:77:
69:20:0f:9b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue May 13 17:14:57 2025 by rpki-client