Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d2/b36636-3306-448f-8ecf-56482b390678/1/U8DiB45PPrpfh5UD_dgJw4O7dig.mft
File: U8DiB45PPrpfh5UD_dgJw4O7dig.mft (raw, json)
Hash identifier: yohWShiukG4jaQYdN8JhJNWbm6c6vpt37Dd43Nya/I0=
Subject key identifier: 13:7F:D0:D5:33:19:E4:E2:FE:C8:04:5B:E0:D6:97:9F:FE:1A:52:98
Authority key identifier: 53:C0:E2:07:8E:4F:3E:BA:5F:87:95:03:FD:D8:09:C3:83:BB:76:28
Certificate issuer: /CN=53c0e2078e4f3eba5f879503fdd809c383bb7628
Certificate serial: 0196B258A9A48DCEA445C852D43F020C67C9
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/U8DiB45PPrpfh5UD_dgJw4O7dig.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/d2/b36636-3306-448f-8ecf-56482b390678/1/U8DiB45PPrpfh5UD_dgJw4O7dig.mft
Manifest number: 0F2B
Signing time: Fri 09 May 2025 00:01:17 +0000
Manifest this update: Fri 09 May 2025 00:01:17 +0000
Manifest next update: Sat 10 May 2025 00:01:17 +0000
Files and hashes: 1: U8DiB45PPrpfh5UD_dgJw4O7dig.crl (hash: TtQDQUPdP8VN+oNGXE14L+fi5SQl80saUtijVTA9SO0=)
2: XOqVL4Qlgd2qj_R2o35sDNSHJkw.roa (hash: Vhjo7o5u3C511AphXSnY5EBALpIpM0HGnrEGYenlVkk=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/d2/b36636-3306-448f-8ecf-56482b390678/1/U8DiB45PPrpfh5UD_dgJw4O7dig.crl
rsync://rpki.ripe.net/repository/DEFAULT/d2/b36636-3306-448f-8ecf-56482b390678/1/U8DiB45PPrpfh5UD_dgJw4O7dig.mft
rsync://rpki.ripe.net/repository/DEFAULT/U8DiB45PPrpfh5UD_dgJw4O7dig.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 09 May 2025 16:00:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:b2:58:a9:a4:8d:ce:a4:45:c8:52:d4:3f:02:0c:67:c9
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=53c0e2078e4f3eba5f879503fdd809c383bb7628
Validity
Not Before: May 9 00:01:17 2025 GMT
Not After : May 10 00:01:17 2025 GMT
Subject: CN=137fd0d53319e4e2fec8045be0d6979ffe1a5298
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b8:27:58:80:aa:92:f7:82:94:13:ce:eb:f9:50:
b3:a3:6d:c8:5d:bd:a2:ed:98:2c:36:44:44:71:e5:
21:f0:47:95:c6:10:83:ba:52:b8:de:e9:b5:2f:1e:
d5:2b:b0:cb:84:05:34:0f:5c:9c:6e:c3:35:d7:26:
55:20:85:fb:50:32:10:59:b5:0d:5a:f0:2a:7c:74:
1b:56:4c:b8:37:ee:1d:1f:07:70:8d:86:03:05:2b:
93:a3:e0:a9:1b:4b:32:5b:5f:bf:34:4b:0c:02:f3:
30:5d:e6:4a:66:fc:fe:90:d9:95:aa:dc:e8:bc:90:
3d:df:34:b6:66:b3:f7:15:c9:d9:2f:30:c9:0f:88:
11:77:e5:1d:5c:c3:95:55:fc:93:35:e4:0f:31:1c:
51:bd:74:ed:5b:a2:06:4e:e6:36:23:19:cc:75:92:
f7:0a:a9:fd:07:49:14:e4:c9:1d:e9:4e:93:34:11:
eb:8c:60:73:b2:c7:1a:21:58:17:b2:5c:05:9d:1c:
68:88:ce:70:73:ee:bc:d2:e1:8e:75:ac:48:74:2e:
c4:93:b8:58:5d:4e:85:1f:e4:d3:2f:de:a0:a1:ad:
b1:30:d1:53:24:1c:55:4b:62:2e:4b:4a:ed:25:de:
5b:66:07:4d:e3:0c:ce:a7:0b:a3:81:84:73:ff:45:
14:43
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
13:7F:D0:D5:33:19:E4:E2:FE:C8:04:5B:E0:D6:97:9F:FE:1A:52:98
X509v3 Authority Key Identifier:
keyid:53:C0:E2:07:8E:4F:3E:BA:5F:87:95:03:FD:D8:09:C3:83:BB:76:28
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/U8DiB45PPrpfh5UD_dgJw4O7dig.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d2/b36636-3306-448f-8ecf-56482b390678/1/U8DiB45PPrpfh5UD_dgJw4O7dig.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/d2/b36636-3306-448f-8ecf-56482b390678/1/U8DiB45PPrpfh5UD_dgJw4O7dig.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
1d:f6:dd:d2:ab:eb:e5:ea:86:2e:08:5d:f5:80:d2:4c:ac:83:
8d:05:fb:68:a0:1f:3a:02:05:22:8e:aa:6e:e6:33:8c:e4:da:
b5:0b:5f:d4:75:2d:67:b4:a2:ad:60:f8:de:77:61:36:9c:06:
cb:99:4e:8f:02:68:9e:76:12:dd:cb:ff:26:f9:53:c5:fc:a6:
d0:b7:d7:77:24:db:07:a4:61:50:a1:c6:91:4f:0a:06:5f:34:
43:de:ea:83:13:fc:5a:c3:e8:f9:85:1d:3c:94:33:9b:a4:41:
fb:27:63:8d:2c:17:8a:b9:22:b8:0c:be:dd:cd:ef:26:96:68:
77:59:e4:d4:ec:08:7b:fe:87:8c:ef:a7:f1:98:ef:7b:8e:85:
14:fe:ca:b8:53:7c:e4:96:f2:0a:da:fb:d0:1c:90:88:56:be:
c0:51:53:2a:33:87:d6:34:af:26:a8:8f:a8:b6:ec:a5:62:c7:
3a:e4:4e:87:d2:f4:90:17:2f:41:8e:29:d2:2a:db:c8:29:bf:
d4:92:e8:33:f5:04:5d:66:ad:46:76:53:20:6b:68:5c:70:ca:
30:a5:62:f5:c1:4e:8e:e3:18:1f:93:6d:81:2e:b5:0a:82:dc:
1e:d8:c8:f1:f7:69:71:2f:cd:a7:12:94:4a:3b:8d:99:8a:2d:
2a:d9:63:09
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri May 9 03:01:11 2025 by rpki-client