Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d5/fdd25d-c034-49f3-890d-4b89d377808e/1/V0U31U828UIjG8gXA4hyy2B7Iec.mft
File: V0U31U828UIjG8gXA4hyy2B7Iec.mft (raw, json)
Hash identifier: ULy11WhwBQzmyWBM7JcOr6ZTCmSMW728LLOfYhQqtT8=
Subject key identifier: A9:18:F8:1F:2E:05:56:1E:24:93:8E:F5:81:50:A6:B2:49:07:81:81
Authority key identifier: 57:45:37:D5:4F:36:F1:42:23:1B:C8:17:03:88:72:CB:60:7B:21:E7
Certificate issuer: /CN=574537d54f36f142231bc817038872cb607b21e7
Certificate serial: 0196B5FDBCFE2D355F84BFCD3B934C2BDB5F
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/V0U31U828UIjG8gXA4hyy2B7Iec.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/d5/fdd25d-c034-49f3-890d-4b89d377808e/1/V0U31U828UIjG8gXA4hyy2B7Iec.mft
Manifest number: 1534
Signing time: Fri 09 May 2025 17:00:27 +0000
Manifest this update: Fri 09 May 2025 17:00:27 +0000
Manifest next update: Sat 10 May 2025 17:00:27 +0000
Files and hashes: 1: NG7h3MLl7rsjKfJWWMgCk14YKA8.roa (hash: TfduHN4QjBYJ2zJVMdkqYrJchaPgW7zgFk7X9cdWumk=)
2: V0U31U828UIjG8gXA4hyy2B7Iec.crl (hash: iIs850dVtleBSdqpxvX3yp8lo1Q9ugOZxg+x6VrWmaA=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/d5/fdd25d-c034-49f3-890d-4b89d377808e/1/V0U31U828UIjG8gXA4hyy2B7Iec.crl
rsync://rpki.ripe.net/repository/DEFAULT/d5/fdd25d-c034-49f3-890d-4b89d377808e/1/V0U31U828UIjG8gXA4hyy2B7Iec.mft
rsync://rpki.ripe.net/repository/DEFAULT/V0U31U828UIjG8gXA4hyy2B7Iec.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 10 May 2025 17:00:27 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:b5:fd:bc:fe:2d:35:5f:84:bf:cd:3b:93:4c:2b:db:5f
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=574537d54f36f142231bc817038872cb607b21e7
Validity
Not Before: May 9 17:00:27 2025 GMT
Not After : May 10 17:00:27 2025 GMT
Subject: CN=a918f81f2e05561e24938ef58150a6b249078181
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b3:1f:c0:71:5e:64:89:b4:80:56:e3:3d:46:86:
06:12:77:3a:79:30:a5:6a:30:54:7a:f6:54:b3:b2:
91:eb:e4:56:11:45:db:68:11:26:75:f2:46:44:fa:
1d:66:12:47:02:d9:ff:6e:fd:96:8d:9f:72:cc:e7:
43:79:73:ac:df:18:a7:8d:f1:81:e6:69:2f:c8:69:
a8:1d:98:d1:d5:72:a3:d4:67:72:b2:4e:a6:69:4d:
e9:21:e5:cf:da:fa:2d:b8:f4:94:27:92:34:c3:99:
97:ef:73:c4:46:1b:18:7f:3d:24:8b:3f:53:d8:9d:
61:2a:6d:38:33:85:03:1b:4b:70:31:ce:71:20:7b:
10:0b:aa:e5:dc:8a:6c:6d:10:3c:2f:7d:90:90:6c:
28:4d:d0:77:4e:b9:5d:02:a9:25:83:39:44:4b:8b:
f9:7c:7e:cc:65:bc:b1:4d:15:18:5b:94:70:3a:f1:
a7:57:2a:9a:40:74:ad:9a:a3:16:17:86:10:bc:3a:
3f:6f:38:74:70:85:f5:7c:53:4e:c3:30:08:b1:85:
5a:7e:42:86:e3:d3:c6:4b:d8:bf:a7:bd:80:d6:27:
d6:a6:0e:f5:1f:dd:9e:6b:be:24:ab:d1:db:c1:95:
42:ac:d6:19:93:41:a1:61:07:fe:76:e5:ec:1e:41:
61:f1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A9:18:F8:1F:2E:05:56:1E:24:93:8E:F5:81:50:A6:B2:49:07:81:81
X509v3 Authority Key Identifier:
keyid:57:45:37:D5:4F:36:F1:42:23:1B:C8:17:03:88:72:CB:60:7B:21:E7
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/V0U31U828UIjG8gXA4hyy2B7Iec.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d5/fdd25d-c034-49f3-890d-4b89d377808e/1/V0U31U828UIjG8gXA4hyy2B7Iec.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/d5/fdd25d-c034-49f3-890d-4b89d377808e/1/V0U31U828UIjG8gXA4hyy2B7Iec.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
5f:1a:c4:5c:8c:76:e4:8c:67:42:c5:34:70:50:e4:84:46:16:
39:b8:9b:25:b8:f8:44:a1:5d:18:8a:b8:2f:c5:cc:a6:3f:91:
30:7e:b3:4f:1e:14:f8:dc:4f:0d:4e:96:e1:68:56:7a:a7:92:
35:18:d1:0e:66:78:a9:47:b5:6c:bc:eb:eb:46:46:c4:00:c5:
c7:b3:69:3b:26:a4:b3:70:da:34:d8:23:d2:36:c6:b9:b1:25:
dd:53:47:6d:1c:0b:1a:78:1f:e5:de:2d:63:8c:7c:36:b3:1d:
c2:83:0e:08:08:98:43:2a:cd:ec:d9:61:b1:06:1f:c4:fb:36:
32:8b:83:b5:bb:bd:18:0f:7a:b3:9d:25:82:87:a1:25:dd:fe:
98:3c:42:54:a3:35:74:12:18:da:b0:80:23:80:1c:dd:10:48:
66:b8:e5:c1:9f:6d:7b:f1:85:4e:de:ce:a6:5e:03:6a:3d:ca:
bc:f2:07:eb:1d:0a:ab:55:0a:6b:2e:c8:9d:61:80:35:ff:82:
e6:c8:dd:be:cd:8a:fd:7a:23:8f:cb:af:77:07:cf:1d:05:9b:
c7:c5:60:69:51:0c:ad:cb:30:48:38:2e:e5:2f:ea:80:ef:bb:
24:5b:d7:92:98:17:1c:3c:c1:64:2a:87:a2:f1:f0:8f:52:bd:
70:c5:37:ce
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat May 10 02:18:23 2025 by rpki-client