Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e6/88e8f4-74af-4b72-becc-f576738167e1/1/U5jsPBWxT9itkTy7lWV9jqgufiU.mft
File: U5jsPBWxT9itkTy7lWV9jqgufiU.mft (raw, json)
Hash identifier: 0+IcZ2IokgWoev3Y6KIfeIb2AF5/LCz7o2taV1lAyBE=
Subject key identifier: E5:69:86:6A:E7:EA:22:2B:82:D8:15:60:E6:1E:2F:CA:9F:62:5F:F5
Authority key identifier: 53:98:EC:3C:15:B1:4F:D8:AD:91:3C:BB:95:65:7D:8E:A8:2E:7E:25
Certificate issuer: /CN=5398ec3c15b14fd8ad913cbb95657d8ea82e7e25
Certificate serial: 0196B9DAAB5CF76785C876B9D219CFD34C7A
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/U5jsPBWxT9itkTy7lWV9jqgufiU.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/e6/88e8f4-74af-4b72-becc-f576738167e1/1/U5jsPBWxT9itkTy7lWV9jqgufiU.mft
Manifest number: 0216
Signing time: Sat 10 May 2025 11:00:37 +0000
Manifest this update: Sat 10 May 2025 11:00:37 +0000
Manifest next update: Sun 11 May 2025 11:00:37 +0000
Files and hashes: 1: LAK6jIQJ-CvGfB4yxJULpqtylrQ.roa (hash: uXlGTrWCI9dg7wgunXV3n5CZ4+wMJTA2Di51uX3OXFA=)
2: U5jsPBWxT9itkTy7lWV9jqgufiU.crl (hash: bo/0yhWV2F0Yr/hi/+5c/97oC4QAgQPpvACp99LS2To=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/e6/88e8f4-74af-4b72-becc-f576738167e1/1/U5jsPBWxT9itkTy7lWV9jqgufiU.crl
rsync://rpki.ripe.net/repository/DEFAULT/e6/88e8f4-74af-4b72-becc-f576738167e1/1/U5jsPBWxT9itkTy7lWV9jqgufiU.mft
rsync://rpki.ripe.net/repository/DEFAULT/U5jsPBWxT9itkTy7lWV9jqgufiU.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 11 May 2025 11:00:37 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:b9:da:ab:5c:f7:67:85:c8:76:b9:d2:19:cf:d3:4c:7a
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=5398ec3c15b14fd8ad913cbb95657d8ea82e7e25
Validity
Not Before: May 10 11:00:37 2025 GMT
Not After : May 11 11:00:37 2025 GMT
Subject: CN=e569866ae7ea222b82d81560e61e2fca9f625ff5
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b3:74:a7:fb:21:6b:31:52:25:74:f9:e5:b2:18:
e5:7f:c0:77:8d:60:db:23:76:96:7d:6d:9a:e0:a9:
7f:d4:ae:b0:94:44:36:8e:6b:84:be:f5:f4:e7:73:
1f:82:a1:d3:c7:03:1b:0c:51:2b:0d:b7:e3:bc:56:
85:61:81:bb:12:3d:33:5d:4e:8f:19:4d:0f:03:67:
62:d1:d3:15:46:a5:a2:8b:a3:2d:f5:4f:33:2f:43:
49:eb:8a:e1:06:f4:40:57:ad:7d:ea:bf:d2:57:1a:
0e:ea:0c:be:34:97:02:3b:25:70:91:b7:59:fc:42:
15:3a:41:27:ae:2a:3b:af:2e:9d:08:c4:dc:42:2c:
67:df:78:e2:ae:77:dd:a5:83:80:e6:79:5c:eb:2c:
37:9f:9c:8c:77:6e:9b:bc:56:5e:86:81:94:63:0a:
ea:e9:e0:52:fd:6d:ce:2d:cf:3e:75:90:d8:20:63:
9d:cd:15:06:83:92:dd:86:83:9a:17:68:4e:6a:bd:
fa:fa:4b:da:ab:8e:f3:c5:cb:45:9c:b5:f9:6e:5c:
0e:f9:03:a9:c6:d8:25:c8:7a:89:e5:dc:cc:18:bf:
4e:34:5f:ec:69:9b:64:a3:1a:d3:98:1d:0b:f8:92:
13:83:57:b3:ba:a5:56:92:aa:35:19:be:18:46:ef:
9f:b3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E5:69:86:6A:E7:EA:22:2B:82:D8:15:60:E6:1E:2F:CA:9F:62:5F:F5
X509v3 Authority Key Identifier:
keyid:53:98:EC:3C:15:B1:4F:D8:AD:91:3C:BB:95:65:7D:8E:A8:2E:7E:25
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/U5jsPBWxT9itkTy7lWV9jqgufiU.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e6/88e8f4-74af-4b72-becc-f576738167e1/1/U5jsPBWxT9itkTy7lWV9jqgufiU.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/e6/88e8f4-74af-4b72-becc-f576738167e1/1/U5jsPBWxT9itkTy7lWV9jqgufiU.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
29:d2:1a:20:7a:a8:6a:f2:1e:79:90:e5:a9:6b:5d:61:2b:57:
0d:fa:fd:29:35:e0:69:a7:94:15:9b:a4:43:55:3f:5f:9a:a1:
56:f0:a5:47:69:00:9d:38:62:0d:2f:c9:56:26:67:b9:6f:3d:
56:29:b1:4d:9a:23:4d:c9:71:21:db:21:c6:c0:77:21:fd:e7:
9c:d2:8f:04:2b:55:5d:86:64:0d:0c:00:53:e9:1c:bd:85:de:
19:3d:3d:3e:8a:26:c6:45:af:cf:6c:b2:31:ee:ea:1d:fe:35:
73:89:35:b3:3b:92:6c:b3:48:f2:0d:76:4e:1d:08:05:1c:d5:
9d:3f:9d:f3:3b:92:0e:15:8b:c9:8a:3f:21:fc:2e:86:85:07:
af:a0:18:1f:bd:2d:b1:5f:c7:1c:da:60:09:81:5c:e4:d8:62:
21:d0:24:a5:99:d2:e1:ea:5c:d6:b8:15:4e:41:25:80:1f:0e:
33:bc:00:3b:81:8b:9e:d8:dc:e9:d7:70:5b:9d:fc:dc:96:f7:
e8:da:cd:cb:10:79:89:05:6b:b1:c4:bb:0b:9b:94:b8:4c:d6:
5e:48:64:5f:e0:30:91:0f:7f:f5:22:9f:e0:ee:4b:4a:a3:c2:
01:4f:75:59:9f:fa:e3:28:10:26:f1:86:27:30:b8:47:d5:75:
f7:c7:6e:ef
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat May 10 20:26:57 2025 by rpki-client