Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e7/c5bb6b-6425-453a-b942-89c53d630765/1/U1ULI4LgD6ffGU5khf4UJYNiE_8.mft
File: U1ULI4LgD6ffGU5khf4UJYNiE_8.mft (raw, json)
Hash identifier: 6MWxhT0J6QevTKV8fdQWj/R82wnC2mPcf+WesvEazkc=
Subject key identifier: 24:B6:CD:0D:13:C2:67:92:A7:31:9A:7D:E3:46:5D:9C:FF:89:CB:FA
Authority key identifier: 53:55:0B:23:82:E0:0F:A7:DF:19:4E:64:85:FE:14:25:83:62:13:FF
Certificate issuer: /CN=53550b2382e00fa7df194e6485fe1425836213ff
Certificate serial: 0196C5A8310870A41E170A8A44C82EB81014
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/U1ULI4LgD6ffGU5khf4UJYNiE_8.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/e7/c5bb6b-6425-453a-b942-89c53d630765/1/U1ULI4LgD6ffGU5khf4UJYNiE_8.mft
Manifest number: 0CD4
Signing time: Mon 12 May 2025 18:00:56 +0000
Manifest this update: Mon 12 May 2025 18:00:56 +0000
Manifest next update: Tue 13 May 2025 18:00:56 +0000
Files and hashes: 1: U1ULI4LgD6ffGU5khf4UJYNiE_8.crl (hash: HWVv6KTa3bdgnN4LBxjekcL8qVAgyb4u872XvsLEZss=)
2: tcKM3LiJKMuWLZy1f452bVGFzLo.roa (hash: Hc3Ss3dEDIlpXBd/8jjQQ9tabdB4wxFhy4soszLApwQ=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/e7/c5bb6b-6425-453a-b942-89c53d630765/1/U1ULI4LgD6ffGU5khf4UJYNiE_8.crl
rsync://rpki.ripe.net/repository/DEFAULT/e7/c5bb6b-6425-453a-b942-89c53d630765/1/U1ULI4LgD6ffGU5khf4UJYNiE_8.mft
rsync://rpki.ripe.net/repository/DEFAULT/U1ULI4LgD6ffGU5khf4UJYNiE_8.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 13 May 2025 14:31:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:c5:a8:31:08:70:a4:1e:17:0a:8a:44:c8:2e:b8:10:14
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=53550b2382e00fa7df194e6485fe1425836213ff
Validity
Not Before: May 12 18:00:56 2025 GMT
Not After : May 13 18:00:56 2025 GMT
Subject: CN=24b6cd0d13c26792a7319a7de3465d9cff89cbfa
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:97:3d:07:e3:b7:f1:51:e7:f9:f0:d5:9a:a7:9c:
01:b5:d1:c3:11:16:24:c1:04:45:b9:b7:76:81:46:
d0:2e:3b:34:10:a8:4a:50:99:cc:6c:dd:f7:6c:85:
29:10:b1:bf:5d:f3:27:c0:ca:fe:01:17:4a:67:1f:
16:0f:3a:4d:96:28:32:00:8f:c9:5e:b8:bf:16:4f:
9d:fd:cc:8e:79:f7:6c:ef:92:8a:a7:d3:93:af:6e:
9e:f7:b5:a4:49:68:51:24:bf:99:03:c5:db:d8:bf:
da:6f:f7:2a:a2:a3:ab:8f:64:ad:0c:39:27:9b:20:
e0:22:0d:92:3c:44:3e:e0:b6:17:84:ec:9c:c7:12:
91:24:30:25:1c:12:77:ef:48:14:80:10:f4:91:56:
5c:b3:da:50:74:b1:ad:ac:32:09:8f:62:82:d5:fd:
7c:d6:aa:9a:b9:65:b1:64:19:af:19:5e:d0:8e:8e:
f6:e9:a4:ef:44:32:64:f8:37:49:b6:f8:8e:cd:7b:
87:97:ba:63:24:48:53:12:4f:8f:ad:13:39:9d:83:
66:a2:f0:21:77:cd:39:53:0d:ab:0c:9e:5f:0d:99:
6a:73:bb:33:9f:f9:c5:f8:0d:3a:f4:d8:27:78:8b:
f9:73:ba:bf:be:06:66:9a:d1:e8:82:b3:01:d0:36:
b1:eb
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
24:B6:CD:0D:13:C2:67:92:A7:31:9A:7D:E3:46:5D:9C:FF:89:CB:FA
X509v3 Authority Key Identifier:
keyid:53:55:0B:23:82:E0:0F:A7:DF:19:4E:64:85:FE:14:25:83:62:13:FF
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/U1ULI4LgD6ffGU5khf4UJYNiE_8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e7/c5bb6b-6425-453a-b942-89c53d630765/1/U1ULI4LgD6ffGU5khf4UJYNiE_8.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/e7/c5bb6b-6425-453a-b942-89c53d630765/1/U1ULI4LgD6ffGU5khf4UJYNiE_8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
79:4a:f0:25:bb:74:18:85:01:0a:77:a8:d9:fd:92:d0:10:23:
bd:75:7d:09:a4:10:9b:4c:b8:aa:49:b1:76:a6:2b:99:3e:44:
b5:c5:06:06:d5:77:bc:72:56:c8:8f:5f:5c:70:4b:e6:0b:dd:
83:b1:81:b9:64:6a:a1:6f:3e:53:f2:51:53:db:21:16:63:d0:
de:06:37:76:f3:ea:fc:11:ea:60:3a:b4:19:68:4e:ef:19:2d:
15:87:40:57:3a:80:3c:d2:76:c9:52:af:db:c5:8b:a0:ac:84:
0d:b5:f6:6a:f9:26:ff:f2:b8:65:e2:b9:e5:1c:d9:7d:30:f6:
f4:21:92:67:3b:0d:88:72:86:ce:84:18:7e:ec:fe:1f:9d:a5:
53:11:9c:2e:2b:96:f4:22:72:23:fb:71:ed:eb:fe:f2:42:62:
cf:65:80:28:16:65:bc:68:26:bc:f8:b0:d7:c3:e7:55:5f:52:
b6:20:60:63:e7:79:f3:13:a9:b6:64:15:9d:46:63:ec:8c:29:
2f:b1:81:a6:24:16:55:13:f9:1a:c5:9c:20:81:00:83:4b:e6:
34:d9:5c:79:18:41:2a:d0:03:9a:a2:6f:a1:5b:d0:0d:7d:e8:
a8:ac:00:96:40:3c:9a:39:d7:4d:0b:7a:c6:2e:bf:66:2d:08:
26:45:a4:e6
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon May 12 21:00:42 2025 by rpki-client