Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e9/13a57c-cc4f-45bc-af9f-9367e42389d9/1/U-8ohOShM1XbZJo0k1J8RCKJc7g.mft
File: U-8ohOShM1XbZJo0k1J8RCKJc7g.mft (raw, json)
Hash identifier: mVIfxjHwNSlIhQTOqIDxGTcXZ2Iy843CaqYe0y5IX0Y=
Subject key identifier: 3F:55:F2:46:9D:8B:27:06:C7:0A:7A:02:5F:FC:2B:7A:B8:98:87:79
Authority key identifier: 53:EF:28:84:E4:A1:33:55:DB:64:9A:34:93:52:7C:44:22:89:73:B8
Certificate issuer: /CN=53ef2884e4a13355db649a3493527c44228973b8
Certificate serial: 0196C3149428A6A914B5534FBAF44DABFF18
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/U-8ohOShM1XbZJo0k1J8RCKJc7g.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/e9/13a57c-cc4f-45bc-af9f-9367e42389d9/1/U-8ohOShM1XbZJo0k1J8RCKJc7g.mft
Manifest number: 1035
Signing time: Mon 12 May 2025 06:00:27 +0000
Manifest this update: Mon 12 May 2025 06:00:27 +0000
Manifest next update: Tue 13 May 2025 06:00:27 +0000
Files and hashes: 1: 7mSFLMU3pbLGF1eJYN7bCpXwo10.roa (hash: Gi9mXnC7oL2MgZs534EZSdtoL7fLCIIFaJEq+xFNvfg=)
2: U-8ohOShM1XbZJo0k1J8RCKJc7g.crl (hash: VOlcGagCx5OtyD/lXHUFvVoJgRt2r3STtBdQ2H4UrTg=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/e9/13a57c-cc4f-45bc-af9f-9367e42389d9/1/U-8ohOShM1XbZJo0k1J8RCKJc7g.crl
rsync://rpki.ripe.net/repository/DEFAULT/e9/13a57c-cc4f-45bc-af9f-9367e42389d9/1/U-8ohOShM1XbZJo0k1J8RCKJc7g.mft
rsync://rpki.ripe.net/repository/DEFAULT/U-8ohOShM1XbZJo0k1J8RCKJc7g.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 13 May 2025 01:00:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:c3:14:94:28:a6:a9:14:b5:53:4f:ba:f4:4d:ab:ff:18
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=53ef2884e4a13355db649a3493527c44228973b8
Validity
Not Before: May 12 06:00:27 2025 GMT
Not After : May 13 06:00:27 2025 GMT
Subject: CN=3f55f2469d8b2706c70a7a025ffc2b7ab8988779
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c6:e4:e1:f8:a6:a3:4d:be:f0:9c:9b:f8:39:60:
f6:18:38:76:1e:40:6f:b5:4f:5b:2c:10:a7:bf:14:
0c:85:52:90:73:aa:e3:31:bd:bd:2f:ef:d6:2e:61:
ea:43:b1:e3:1c:27:7d:a2:44:0a:33:80:f9:9b:f4:
92:81:e8:f4:96:9b:f4:6a:1c:20:7b:5a:69:c0:ff:
b1:12:b8:e3:3e:77:4d:db:72:c0:61:89:b2:66:70:
5f:ce:e2:cd:82:8f:9c:07:03:77:f4:67:bb:b6:13:
f5:a5:13:7a:13:d7:a8:0b:2a:4e:e7:99:46:87:79:
ee:1a:7c:1b:11:19:d0:e9:93:44:52:0b:b3:3b:70:
c9:5c:c5:f8:71:99:8b:74:73:ba:69:50:94:65:05:
fd:e4:ff:ad:a8:32:72:3a:bf:ba:8b:9e:9a:dc:6d:
8f:1f:89:c4:4b:04:9f:6f:42:42:a6:0a:2f:40:15:
b4:e4:f8:65:05:28:f7:e7:cd:99:0c:6b:27:9b:8e:
ec:39:7c:e2:0d:cc:93:cb:39:03:05:4d:05:9a:3a:
ad:da:1d:ec:ab:84:72:d4:c7:dd:fb:5a:3d:d8:9d:
97:6c:b8:de:de:48:04:03:f1:b7:59:c7:64:3e:8e:
37:95:b3:6b:8c:1a:1a:f1:27:af:17:c3:03:83:d0:
ff:6d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
3F:55:F2:46:9D:8B:27:06:C7:0A:7A:02:5F:FC:2B:7A:B8:98:87:79
X509v3 Authority Key Identifier:
keyid:53:EF:28:84:E4:A1:33:55:DB:64:9A:34:93:52:7C:44:22:89:73:B8
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/U-8ohOShM1XbZJo0k1J8RCKJc7g.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e9/13a57c-cc4f-45bc-af9f-9367e42389d9/1/U-8ohOShM1XbZJo0k1J8RCKJc7g.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/e9/13a57c-cc4f-45bc-af9f-9367e42389d9/1/U-8ohOShM1XbZJo0k1J8RCKJc7g.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
a2:38:1f:96:ca:c4:14:e7:f5:2d:45:d0:ca:dc:08:f0:6f:f6:
49:3c:38:0b:b9:85:16:25:59:42:83:19:9e:cf:55:25:6d:9c:
d5:08:8e:c9:f0:39:01:79:a0:80:af:3a:e9:cb:e4:92:df:fd:
1b:2b:a5:6f:1e:5d:2f:87:7d:39:3a:a0:6a:08:9d:84:5c:c9:
f8:e5:41:0c:90:88:49:56:d3:07:4b:37:18:4f:bf:a3:c7:47:
c4:88:7f:50:a3:34:5c:0e:a0:38:ec:20:42:ec:26:f6:79:c7:
cc:fc:a0:1a:d3:8c:5f:5b:d1:2c:a0:95:70:93:73:d4:32:23:
ce:90:d8:dc:71:ef:46:f4:05:6d:a7:9f:3f:29:44:c4:a2:ca:
f6:7b:1f:d2:99:2b:b3:14:f9:fc:e4:30:76:62:5f:f9:94:5c:
8b:cf:83:bd:92:e9:3a:f9:ba:a3:55:77:ed:1b:b4:3d:9d:db:
4b:ed:f2:29:c2:c9:62:be:d6:27:36:f2:f6:a3:7d:73:f2:af:
0f:11:53:76:12:bb:d3:1e:41:a1:cf:2e:09:17:36:c4:58:b3:
70:5a:89:91:19:e8:5e:0f:4a:d6:19:17:a0:7d:e0:be:97:4c:
bc:e4:bd:56:7c:fb:e8:11:ea:b7:b2:a6:10:72:e2:92:03:ed:
cc:bb:bd:a8
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZbDFJQopqkUtVNPuvRNq/8YMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDUzZWYyODg0ZTRhMTMzNTVkYjY0OWEzNDkzNTI3YzQ0MjI4
OTczYjgwHhcNMjUwNTEyMDYwMDI3WhcNMjUwNTEzMDYwMDI3WjAzMTEwLwYDVQQD
EygzZjU1ZjI0NjlkOGIyNzA2YzcwYTdhMDI1ZmZjMmI3YWI4OTg4Nzc5MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAxuTh+KajTb7wnJv4OWD2GDh2HkBv
tU9bLBCnvxQMhVKQc6rjMb29L+/WLmHqQ7HjHCd9okQKM4D5m/SSgej0lpv0ahwg
e1ppwP+xErjjPndN23LAYYmyZnBfzuLNgo+cBwN39Ge7thP1pRN6E9eoCypO55lG
h3nuGnwbERnQ6ZNEUguzO3DJXMX4cZmLdHO6aVCUZQX95P+tqDJyOr+6i56a3G2P
H4nESwSfb0JCpgovQBW05PhlBSj3582ZDGsnm47sOXziDcyTyzkDBU0Fmjqt2h3s
q4Ry1Mfd+1o92J2XbLje3kgEA/G3WcdkPo43lbNrjBoa8SevF8MDg9D/bQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFD9V8kadiycGxwp6Al/8K3q4mId5MB8GA1UdIwQY
MBaAFFPvKITkoTNV22SaNJNSfEQiiXO4MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvVS04b2hPU2hNMVhiWkpvMGsxSjhSQ0tKYzdnLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9lOS8xM2E1N2MtY2M0Zi00NWJjLWFmOWYt
OTM2N2U0MjM4OWQ5LzEvVS04b2hPU2hNMVhiWkpvMGsxSjhSQ0tKYzdnLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9lOS8xM2E1N2MtY2M0Zi00NWJjLWFmOWYtOTM2N2U0MjM4OWQ5
LzEvVS04b2hPU2hNMVhiWkpvMGsxSjhSQ0tKYzdnLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAojgflsrE
FOf1LUXQytwI8G/2STw4C7mFFiVZQoMZns9VJW2c1QiOyfA5AXmggK866cvkkt/9
Gyulbx5dL4d9OTqgagidhFzJ+OVBDJCISVbTB0s3GE+/o8dHxIh/UKM0XA6gOOwg
Quwm9nnHzPygGtOMX1vRLKCVcJNz1DIjzpDY3HHvRvQFbaefPylExKLK9nsf0pkr
sxT5/OQwdmJf+ZRci8+DvZLpOvm6o1V37Ru0PZ3bS+3yKcLJYr7WJzby9qN9c/Kv
DxFTdhK70x5Boc8uCRc2xFizcFqJkRnoXg9K1hkXoH3gvpdMvOS9Vnz76BHqt7Km
EHLikgPtzLu9qA==
-----END CERTIFICATE-----
Generated at Mon May 12 10:36:19 2025 by rpki-client