Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f2/8336b0-cbe4-4da2-841b-1cefd1fa10a6/1/U4Vcjs6b1vjjlAICISzgmwX1-KA.mft
File: U4Vcjs6b1vjjlAICISzgmwX1-KA.mft (raw, json)
Hash identifier: +IVkNhXU7IDtln3RHtUTGXZCNN2093sveF+9HiLBxaY=
Subject key identifier: B9:DD:D0:74:E7:26:0A:99:F2:B6:10:54:EE:C0:B3:61:EF:3C:24:E3
Authority key identifier: 53:85:5C:8E:CE:9B:D6:F8:E3:94:02:02:21:2C:E0:9B:05:F5:F8:A0
Certificate issuer: /CN=53855c8ece9bd6f8e3940202212ce09b05f5f8a0
Certificate serial: 0196AAD587BA0563426DA944247FFA94C880
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/U4Vcjs6b1vjjlAICISzgmwX1-KA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/f2/8336b0-cbe4-4da2-841b-1cefd1fa10a6/1/U4Vcjs6b1vjjlAICISzgmwX1-KA.mft
Manifest number: 11BD
Signing time: Wed 07 May 2025 13:00:42 +0000
Manifest this update: Wed 07 May 2025 13:00:42 +0000
Manifest next update: Thu 08 May 2025 13:00:42 +0000
Files and hashes: 1: F1LbGv2MkXWWefxkT_CtpriNBr4.roa (hash: RRHmy9X/CGJW+TnFMQF3NirLVJyyI3P64OOzvqQr238=)
2: U4Vcjs6b1vjjlAICISzgmwX1-KA.crl (hash: j+CkV66Ax8YDwaX2KQBY0bmt5ohOAC/x0GlgeAxp834=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/f2/8336b0-cbe4-4da2-841b-1cefd1fa10a6/1/U4Vcjs6b1vjjlAICISzgmwX1-KA.crl
rsync://rpki.ripe.net/repository/DEFAULT/f2/8336b0-cbe4-4da2-841b-1cefd1fa10a6/1/U4Vcjs6b1vjjlAICISzgmwX1-KA.mft
rsync://rpki.ripe.net/repository/DEFAULT/U4Vcjs6b1vjjlAICISzgmwX1-KA.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 08 May 2025 13:00:42 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:aa:d5:87:ba:05:63:42:6d:a9:44:24:7f:fa:94:c8:80
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=53855c8ece9bd6f8e3940202212ce09b05f5f8a0
Validity
Not Before: May 7 13:00:42 2025 GMT
Not After : May 8 13:00:42 2025 GMT
Subject: CN=b9ddd074e7260a99f2b61054eec0b361ef3c24e3
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d3:55:a0:d8:a1:a2:46:e9:42:b7:dc:c5:8f:91:
39:b2:2d:1e:53:f2:96:8b:54:4f:4f:12:97:06:33:
1c:8e:76:45:75:f2:62:a1:12:38:ab:62:5d:75:4f:
79:75:f0:63:1f:8c:a9:ee:55:80:e2:c6:f8:52:02:
1b:44:16:6a:21:9e:dd:48:9e:96:fe:df:c1:f4:58:
d6:a6:43:fe:38:a1:8f:e4:e7:b4:c4:4a:21:25:fc:
91:43:41:f6:ad:9f:c2:72:dd:cf:b8:39:78:66:00:
6e:63:66:b5:63:cb:36:53:5c:a8:80:12:35:7b:fd:
56:b1:57:71:f3:76:87:5f:de:c5:dc:c9:c1:11:ca:
03:c3:c4:10:23:2b:80:28:26:89:d7:92:f9:88:aa:
b9:3d:b8:e5:fd:61:2d:99:c3:60:cd:39:0f:19:ad:
63:f5:29:ac:04:c4:88:b5:03:c4:59:d0:c3:ff:ca:
55:c9:d6:6c:80:b3:83:f1:0a:4e:10:b8:dc:24:2e:
df:8e:ec:e6:e2:1f:df:01:82:8b:36:ca:d9:9e:9d:
5e:39:50:da:61:5a:ac:59:c1:9d:ff:b7:1f:2e:57:
57:31:ac:52:6c:40:63:1d:97:85:67:70:97:eb:a0:
a1:15:c6:b4:3b:43:d6:68:96:fd:4e:53:2c:bb:68:
0b:d9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B9:DD:D0:74:E7:26:0A:99:F2:B6:10:54:EE:C0:B3:61:EF:3C:24:E3
X509v3 Authority Key Identifier:
keyid:53:85:5C:8E:CE:9B:D6:F8:E3:94:02:02:21:2C:E0:9B:05:F5:F8:A0
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/U4Vcjs6b1vjjlAICISzgmwX1-KA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f2/8336b0-cbe4-4da2-841b-1cefd1fa10a6/1/U4Vcjs6b1vjjlAICISzgmwX1-KA.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/f2/8336b0-cbe4-4da2-841b-1cefd1fa10a6/1/U4Vcjs6b1vjjlAICISzgmwX1-KA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
61:74:75:06:82:06:9b:18:3c:12:5f:10:cf:32:2e:72:b9:92:
ec:eb:68:e6:9c:eb:4f:d7:1a:6b:11:89:cf:21:3f:30:03:00:
54:34:70:32:77:06:6a:a6:a2:d5:ab:ec:ba:8f:70:a9:a9:6e:
e0:ef:61:31:38:ef:9c:ea:61:1c:31:61:af:c2:d4:b1:99:d9:
0f:fb:f7:94:62:b5:28:e1:13:4d:df:5c:83:c1:ba:3f:cd:8e:
2f:75:fa:39:fd:e2:9b:2b:15:1e:3e:18:42:d2:e5:2d:4c:cc:
e7:00:35:0f:ab:6e:9a:93:d0:d7:cf:5b:26:65:23:17:03:e8:
75:84:82:11:b5:c5:dd:6f:40:40:c0:a1:df:8f:b0:3a:31:df:
58:7e:d1:95:32:06:75:ca:1c:d2:c0:be:fe:57:e6:37:64:9f:
ac:89:13:4a:b3:75:ae:5e:53:25:23:bf:74:46:fe:6c:04:e7:
5d:31:1f:70:af:95:8a:cc:85:f7:b9:ef:0a:53:4e:b7:5c:4a:
cd:9f:cc:c0:ec:af:62:c3:63:03:e2:d4:85:21:43:43:4c:da:
8b:20:7c:e8:c8:00:0a:ec:67:1d:f2:83:a1:42:29:3c:53:98:
bd:91:e1:f0:fd:ec:fe:b0:8e:dd:d7:96:a6:f7:88:fe:1e:ea:
c0:e7:f8:d5
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed May 7 22:48:59 2025 by rpki-client