Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f4/c9db0e-903e-485e-b67f-2c7a2a746279/1/U3ZGfvCSHFEZDi6mDyq7O9bpwZ8.mft
File: U3ZGfvCSHFEZDi6mDyq7O9bpwZ8.mft (raw, json)
Hash identifier: i1rdrAC43m2oo7BSEBjElQcUuIGUMiTxYN7y7RjLiSU=
Subject key identifier: DE:D2:8F:FF:CA:2B:F8:89:E3:BE:F8:CE:14:BB:A5:DD:60:A7:64:FC
Authority key identifier: 53:76:46:7E:F0:92:1C:51:19:0E:2E:A6:0F:2A:BB:3B:D6:E9:C1:9F
Certificate issuer: /CN=5376467ef0921c51190e2ea60f2abb3bd6e9c19f
Certificate serial: 0196B032ED566E41F3D2AD07EF5C05A5472A
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/U3ZGfvCSHFEZDi6mDyq7O9bpwZ8.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/f4/c9db0e-903e-485e-b67f-2c7a2a746279/1/U3ZGfvCSHFEZDi6mDyq7O9bpwZ8.mft
Manifest number: 152D
Signing time: Thu 08 May 2025 14:00:49 +0000
Manifest this update: Thu 08 May 2025 14:00:49 +0000
Manifest next update: Fri 09 May 2025 14:00:49 +0000
Files and hashes: 1: U3ZGfvCSHFEZDi6mDyq7O9bpwZ8.crl (hash: 6Z9y7QOxc+ZvVZkwnsNnyqZIQfhmAdYbdvQaUNuSoU0=)
2: XbLNbpcMzthn6l0veRfIZ9QxeEk.roa (hash: Zbud2lYm0I4TklwYM90yu2xM4m8NLbFwJE0Y7F2RnFY=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/f4/c9db0e-903e-485e-b67f-2c7a2a746279/1/U3ZGfvCSHFEZDi6mDyq7O9bpwZ8.crl
rsync://rpki.ripe.net/repository/DEFAULT/f4/c9db0e-903e-485e-b67f-2c7a2a746279/1/U3ZGfvCSHFEZDi6mDyq7O9bpwZ8.mft
rsync://rpki.ripe.net/repository/DEFAULT/U3ZGfvCSHFEZDi6mDyq7O9bpwZ8.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 09 May 2025 14:00:49 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:b0:32:ed:56:6e:41:f3:d2:ad:07:ef:5c:05:a5:47:2a
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=5376467ef0921c51190e2ea60f2abb3bd6e9c19f
Validity
Not Before: May 8 14:00:49 2025 GMT
Not After : May 9 14:00:49 2025 GMT
Subject: CN=ded28fffca2bf889e3bef8ce14bba5dd60a764fc
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c0:04:89:6f:98:7d:c5:36:6f:f5:31:d7:96:fa:
ba:45:4b:df:df:22:da:2f:29:82:55:4b:20:4b:03:
48:74:86:b1:e4:a1:45:3c:91:a3:fe:27:82:42:38:
f1:bd:02:57:8e:f8:73:5e:70:87:5a:e5:3e:f3:34:
15:b8:02:d9:00:02:70:4c:44:0e:53:d9:86:a3:7d:
83:b3:a5:db:6c:cf:05:5f:52:c2:d1:0b:98:72:b2:
d1:a8:67:50:b9:90:95:52:4a:34:7e:6e:4a:de:81:
1d:a3:ea:ea:cc:8e:3c:99:16:eb:f4:c7:52:11:9f:
28:57:06:8c:11:91:c1:bc:6d:26:69:14:80:7c:b6:
94:55:c2:b1:92:b1:c5:18:ef:14:5d:41:95:33:d8:
65:f0:4f:0a:9d:1a:96:90:96:9d:c6:62:85:4e:6c:
a0:0a:38:85:d0:c8:e4:fb:34:89:6b:8a:10:dc:ed:
91:27:67:c6:13:d3:ef:c3:5a:59:c3:ab:1a:7e:26:
58:30:7e:09:88:2e:12:26:52:62:29:9c:f0:d8:cc:
a3:dc:78:fe:b1:e8:ca:1e:1c:11:69:40:33:ea:85:
ec:5a:77:14:79:01:a6:e4:7c:f5:80:75:82:79:7f:
64:ab:02:e5:6a:16:e1:28:c2:c2:ab:db:16:1e:77:
23:91
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
DE:D2:8F:FF:CA:2B:F8:89:E3:BE:F8:CE:14:BB:A5:DD:60:A7:64:FC
X509v3 Authority Key Identifier:
keyid:53:76:46:7E:F0:92:1C:51:19:0E:2E:A6:0F:2A:BB:3B:D6:E9:C1:9F
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/U3ZGfvCSHFEZDi6mDyq7O9bpwZ8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f4/c9db0e-903e-485e-b67f-2c7a2a746279/1/U3ZGfvCSHFEZDi6mDyq7O9bpwZ8.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/f4/c9db0e-903e-485e-b67f-2c7a2a746279/1/U3ZGfvCSHFEZDi6mDyq7O9bpwZ8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
97:58:37:67:e6:dd:90:25:4d:d0:bc:ba:62:b3:34:0d:18:17:
aa:04:a2:33:b1:e1:cd:78:a8:17:e6:0d:22:13:0e:e5:0b:34:
55:0a:81:d5:8b:5f:a5:2c:a3:e4:f3:92:11:1a:23:05:32:ee:
71:2b:77:dc:38:8b:eb:ac:a2:cd:76:92:5e:2e:18:21:56:15:
b6:d3:d9:9e:a4:96:7c:7e:74:1d:bd:8d:4b:dd:1d:e4:0d:97:
18:30:59:41:55:07:b8:c8:87:18:49:60:e2:88:3c:e9:38:36:
a2:6a:6c:aa:d4:b5:7f:f7:cb:3f:0a:e1:66:c4:69:ce:ad:77:
4e:53:03:cf:cd:34:5a:e5:77:37:80:2b:bc:4b:ef:07:4f:ed:
f5:6b:91:5d:66:d5:e2:fe:5b:21:9e:41:30:6f:e5:26:f7:24:
3d:72:84:c2:a5:3f:1e:9d:a6:a6:fe:d2:dc:e2:66:25:7a:2a:
b3:5d:ae:93:81:10:27:c9:2a:b7:ed:4b:2c:6d:09:22:1b:fc:
73:71:a4:8c:28:32:63:cd:88:06:30:6d:1e:74:06:f8:d2:ad:
4f:52:75:19:e7:81:35:b0:ff:6e:c3:a8:c8:45:94:3c:9d:da:
92:da:ed:3e:70:bd:b1:1a:8f:7e:88:1d:48:7b:2e:90:10:34:
39:ed:e1:14
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri May 9 00:21:54 2025 by rpki-client