
Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/02/e20d59-4454-4ec8-9677-5f2bf22e189d/1/53OfCEQuIkRmIbiaV2ObNUK6NNw.mft
File: 53OfCEQuIkRmIbiaV2ObNUK6NNw.mft (raw, json)
Hash identifier: 2Py/9Wz6Bdr9mdDpGImrtE4Ueui1Rj5WkqGzAF5t3zM=
Subject key identifier: 2C:4E:28:00:3F:A2:1E:4D:05:EE:66:C8:4B:FC:26:88:B4:D5:79:54
Authority key identifier: E7:73:9F:08:44:2E:22:44:66:21:B8:9A:57:63:9B:35:42:BA:34:DC
Certificate issuer: /CN=e7739f08442e22446621b89a57639b3542ba34dc
Certificate serial: 0196816BB6CABC28A80BCB5E3A5045122779
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/53OfCEQuIkRmIbiaV2ObNUK6NNw.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/02/e20d59-4454-4ec8-9677-5f2bf22e189d/1/53OfCEQuIkRmIbiaV2ObNUK6NNw.mft
Manifest number: 0332
Signing time: Tue 29 Apr 2025 12:00:42 +0000
Manifest this update: Tue 29 Apr 2025 12:00:42 +0000
Manifest next update: Wed 30 Apr 2025 12:00:42 +0000
Files and hashes: 1: 53OfCEQuIkRmIbiaV2ObNUK6NNw.crl (hash: /B2ayQK6WlZ6x1fj3JUFiYq9RTp1gR3ubGsgIf/NEMY=)
2: ynJSD2xc-CykfYa79BP9jQj40kM.roa (hash: fMb/laTqYN39Vwte4hGLXjRHIufJPIqxfdcZimxGcGk=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/02/e20d59-4454-4ec8-9677-5f2bf22e189d/1/53OfCEQuIkRmIbiaV2ObNUK6NNw.crl
rsync://rpki.ripe.net/repository/DEFAULT/02/e20d59-4454-4ec8-9677-5f2bf22e189d/1/53OfCEQuIkRmIbiaV2ObNUK6NNw.mft
rsync://rpki.ripe.net/repository/DEFAULT/53OfCEQuIkRmIbiaV2ObNUK6NNw.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 30 Apr 2025 09:00:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:81:6b:b6:ca:bc:28:a8:0b:cb:5e:3a:50:45:12:27:79
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=e7739f08442e22446621b89a57639b3542ba34dc
Validity
Not Before: Apr 29 12:00:42 2025 GMT
Not After : Apr 30 12:00:42 2025 GMT
Subject: CN=2c4e28003fa21e4d05ee66c84bfc2688b4d57954
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:af:c2:98:10:44:da:23:f1:b9:28:af:3c:00:87:
64:4d:f2:ac:6e:66:3d:39:cb:5b:ec:ab:ec:df:8d:
52:2b:1d:af:16:f1:41:83:4a:73:1a:e3:a8:48:07:
bd:99:fc:35:67:b2:22:18:57:2b:ae:af:79:0c:85:
c1:43:e3:6f:4c:92:e4:d5:fb:63:12:01:a0:e3:18:
d4:52:86:1c:da:84:5b:13:9a:51:53:96:f0:6c:83:
e1:6f:45:9a:d3:63:02:ee:ea:ac:15:8d:ac:74:53:
76:1a:2e:9c:99:e1:8c:c4:f8:2b:cd:41:6b:31:44:
8e:9a:88:15:66:84:f8:67:9f:c3:c6:fa:e6:e8:50:
51:4f:bc:0e:5c:87:17:be:79:e1:1d:65:3f:57:d5:
89:0c:5c:e2:ff:bb:76:85:f5:25:46:b5:ff:99:4e:
f6:ec:42:17:22:66:fe:04:37:4d:a2:fc:2e:27:ee:
1c:7e:cf:64:7a:fa:cc:7b:16:1a:55:10:f6:c5:de:
7b:16:7d:c7:7f:70:0d:34:81:c0:67:32:c6:2c:90:
f6:16:84:2e:fd:6e:b0:76:bb:f4:d9:95:82:bd:a8:
08:35:b9:90:8f:ba:1d:9b:28:58:98:a6:b2:15:24:
18:4c:e3:c2:44:61:8c:e8:e3:5e:09:19:25:38:0e:
c6:9b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
2C:4E:28:00:3F:A2:1E:4D:05:EE:66:C8:4B:FC:26:88:B4:D5:79:54
X509v3 Authority Key Identifier:
keyid:E7:73:9F:08:44:2E:22:44:66:21:B8:9A:57:63:9B:35:42:BA:34:DC
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/53OfCEQuIkRmIbiaV2ObNUK6NNw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/02/e20d59-4454-4ec8-9677-5f2bf22e189d/1/53OfCEQuIkRmIbiaV2ObNUK6NNw.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/02/e20d59-4454-4ec8-9677-5f2bf22e189d/1/53OfCEQuIkRmIbiaV2ObNUK6NNw.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
3e:54:84:b5:54:48:6d:77:38:1e:5e:3d:76:a2:be:fd:39:ae:
ec:48:42:ae:c5:d8:24:9d:84:ce:3c:3d:18:3f:95:1a:a8:fd:
59:44:bf:10:a3:46:13:ce:30:20:e8:88:17:dd:f1:3e:f2:cd:
1e:21:2b:f3:25:56:11:39:f7:ba:02:4c:ee:de:a1:9a:eb:79:
5e:0f:5e:c9:9f:d2:94:62:75:82:55:62:48:8a:a6:b7:b6:16:
90:b6:11:68:29:5e:1a:7a:a8:df:0d:0c:cb:d5:ab:eb:84:c2:
1d:11:23:78:3c:8c:a7:f7:90:96:05:75:68:ab:c3:cd:35:e1:
c2:11:53:38:85:46:a5:83:0a:1b:39:b3:dd:72:a3:3e:65:81:
11:a8:9c:fa:08:b2:6c:ef:cc:16:ec:38:30:05:52:29:c5:a3:
73:27:1b:b6:bd:2d:06:79:de:6f:2c:77:d3:29:01:2c:cd:4c:
8e:f6:aa:55:6f:a9:b2:56:f8:da:63:4b:6f:20:3b:cf:89:d2:
34:c7:01:90:dd:b7:db:48:14:88:f9:ff:6e:0b:b3:e7:7e:66:
9b:0e:d5:68:e2:f1:81:af:dd:06:a0:99:9f:5b:6d:28:53:35:
3a:f1:b4:7b:55:27:16:a4:e1:0a:4d:db:98:9d:e0:50:b7:36:
bc:31:86:7e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Apr 29 14:06:05 2025 by rpki-client