Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/25/587a79-1b6c-4c2a-b139-24aab44f2539/1/U0bE0gD-UDXGGwyJS5RU5y0nyR8.mft
File: U0bE0gD-UDXGGwyJS5RU5y0nyR8.mft (raw, json)
Hash identifier: 5WCd/282Z5uaFW/pFImEQUfT7sZEOYv+R6OkgxCN2JM=
Subject key identifier: A1:0B:B9:C9:F4:14:D7:C6:60:D3:51:91:F1:45:F3:46:BA:23:35:D5
Authority key identifier: 53:46:C4:D2:00:FE:50:35:C6:1B:0C:89:4B:94:54:E7:2D:27:C9:1F
Certificate issuer: /CN=5346c4d200fe5035c61b0c894b9454e72d27c91f
Certificate serial: 0196862444EDB35EC082446DB9A088F0D6D3
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/U0bE0gD-UDXGGwyJS5RU5y0nyR8.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/25/587a79-1b6c-4c2a-b139-24aab44f2539/1/U0bE0gD-UDXGGwyJS5RU5y0nyR8.mft
Manifest number: 1519
Signing time: Wed 30 Apr 2025 10:00:45 +0000
Manifest this update: Wed 30 Apr 2025 10:00:45 +0000
Manifest next update: Thu 01 May 2025 10:00:45 +0000
Files and hashes: 1: ECD7apX3eHOOfrh7KlF7PFjYZG4.roa (hash: 71V9g38SO7JBAaQym2ThymDLgJtxxyPJi6oj0bVn0zY=)
2: U0bE0gD-UDXGGwyJS5RU5y0nyR8.crl (hash: 39/6KKBVFduNEUYLKgKGDyqACLLydN+m/8CPK0m/s5Q=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/25/587a79-1b6c-4c2a-b139-24aab44f2539/1/U0bE0gD-UDXGGwyJS5RU5y0nyR8.crl
rsync://rpki.ripe.net/repository/DEFAULT/25/587a79-1b6c-4c2a-b139-24aab44f2539/1/U0bE0gD-UDXGGwyJS5RU5y0nyR8.mft
rsync://rpki.ripe.net/repository/DEFAULT/U0bE0gD-UDXGGwyJS5RU5y0nyR8.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 01 May 2025 09:00:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:86:24:44:ed:b3:5e:c0:82:44:6d:b9:a0:88:f0:d6:d3
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=5346c4d200fe5035c61b0c894b9454e72d27c91f
Validity
Not Before: Apr 30 10:00:45 2025 GMT
Not After : May 1 10:00:45 2025 GMT
Subject: CN=a10bb9c9f414d7c660d35191f145f346ba2335d5
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c7:22:f4:ca:a2:bd:a3:4e:f3:0f:59:d5:91:ef:
58:b9:93:89:ed:bc:e7:eb:34:a3:82:a9:29:96:5f:
bc:2f:84:66:5f:37:3e:e4:d2:eb:c5:00:32:cc:11:
8f:71:f0:aa:4a:0e:cf:20:44:e8:81:94:2e:5c:6a:
49:ea:d0:0b:1d:57:44:b5:ee:45:c7:96:71:67:35:
cf:69:c3:1d:49:36:66:16:fb:06:2a:dd:67:aa:7d:
bc:90:fe:52:23:09:83:c2:79:0c:f8:8c:9f:ec:e7:
9d:e7:66:34:e6:d5:f7:cd:5c:f7:da:63:fc:15:8a:
50:31:d6:ff:05:91:26:b2:00:07:8a:ef:1f:78:c9:
3a:a1:4f:79:4a:56:a8:c8:29:97:31:99:63:2e:24:
a0:52:0e:ea:50:62:06:07:6d:b4:4d:38:4c:26:29:
d1:9b:ec:77:3e:b2:cf:f6:b7:63:e1:08:50:77:04:
7f:60:6c:bd:59:64:61:54:32:ab:44:66:9f:6c:1f:
15:bd:c3:6d:3c:e3:dc:75:4d:a7:06:dc:d5:39:00:
5a:db:66:a0:45:3f:83:1c:a4:15:d8:6f:e0:cb:34:
d8:72:29:3c:ec:d4:50:e9:fa:3f:b1:3d:62:5b:d2:
af:3f:9b:2f:76:cd:df:f3:ea:7c:f6:80:15:94:bd:
9b:0d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A1:0B:B9:C9:F4:14:D7:C6:60:D3:51:91:F1:45:F3:46:BA:23:35:D5
X509v3 Authority Key Identifier:
keyid:53:46:C4:D2:00:FE:50:35:C6:1B:0C:89:4B:94:54:E7:2D:27:C9:1F
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/U0bE0gD-UDXGGwyJS5RU5y0nyR8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/25/587a79-1b6c-4c2a-b139-24aab44f2539/1/U0bE0gD-UDXGGwyJS5RU5y0nyR8.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/25/587a79-1b6c-4c2a-b139-24aab44f2539/1/U0bE0gD-UDXGGwyJS5RU5y0nyR8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
6e:66:08:c9:40:d2:e2:09:e9:5a:2c:6c:73:29:50:a7:91:18:
11:af:ae:d7:94:80:41:60:80:63:0e:86:ef:df:21:16:6f:4e:
0c:be:1f:8f:d2:5b:52:12:ae:25:58:9a:4b:df:8e:bf:37:bd:
ca:55:5c:38:85:c1:e5:c3:85:78:ad:57:2f:0d:4d:0e:26:86:
c2:4e:24:22:9a:12:03:22:42:ff:ce:cd:4a:06:95:14:8d:0c:
36:10:14:a7:6b:2b:0c:f9:34:f3:e2:3b:d2:15:6e:66:c9:79:
35:9c:5b:84:10:de:0a:bc:ff:df:66:46:c3:d8:7e:84:f0:41:
4a:b1:4d:7f:a0:25:6e:e5:0a:99:2e:62:70:e6:61:ce:7c:fe:
56:e4:e4:76:71:08:59:62:fe:05:a0:35:cc:e7:f8:e6:3d:f9:
df:37:0d:ed:92:16:14:06:8e:81:40:3d:61:db:38:80:9e:4e:
d4:5d:66:57:54:a1:4c:e0:e6:a1:e6:48:09:ef:94:c0:57:da:
f1:bd:f2:67:9e:74:5b:ee:d4:b2:e6:cc:4a:36:29:06:60:1a:
f8:90:78:58:a0:2d:65:6d:74:0f:cf:19:97:d2:7d:97:ae:00:
81:b9:f9:59:3a:93:b5:5c:7a:9e:af:3b:0b:56:48:72:6e:37:
2d:21:d5:f2
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Apr 30 12:05:29 2025 by rpki-client