Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/3a/9f00a9-b60f-4e32-9037-04dfc3663e35/1/U1dhkT9XXEEcmSMi67Bs0vN_AqI.mft
File: U1dhkT9XXEEcmSMi67Bs0vN_AqI.mft (raw, json)
Hash identifier: 7ToddfPqz34BXzi18mIlFhQ9g69Kuu9+q30DSJoQjeM=
Subject key identifier: 03:72:96:14:F5:79:FB:BE:1B:52:89:E0:82:17:0B:21:A2:03:F3:BA
Authority key identifier: 53:57:61:91:3F:57:5C:41:1C:99:23:22:EB:B0:6C:D2:F3:7F:02:A2
Certificate issuer: /CN=535761913f575c411c992322ebb06cd2f37f02a2
Certificate serial: 01968E14997FA91202201462656E6F9247DE
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/U1dhkT9XXEEcmSMi67Bs0vN_AqI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/3a/9f00a9-b60f-4e32-9037-04dfc3663e35/1/U1dhkT9XXEEcmSMi67Bs0vN_AqI.mft
Manifest number: 151D
Signing time: Thu 01 May 2025 23:00:36 +0000
Manifest this update: Thu 01 May 2025 23:00:36 +0000
Manifest next update: Fri 02 May 2025 23:00:36 +0000
Files and hashes: 1: 9jLVpGilYmQEGxg1WpK2yNt9KVk.roa (hash: z5eyd/uvSVUU4CsN83uQVJdluniXFQjAaunOHdc2Khs=)
2: U1dhkT9XXEEcmSMi67Bs0vN_AqI.crl (hash: jQf4+9aEN6brvvseaRKIjVg/aTO9faHy5Kbw8TWwb2s=)
3: bjlUEqaZF5EwCSDk_Sxf_mEHztc.roa (hash: RU5KJnOEEBCQibHDxtY5+aLGfLDV7MxXDGkjvgxmqg8=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/3a/9f00a9-b60f-4e32-9037-04dfc3663e35/1/U1dhkT9XXEEcmSMi67Bs0vN_AqI.crl
rsync://rpki.ripe.net/repository/DEFAULT/3a/9f00a9-b60f-4e32-9037-04dfc3663e35/1/U1dhkT9XXEEcmSMi67Bs0vN_AqI.mft
rsync://rpki.ripe.net/repository/DEFAULT/U1dhkT9XXEEcmSMi67Bs0vN_AqI.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 02 May 2025 23:00:36 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:8e:14:99:7f:a9:12:02:20:14:62:65:6e:6f:92:47:de
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=535761913f575c411c992322ebb06cd2f37f02a2
Validity
Not Before: May 1 23:00:36 2025 GMT
Not After : May 2 23:00:36 2025 GMT
Subject: CN=03729614f579fbbe1b5289e082170b21a203f3ba
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e3:a2:ac:01:68:81:97:e5:e9:ef:91:10:40:46:
9a:67:b9:8b:94:a5:7d:b7:01:4f:80:01:9e:cc:ab:
53:36:42:54:dd:6d:49:c8:82:2f:79:4a:f9:25:4d:
ff:29:30:39:69:33:ee:9a:34:7e:94:f9:0e:38:f6:
34:b7:72:13:e6:90:c4:9f:b7:1b:4e:cc:46:b0:c8:
5b:a6:de:db:2d:ad:27:88:0e:76:8e:94:2e:df:bf:
4a:b2:b9:eb:63:9b:16:2a:ef:91:d6:c7:74:10:2d:
82:0b:53:cf:39:06:e4:e6:dc:67:2c:58:e8:b0:bb:
c1:61:16:81:7a:49:0b:02:24:e8:76:a2:84:3c:5c:
a6:cb:40:43:59:10:6d:b9:ce:da:c0:e4:35:89:3f:
06:12:6c:2f:db:b6:db:55:0f:d7:c4:4f:13:3b:43:
b2:f3:a1:51:b2:a2:71:95:25:cd:98:37:c7:7a:d5:
5a:6d:2a:ef:00:d7:68:d0:af:bd:52:3a:e3:29:87:
08:18:8e:f8:f1:54:a8:ba:96:8d:9d:7c:e8:15:8f:
3d:8f:84:56:15:8b:64:31:b0:4c:ac:c8:da:87:d4:
94:49:de:05:42:50:76:7b:d4:84:05:76:64:d4:91:
f4:c2:7a:76:b8:25:44:c1:ce:45:1a:47:80:c6:84:
48:f3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
03:72:96:14:F5:79:FB:BE:1B:52:89:E0:82:17:0B:21:A2:03:F3:BA
X509v3 Authority Key Identifier:
keyid:53:57:61:91:3F:57:5C:41:1C:99:23:22:EB:B0:6C:D2:F3:7F:02:A2
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/U1dhkT9XXEEcmSMi67Bs0vN_AqI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/3a/9f00a9-b60f-4e32-9037-04dfc3663e35/1/U1dhkT9XXEEcmSMi67Bs0vN_AqI.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/3a/9f00a9-b60f-4e32-9037-04dfc3663e35/1/U1dhkT9XXEEcmSMi67Bs0vN_AqI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
3e:8b:eb:a1:27:1e:fa:63:5f:f5:71:2a:2a:36:72:48:c3:86:
13:e7:df:d1:21:e8:41:fa:bd:6f:fc:23:80:05:f4:20:b9:bd:
6e:b6:4d:4a:a0:1e:a5:ac:94:d0:2f:f3:63:c7:7f:fc:4b:c0:
5f:b5:ad:ec:b1:9d:73:c8:f8:b7:bd:c6:56:ec:15:53:19:dd:
71:2a:a2:8f:b1:ae:f7:f0:98:2b:c9:93:2c:fb:a4:39:a3:73:
ab:a1:10:d8:67:5c:5f:c0:c9:11:4a:71:1c:76:2d:c6:cf:95:
4d:db:61:17:d6:ad:cb:43:19:04:0e:b0:73:69:9a:20:65:a8:
62:38:d7:91:f6:02:c1:81:9c:d2:ad:fa:3a:8f:c9:39:65:38:
db:0e:74:40:9c:08:4d:58:dc:f1:cf:e1:75:29:ed:0e:75:b2:
22:7b:18:dc:ff:7f:b3:10:88:dd:8c:e7:22:4f:24:5e:ab:2e:
2f:3e:93:1e:09:5f:11:d8:01:f8:86:f9:32:14:65:9f:93:ad:
22:16:9a:21:d6:0e:0d:fd:35:dc:58:15:58:8b:fc:6e:e5:b6:
64:f2:70:58:af:32:79:8b:92:fc:7b:c1:ff:e3:20:0d:76:49:
16:23:e4:b5:5b:5a:02:3c:fe:0d:80:99:b6:ab:c8:c7:a6:96:
64:10:6d:aa
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri May 2 08:01:14 2025 by rpki-client