Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/57/fefb40-d14a-4c58-899b-a952dea2a651/1/UrEszH6hBoww14yVXFa5djvPO00.mft
File: UrEszH6hBoww14yVXFa5djvPO00.mft (raw, json)
Hash identifier: d25WXX0o2C5czpeSNxEROt9PdFcdZ0Yuokk7xgV9bTA=
Subject key identifier: 3B:9D:F9:67:42:97:9F:74:1C:D2:11:40:5C:DF:72:0F:97:DE:25:65
Authority key identifier: 52:B1:2C:CC:7E:A1:06:8C:30:D7:8C:95:5C:56:B9:76:3B:CF:3B:4D
Certificate issuer: /CN=52b12ccc7ea1068c30d78c955c56b9763bcf3b4d
Certificate serial: 019684A35C5798693867DE15D28EF17E9908
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/UrEszH6hBoww14yVXFa5djvPO00.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/57/fefb40-d14a-4c58-899b-a952dea2a651/1/UrEszH6hBoww14yVXFa5djvPO00.mft
Manifest number: 085D
Signing time: Wed 30 Apr 2025 03:00:20 +0000
Manifest this update: Wed 30 Apr 2025 03:00:20 +0000
Manifest next update: Thu 01 May 2025 03:00:20 +0000
Files and hashes: 1: DHimsh5cf4B1cEow5B0sOoa89ZU.roa (hash: 4QGyiwHML4yioXbByOLrPfTNUUAH8+dM2e00mLX0LYc=)
2: UrEszH6hBoww14yVXFa5djvPO00.crl (hash: pFdfM1ix5vrEVncPWSH4id55r9rs3TlO246cFs2Zols=)
3: kZrHy6O_C92bogsRpN6C84e22aM.roa (hash: J0JdPtLBeCRlUbxJ0oXF2YO76tJDIcSvEt4BcuHJUL8=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/57/fefb40-d14a-4c58-899b-a952dea2a651/1/UrEszH6hBoww14yVXFa5djvPO00.crl
rsync://rpki.ripe.net/repository/DEFAULT/57/fefb40-d14a-4c58-899b-a952dea2a651/1/UrEszH6hBoww14yVXFa5djvPO00.mft
rsync://rpki.ripe.net/repository/DEFAULT/UrEszH6hBoww14yVXFa5djvPO00.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 01 May 2025 00:00:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:84:a3:5c:57:98:69:38:67:de:15:d2:8e:f1:7e:99:08
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=52b12ccc7ea1068c30d78c955c56b9763bcf3b4d
Validity
Not Before: Apr 30 03:00:20 2025 GMT
Not After : May 1 03:00:20 2025 GMT
Subject: CN=3b9df96742979f741cd211405cdf720f97de2565
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:94:f7:dd:bb:52:20:70:d9:34:47:9e:a3:7e:62:
97:9c:9f:81:a6:d6:54:54:0d:fd:f6:25:c1:5e:46:
6b:0b:9a:b1:54:77:2c:a8:8c:27:00:46:e8:eb:59:
97:f2:79:4f:45:a8:01:a4:e8:2a:88:43:39:21:b8:
fd:07:c0:4b:0f:0b:98:65:fc:48:47:a5:f4:da:b9:
21:48:64:db:8e:30:3b:de:ea:b9:9b:1c:4e:3f:c2:
8a:2a:95:d1:cb:1c:19:16:67:29:cf:03:14:bd:ed:
a8:81:68:9a:b0:69:d1:7f:2c:8c:1f:5f:3d:cb:43:
ef:57:f1:40:88:77:ed:b1:12:b8:4c:87:36:4a:9c:
a8:8a:ac:c6:56:c8:ce:ab:63:ea:93:c4:75:ad:cd:
91:68:5f:a4:18:29:12:b7:1f:26:8c:17:54:49:79:
a1:57:b7:24:f6:cc:37:8d:ff:17:40:3d:71:0b:78:
06:37:5e:12:79:93:b4:5c:0a:4a:39:e6:44:ef:33:
a6:2d:8b:cb:d6:72:21:25:7e:e6:c6:4a:be:ac:99:
d3:e1:76:e2:01:38:8f:8e:0e:d1:74:9a:4d:55:7c:
a4:60:2d:69:70:cc:69:6c:19:ea:72:c5:c5:42:99:
12:29:ab:7e:d4:7e:ba:df:ea:61:1d:db:19:4d:6e:
e0:2b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
3B:9D:F9:67:42:97:9F:74:1C:D2:11:40:5C:DF:72:0F:97:DE:25:65
X509v3 Authority Key Identifier:
keyid:52:B1:2C:CC:7E:A1:06:8C:30:D7:8C:95:5C:56:B9:76:3B:CF:3B:4D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/UrEszH6hBoww14yVXFa5djvPO00.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/57/fefb40-d14a-4c58-899b-a952dea2a651/1/UrEszH6hBoww14yVXFa5djvPO00.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/57/fefb40-d14a-4c58-899b-a952dea2a651/1/UrEszH6hBoww14yVXFa5djvPO00.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
1c:4a:00:28:47:6d:98:28:95:64:6f:a1:db:86:d6:a0:50:57:
c7:2c:a7:d1:19:f0:38:ec:f4:d1:cd:88:05:aa:9d:63:0f:37:
f0:2d:5f:bb:7d:f7:d8:de:d5:eb:51:f1:db:16:92:bc:ca:51:
09:8a:3c:fb:f3:9f:9a:1a:73:40:7f:58:eb:a9:b8:33:eb:8f:
5e:d6:7e:cf:d6:4c:40:3b:8c:8e:db:cd:63:bd:13:e7:7d:b9:
6b:f0:17:33:60:3c:f8:a9:9e:3b:de:af:00:3d:28:ce:d3:ad:
64:60:03:17:1e:2a:c1:34:c5:a9:f6:88:8f:a6:86:f6:0f:c5:
b3:17:d4:04:bc:9d:65:6b:17:24:6e:99:69:6b:d5:26:69:94:
34:56:8d:76:c4:c2:2b:d0:09:e1:1d:b6:ee:45:ce:0b:c0:c8:
6d:10:1f:3d:c5:1f:7e:2f:0b:08:d1:41:b1:d3:66:46:fe:96:
aa:f8:d5:d7:10:79:7b:85:40:b7:83:f0:4c:53:ec:58:83:41:
d8:3e:68:88:f0:20:71:13:4e:4c:f5:6a:c1:e3:70:aa:4a:cf:
7c:ae:41:e7:06:f3:aa:1b:1a:7e:01:bf:e1:89:5e:87:ef:95:
b3:d2:64:57:e5:2a:db:70:ad:d6:60:d7:ba:a1:6a:d2:86:74:
99:ab:d3:0d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Apr 30 05:43:05 2025 by rpki-client