Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/5e/dd981d-e1f5-4837-9027-c9bf55d9d1ba/1/U8dzEuDSzshFoEYThF-KG-Jjw5k.mft
File: U8dzEuDSzshFoEYThF-KG-Jjw5k.mft (raw, json)
Hash identifier: ylVwr/BjXlkPbylKeMpSoSV0IQxwjRvNvnB09w0pR3A=
Subject key identifier: 1C:37:BC:A1:82:5E:DF:61:C2:7F:D6:70:E5:AB:93:85:A3:DF:35:BD
Authority key identifier: 53:C7:73:12:E0:D2:CE:C8:45:A0:46:13:84:5F:8A:1B:E2:63:C3:99
Certificate issuer: /CN=53c77312e0d2cec845a04613845f8a1be263c399
Certificate serial: 019680224395A77055F09A778A38F2DB488C
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/U8dzEuDSzshFoEYThF-KG-Jjw5k.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/5e/dd981d-e1f5-4837-9027-c9bf55d9d1ba/1/U8dzEuDSzshFoEYThF-KG-Jjw5k.mft
Manifest number: 1514
Signing time: Tue 29 Apr 2025 06:00:51 +0000
Manifest this update: Tue 29 Apr 2025 06:00:51 +0000
Manifest next update: Wed 30 Apr 2025 06:00:51 +0000
Files and hashes: 1: RJUXqZbym2ishJcHOLCYIF0YjN0.roa (hash: mDH4mu8jxseWgzZZaCZaysAEEMBUpOt419o1jwjwG7Q=)
2: U8dzEuDSzshFoEYThF-KG-Jjw5k.crl (hash: wq5JKhO6dQe5zLWqBJ/ooBzHpTK576OyTzwiweISe58=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/5e/dd981d-e1f5-4837-9027-c9bf55d9d1ba/1/U8dzEuDSzshFoEYThF-KG-Jjw5k.crl
rsync://rpki.ripe.net/repository/DEFAULT/5e/dd981d-e1f5-4837-9027-c9bf55d9d1ba/1/U8dzEuDSzshFoEYThF-KG-Jjw5k.mft
rsync://rpki.ripe.net/repository/DEFAULT/U8dzEuDSzshFoEYThF-KG-Jjw5k.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 30 Apr 2025 00:00:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:80:22:43:95:a7:70:55:f0:9a:77:8a:38:f2:db:48:8c
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=53c77312e0d2cec845a04613845f8a1be263c399
Validity
Not Before: Apr 29 06:00:51 2025 GMT
Not After : Apr 30 06:00:51 2025 GMT
Subject: CN=1c37bca1825edf61c27fd670e5ab9385a3df35bd
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:de:bb:35:00:c3:22:db:b2:65:20:16:11:bb:db:
91:82:21:d6:bd:61:8c:b7:4a:8a:eb:3c:9a:94:94:
ac:0e:3f:81:b8:98:79:91:27:7c:88:e7:14:90:ce:
54:80:3b:55:ca:53:48:eb:15:de:01:b9:da:96:5a:
f3:ca:d7:59:92:c7:ab:47:9d:ee:44:5e:46:45:1e:
9b:01:42:ba:6c:d2:d3:f5:4c:55:17:54:50:5b:de:
c1:74:7d:94:11:13:98:4a:b9:17:9b:d4:9b:3a:e2:
fb:49:14:d7:c4:1a:71:b4:5a:49:15:f1:83:a3:95:
d2:65:e3:9e:78:e0:82:24:90:fd:1f:d2:ae:cf:96:
77:d6:3e:a4:b5:e9:30:d2:c3:b7:d4:73:f1:76:55:
a4:69:be:84:95:5b:ef:53:6f:86:4d:68:40:df:00:
17:63:36:9b:d4:5d:b8:71:96:06:f2:45:17:da:6b:
98:db:d9:61:53:77:e0:be:af:ba:8b:28:e2:e3:3a:
ea:45:fb:35:f0:5f:24:dc:a5:02:f2:70:1c:f9:4d:
1c:eb:81:30:96:e2:8b:2b:aa:5d:08:09:5d:f2:aa:
10:6d:4b:90:fc:30:22:ca:6d:5a:b9:9c:2e:eb:85:
d9:e1:55:17:49:07:20:c5:49:c2:86:a3:d9:a0:c7:
5c:b7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
1C:37:BC:A1:82:5E:DF:61:C2:7F:D6:70:E5:AB:93:85:A3:DF:35:BD
X509v3 Authority Key Identifier:
keyid:53:C7:73:12:E0:D2:CE:C8:45:A0:46:13:84:5F:8A:1B:E2:63:C3:99
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/U8dzEuDSzshFoEYThF-KG-Jjw5k.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5e/dd981d-e1f5-4837-9027-c9bf55d9d1ba/1/U8dzEuDSzshFoEYThF-KG-Jjw5k.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/5e/dd981d-e1f5-4837-9027-c9bf55d9d1ba/1/U8dzEuDSzshFoEYThF-KG-Jjw5k.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
0a:4b:3f:15:be:0a:9a:ad:60:0a:e3:11:4c:e3:cf:a9:8b:92:
66:32:c4:dd:e2:91:b4:c6:f2:f6:f2:51:5b:ab:2b:40:00:16:
50:d5:3f:5a:65:86:0a:8a:06:27:41:c2:e0:b1:24:98:9e:7b:
e0:1c:bc:f2:bf:74:62:93:81:c2:8e:6e:47:3b:b6:ca:18:ba:
9c:ba:94:a0:1f:58:22:2b:51:8a:80:b6:89:92:5b:18:bc:21:
9e:b0:c9:29:f7:7e:19:c9:a4:63:62:d5:d1:6f:ba:34:31:d7:
07:c8:71:7a:ab:50:3f:19:f9:8e:b4:91:0b:64:f0:35:30:7f:
8d:f8:01:20:42:56:bc:a9:5e:b2:f4:cd:a4:8a:9f:b6:31:8a:
a6:cc:b6:06:f5:46:fd:d7:89:eb:b0:0d:66:e9:17:0e:79:38:
a9:54:47:93:00:dc:32:c9:01:06:76:ae:29:73:fb:8e:c7:52:
cd:d2:c1:4d:75:17:4b:83:3e:c8:14:71:1c:02:49:37:34:76:
7e:34:c8:14:b7:3f:78:e6:1a:a7:b5:13:72:33:75:f0:a6:e0:
54:50:75:65:2f:02:fd:2e:b0:3a:cc:78:06:01:23:2a:56:c1:
17:0b:04:79:81:f4:13:e8:3b:46:f9:52:1d:fb:2d:73:11:3d:
28:1b:a0:b0
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Apr 29 09:31:49 2025 by rpki-client