Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/8a/9e2f8a-960d-4479-a058-4e3ce3301979/1/U5Nwh4FLQ1glRwBp255yPb5yjzs.mft
File: U5Nwh4FLQ1glRwBp255yPb5yjzs.mft (raw, json)
Hash identifier: 99sWBGG3+kB7eEhWlhzPhQI8H3kPtZJAtJ35PW2yhUE=
Subject key identifier: 89:6C:FE:63:C4:89:B0:FF:24:03:10:08:13:CB:8B:0D:85:A7:1A:74
Authority key identifier: 53:93:70:87:81:4B:43:58:25:47:00:69:DB:9E:72:3D:BE:72:8F:3B
Certificate issuer: /CN=53937087814b435825470069db9e723dbe728f3b
Certificate serial: 0196824703C10DD3BEA5C82963675BC13879
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/U5Nwh4FLQ1glRwBp255yPb5yjzs.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/8a/9e2f8a-960d-4479-a058-4e3ce3301979/1/U5Nwh4FLQ1glRwBp255yPb5yjzs.mft
Manifest number: 1513
Signing time: Tue 29 Apr 2025 16:00:13 +0000
Manifest this update: Tue 29 Apr 2025 16:00:13 +0000
Manifest next update: Wed 30 Apr 2025 16:00:13 +0000
Files and hashes: 1: U5Nwh4FLQ1glRwBp255yPb5yjzs.crl (hash: Izk1XZXy/ftVKTxKj1oqAMdyqYNTxEX0p16hJYlueh0=)
2: XysHQU0TQpQ18huR7cIIDrfZWfY.roa (hash: NtroWgAMFvSSwwYDxpo3NQGtG+bQQozP9je3mTfJHRc=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/8a/9e2f8a-960d-4479-a058-4e3ce3301979/1/U5Nwh4FLQ1glRwBp255yPb5yjzs.crl
rsync://rpki.ripe.net/repository/DEFAULT/8a/9e2f8a-960d-4479-a058-4e3ce3301979/1/U5Nwh4FLQ1glRwBp255yPb5yjzs.mft
rsync://rpki.ripe.net/repository/DEFAULT/U5Nwh4FLQ1glRwBp255yPb5yjzs.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 30 Apr 2025 15:02:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:82:47:03:c1:0d:d3:be:a5:c8:29:63:67:5b:c1:38:79
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=53937087814b435825470069db9e723dbe728f3b
Validity
Not Before: Apr 29 16:00:13 2025 GMT
Not After : Apr 30 16:00:13 2025 GMT
Subject: CN=896cfe63c489b0ff2403100813cb8b0d85a71a74
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d9:dd:05:e3:e5:59:67:26:a6:a2:24:c6:17:f3:
d3:9a:a3:8d:8e:98:1f:12:b2:b1:56:50:1b:ac:cc:
7e:aa:79:27:b0:f2:1f:84:d3:3f:a5:7d:3a:39:04:
b3:c8:29:a6:4b:e5:71:f4:ed:8c:ff:d6:d3:02:62:
c1:2d:5f:54:a2:67:8b:51:32:1e:94:6a:30:d8:d7:
f0:b0:3c:b9:19:89:da:e8:a8:7b:27:b7:4a:29:49:
3e:6c:ff:d1:78:79:03:00:7d:53:ae:a6:dd:3a:88:
8b:60:28:10:40:ec:b6:6f:ee:19:ed:43:d9:f2:53:
c0:b8:b6:70:d3:1e:89:e7:e1:8c:f4:15:03:35:ee:
d7:48:15:95:da:9b:b1:05:83:7c:ef:d5:a0:1d:0e:
ad:37:0a:24:ee:50:ed:a1:65:46:62:f6:28:a2:68:
91:2a:8c:f4:1e:30:97:ed:57:9c:e9:11:1c:66:e1:
30:a4:b2:92:26:b0:0a:f1:70:7a:66:05:b9:3e:fc:
3c:bd:cd:08:20:7b:46:4a:d7:16:40:d7:9e:07:4b:
63:a3:9a:6f:33:a9:3f:ec:c4:d4:04:31:30:08:b2:
c5:8e:9c:0c:bc:d6:f6:8d:03:07:ad:db:d0:f1:88:
13:81:e2:1e:35:11:d1:d2:82:70:a6:25:b0:a9:be:
b8:db
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
89:6C:FE:63:C4:89:B0:FF:24:03:10:08:13:CB:8B:0D:85:A7:1A:74
X509v3 Authority Key Identifier:
keyid:53:93:70:87:81:4B:43:58:25:47:00:69:DB:9E:72:3D:BE:72:8F:3B
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/U5Nwh4FLQ1glRwBp255yPb5yjzs.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/8a/9e2f8a-960d-4479-a058-4e3ce3301979/1/U5Nwh4FLQ1glRwBp255yPb5yjzs.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/8a/9e2f8a-960d-4479-a058-4e3ce3301979/1/U5Nwh4FLQ1glRwBp255yPb5yjzs.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
a5:32:99:1e:e8:13:ee:bf:17:22:64:41:e1:74:8a:1a:e0:c4:
9f:06:97:61:45:da:65:2c:83:0d:3b:af:5e:7f:3f:50:db:84:
38:4b:7e:dc:f5:fb:63:d4:7e:48:fd:96:cb:14:7b:33:ca:ce:
6b:09:5d:b2:51:55:af:a2:97:c9:c4:fe:f6:2f:1c:e2:97:34:
ab:22:00:8d:ff:a0:8a:ce:c3:0b:bf:eb:dd:fb:51:17:ec:30:
0d:e2:09:89:05:87:b7:e3:9d:f5:e6:d4:31:ff:ed:57:d9:f9:
43:2c:40:60:ee:73:3d:37:af:45:66:f9:8c:be:b2:6b:96:41:
c6:6a:50:d8:b8:d6:be:d1:43:f9:12:e5:06:cf:26:23:b5:5d:
c9:a9:77:2b:9f:63:a9:fe:1a:cb:91:b6:a1:f4:63:fb:db:14:
89:79:1c:75:47:cc:ef:76:d0:1b:14:4c:70:29:5d:c7:f9:f8:
25:39:9a:e2:ba:b5:d1:f8:6c:45:82:7e:29:cd:43:72:0c:fd:
07:05:5a:08:ed:f7:44:88:58:9c:7d:ec:a0:8e:2c:10:b1:52:
87:fa:f2:2b:12:4a:14:c4:1b:c7:96:69:99:85:7e:63:f2:bd:
51:a9:d8:83:81:e4:5c:51:27:5c:a8:6f:7b:92:51:81:70:fc:
d5:e4:d8:fc
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Apr 29 18:47:08 2025 by rpki-client