Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/9d/8b07cd-0ced-4afc-8d02-972a4c3dc3f3/1/U7YqzmFbkGtCqyf0-x0gPfNtVDY.mft
File: U7YqzmFbkGtCqyf0-x0gPfNtVDY.mft (raw, json)
Hash identifier: WxRa6+zJkLI+aFqcNzY5EvZFsOJGsDQiNzKQhr1Vnxg=
Subject key identifier: E4:68:08:E2:6C:55:FA:CF:D2:4F:9B:AC:6F:86:71:AB:8E:43:DC:D7
Authority key identifier: 53:B6:2A:CE:61:5B:90:6B:42:AB:27:F4:FB:1D:20:3D:F3:6D:54:36
Certificate issuer: /CN=53b62ace615b906b42ab27f4fb1d203df36d5436
Certificate serial: 019680FE0B9D88FD69F1A806FCD77B21D38D
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/U7YqzmFbkGtCqyf0-x0gPfNtVDY.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/9d/8b07cd-0ced-4afc-8d02-972a4c3dc3f3/1/U7YqzmFbkGtCqyf0-x0gPfNtVDY.mft
Manifest number: 1524
Signing time: Tue 29 Apr 2025 10:00:54 +0000
Manifest this update: Tue 29 Apr 2025 10:00:54 +0000
Manifest next update: Wed 30 Apr 2025 10:00:54 +0000
Files and hashes: 1: 1CCvzsEpR2HzWfAtCPfz-prL4Xw.roa (hash: xMXmg6U7dk2I47UFlru0YwTYb2PTB2hNFflS+Hs5NZA=)
2: 47T-_h4yrwTkNISxK8J3mV88Fh0.roa (hash: BQum24aWy9VPt+BVB7kWULFG+ntEIPlMGrK1sM76ojQ=)
3: U7YqzmFbkGtCqyf0-x0gPfNtVDY.crl (hash: 4wIuXzwgL56vIAIhnQvY2P4KB7wsOKvDn+pyZZ6HmEE=)
4: _Swn7rfHkqyddWiH6mJBPzEvtPw.roa (hash: DdKMWCZ6/KHD8pm9QRG9mImRVRpGoqtnHO9unsKXibs=)
5: tNvAcIt1AfnmrpYr9vYkkFneZ2Y.roa (hash: gVnI/4eE/aC58PSWg9zuIzqcxtqe9LJ1Nbo9TV7QxCQ=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/9d/8b07cd-0ced-4afc-8d02-972a4c3dc3f3/1/U7YqzmFbkGtCqyf0-x0gPfNtVDY.crl
rsync://rpki.ripe.net/repository/DEFAULT/9d/8b07cd-0ced-4afc-8d02-972a4c3dc3f3/1/U7YqzmFbkGtCqyf0-x0gPfNtVDY.mft
rsync://rpki.ripe.net/repository/DEFAULT/U7YqzmFbkGtCqyf0-x0gPfNtVDY.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 30 Apr 2025 10:00:54 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:80:fe:0b:9d:88:fd:69:f1:a8:06:fc:d7:7b:21:d3:8d
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=53b62ace615b906b42ab27f4fb1d203df36d5436
Validity
Not Before: Apr 29 10:00:54 2025 GMT
Not After : Apr 30 10:00:54 2025 GMT
Subject: CN=e46808e26c55facfd24f9bac6f8671ab8e43dcd7
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:94:5d:c7:9a:d0:be:3f:16:9e:ef:6e:3b:e6:71:
bb:34:33:9e:b6:96:bf:66:f8:44:e7:84:ab:0e:7e:
02:c0:a1:b0:ec:57:d5:98:30:3e:5f:7c:77:d9:89:
b2:29:04:42:5b:f3:bd:42:63:53:f3:bc:9b:e3:0f:
4d:59:9f:e1:bd:f5:68:c9:cc:1e:b0:a6:ef:57:cc:
3c:34:37:cb:52:12:14:a5:cd:59:81:30:96:98:ec:
ad:6a:ea:90:3e:28:16:61:7a:9f:b5:cc:3d:62:29:
f7:15:85:bd:14:e9:d1:a0:ae:a6:e7:53:ba:9d:d4:
5d:83:8d:c8:23:e2:39:8c:67:5a:d1:f3:d3:aa:cf:
ad:ff:0d:30:e5:1b:10:5d:e1:8f:d3:2e:a5:b1:54:
b0:b9:49:5a:87:72:f4:1b:3d:c4:af:0b:3e:f7:12:
ec:3f:0d:d9:be:63:6f:10:4b:0d:25:52:5f:cd:11:
0b:4e:0d:0c:9a:32:5b:37:79:3e:70:ce:d0:56:e4:
66:8c:f9:77:9c:49:cb:ab:ca:a9:4e:40:b0:b9:08:
d1:83:da:6f:c6:9b:0d:5a:3d:7f:50:06:dc:0d:e8:
5d:23:2f:3e:d5:1a:f4:53:4e:a0:01:88:1e:7a:9d:
35:79:ce:13:11:e6:a5:ed:1e:a1:f7:fc:50:8d:76:
57:17
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E4:68:08:E2:6C:55:FA:CF:D2:4F:9B:AC:6F:86:71:AB:8E:43:DC:D7
X509v3 Authority Key Identifier:
keyid:53:B6:2A:CE:61:5B:90:6B:42:AB:27:F4:FB:1D:20:3D:F3:6D:54:36
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/U7YqzmFbkGtCqyf0-x0gPfNtVDY.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/9d/8b07cd-0ced-4afc-8d02-972a4c3dc3f3/1/U7YqzmFbkGtCqyf0-x0gPfNtVDY.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/9d/8b07cd-0ced-4afc-8d02-972a4c3dc3f3/1/U7YqzmFbkGtCqyf0-x0gPfNtVDY.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
13:46:9c:0a:ee:fd:01:29:b7:e7:7b:87:8c:c1:41:ab:30:be:
6d:dc:dc:59:77:51:df:f0:57:8d:76:2c:e4:a3:38:9b:94:b9:
8e:ee:31:3d:08:3f:20:fe:5b:85:92:ad:d4:ff:f0:b6:0c:70:
d2:4f:d4:b2:e5:81:c4:8d:96:2d:7c:90:d7:2a:b3:fb:75:a8:
df:bf:f6:97:fb:45:c3:65:c1:ea:46:19:41:f2:cf:50:78:64:
3a:f2:13:8d:91:4e:a5:15:60:7f:24:cd:96:b4:db:12:a5:1c:
8f:e4:ab:b8:a6:1f:28:93:d6:bc:ab:1f:63:79:74:ee:dd:52:
d7:fc:24:cd:86:5b:ca:b7:35:bd:a9:8a:aa:58:45:82:f9:68:
21:12:23:13:bc:88:8f:88:3a:b8:7b:2f:05:98:41:78:1b:86:
e6:53:77:56:27:d7:35:56:d1:8e:d8:1e:66:0d:f8:e4:14:ec:
2f:ab:06:af:d0:cb:3f:e7:24:7f:fa:8e:cd:20:d1:49:c3:26:
d8:ac:02:d2:d9:33:8a:df:7e:fe:d7:68:84:dc:f6:36:1a:30:
be:f0:41:25:a3:c4:20:4e:b4:84:14:21:4e:4e:a0:dc:61:a0:
f9:03:36:bd:2d:e8:66:56:33:0f:dc:b3:ce:d0:5a:d5:d7:06:
9c:4d:ba:57
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Apr 29 16:21:31 2025 by rpki-client