Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ad/04e64b-924c-48a0-89a4-a00944fd7d9d/1/U0Z21mkyx3oldhE2rJnrm3TYAaY.mft
File: U0Z21mkyx3oldhE2rJnrm3TYAaY.mft (raw, json)
Hash identifier: 6rXB6uURtiWzjFdzNN06lYKIhxgbwKxc2QvTKrwicts=
Subject key identifier: 09:14:DC:E0:58:7B:FE:B6:40:1A:C6:50:E9:C6:7B:C6:9F:80:CA:4B
Authority key identifier: 53:46:76:D6:69:32:C7:7A:25:76:11:36:AC:99:EB:9B:74:D8:01:A6
Certificate issuer: /CN=534676d66932c77a25761136ac99eb9b74d801a6
Certificate serial: 01969E6393EC7532C28ACCF0152D683F1242
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/U0Z21mkyx3oldhE2rJnrm3TYAaY.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ad/04e64b-924c-48a0-89a4-a00944fd7d9d/1/U0Z21mkyx3oldhE2rJnrm3TYAaY.mft
Manifest number: 01F5
Signing time: Mon 05 May 2025 03:00:48 +0000
Manifest this update: Mon 05 May 2025 03:00:48 +0000
Manifest next update: Tue 06 May 2025 03:00:48 +0000
Files and hashes: 1: 2dOfhpir5Q5tClQufxJ63VN9ATs.roa (hash: MXA0vJK0httbWsLOJ5Lc4f/NDFMY7G+nyTtUUbrssPM=)
2: U0Z21mkyx3oldhE2rJnrm3TYAaY.crl (hash: GKDz+DbWwYLqih32LixwboUUmatN8ixEFE4vUuWdl9I=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/ad/04e64b-924c-48a0-89a4-a00944fd7d9d/1/U0Z21mkyx3oldhE2rJnrm3TYAaY.crl
rsync://rpki.ripe.net/repository/DEFAULT/ad/04e64b-924c-48a0-89a4-a00944fd7d9d/1/U0Z21mkyx3oldhE2rJnrm3TYAaY.mft
rsync://rpki.ripe.net/repository/DEFAULT/U0Z21mkyx3oldhE2rJnrm3TYAaY.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 05 May 2025 22:00:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:9e:63:93:ec:75:32:c2:8a:cc:f0:15:2d:68:3f:12:42
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=534676d66932c77a25761136ac99eb9b74d801a6
Validity
Not Before: May 5 03:00:48 2025 GMT
Not After : May 6 03:00:48 2025 GMT
Subject: CN=0914dce0587bfeb6401ac650e9c67bc69f80ca4b
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ae:5d:4a:26:00:df:7b:de:c2:4f:30:c3:6f:11:
4e:ff:09:d3:ff:1b:79:b7:fc:a0:4b:b3:69:0c:61:
65:59:9e:19:8b:c2:fa:9c:85:19:e2:6e:ff:02:e5:
33:95:fc:de:3f:76:ec:1e:d1:32:71:b3:f3:36:b5:
05:c3:6b:6d:26:f2:93:54:8a:d6:86:4c:02:46:f6:
ac:7f:0a:5a:7d:e8:44:d0:da:58:8a:ec:e6:71:9c:
50:7a:83:83:8b:67:69:1a:e3:11:d2:47:67:bb:47:
67:c7:d7:f7:ce:a4:70:fc:78:be:17:71:90:ff:15:
4a:07:7d:9f:45:1a:57:1f:52:89:bb:2f:11:e0:21:
66:ac:1f:18:d3:ba:3a:f6:8f:15:b0:86:78:45:1d:
5c:a4:2c:b6:7c:2b:d1:d5:75:25:8a:28:4c:b4:af:
7e:2a:85:d5:71:89:11:0b:d4:87:61:a9:12:e2:ef:
25:1d:9a:ba:d5:b8:d0:64:39:17:b7:7e:23:60:84:
93:e9:dd:91:03:85:2a:d0:9c:f6:32:69:45:0b:e2:
4c:73:6d:10:c5:53:33:aa:7e:f5:24:1e:09:e7:ea:
96:c1:de:d8:48:0a:28:0b:24:ed:7a:70:dd:b5:ae:
da:e6:b9:2d:9b:fa:ba:79:d3:60:6c:91:80:a5:8e:
8b:bd
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
09:14:DC:E0:58:7B:FE:B6:40:1A:C6:50:E9:C6:7B:C6:9F:80:CA:4B
X509v3 Authority Key Identifier:
keyid:53:46:76:D6:69:32:C7:7A:25:76:11:36:AC:99:EB:9B:74:D8:01:A6
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/U0Z21mkyx3oldhE2rJnrm3TYAaY.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ad/04e64b-924c-48a0-89a4-a00944fd7d9d/1/U0Z21mkyx3oldhE2rJnrm3TYAaY.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/ad/04e64b-924c-48a0-89a4-a00944fd7d9d/1/U0Z21mkyx3oldhE2rJnrm3TYAaY.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
84:d8:ce:38:38:65:9e:b7:e2:c0:ba:a8:2b:db:23:d5:39:56:
83:ff:c9:fb:e8:02:6b:a8:9c:de:7d:ef:df:fb:ea:08:7f:8d:
21:d0:e0:65:49:7d:2c:0d:e9:d8:ea:75:f6:3c:37:e8:22:b2:
c4:73:12:a2:01:3a:e8:d5:d6:21:88:89:dd:e2:e7:c8:d7:47:
a4:8d:a2:d1:cf:8c:09:39:29:f6:0c:b5:30:d3:71:fe:32:22:
4c:11:85:67:44:26:4a:ec:ea:12:aa:47:fc:d2:85:74:ef:d0:
52:76:22:b9:73:1f:27:ee:f0:96:c8:dc:ee:09:f5:2e:e7:cc:
75:51:22:52:f8:be:30:00:b5:d8:ea:63:ca:37:ff:94:ad:93:
f7:2f:b2:31:96:6c:db:2b:10:80:ca:45:d0:02:c0:87:e9:54:
6c:1f:88:4f:55:e0:6e:e9:e2:32:2d:b6:29:70:e9:ac:b1:3a:
c7:86:16:80:ce:64:ae:bd:d8:f1:c4:e3:02:0d:da:57:33:c3:
7e:56:74:6c:81:50:31:e4:16:95:bb:47:6e:47:68:df:c5:5a:
d7:9f:9d:92:46:73:af:40:60:27:6d:05:41:05:b9:b6:ff:9a:
f9:f4:0c:a5:e7:7c:a2:81:93:9a:71:24:f4:3e:32:c8:d9:a8:
34:23:47:dd
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon May 5 06:24:20 2025 by rpki-client