Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b6/793283-e304-4270-b300-1b15b25879f2/1/U8jE-VEgbxq9hqc9HLuzmQfobh8.mft
File: U8jE-VEgbxq9hqc9HLuzmQfobh8.mft (raw, json)
Hash identifier: SNhFR6y3ykSWA/Kj7dmdnbU5D6gRm6cOjFrNOKQfgtI=
Subject key identifier: C0:CD:37:09:BA:8B:20:B5:0C:92:AC:1B:24:06:AB:E9:4C:DB:67:6A
Authority key identifier: 53:C8:C4:F9:51:20:6F:1A:BD:86:A7:3D:1C:BB:B3:99:07:E8:6E:1F
Certificate issuer: /CN=53c8c4f951206f1abd86a73d1cbbb39907e86e1f
Certificate serial: 01969AF4237F70CAB3A098294DF35B141027
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/U8jE-VEgbxq9hqc9HLuzmQfobh8.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/b6/793283-e304-4270-b300-1b15b25879f2/1/U8jE-VEgbxq9hqc9HLuzmQfobh8.mft
Manifest number: 1523
Signing time: Sun 04 May 2025 11:00:13 +0000
Manifest this update: Sun 04 May 2025 11:00:13 +0000
Manifest next update: Mon 05 May 2025 11:00:13 +0000
Files and hashes: 1: U8jE-VEgbxq9hqc9HLuzmQfobh8.crl (hash: XS0q8o7aQ5pVeTXP/ISNosNEcec6Iz927TnyOzX3XJQ=)
2: gj6Yi2KQAGes4eI6WnlmwiQ6kdA.roa (hash: U/KvyTRHoYm4+lr8DamrffptLgYZWzqgWZ1VwobHzuA=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/b6/793283-e304-4270-b300-1b15b25879f2/1/U8jE-VEgbxq9hqc9HLuzmQfobh8.crl
rsync://rpki.ripe.net/repository/DEFAULT/b6/793283-e304-4270-b300-1b15b25879f2/1/U8jE-VEgbxq9hqc9HLuzmQfobh8.mft
rsync://rpki.ripe.net/repository/DEFAULT/U8jE-VEgbxq9hqc9HLuzmQfobh8.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 05 May 2025 07:00:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:9a:f4:23:7f:70:ca:b3:a0:98:29:4d:f3:5b:14:10:27
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=53c8c4f951206f1abd86a73d1cbbb39907e86e1f
Validity
Not Before: May 4 11:00:13 2025 GMT
Not After : May 5 11:00:13 2025 GMT
Subject: CN=c0cd3709ba8b20b50c92ac1b2406abe94cdb676a
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d6:23:31:2a:8d:9c:88:2e:59:e7:ed:cc:82:e5:
d9:3e:30:0e:07:97:1b:40:9a:0d:21:82:18:bc:92:
76:c1:70:94:eb:0c:04:82:f8:cd:af:00:9b:aa:e6:
ab:07:5f:84:4d:3c:03:93:a9:51:e6:72:d7:7b:4a:
ff:8b:72:9b:b5:2e:60:b0:7a:b1:dc:46:4b:4d:a5:
20:1e:ff:98:cd:94:3b:37:05:8e:aa:72:ce:e5:d7:
dd:db:3e:12:ee:66:95:26:5d:d2:da:09:c7:12:a5:
3f:c4:b9:07:c6:c5:6c:46:b7:45:17:bf:bc:e5:39:
d0:d3:b0:3d:89:88:50:16:5c:dd:73:c7:70:36:f3:
54:c8:55:7e:84:15:ca:8b:c8:9a:9d:52:27:14:c1:
3a:e3:c4:fd:76:ee:0a:03:a6:32:eb:88:f1:c0:2c:
f9:01:31:30:02:30:34:2c:03:07:04:9a:fa:23:bb:
48:c5:c1:13:38:52:d1:ea:20:f7:47:3a:ee:f7:a7:
3e:27:3c:2a:ee:f0:c5:62:6b:35:88:ab:f8:38:19:
28:0d:6f:15:1b:38:5a:f8:76:c7:6f:f9:bb:ce:ca:
ad:b7:99:31:f5:6d:18:d9:b5:d3:4e:5a:38:b1:b3:
50:ee:2c:d2:6b:c9:08:1d:37:48:43:61:12:c6:79:
54:67
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C0:CD:37:09:BA:8B:20:B5:0C:92:AC:1B:24:06:AB:E9:4C:DB:67:6A
X509v3 Authority Key Identifier:
keyid:53:C8:C4:F9:51:20:6F:1A:BD:86:A7:3D:1C:BB:B3:99:07:E8:6E:1F
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/U8jE-VEgbxq9hqc9HLuzmQfobh8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b6/793283-e304-4270-b300-1b15b25879f2/1/U8jE-VEgbxq9hqc9HLuzmQfobh8.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/b6/793283-e304-4270-b300-1b15b25879f2/1/U8jE-VEgbxq9hqc9HLuzmQfobh8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
34:63:eb:0d:fd:d3:5b:62:79:25:32:4b:b6:0a:07:76:05:02:
b0:8a:ec:bd:5e:7d:38:fb:49:13:6f:9d:31:28:c9:20:f5:61:
ef:26:ff:de:20:11:e9:0d:d2:79:13:30:60:66:23:77:e9:dc:
11:55:e3:f5:ec:e3:c9:b4:bb:8b:4b:2c:4f:4d:68:e4:27:5c:
13:71:0a:38:d5:72:38:ef:55:cb:46:37:bc:4b:92:8e:6a:a2:
4c:16:7c:80:1e:d5:f2:2f:e5:f2:95:99:fc:d1:20:b2:4f:d1:
00:6e:95:97:28:01:0a:3a:0c:19:bc:17:10:7c:d9:07:24:a8:
49:cd:48:68:67:bf:b0:a4:21:3f:f8:7f:fc:65:6e:0d:df:99:
e7:7b:c0:1a:b1:f7:15:42:c0:ac:ad:3d:dc:45:aa:6c:dc:ce:
e7:82:94:25:e1:95:1d:bf:ee:a0:f8:0b:25:48:ac:fc:3b:5f:
90:34:98:87:f5:19:60:7d:61:b1:6f:91:01:f6:ad:f9:5c:9b:
ad:43:48:15:31:24:7b:16:6e:cf:40:0c:75:83:46:0b:fd:0e:
2a:87:9f:1f:69:70:a5:02:0a:7a:5b:c0:f3:34:e2:03:bc:44:
4c:16:43:67:32:8d:1d:65:ab:92:66:62:1a:4a:de:89:be:da:
5c:3b:3e:0c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun May 4 15:33:49 2025 by rpki-client