Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/be/553dc6-12d0-4d4a-a294-97c5d59b0bbf/1/pu1EK5HU6Dpt45-2eXGh55xrHtU.mft
File: pu1EK5HU6Dpt45-2eXGh55xrHtU.mft (raw, json)
Hash identifier: h3uwIf749y/Kg4e3GOrLcdLqdr+Cbqw2mMMBxoQjB5I=
Subject key identifier: 93:23:C4:A1:7B:C6:2E:E9:76:E9:1C:FF:D8:46:4A:21:B9:3F:B5:1D
Authority key identifier: A6:ED:44:2B:91:D4:E8:3A:6D:E3:9F:B6:79:71:A1:E7:9C:6B:1E:D5
Certificate issuer: /CN=a6ed442b91d4e83a6de39fb67971a1e79c6b1ed5
Certificate serial: 01967DC6A98EFD4558B4FAEF31276845D0FA
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/pu1EK5HU6Dpt45-2eXGh55xrHtU.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/be/553dc6-12d0-4d4a-a294-97c5d59b0bbf/1/pu1EK5HU6Dpt45-2eXGh55xrHtU.mft
Manifest number: 1515
Signing time: Mon 28 Apr 2025 19:01:33 +0000
Manifest this update: Mon 28 Apr 2025 19:01:33 +0000
Manifest next update: Tue 29 Apr 2025 19:01:33 +0000
Files and hashes: 1: SC2XN_diYt_QukHaap0r8T6Wdak.roa (hash: 9K19NSoBm7IcK9urRxPzzijH4A8PV0f6iVI/4Q272ew=)
2: lfrC4B88Afpo1TBPZMxOLIcU1Ck.roa (hash: t/3zF86JRbmij67yXF/+H8nTDumbM7s5DdE5qv8C5Js=)
3: pu1EK5HU6Dpt45-2eXGh55xrHtU.crl (hash: 4EfslX8LZyhmxuTT7xnyr3QJsopy1HbCO74B/AWwY8w=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/be/553dc6-12d0-4d4a-a294-97c5d59b0bbf/1/pu1EK5HU6Dpt45-2eXGh55xrHtU.crl
rsync://rpki.ripe.net/repository/DEFAULT/be/553dc6-12d0-4d4a-a294-97c5d59b0bbf/1/pu1EK5HU6Dpt45-2eXGh55xrHtU.mft
rsync://rpki.ripe.net/repository/DEFAULT/pu1EK5HU6Dpt45-2eXGh55xrHtU.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 29 Apr 2025 15:01:16 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:7d:c6:a9:8e:fd:45:58:b4:fa:ef:31:27:68:45:d0:fa
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=a6ed442b91d4e83a6de39fb67971a1e79c6b1ed5
Validity
Not Before: Apr 28 19:01:33 2025 GMT
Not After : Apr 29 19:01:33 2025 GMT
Subject: CN=9323c4a17bc62ee976e91cffd8464a21b93fb51d
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a9:39:a0:8a:ea:b3:aa:83:b0:3b:1d:a8:b2:8c:
8b:6e:10:76:01:24:a5:57:a7:1f:2f:82:8b:19:4e:
e4:79:3f:e9:4b:19:f5:15:c5:65:28:05:2f:bc:9b:
7b:5c:ca:94:a1:b4:f7:58:dd:63:f4:ce:a8:8b:f8:
bc:16:c4:f4:b0:67:a2:fe:cd:e5:af:c6:a0:fb:00:
7d:71:62:b7:b0:26:c2:1f:bd:8f:4b:6f:c2:e3:56:
4a:88:3c:36:55:24:74:f8:2f:c8:22:c9:81:0e:57:
92:df:16:91:97:b2:28:cb:36:51:81:af:29:fc:8a:
4b:12:98:fb:72:4b:99:ee:14:45:97:78:f4:25:e2:
70:cc:f2:2c:30:45:2c:b3:4a:cc:68:ed:06:b2:16:
0e:bd:66:bb:9f:3f:9f:ed:f2:f4:8f:8e:3d:a7:91:
c0:e3:64:43:12:d9:f6:86:3e:22:4a:0b:5d:fb:6b:
2d:1b:0f:d8:b8:f5:58:95:67:e6:ee:ca:59:49:a0:
e3:17:63:6b:82:0f:00:4e:b5:8e:7e:09:68:c1:de:
6f:74:62:9d:21:75:15:97:66:4d:97:c5:4f:6c:31:
d2:3f:d0:7c:25:80:05:93:a9:6d:95:f0:f9:c6:d6:
19:a5:aa:ef:ac:5b:96:59:e0:54:6e:67:11:81:cc:
d4:17
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
93:23:C4:A1:7B:C6:2E:E9:76:E9:1C:FF:D8:46:4A:21:B9:3F:B5:1D
X509v3 Authority Key Identifier:
keyid:A6:ED:44:2B:91:D4:E8:3A:6D:E3:9F:B6:79:71:A1:E7:9C:6B:1E:D5
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/pu1EK5HU6Dpt45-2eXGh55xrHtU.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/be/553dc6-12d0-4d4a-a294-97c5d59b0bbf/1/pu1EK5HU6Dpt45-2eXGh55xrHtU.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/be/553dc6-12d0-4d4a-a294-97c5d59b0bbf/1/pu1EK5HU6Dpt45-2eXGh55xrHtU.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
95:44:d9:95:66:52:47:1a:a4:3f:47:b6:89:0a:4a:66:2e:53:
0f:eb:df:7e:41:52:84:03:c1:54:f2:04:2d:66:28:d1:19:5b:
97:cd:d7:0d:16:cd:01:08:12:1e:8e:c8:fa:f0:7e:4d:d7:74:
8f:bb:46:98:52:fb:3d:2e:3f:80:ef:f0:75:26:92:2b:8a:54:
68:56:32:55:c4:90:a6:dc:31:80:93:90:ae:51:c3:c2:f1:0a:
c2:75:b1:ba:42:b0:1d:57:12:0b:0f:62:d9:f9:53:95:0e:54:
af:38:bc:9e:b4:21:01:83:f6:c2:ac:8d:83:81:25:58:ce:6d:
9a:39:7d:bd:97:b4:3e:d8:1d:fb:c0:93:df:9d:01:85:37:a1:
f6:f0:9c:c0:5b:11:cc:53:cf:63:22:eb:f4:ee:79:ae:0e:93:
f8:c2:48:80:14:76:2c:7e:53:48:c1:57:86:32:01:3c:21:8f:
96:a9:5b:61:29:3c:85:58:7e:fc:8b:c4:54:20:85:15:7d:49:
14:ed:6a:6f:d7:85:f6:b9:b1:bd:85:10:86:94:30:4d:41:51:
66:cc:37:4f:bb:38:bf:5f:cf:57:25:b9:8a:61:e2:81:3f:35:
be:4e:ec:c3:aa:fb:92:b7:b2:b2:5b:11:d6:a2:cd:fc:96:48:
15:dc:fd:8b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 28 23:27:57 2025 by rpki-client