Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e9/13a57c-cc4f-45bc-af9f-9367e42389d9/1/U-8ohOShM1XbZJo0k1J8RCKJc7g.mft
File: U-8ohOShM1XbZJo0k1J8RCKJc7g.mft (raw, json)
Hash identifier: Xh4cZpdr0b8uZ0Ox10PKeO7GMJ88LRBKwRdmQKnKx7Y=
Subject key identifier: 81:50:7E:FC:35:DB:E0:09:43:72:0C:6B:0A:5D:B7:80:C0:80:AC:A4
Authority key identifier: 53:EF:28:84:E4:A1:33:55:DB:64:9A:34:93:52:7C:44:22:89:73:B8
Certificate issuer: /CN=53ef2884e4a13355db649a3493527c44228973b8
Certificate serial: 019677C37D389C6AFD1947E766345F02AD31
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/U-8ohOShM1XbZJo0k1J8RCKJc7g.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/e9/13a57c-cc4f-45bc-af9f-9367e42389d9/1/U-8ohOShM1XbZJo0k1J8RCKJc7g.mft
Manifest number: 100E
Signing time: Sun 27 Apr 2025 15:00:22 +0000
Manifest this update: Sun 27 Apr 2025 15:00:22 +0000
Manifest next update: Mon 28 Apr 2025 15:00:22 +0000
Files and hashes: 1: 7mSFLMU3pbLGF1eJYN7bCpXwo10.roa (hash: Gi9mXnC7oL2MgZs534EZSdtoL7fLCIIFaJEq+xFNvfg=)
2: U-8ohOShM1XbZJo0k1J8RCKJc7g.crl (hash: ZsoJtP7lKyjGlIbvQgJ6IIo45RGyhYIBRT770YZrEQU=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/e9/13a57c-cc4f-45bc-af9f-9367e42389d9/1/U-8ohOShM1XbZJo0k1J8RCKJc7g.crl
rsync://rpki.ripe.net/repository/DEFAULT/e9/13a57c-cc4f-45bc-af9f-9367e42389d9/1/U-8ohOShM1XbZJo0k1J8RCKJc7g.mft
rsync://rpki.ripe.net/repository/DEFAULT/U-8ohOShM1XbZJo0k1J8RCKJc7g.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 28 Apr 2025 14:00:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:77:c3:7d:38:9c:6a:fd:19:47:e7:66:34:5f:02:ad:31
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=53ef2884e4a13355db649a3493527c44228973b8
Validity
Not Before: Apr 27 15:00:22 2025 GMT
Not After : Apr 28 15:00:22 2025 GMT
Subject: CN=81507efc35dbe00943720c6b0a5db780c080aca4
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:88:b1:e3:a6:9a:b1:30:77:07:3c:b6:65:73:17:
25:da:a9:e1:59:bb:41:b0:cb:1d:9a:42:ea:b9:d1:
d1:f9:4b:f6:1c:4d:82:d3:b3:4a:ac:33:d2:12:34:
bc:31:f5:5b:9c:94:5a:18:73:50:65:15:73:93:1b:
1c:a3:8f:22:cc:29:83:3e:78:c9:0a:b4:37:b3:1b:
01:3e:f1:ee:90:04:be:ed:d4:d1:e1:ab:61:17:a2:
c9:87:29:57:6a:20:0a:78:4f:43:ff:b9:12:71:3d:
0b:75:c8:04:c5:8f:fa:f1:3b:77:70:a3:a9:3e:49:
83:e8:74:bf:62:4e:4c:30:0c:e4:63:cc:7b:36:94:
59:cd:a8:1a:2f:f9:f6:a1:a9:86:fb:00:d0:14:28:
94:fa:6f:ca:a3:06:5c:a3:86:d9:1a:da:fc:e7:54:
22:13:32:f2:ba:52:e8:75:2e:2f:c4:60:3e:f0:f9:
14:fd:6d:68:80:3d:71:1b:aa:78:d7:0e:30:61:18:
a7:57:9a:1c:2c:c2:1f:b7:b4:e3:21:4f:c9:3c:29:
c2:10:23:7f:52:3f:eb:a1:56:a4:3d:60:60:48:aa:
69:3a:ec:e1:d0:74:c7:2b:72:97:1d:19:5e:cb:5a:
62:3e:ca:1c:00:71:9f:f0:24:84:7a:2a:75:e4:26:
bb:55
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
81:50:7E:FC:35:DB:E0:09:43:72:0C:6B:0A:5D:B7:80:C0:80:AC:A4
X509v3 Authority Key Identifier:
keyid:53:EF:28:84:E4:A1:33:55:DB:64:9A:34:93:52:7C:44:22:89:73:B8
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/U-8ohOShM1XbZJo0k1J8RCKJc7g.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e9/13a57c-cc4f-45bc-af9f-9367e42389d9/1/U-8ohOShM1XbZJo0k1J8RCKJc7g.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/e9/13a57c-cc4f-45bc-af9f-9367e42389d9/1/U-8ohOShM1XbZJo0k1J8RCKJc7g.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
3f:bc:86:9f:49:6a:c1:89:bd:21:43:76:1f:6c:cd:40:fc:40:
8a:5e:da:00:4f:89:bb:98:64:bd:a9:88:04:20:82:78:f1:54:
46:b2:e8:ca:19:c7:7e:ac:e0:2c:4e:b4:c0:46:ac:58:79:7a:
02:1c:6e:da:29:04:a0:00:18:c6:02:0d:2a:b1:f2:6c:b1:69:
91:7f:5c:7d:7a:5a:c7:ff:48:da:e8:75:a2:0a:60:e9:c2:35:
e1:2f:6e:60:4b:c4:de:4f:bc:0b:78:ee:58:53:2c:3d:2c:ef:
6d:4c:af:4c:55:8d:56:8a:54:d0:fe:cb:b7:6f:eb:75:f3:0c:
00:2d:e8:e7:6e:a7:c4:14:34:01:ed:08:e8:ed:fe:a8:2a:d8:
20:67:91:ec:dc:15:e3:ef:ee:12:f7:c3:d0:19:8f:99:aa:18:
f1:8a:16:d7:83:01:e2:61:7e:a0:db:f3:a5:18:f9:cf:22:14:
de:ea:ba:6f:fe:60:6d:76:13:51:cc:ce:0c:88:59:20:54:ed:
45:2b:b1:f9:2e:49:57:02:0e:a6:2d:08:3b:a5:f1:65:f9:9e:
93:66:26:3b:99:3d:62:ab:ab:ed:a1:45:ee:9b:ee:2d:f2:b6:
e5:bc:9a:39:28:40:a4:3f:f6:20:ac:78:76:6b:7a:98:de:a4:
1d:a6:5b:02
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Apr 27 22:21:16 2025 by rpki-client