Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/02/e20d59-4454-4ec8-9677-5f2bf22e189d/1/53OfCEQuIkRmIbiaV2ObNUK6NNw.mft
File: 53OfCEQuIkRmIbiaV2ObNUK6NNw.mft (raw, json)
Hash identifier: JdJolREXs7izF5jA4MN9LTbgiywaYwcLsb3tiS1O8m4=
Subject key identifier: 35:79:81:03:50:82:09:A6:43:27:81:3B:86:72:99:51:5E:E3:FA:50
Authority key identifier: E7:73:9F:08:44:2E:22:44:66:21:B8:9A:57:63:9B:35:42:BA:34:DC
Certificate issuer: /CN=e7739f08442e22446621b89a57639b3542ba34dc
Certificate serial: 01965CBA3F860944E05742228AB06B0A3208
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/53OfCEQuIkRmIbiaV2ObNUK6NNw.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/02/e20d59-4454-4ec8-9677-5f2bf22e189d/1/53OfCEQuIkRmIbiaV2ObNUK6NNw.mft
Manifest number: 031F
Signing time: Tue 22 Apr 2025 09:00:31 +0000
Manifest this update: Tue 22 Apr 2025 09:00:31 +0000
Manifest next update: Wed 23 Apr 2025 09:00:31 +0000
Files and hashes: 1: 53OfCEQuIkRmIbiaV2ObNUK6NNw.crl (hash: n1ZYnMsQ4S1Am/7jJIg7dQyTpBsLI81pRQEkFnD4Iyw=)
2: ynJSD2xc-CykfYa79BP9jQj40kM.roa (hash: fMb/laTqYN39Vwte4hGLXjRHIufJPIqxfdcZimxGcGk=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/02/e20d59-4454-4ec8-9677-5f2bf22e189d/1/53OfCEQuIkRmIbiaV2ObNUK6NNw.crl
rsync://rpki.ripe.net/repository/DEFAULT/02/e20d59-4454-4ec8-9677-5f2bf22e189d/1/53OfCEQuIkRmIbiaV2ObNUK6NNw.mft
rsync://rpki.ripe.net/repository/DEFAULT/53OfCEQuIkRmIbiaV2ObNUK6NNw.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 23 Apr 2025 04:00:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:5c:ba:3f:86:09:44:e0:57:42:22:8a:b0:6b:0a:32:08
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=e7739f08442e22446621b89a57639b3542ba34dc
Validity
Not Before: Apr 22 09:00:31 2025 GMT
Not After : Apr 23 09:00:31 2025 GMT
Subject: CN=35798103508209a64327813b867299515ee3fa50
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:eb:d0:9c:a6:95:76:1a:80:0b:53:fd:2d:21:3c:
12:e6:e4:29:e3:68:0a:ee:13:08:a5:ae:50:5d:23:
2a:41:45:88:71:17:f0:f7:29:a3:72:4c:ed:58:1f:
89:fb:2d:10:8b:28:4b:29:64:cd:8e:a0:38:78:0e:
7f:55:e9:ab:b8:ba:c8:54:63:29:f2:87:31:fa:88:
b9:3d:c9:13:8e:ae:48:29:29:a2:c5:69:3d:fe:5f:
78:a2:26:85:f9:50:45:85:df:ae:3e:f8:af:11:9b:
45:53:b7:21:15:be:c6:9d:c9:43:96:9a:51:5c:13:
cb:10:1e:45:6b:79:df:fc:b0:31:97:8f:71:ab:45:
3a:1d:07:d2:0d:ee:e4:ab:0e:67:f8:9c:9c:38:cd:
45:df:51:ff:87:42:b3:37:4a:99:bd:d0:37:f6:54:
67:37:8c:b0:f9:ec:d3:e1:7b:68:0a:73:e9:2d:56:
2e:f8:9c:92:17:8d:25:ab:9b:51:56:86:ad:b4:c4:
42:0d:d2:ef:fa:25:59:33:88:fe:90:51:30:10:93:
28:82:01:27:15:5f:70:f2:ce:45:40:ff:39:96:bd:
8b:04:a5:26:21:45:21:1f:cb:cb:b2:1d:2b:89:44:
32:7a:22:51:40:88:2a:22:62:87:b9:ca:d5:bb:f7:
ba:e3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
35:79:81:03:50:82:09:A6:43:27:81:3B:86:72:99:51:5E:E3:FA:50
X509v3 Authority Key Identifier:
keyid:E7:73:9F:08:44:2E:22:44:66:21:B8:9A:57:63:9B:35:42:BA:34:DC
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/53OfCEQuIkRmIbiaV2ObNUK6NNw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/02/e20d59-4454-4ec8-9677-5f2bf22e189d/1/53OfCEQuIkRmIbiaV2ObNUK6NNw.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/02/e20d59-4454-4ec8-9677-5f2bf22e189d/1/53OfCEQuIkRmIbiaV2ObNUK6NNw.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
84:73:02:f2:67:ac:00:7e:03:3e:0b:39:d8:a6:9c:7b:91:c1:
9e:02:cb:27:99:80:44:4e:ac:f3:c0:88:04:47:3b:58:a4:e1:
af:26:ec:c2:94:25:bd:d2:5e:97:a0:b2:3e:b4:69:cd:6b:2a:
e6:c4:40:dd:a7:6d:d5:27:ba:4a:ac:c6:53:f9:b7:cd:49:94:
98:a8:96:f0:fd:b6:78:7b:09:bf:de:c2:1d:a2:79:bf:33:1d:
b7:0e:24:2c:25:b5:ad:49:0f:7a:0d:a5:eb:e5:e5:fa:b2:42:
63:78:28:28:52:b9:a0:80:3e:65:24:1f:8f:59:29:25:ff:81:
87:4b:69:60:2b:26:0e:ed:87:01:29:2f:7c:34:fb:da:06:7e:
b3:69:b9:04:16:8d:ba:76:7a:7c:0c:a8:e2:01:de:d9:16:e8:
b3:0e:00:49:67:52:2e:d4:cf:4e:6c:df:8c:da:55:68:3e:08:
30:c4:67:1f:7f:03:d4:8a:95:33:c7:8e:ef:2c:74:b1:8b:dd:
62:41:7a:da:ff:14:12:d8:87:c8:ef:5e:c3:0e:a0:64:57:8c:
de:0f:7c:4f:1d:4f:a8:db:a3:48:2b:b7:3c:fa:c1:86:94:6d:
f6:29:7c:f2:83:a9:99:74:71:cc:2f:e6:b4:a1:85:b2:c1:86:
3e:41:39:fb
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Apr 22 13:05:16 2025 by rpki-client