Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/6d/56d502-c5d8-4b14-9836-a67f95f2de5e/1/U2xMlP7U-ouQP29vtTQEhMDkpNM.mft
File: U2xMlP7U-ouQP29vtTQEhMDkpNM.mft (raw, json)
Hash identifier: zhhVXeDr0claw2OIbYgzbWEBsIMZD+TRTCZEhBaiudk=
Subject key identifier: 5A:E0:0D:45:A2:95:B3:D0:8B:62:9F:77:88:D2:44:3C:7C:2F:93:6C
Authority key identifier: 53:6C:4C:94:FE:D4:FA:8B:90:3F:6F:6F:B5:34:04:84:C0:E4:A4:D3
Certificate issuer: /CN=536c4c94fed4fa8b903f6f6fb5340484c0e4a4d3
Certificate serial: 019652A4A37779F21CDF64F91143E4EFC3DD
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/U2xMlP7U-ouQP29vtTQEhMDkpNM.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/6d/56d502-c5d8-4b14-9836-a67f95f2de5e/1/U2xMlP7U-ouQP29vtTQEhMDkpNM.mft
Manifest number: 1500
Signing time: Sun 20 Apr 2025 10:00:43 +0000
Manifest this update: Sun 20 Apr 2025 10:00:43 +0000
Manifest next update: Mon 21 Apr 2025 10:00:43 +0000
Files and hashes: 1: U2xMlP7U-ouQP29vtTQEhMDkpNM.crl (hash: VFepXEML/u4LUrepI8tbzXwc2JKg7tR9POU63nxvxWA=)
2: njJ08DLk77AkZ1iIEBC7jMkFvlQ.roa (hash: GEX/RSN8tQvNqg+ko8rD3JrvjgsOgbyicEDl49n/sdU=)
3: pn8rq8qDOUBuZ0-b31eLiOCLyZg.roa (hash: l5Xr+6tnilajkPRMuk4w2ggc4ncvbbGis+a2SkOogMk=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/6d/56d502-c5d8-4b14-9836-a67f95f2de5e/1/U2xMlP7U-ouQP29vtTQEhMDkpNM.crl
rsync://rpki.ripe.net/repository/DEFAULT/6d/56d502-c5d8-4b14-9836-a67f95f2de5e/1/U2xMlP7U-ouQP29vtTQEhMDkpNM.mft
rsync://rpki.ripe.net/repository/DEFAULT/U2xMlP7U-ouQP29vtTQEhMDkpNM.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 21 Apr 2025 10:00:43 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:52:a4:a3:77:79:f2:1c:df:64:f9:11:43:e4:ef:c3:dd
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=536c4c94fed4fa8b903f6f6fb5340484c0e4a4d3
Validity
Not Before: Apr 20 10:00:43 2025 GMT
Not After : Apr 21 10:00:43 2025 GMT
Subject: CN=5ae00d45a295b3d08b629f7788d2443c7c2f936c
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9c:18:bc:1b:b6:4e:d9:c0:38:09:85:e9:0d:fa:
2e:e8:e9:00:a7:e8:75:8b:ad:20:b1:1c:ef:3e:a5:
e0:ec:b4:e9:0b:97:da:be:46:49:43:2e:24:17:ef:
f3:e1:e2:79:b5:35:0c:7c:0a:62:a7:46:2b:b1:19:
36:33:7d:d4:69:b6:33:52:1c:ca:3a:33:fa:7a:7d:
8a:88:ed:4f:00:aa:2b:bb:bc:3a:56:1d:5d:f0:8d:
58:67:f6:58:fa:ed:fd:ea:8a:b6:64:a5:e0:98:b1:
e9:90:b2:ac:02:8a:dc:52:96:b9:15:90:32:d0:23:
aa:2f:56:a8:ba:bb:2b:89:22:00:c6:a1:96:cb:2e:
c1:f5:b4:85:37:37:ef:7b:21:74:8b:ae:ed:dc:2e:
b5:5b:14:ef:3a:d7:15:13:c7:8c:4c:e2:e0:71:bb:
1b:e2:0a:0e:ef:7b:d1:3c:92:09:e0:9d:9c:4d:38:
b1:1f:e7:ee:d7:b1:9b:83:19:d0:28:0c:ff:ba:69:
56:c8:51:03:e4:e3:25:2c:42:ce:b7:7e:88:b0:87:
09:66:ec:e9:98:a3:89:f1:8d:f4:48:ab:c1:cb:60:
9c:72:9e:dd:f6:49:e3:f1:77:75:f4:c8:ea:f5:8b:
9e:93:bf:f5:26:c5:0c:b4:62:ac:16:a0:61:6f:c2:
5d:57
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
5A:E0:0D:45:A2:95:B3:D0:8B:62:9F:77:88:D2:44:3C:7C:2F:93:6C
X509v3 Authority Key Identifier:
keyid:53:6C:4C:94:FE:D4:FA:8B:90:3F:6F:6F:B5:34:04:84:C0:E4:A4:D3
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/U2xMlP7U-ouQP29vtTQEhMDkpNM.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/6d/56d502-c5d8-4b14-9836-a67f95f2de5e/1/U2xMlP7U-ouQP29vtTQEhMDkpNM.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/6d/56d502-c5d8-4b14-9836-a67f95f2de5e/1/U2xMlP7U-ouQP29vtTQEhMDkpNM.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
41:4e:40:a6:57:27:8f:65:56:40:b8:9c:37:23:a0:3b:b6:b0:
ac:f0:c5:32:d8:e6:a4:80:de:b1:41:af:58:77:fa:68:8e:ee:
48:91:15:8d:4a:65:fc:b9:4a:c4:5f:bf:bb:f8:b0:3e:72:62:
e7:d4:05:fa:bb:f5:37:a3:6a:c9:30:be:49:1b:d4:a4:5c:da:
21:cf:3b:07:cb:c1:de:22:7b:ed:38:e4:5c:af:ee:f2:75:d6:
6f:90:ba:98:2f:59:4a:96:43:1a:27:f9:86:0f:10:32:0a:f5:
b1:28:75:d2:3f:b5:f9:33:26:e2:90:1c:e7:aa:62:5d:ba:b7:
b0:3b:71:5b:ef:ab:f3:50:6a:25:7b:e0:c4:e1:0a:2c:52:d7:
87:33:cc:8d:2b:24:bf:cc:33:f7:c2:62:a4:7d:b9:8d:1b:2e:
a8:28:14:57:4d:13:dc:d1:83:45:97:86:9f:a6:22:d2:61:97:
60:50:cd:ed:85:84:76:98:dc:20:7e:a1:b2:8b:90:57:96:20:
07:6f:26:39:3a:99:7d:53:fe:09:2c:a0:cf:15:90:7f:8a:cf:
36:8b:bd:f4:f1:83:a9:90:40:7c:45:32:60:b1:2a:53:d1:d4:
80:ec:90:9f:aa:cf:78:a5:20:79:57:39:5d:61:31:cb:b5:bc:
50:22:b2:fc
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Apr 20 19:33:51 2025 by rpki-client