Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/8a/9e2f8a-960d-4479-a058-4e3ce3301979/1/U5Nwh4FLQ1glRwBp255yPb5yjzs.mft
File: U5Nwh4FLQ1glRwBp255yPb5yjzs.mft (raw, json)
Hash identifier: tKQ/0a/xTBf1dbszz0FMIPBtDqYxkDg99Dp+bWLXcY8=
Subject key identifier: 0C:87:E9:0E:E0:66:EB:EF:53:14:31:97:72:90:D4:1B:18:F4:B9:32
Authority key identifier: 53:93:70:87:81:4B:43:58:25:47:00:69:DB:9E:72:3D:BE:72:8F:3B
Certificate issuer: /CN=53937087814b435825470069db9e723dbe728f3b
Certificate serial: 019655DC8FBBFD9E824F8BC33313F035A04C
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/U5Nwh4FLQ1glRwBp255yPb5yjzs.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/8a/9e2f8a-960d-4479-a058-4e3ce3301979/1/U5Nwh4FLQ1glRwBp255yPb5yjzs.mft
Manifest number: 14FC
Signing time: Mon 21 Apr 2025 01:00:39 +0000
Manifest this update: Mon 21 Apr 2025 01:00:39 +0000
Manifest next update: Tue 22 Apr 2025 01:00:39 +0000
Files and hashes: 1: U5Nwh4FLQ1glRwBp255yPb5yjzs.crl (hash: fKYJPPaBAjOdC5azc0F4cTEOBObzvz22Zy1N86nruts=)
2: XysHQU0TQpQ18huR7cIIDrfZWfY.roa (hash: NtroWgAMFvSSwwYDxpo3NQGtG+bQQozP9je3mTfJHRc=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/8a/9e2f8a-960d-4479-a058-4e3ce3301979/1/U5Nwh4FLQ1glRwBp255yPb5yjzs.crl
rsync://rpki.ripe.net/repository/DEFAULT/8a/9e2f8a-960d-4479-a058-4e3ce3301979/1/U5Nwh4FLQ1glRwBp255yPb5yjzs.mft
rsync://rpki.ripe.net/repository/DEFAULT/U5Nwh4FLQ1glRwBp255yPb5yjzs.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 22 Apr 2025 01:00:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:55:dc:8f:bb:fd:9e:82:4f:8b:c3:33:13:f0:35:a0:4c
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=53937087814b435825470069db9e723dbe728f3b
Validity
Not Before: Apr 21 01:00:39 2025 GMT
Not After : Apr 22 01:00:39 2025 GMT
Subject: CN=0c87e90ee066ebef531431977290d41b18f4b932
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a7:33:04:f5:c1:75:1c:41:4e:d0:48:79:77:93:
f5:16:ae:44:15:d4:a5:fd:7a:00:2d:82:36:dc:8b:
bf:d4:24:98:ba:e9:a0:d3:6f:51:e2:39:9a:a8:f8:
55:b3:f7:18:fa:39:61:ff:a6:8c:14:d6:37:8a:c2:
4e:9d:da:b1:a4:9e:72:4f:ec:33:df:25:0e:f3:e9:
b8:27:06:00:fe:8e:90:81:92:0a:6e:59:8a:ec:20:
27:1f:21:7e:17:d7:d5:68:51:a2:e4:24:d5:be:d4:
9e:36:5a:89:aa:e6:95:b9:cf:dc:59:20:14:38:65:
17:a2:91:7d:ce:8e:06:2b:b9:a6:e9:ea:02:df:24:
d8:02:0b:7e:82:0b:59:cb:e9:3e:7f:1b:a6:3c:0a:
cf:b4:cf:85:65:c5:58:5a:eb:b6:ce:9f:ea:64:8b:
de:89:5c:ee:5d:b0:df:32:e3:4c:7a:e5:f3:7e:7a:
24:b9:e1:e4:23:ca:61:fc:11:4d:b6:00:3e:1b:82:
4d:88:91:45:f8:14:9b:64:00:16:c1:67:ed:11:90:
b7:49:6e:5d:22:c0:09:c2:67:01:7c:2e:9e:32:95:
70:e6:fa:eb:67:83:ae:c5:08:f8:8d:15:12:b5:0f:
b5:47:eb:8f:94:26:c8:2a:52:f6:d0:93:34:99:a5:
f0:b5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
0C:87:E9:0E:E0:66:EB:EF:53:14:31:97:72:90:D4:1B:18:F4:B9:32
X509v3 Authority Key Identifier:
keyid:53:93:70:87:81:4B:43:58:25:47:00:69:DB:9E:72:3D:BE:72:8F:3B
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/U5Nwh4FLQ1glRwBp255yPb5yjzs.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/8a/9e2f8a-960d-4479-a058-4e3ce3301979/1/U5Nwh4FLQ1glRwBp255yPb5yjzs.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/8a/9e2f8a-960d-4479-a058-4e3ce3301979/1/U5Nwh4FLQ1glRwBp255yPb5yjzs.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
23:f2:75:eb:77:38:14:84:1d:fd:8a:28:24:bf:15:72:da:47:
29:4f:1c:83:c1:91:78:75:a9:69:e3:55:db:b6:d6:32:1b:a4:
69:ae:f5:80:c1:1e:1a:82:d8:c4:48:05:f1:50:46:40:b4:01:
80:d2:5b:63:a9:32:db:2b:48:9b:22:e2:17:3e:b3:42:9f:33:
6e:18:f9:f3:a5:5c:0e:a7:07:67:c4:68:31:b0:55:8e:ef:8d:
c6:6b:3b:3d:12:c5:22:b2:e0:57:80:0f:12:85:a8:95:ac:f1:
d7:4e:aa:7f:0c:8b:c3:78:5f:13:27:85:cd:53:f8:27:4c:a2:
e2:53:74:53:0b:22:fa:3e:06:ea:8e:69:ef:47:b3:f0:1b:80:
2a:7e:5b:04:f3:bd:31:ea:d3:6a:96:60:84:ad:22:4a:2f:df:
19:c7:7e:0b:8a:3b:a0:e2:cb:bc:ec:81:67:c1:da:57:70:05:
e7:a2:62:98:7f:cd:83:46:bf:72:75:44:85:29:20:67:46:e0:
48:b8:7c:4a:26:3c:ee:3f:f0:7b:5b:86:77:f1:86:74:7f:db:
cc:5f:cf:1a:34:65:aa:f3:72:d5:96:2f:fd:c0:c4:db:bc:47:
e9:01:6f:20:2a:df:e2:a2:f5:75:9f:6d:cb:ec:1d:9b:5c:10:
79:d3:00:84
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZZV3I+7/Z6CT4vDMxPwNaBMMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDUzOTM3MDg3ODE0YjQzNTgyNTQ3MDA2OWRiOWU3MjNkYmU3
MjhmM2IwHhcNMjUwNDIxMDEwMDM5WhcNMjUwNDIyMDEwMDM5WjAzMTEwLwYDVQQD
EygwYzg3ZTkwZWUwNjZlYmVmNTMxNDMxOTc3MjkwZDQxYjE4ZjRiOTMyMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEApzME9cF1HEFO0Eh5d5P1Fq5EFdSl
/XoALYI23Iu/1CSYuumg029R4jmaqPhVs/cY+jlh/6aMFNY3isJOndqxpJ5yT+wz
3yUO8+m4JwYA/o6QgZIKblmK7CAnHyF+F9fVaFGi5CTVvtSeNlqJquaVuc/cWSAU
OGUXopF9zo4GK7mm6eoC3yTYAgt+ggtZy+k+fxumPArPtM+FZcVYWuu2zp/qZIve
iVzuXbDfMuNMeuXzfnokueHkI8ph/BFNtgA+G4JNiJFF+BSbZAAWwWftEZC3SW5d
IsAJwmcBfC6eMpVw5vrrZ4OuxQj4jRUStQ+1R+uPlCbIKlL20JM0maXwtQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFAyH6Q7gZuvvUxQxl3KQ1BsY9LkyMB8GA1UdIwQY
MBaAFFOTcIeBS0NYJUcAaduecj2+co87MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvVTVOd2g0RkxRMWdsUndCcDI1NXlQYjV5anpzLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC84YS85ZTJmOGEtOTYwZC00NDc5LWEwNTgt
NGUzY2UzMzAxOTc5LzEvVTVOd2g0RkxRMWdsUndCcDI1NXlQYjV5anpzLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC84YS85ZTJmOGEtOTYwZC00NDc5LWEwNTgtNGUzY2UzMzAxOTc5
LzEvVTVOd2g0RkxRMWdsUndCcDI1NXlQYjV5anpzLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAI/J163c4
FIQd/YooJL8VctpHKU8cg8GReHWpaeNV27bWMhukaa71gMEeGoLYxEgF8VBGQLQB
gNJbY6ky2ytImyLiFz6zQp8zbhj586VcDqcHZ8RoMbBVju+Nxms7PRLFIrLgV4AP
EoWolazx106qfwyLw3hfEyeFzVP4J0yi4lN0Uwsi+j4G6o5p70ez8BuAKn5bBPO9
MerTapZghK0iSi/fGcd+C4o7oOLLvOyBZ8HaV3AF56JimH/Ng0a/cnVEhSkgZ0bg
SLh8SiY87j/we1uGd/GGdH/bzF/PGjRlqvNy1ZYv/cDE27xH6QFvICrf4qL1dZ9t
y+wdm1wQedMAhA==
-----END CERTIFICATE-----
Generated at Mon Apr 21 10:51:44 2025 by rpki-client