Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e8/af5657-c8b2-4855-82a7-1dd57e3f3d97/1/U1UECuknhr8XJ7a07MEJO4p0Aes.mft
File: U1UECuknhr8XJ7a07MEJO4p0Aes.mft (raw, json)
Hash identifier: f+Pxei+GKX7EAHTFCO4nqyZZFNx8uxrz7qJyM9jNmUE=
Subject key identifier: B4:F1:58:FF:70:B1:99:2A:9A:51:FD:C9:16:BE:8E:36:3F:29:AA:74
Authority key identifier: 53:55:04:0A:E9:27:86:BF:17:27:B6:B4:EC:C1:09:3B:8A:74:01:EB
Certificate issuer: /CN=5355040ae92786bf1727b6b4ecc1093b8a7401eb
Certificate serial: 01964A463CB9F0AA17973807F7F2CE255C5E
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/U1UECuknhr8XJ7a07MEJO4p0Aes.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/e8/af5657-c8b2-4855-82a7-1dd57e3f3d97/1/U1UECuknhr8XJ7a07MEJO4p0Aes.mft
Manifest number: 095B
Signing time: Fri 18 Apr 2025 19:00:39 +0000
Manifest this update: Fri 18 Apr 2025 19:00:39 +0000
Manifest next update: Sat 19 Apr 2025 19:00:39 +0000
Files and hashes: 1: GBm75ZmZioJB2ocCMhAt7gwcAjo.roa (hash: gsh5fLNtNPH78sBeeVxRzXrv6jA9hVTz/xvnQZtNCkc=)
2: U1UECuknhr8XJ7a07MEJO4p0Aes.crl (hash: lFmrtbRfKTKROvU9Sq/mZUELyJMgpsy6sdTqqBDvxho=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/e8/af5657-c8b2-4855-82a7-1dd57e3f3d97/1/U1UECuknhr8XJ7a07MEJO4p0Aes.crl
rsync://rpki.ripe.net/repository/DEFAULT/e8/af5657-c8b2-4855-82a7-1dd57e3f3d97/1/U1UECuknhr8XJ7a07MEJO4p0Aes.mft
rsync://rpki.ripe.net/repository/DEFAULT/U1UECuknhr8XJ7a07MEJO4p0Aes.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 19 Apr 2025 19:00:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:4a:46:3c:b9:f0:aa:17:97:38:07:f7:f2:ce:25:5c:5e
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=5355040ae92786bf1727b6b4ecc1093b8a7401eb
Validity
Not Before: Apr 18 19:00:39 2025 GMT
Not After : Apr 19 19:00:39 2025 GMT
Subject: CN=b4f158ff70b1992a9a51fdc916be8e363f29aa74
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c8:66:94:2d:06:9e:17:3c:51:60:4e:21:fd:5e:
05:a0:8f:7e:16:cf:24:ea:a3:51:47:1d:da:2a:c4:
33:39:2f:f3:8e:4d:40:e0:e3:08:cb:84:6f:ab:3d:
76:b3:27:c7:39:1b:e4:2d:a5:0f:fa:ef:e6:24:72:
56:fe:bc:db:16:96:97:c6:b6:8f:a2:76:61:81:fd:
b1:c6:06:38:e6:df:d5:cb:18:ae:67:4b:fe:ff:4f:
26:34:5e:2f:50:64:67:52:e1:d8:b0:cd:a6:eb:6a:
68:d9:f7:cb:7f:7f:bf:50:92:e5:ef:59:fc:1a:a9:
dd:c2:8a:8c:a1:54:ed:c7:0c:9a:4f:eb:69:2f:09:
1c:c5:60:09:02:2d:f5:85:86:a0:f2:15:9a:77:36:
77:e6:dd:80:d9:a1:16:fd:cf:7b:0e:7b:ce:14:82:
68:5b:28:d3:9e:34:43:32:80:00:66:4a:f4:e3:de:
f3:f8:fb:fd:f9:d1:a4:1a:35:87:f8:95:b0:d5:9d:
ab:0a:f1:18:d0:0c:1c:c6:bc:3f:02:fb:4a:08:34:
dd:f8:40:6d:7b:56:6c:74:3f:63:6e:ec:7e:19:7d:
ac:06:cf:cc:46:61:b7:40:22:92:13:52:e0:cf:95:
bf:6c:74:a7:6b:29:7c:b6:fa:e9:77:90:3e:06:b5:
38:e5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B4:F1:58:FF:70:B1:99:2A:9A:51:FD:C9:16:BE:8E:36:3F:29:AA:74
X509v3 Authority Key Identifier:
keyid:53:55:04:0A:E9:27:86:BF:17:27:B6:B4:EC:C1:09:3B:8A:74:01:EB
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/U1UECuknhr8XJ7a07MEJO4p0Aes.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e8/af5657-c8b2-4855-82a7-1dd57e3f3d97/1/U1UECuknhr8XJ7a07MEJO4p0Aes.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/e8/af5657-c8b2-4855-82a7-1dd57e3f3d97/1/U1UECuknhr8XJ7a07MEJO4p0Aes.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
28:29:bb:3f:17:dd:ee:60:e9:d8:62:55:24:da:b8:2f:c8:d7:
e5:3f:cf:18:8a:3f:10:ae:e8:ca:e6:71:c9:f6:7a:87:d6:d1:
07:25:9c:74:54:9f:0b:0e:eb:f6:96:48:03:4b:9d:7c:37:36:
e4:de:81:4e:ce:89:dd:80:d1:b8:f4:99:44:0f:b7:99:57:9c:
62:22:52:df:ac:ae:4a:59:a2:89:9c:1d:c9:49:ae:87:9f:47:
6b:7b:46:1e:b6:c0:ae:d1:0d:8c:79:a8:c3:05:a8:0d:d2:f8:
0f:e2:ba:7b:f4:7a:28:52:36:36:7a:4e:df:53:d6:df:b5:ba:
1c:02:1a:d2:95:f6:e3:8e:00:bf:44:1e:5b:f4:b9:42:fb:56:
5b:b5:2e:9d:0c:2b:2f:39:df:85:bf:75:68:a9:eb:37:0d:68:
99:53:c2:3f:d2:c3:d2:98:19:fb:c1:a1:9b:ff:14:15:f3:7f:
f9:95:e1:c1:b3:fe:99:be:f4:09:b2:af:83:4d:07:80:44:d2:
e8:26:32:f9:e2:22:2f:72:c8:a0:bf:74:94:dc:b0:f5:18:51:
e8:ed:8e:f6:16:13:91:17:71:90:f1:19:a1:0d:1d:19:c5:dd:
7e:44:22:bd:48:95:41:ee:ef:ba:ff:e7:d6:0c:19:b6:bf:3e:
23:f8:fc:12
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 19 00:42:34 2025 by rpki-client