Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/14/1d8fca-b462-4313-a523-e411b43dc68a/1/U_OdLyDi2bT5bL0TN-oy2lGNjsg.mft
File: U_OdLyDi2bT5bL0TN-oy2lGNjsg.mft (raw, json)
Hash identifier: Y2I9brE2vY1ICZ3KJQd4M5uVlpWQpbWkMNJULYDYeZo=
Subject key identifier: 82:17:C3:7B:11:E0:57:27:89:E5:D6:DA:9B:03:35:73:F3:5B:78:85
Authority key identifier: 53:F3:9D:2F:20:E2:D9:B4:F9:6C:BD:13:37:EA:32:DA:51:8D:8E:C8
Certificate issuer: /CN=53f39d2f20e2d9b4f96cbd1337ea32da518d8ec8
Certificate serial: 01974C6925C28EF4421868A82DB544E64876
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/U_OdLyDi2bT5bL0TN-oy2lGNjsg.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/14/1d8fca-b462-4313-a523-e411b43dc68a/1/U_OdLyDi2bT5bL0TN-oy2lGNjsg.mft
Manifest number: 157B
Signing time: Sat 07 Jun 2025 22:00:48 +0000
Manifest this update: Sat 07 Jun 2025 22:00:48 +0000
Manifest next update: Sun 08 Jun 2025 22:00:48 +0000
Files and hashes: 1: CMb4sSALz-KpBLSc_havR1--Rcg.roa (hash: tSEX+cRvKAqr6srk3pPXDdRAbuuNHsu00QGpp8uCSYw=)
2: Lf-7J_CEiQS4b7WeR5Eaw4iyRLQ.roa (hash: 99fN5956ngv/TFkL8FxEzwLHD53MuB+d8ra8OJh/4dM=)
3: U_OdLyDi2bT5bL0TN-oy2lGNjsg.crl (hash: XDhOCeNKEd6VhZlUdV3ibXnDrYTcjNyVHviVN5yL62k=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/14/1d8fca-b462-4313-a523-e411b43dc68a/1/U_OdLyDi2bT5bL0TN-oy2lGNjsg.crl
rsync://rpki.ripe.net/repository/DEFAULT/14/1d8fca-b462-4313-a523-e411b43dc68a/1/U_OdLyDi2bT5bL0TN-oy2lGNjsg.mft
rsync://rpki.ripe.net/repository/DEFAULT/U_OdLyDi2bT5bL0TN-oy2lGNjsg.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 08 Jun 2025 18:00:17 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:4c:69:25:c2:8e:f4:42:18:68:a8:2d:b5:44:e6:48:76
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=53f39d2f20e2d9b4f96cbd1337ea32da518d8ec8
Validity
Not Before: Jun 7 22:00:48 2025 GMT
Not After : Jun 8 22:00:48 2025 GMT
Subject: CN=8217c37b11e0572789e5d6da9b033573f35b7885
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c4:a9:22:04:de:85:26:52:0e:c2:2c:a2:78:c8:
76:14:0c:88:fa:05:5b:87:0b:a9:74:47:fc:14:e0:
b0:53:b9:1e:ea:5f:b3:3e:07:db:48:c8:ce:f7:6e:
e5:dc:a6:21:1c:fc:3f:3d:ba:2b:23:d3:da:e3:76:
8a:c6:9f:55:af:aa:b0:cb:b8:ef:1b:f4:c2:cf:9e:
db:c0:08:61:25:a2:28:ba:92:52:c8:3a:c3:d6:0c:
b2:81:27:9d:42:8d:7e:f0:4b:91:72:97:c9:fb:63:
71:38:1d:7a:e0:01:5f:10:01:47:ca:b4:44:3e:55:
ca:b4:48:bc:e4:0c:39:96:d9:b0:ab:ae:ab:e2:78:
18:be:6d:b8:62:b9:67:d5:17:cb:d2:d1:bc:9c:76:
af:38:1f:c8:be:c7:5d:90:bf:2f:de:ba:22:c9:bb:
6c:ae:6b:40:c3:e7:fe:28:96:72:6b:f6:70:cd:b6:
45:00:31:b8:36:e9:31:15:37:7a:97:d1:2b:b2:50:
c3:33:40:22:e3:11:98:98:4a:15:29:95:a1:8f:a9:
ec:56:5c:c5:a9:dd:1a:2d:d7:f7:f0:e1:71:73:a4:
4e:7d:45:0d:07:9a:a0:2b:61:9e:55:ee:61:d5:11:
84:65:3f:44:57:99:37:8f:db:20:03:9d:2d:91:e0:
58:6d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
82:17:C3:7B:11:E0:57:27:89:E5:D6:DA:9B:03:35:73:F3:5B:78:85
X509v3 Authority Key Identifier:
keyid:53:F3:9D:2F:20:E2:D9:B4:F9:6C:BD:13:37:EA:32:DA:51:8D:8E:C8
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/U_OdLyDi2bT5bL0TN-oy2lGNjsg.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/14/1d8fca-b462-4313-a523-e411b43dc68a/1/U_OdLyDi2bT5bL0TN-oy2lGNjsg.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/14/1d8fca-b462-4313-a523-e411b43dc68a/1/U_OdLyDi2bT5bL0TN-oy2lGNjsg.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
0e:49:ac:14:b3:8f:41:c4:07:11:f6:5a:ec:b9:60:88:78:f6:
3f:31:27:02:55:a6:d1:04:29:62:10:88:ef:44:f0:0f:6d:06:
d7:17:6c:39:86:15:6a:f2:a5:62:17:c2:cc:26:2e:35:36:cf:
74:90:74:73:2f:a7:8b:7c:58:9e:55:ad:3e:9b:6c:e5:30:60:
e9:db:6b:67:73:ed:bc:90:18:2d:83:ff:9d:41:5c:8a:ed:ad:
47:02:f1:36:4d:b8:c2:18:00:3c:f9:eb:2c:f0:55:58:45:39:
f9:e2:7f:16:2f:94:18:a1:1e:47:93:f0:b4:a3:a4:f8:41:b4:
48:f6:1e:39:b7:5d:57:3e:88:81:1a:f4:d6:0f:99:6d:41:b6:
4a:33:d9:db:46:5c:fa:59:26:ae:9c:23:41:b9:7e:b2:9c:5c:
df:66:55:f7:e3:f5:a6:b0:a8:12:4b:70:26:56:09:76:9f:eb:
c4:98:ae:49:97:e9:06:c5:9d:45:3d:cd:de:99:89:45:f0:cf:
cd:13:bd:1f:c8:89:ee:13:2b:fe:57:22:8f:89:f3:49:5f:93:
a0:2f:f3:a3:d3:2d:3e:ef:bf:3d:4a:9c:63:9b:e1:27:79:99:
7f:83:ca:d8:00:29:5d:5d:8a:75:44:e8:6f:4d:ad:76:97:43:
23:ba:ef:a8
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jun 8 01:09:13 2025 by rpki-client