Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/15/decaeb-3f95-4f2a-af65-0c020a7e4a44/1/Us7uLW16UMkkmdoaIfKrt6KndMg.mft
File: Us7uLW16UMkkmdoaIfKrt6KndMg.mft (raw, json)
Hash identifier: 72tDV2rME5gqjndGvoo1HhJG93xabgamuFvBLtZREyA=
Subject key identifier: 70:40:DE:AB:70:63:A1:55:42:63:9C:CD:49:81:CF:7A:84:38:6D:CB
Authority key identifier: 52:CE:EE:2D:6D:7A:50:C9:24:99:DA:1A:21:F2:AB:B7:A2:A7:74:C8
Certificate issuer: /CN=52ceee2d6d7a50c92499da1a21f2abb7a2a774c8
Certificate serial: 019644E8B0FA499E7D81D9CE9371AD710958
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Us7uLW16UMkkmdoaIfKrt6KndMg.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/15/decaeb-3f95-4f2a-af65-0c020a7e4a44/1/Us7uLW16UMkkmdoaIfKrt6KndMg.mft
Manifest number: 0993
Signing time: Thu 17 Apr 2025 18:00:22 +0000
Manifest this update: Thu 17 Apr 2025 18:00:22 +0000
Manifest next update: Fri 18 Apr 2025 18:00:22 +0000
Files and hashes: 1: HgzDmPqeZBdX21PHNQn3j0-FDSk.roa (hash: jL+abeK7Dj613IZkXcAHwX1ldRNUAWLyPE0MF0XmQTs=)
2: JmahROWNlzzWLOhj6faRjwc1jmM.roa (hash: 8En7I8LLB7AUar/hMjwx3dkXSNApjPuQ8H4paRvFqeg=)
3: Us7uLW16UMkkmdoaIfKrt6KndMg.crl (hash: 1K0tIH8Na6yosSOILA3fiamyO0Qz3EAnkuqev46bfLE=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/15/decaeb-3f95-4f2a-af65-0c020a7e4a44/1/Us7uLW16UMkkmdoaIfKrt6KndMg.crl
rsync://rpki.ripe.net/repository/DEFAULT/15/decaeb-3f95-4f2a-af65-0c020a7e4a44/1/Us7uLW16UMkkmdoaIfKrt6KndMg.mft
rsync://rpki.ripe.net/repository/DEFAULT/Us7uLW16UMkkmdoaIfKrt6KndMg.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 18 Apr 2025 16:00:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:44:e8:b0:fa:49:9e:7d:81:d9:ce:93:71:ad:71:09:58
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=52ceee2d6d7a50c92499da1a21f2abb7a2a774c8
Validity
Not Before: Apr 17 18:00:22 2025 GMT
Not After : Apr 18 18:00:22 2025 GMT
Subject: CN=7040deab7063a15542639ccd4981cf7a84386dcb
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a1:ca:cc:80:bc:44:3f:a7:29:27:58:e9:21:82:
0e:07:55:42:6b:bd:f0:76:d1:91:25:88:12:5a:27:
cf:27:2a:52:5d:5b:ea:7e:f1:32:da:7d:c8:93:65:
d4:42:35:18:ac:df:00:85:51:3b:ac:af:a3:11:97:
b2:2c:74:80:28:8c:3d:6b:77:37:27:13:b2:94:cb:
42:26:85:c8:6a:a0:6d:e8:c3:bb:5f:f1:ce:27:38:
ee:49:59:ba:01:46:29:84:29:9c:d8:6e:a3:9a:7b:
d3:31:9b:6b:1a:49:de:b3:ac:7c:d1:43:32:ba:38:
8a:35:2b:35:48:96:83:40:d2:2e:3b:77:8e:c6:6b:
c7:f9:18:da:96:b7:ff:ed:3f:33:8d:7c:a7:56:ed:
a1:72:c6:17:2f:12:b6:39:e3:7e:94:3e:51:95:08:
1e:0f:68:93:a3:2d:df:4e:52:33:67:56:cf:23:84:
53:87:49:9d:c8:91:fa:fd:44:e9:97:b8:f2:1e:3a:
61:92:fe:20:3e:50:29:75:98:62:d8:75:84:cf:80:
29:23:f2:12:a4:10:d1:0e:76:8a:83:da:ce:17:68:
ef:cb:0a:cb:df:5c:57:6a:5b:1e:c4:22:2f:09:16:
19:e0:ec:23:35:30:42:7f:d0:e0:d0:65:22:eb:7b:
ca:7b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
70:40:DE:AB:70:63:A1:55:42:63:9C:CD:49:81:CF:7A:84:38:6D:CB
X509v3 Authority Key Identifier:
keyid:52:CE:EE:2D:6D:7A:50:C9:24:99:DA:1A:21:F2:AB:B7:A2:A7:74:C8
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Us7uLW16UMkkmdoaIfKrt6KndMg.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/15/decaeb-3f95-4f2a-af65-0c020a7e4a44/1/Us7uLW16UMkkmdoaIfKrt6KndMg.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/15/decaeb-3f95-4f2a-af65-0c020a7e4a44/1/Us7uLW16UMkkmdoaIfKrt6KndMg.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
77:a0:7f:86:ab:96:e2:fe:8f:c5:94:59:6f:37:a9:18:1c:37:
e5:0c:be:b3:be:a2:8d:39:bb:de:cf:f4:36:84:64:97:de:b0:
ed:99:6a:18:a4:6d:62:c0:34:ad:7d:41:0c:2d:25:75:9d:b5:
1a:c7:bd:c2:93:c0:36:8d:df:99:f4:4b:cb:a7:4b:d7:99:58:
1c:9c:05:79:26:1d:f0:51:c7:89:72:07:be:e3:d5:35:7d:ee:
ca:2b:b3:84:3c:97:31:d2:91:65:f3:07:e4:d5:ff:1f:11:3b:
a1:00:91:b9:3a:cd:de:5f:0b:f6:f8:7d:22:83:0b:36:38:71:
ee:1a:a5:c1:5a:83:62:5e:53:f0:de:7a:e3:6d:3e:0c:8f:1b:
1f:25:b5:f9:a3:ba:0d:b0:0d:cc:1d:e1:31:3b:36:10:2b:09:
8a:cb:7b:7d:36:c6:7f:5b:bc:29:5d:90:e3:f2:60:e0:53:76:
d1:b9:c9:49:05:07:cd:13:b9:57:63:65:fa:82:fe:a6:80:3f:
06:69:2c:c2:a6:58:20:5e:0c:c6:41:d8:af:16:b8:84:5b:e6:
ee:ae:3c:0d:23:10:a2:e6:24:f7:6d:a9:95:8d:70:3a:da:f7:
d3:f6:ff:b7:c8:d0:20:dc:b0:e4:c3:92:73:43:e3:64:c6:e0:
bf:3c:b3:92
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Apr 17 23:47:09 2025 by rpki-client