Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/53/3394c0-4587-444e-9a25-00ecf0c4d0ef/1/U7u7qj7iTHrZssYEMuFO2jhJteI.mft
File: U7u7qj7iTHrZssYEMuFO2jhJteI.mft (raw, json)
Hash identifier: 92HyH0Y9/J8JYjxB0YtcPt6apEc5luEIaIQZaQB1/wE=
Subject key identifier: 14:37:82:97:0E:52:3E:C1:C7:EE:78:55:C5:6B:AD:AC:C0:38:41:39
Authority key identifier: 53:BB:BB:AA:3E:E2:4C:7A:D9:B2:C6:04:32:E1:4E:DA:38:49:B5:E2
Certificate issuer: /CN=53bbbbaa3ee24c7ad9b2c60432e14eda3849b5e2
Certificate serial: 01963B40E048F997183655716B20B8B23315
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/U7u7qj7iTHrZssYEMuFO2jhJteI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/53/3394c0-4587-444e-9a25-00ecf0c4d0ef/1/U7u7qj7iTHrZssYEMuFO2jhJteI.mft
Manifest number: 0AE0
Signing time: Tue 15 Apr 2025 21:00:29 +0000
Manifest this update: Tue 15 Apr 2025 21:00:29 +0000
Manifest next update: Wed 16 Apr 2025 21:00:29 +0000
Files and hashes: 1: FxGYM_hv02AaXIYDo9H_3KmDiOE.roa (hash: ilnjKiRicNaYKGwZAGueokd7ASW/oQ+K5C8wA/h2Pvw=)
2: QAlZxJpPNS1rmQL4HuNAcE7lmik.roa (hash: S0+MsekOjpK1fn9TgliC/Ks4ugN2LoEukjLPMsOlGQY=)
3: U7u7qj7iTHrZssYEMuFO2jhJteI.crl (hash: ZwDfm75VGZqXdEurnqeKDoCSfShyGpAxFGV0devBtgc=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/53/3394c0-4587-444e-9a25-00ecf0c4d0ef/1/U7u7qj7iTHrZssYEMuFO2jhJteI.crl
rsync://rpki.ripe.net/repository/DEFAULT/53/3394c0-4587-444e-9a25-00ecf0c4d0ef/1/U7u7qj7iTHrZssYEMuFO2jhJteI.mft
rsync://rpki.ripe.net/repository/DEFAULT/U7u7qj7iTHrZssYEMuFO2jhJteI.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 16 Apr 2025 21:00:29 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:3b:40:e0:48:f9:97:18:36:55:71:6b:20:b8:b2:33:15
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=53bbbbaa3ee24c7ad9b2c60432e14eda3849b5e2
Validity
Not Before: Apr 15 21:00:29 2025 GMT
Not After : Apr 16 21:00:29 2025 GMT
Subject: CN=143782970e523ec1c7ee7855c56badacc0384139
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d4:71:c5:93:e6:0d:55:e6:50:53:a3:c0:db:02:
34:2d:da:27:5e:f9:30:32:1d:18:4f:ba:26:b5:2b:
fe:ef:12:ef:3c:bb:e8:f3:2c:18:1f:03:e7:77:1e:
ab:f3:db:59:7c:db:8f:8d:ec:4f:7c:50:23:25:ca:
cf:1d:d9:45:c6:83:bd:04:4e:d6:e1:0c:21:a1:f6:
21:f1:c5:3f:4d:f4:41:56:05:a0:09:a1:40:17:bb:
19:8c:c3:c5:fd:e3:22:96:70:11:c9:3c:b9:39:56:
f7:94:b7:1b:e2:18:e6:0b:f8:50:ce:18:ad:c4:24:
38:c8:89:20:2d:38:d6:3e:05:6c:54:36:4c:08:30:
45:56:6b:c7:83:a9:00:09:b4:b3:ae:52:94:ec:92:
94:44:0c:a9:6b:b5:14:d9:6e:1f:25:39:2f:a5:e3:
9c:21:74:01:5b:4c:79:0f:2d:ff:b7:b7:72:74:6e:
ad:ef:54:23:6c:05:43:e2:d2:69:0f:71:5e:3c:14:
9d:d4:16:25:3d:db:d4:aa:17:c9:01:89:bc:15:61:
75:b8:f3:e9:14:00:c1:2c:20:1a:48:e4:c5:ab:d7:
04:e9:1f:a1:62:9b:a8:e4:3e:21:70:2f:72:18:1f:
c2:e2:b2:2c:4e:6e:f0:02:f4:3a:4f:2d:cb:05:a7:
fa:f1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
14:37:82:97:0E:52:3E:C1:C7:EE:78:55:C5:6B:AD:AC:C0:38:41:39
X509v3 Authority Key Identifier:
keyid:53:BB:BB:AA:3E:E2:4C:7A:D9:B2:C6:04:32:E1:4E:DA:38:49:B5:E2
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/U7u7qj7iTHrZssYEMuFO2jhJteI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/53/3394c0-4587-444e-9a25-00ecf0c4d0ef/1/U7u7qj7iTHrZssYEMuFO2jhJteI.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/53/3394c0-4587-444e-9a25-00ecf0c4d0ef/1/U7u7qj7iTHrZssYEMuFO2jhJteI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
14:fb:93:69:15:40:98:cb:55:75:1f:6e:32:61:91:60:50:27:
71:14:9f:41:ea:d9:d1:98:be:e6:cb:cb:1d:64:47:7f:84:a4:
47:01:70:50:53:f2:c5:77:3c:41:17:43:5e:49:fb:0e:33:ae:
73:0b:f1:44:52:68:64:98:9e:70:d6:8a:72:db:c6:85:fb:82:
00:b6:a7:73:c5:21:7e:14:6c:01:2d:7a:48:38:3a:b1:d6:55:
41:d9:30:81:ab:89:5b:ed:72:a6:cd:8f:b1:20:49:33:eb:65:
56:db:08:8c:96:cb:3f:80:b8:9e:7d:8e:9b:9c:44:62:c0:60:
a2:23:16:0b:6a:4b:f4:82:fc:c4:43:28:d3:27:79:4e:83:41:
a4:11:59:9e:02:dd:2a:f1:cc:f0:71:20:f2:58:2b:c5:46:90:
63:7f:40:0f:27:82:36:ad:98:20:b2:86:45:d8:f6:c8:53:8c:
9b:65:60:79:09:11:93:d7:85:e5:7a:47:ee:b2:40:3f:97:e5:
c7:de:99:6f:26:26:a8:22:5f:47:ce:13:b9:96:20:ca:a3:3e:
43:b9:b8:3d:49:9e:8f:4e:63:1e:d0:ae:74:0e:78:e7:42:40:
a8:1f:ce:4c:24:94:81:1a:da:da:50:35:cd:de:ec:c2:05:1e:
4a:4c:14:a2
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZY7QOBI+ZcYNlVxayC4sjMVMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDUzYmJiYmFhM2VlMjRjN2FkOWIyYzYwNDMyZTE0ZWRhMzg0
OWI1ZTIwHhcNMjUwNDE1MjEwMDI5WhcNMjUwNDE2MjEwMDI5WjAzMTEwLwYDVQQD
EygxNDM3ODI5NzBlNTIzZWMxYzdlZTc4NTVjNTZiYWRhY2MwMzg0MTM5MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA1HHFk+YNVeZQU6PA2wI0LdonXvkw
Mh0YT7omtSv+7xLvPLvo8ywYHwPndx6r89tZfNuPjexPfFAjJcrPHdlFxoO9BE7W
4QwhofYh8cU/TfRBVgWgCaFAF7sZjMPF/eMilnARyTy5OVb3lLcb4hjmC/hQzhit
xCQ4yIkgLTjWPgVsVDZMCDBFVmvHg6kACbSzrlKU7JKURAypa7UU2W4fJTkvpeOc
IXQBW0x5Dy3/t7dydG6t71QjbAVD4tJpD3FePBSd1BYlPdvUqhfJAYm8FWF1uPPp
FADBLCAaSOTFq9cE6R+hYpuo5D4hcC9yGB/C4rIsTm7wAvQ6Ty3LBaf68QIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFBQ3gpcOUj7Bx+54VcVrrazAOEE5MB8GA1UdIwQY
MBaAFFO7u6o+4kx62bLGBDLhTto4SbXiMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvVTd1N3FqN2lUSHJac3NZRU11Rk8yamhKdGVJLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC81My8zMzk0YzAtNDU4Ny00NDRlLTlhMjUt
MDBlY2YwYzRkMGVmLzEvVTd1N3FqN2lUSHJac3NZRU11Rk8yamhKdGVJLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC81My8zMzk0YzAtNDU4Ny00NDRlLTlhMjUtMDBlY2YwYzRkMGVm
LzEvVTd1N3FqN2lUSHJac3NZRU11Rk8yamhKdGVJLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAFPuTaRVA
mMtVdR9uMmGRYFAncRSfQerZ0Zi+5svLHWRHf4SkRwFwUFPyxXc8QRdDXkn7DjOu
cwvxRFJoZJiecNaKctvGhfuCALanc8UhfhRsAS16SDg6sdZVQdkwgauJW+1yps2P
sSBJM+tlVtsIjJbLP4C4nn2Om5xEYsBgoiMWC2pL9IL8xEMo0yd5ToNBpBFZngLd
KvHM8HEg8lgrxUaQY39ADyeCNq2YILKGRdj2yFOMm2VgeQkRk9eF5XpH7rJAP5fl
x96ZbyYmqCJfR84TuZYgyqM+Q7m4PUmej05jHtCudA5450JAqB/OTCSUgRra2lA1
zd7swgUeSkwUog==
-----END CERTIFICATE-----
Generated at Wed Apr 16 05:40:45 2025 by rpki-client