Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/57/fefb40-d14a-4c58-899b-a952dea2a651/1/UrEszH6hBoww14yVXFa5djvPO00.mft
File: UrEszH6hBoww14yVXFa5djvPO00.mft (raw, json)
Hash identifier: IxH5wOW5O9hIvbevqZnwIoSSO/1oo9z0tUXe1o5vGlQ=
Subject key identifier: EE:FE:B0:F9:F8:53:E4:B8:A9:B5:19:0A:80:3E:65:0A:A7:EE:B2:F2
Authority key identifier: 52:B1:2C:CC:7E:A1:06:8C:30:D7:8C:95:5C:56:B9:76:3B:CF:3B:4D
Certificate issuer: /CN=52b12ccc7ea1068c30d78c955c56b9763bcf3b4d
Certificate serial: 019610C4C359892EAA265BD70FE6A092272F
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/UrEszH6hBoww14yVXFa5djvPO00.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/57/fefb40-d14a-4c58-899b-a952dea2a651/1/UrEszH6hBoww14yVXFa5djvPO00.mft
Manifest number: 0821
Signing time: Mon 07 Apr 2025 15:00:52 +0000
Manifest this update: Mon 07 Apr 2025 15:00:52 +0000
Manifest next update: Tue 08 Apr 2025 15:00:52 +0000
Files and hashes: 1: DHimsh5cf4B1cEow5B0sOoa89ZU.roa (hash: 4QGyiwHML4yioXbByOLrPfTNUUAH8+dM2e00mLX0LYc=)
2: UrEszH6hBoww14yVXFa5djvPO00.crl (hash: ttABz0wstuNBzIk0ASF2JjS29JKUswmehMaLbdzU0sA=)
3: kZrHy6O_C92bogsRpN6C84e22aM.roa (hash: J0JdPtLBeCRlUbxJ0oXF2YO76tJDIcSvEt4BcuHJUL8=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/57/fefb40-d14a-4c58-899b-a952dea2a651/1/UrEszH6hBoww14yVXFa5djvPO00.crl
rsync://rpki.ripe.net/repository/DEFAULT/57/fefb40-d14a-4c58-899b-a952dea2a651/1/UrEszH6hBoww14yVXFa5djvPO00.mft
rsync://rpki.ripe.net/repository/DEFAULT/UrEszH6hBoww14yVXFa5djvPO00.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 08 Apr 2025 14:28:50 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:10:c4:c3:59:89:2e:aa:26:5b:d7:0f:e6:a0:92:27:2f
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=52b12ccc7ea1068c30d78c955c56b9763bcf3b4d
Validity
Not Before: Apr 7 15:00:52 2025 GMT
Not After : Apr 8 15:00:52 2025 GMT
Subject: CN=eefeb0f9f853e4b8a9b5190a803e650aa7eeb2f2
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a2:19:29:e5:68:24:82:3a:51:47:79:8e:dd:bd:
e5:fa:7b:37:7c:3a:50:96:4c:63:d9:a1:10:51:38:
25:75:04:4a:f0:22:bd:fd:0d:b0:c9:2b:96:61:49:
8e:1a:5c:67:dd:b1:d7:80:17:98:d3:d6:f4:f6:80:
fc:fc:cb:a1:38:0c:76:a7:03:59:5c:56:5f:2f:45:
dd:25:b0:3b:b4:32:9b:9e:2b:42:19:ca:19:38:a5:
be:2c:59:2b:5d:3d:37:9b:67:e8:87:e0:da:af:76:
41:57:98:b8:a6:59:b6:d3:ff:24:a0:b9:9b:d0:50:
6f:47:9f:d9:41:dd:d7:fa:0b:1e:4d:aa:42:bb:61:
f9:bd:80:5c:de:c5:f4:6c:bb:b8:70:eb:fe:7f:fa:
b1:5e:20:b9:d0:45:36:da:65:15:0b:dd:1a:4d:24:
96:85:fb:39:1d:f2:76:27:87:18:32:48:6a:e7:12:
b5:b5:76:b9:03:7f:9b:7c:c3:9e:ed:ad:22:a7:24:
a5:11:fc:6f:19:60:ff:db:3a:ad:fc:3c:f2:11:c7:
ba:9a:70:97:8d:fc:87:e1:bd:4a:7a:2e:71:61:d0:
25:b5:53:87:9a:94:97:8e:86:69:a8:6c:d2:15:39:
08:32:62:bb:fe:3a:72:48:db:26:8c:e3:73:5d:1e:
8c:51
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
EE:FE:B0:F9:F8:53:E4:B8:A9:B5:19:0A:80:3E:65:0A:A7:EE:B2:F2
X509v3 Authority Key Identifier:
keyid:52:B1:2C:CC:7E:A1:06:8C:30:D7:8C:95:5C:56:B9:76:3B:CF:3B:4D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/UrEszH6hBoww14yVXFa5djvPO00.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/57/fefb40-d14a-4c58-899b-a952dea2a651/1/UrEszH6hBoww14yVXFa5djvPO00.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/57/fefb40-d14a-4c58-899b-a952dea2a651/1/UrEszH6hBoww14yVXFa5djvPO00.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
bd:44:bc:dc:d8:fc:1e:2c:12:43:6d:72:bd:86:db:24:41:f1:
0f:f9:5c:b6:bb:57:ec:72:bc:d3:98:7c:7d:d5:06:8b:27:4e:
0b:5b:1a:28:3c:3d:1c:05:a8:d3:29:b3:0d:99:5c:1a:4e:61:
5b:fb:68:e7:c0:4f:35:57:cd:a4:73:1f:a2:24:0f:ca:20:6e:
7a:75:16:94:48:0e:74:8f:67:c7:ee:7e:34:e1:03:3d:02:44:
55:df:9c:4b:33:86:f4:71:36:81:79:d5:e2:22:fa:42:f9:83:
38:0f:20:bc:b0:94:44:55:75:b3:9c:b0:bc:1d:ba:c6:f2:2d:
3a:a1:61:73:77:6b:46:43:16:41:56:a2:51:0d:19:0f:42:fb:
84:67:75:e4:61:70:b1:6c:ab:5d:6a:00:1b:27:45:d0:8a:81:
e0:67:3c:56:96:f3:5a:a7:e3:b7:5a:76:cf:f6:b5:95:6b:42:
fc:ec:02:28:2d:1c:e6:a7:8a:71:c6:2b:87:8d:53:a6:18:96:
d4:2a:f6:28:42:9a:41:d2:b8:af:7f:26:41:4e:fe:63:6c:35:
c9:a1:38:19:f2:eb:27:2c:08:3d:29:4c:20:4f:f0:bc:d2:8f:
a7:7a:37:4a:d6:b9:ae:37:78:44:48:c3:fd:c2:71:23:bd:ea:
87:9e:b3:e6
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Apr 8 00:03:32 2025 by rpki-client