Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/5e/dd981d-e1f5-4837-9027-c9bf55d9d1ba/1/U8dzEuDSzshFoEYThF-KG-Jjw5k.mft
File: U8dzEuDSzshFoEYThF-KG-Jjw5k.mft (raw, json)
Hash identifier: 2PUG7kwe/29ZGnjzOFUDDD8Tt6WRBuQjzw1FeK4Zw6c=
Subject key identifier: 58:6F:01:7A:BA:BD:C6:44:E8:F8:A4:42:71:4C:A0:10:47:2B:C0:9C
Authority key identifier: 53:C7:73:12:E0:D2:CE:C8:45:A0:46:13:84:5F:8A:1B:E2:63:C3:99
Certificate issuer: /CN=53c77312e0d2cec845a04613845f8a1be263c399
Certificate serial: 01964DEBF0D27C07BD73BB2ACADB21075D25
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/U8dzEuDSzshFoEYThF-KG-Jjw5k.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/5e/dd981d-e1f5-4837-9027-c9bf55d9d1ba/1/U8dzEuDSzshFoEYThF-KG-Jjw5k.mft
Manifest number: 14FA
Signing time: Sat 19 Apr 2025 12:00:30 +0000
Manifest this update: Sat 19 Apr 2025 12:00:30 +0000
Manifest next update: Sun 20 Apr 2025 12:00:30 +0000
Files and hashes: 1: RJUXqZbym2ishJcHOLCYIF0YjN0.roa (hash: mDH4mu8jxseWgzZZaCZaysAEEMBUpOt419o1jwjwG7Q=)
2: U8dzEuDSzshFoEYThF-KG-Jjw5k.crl (hash: HKUwU1dYUYkHW30a1JYgm/nCqskCnb8xnRZW3B9Okno=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/5e/dd981d-e1f5-4837-9027-c9bf55d9d1ba/1/U8dzEuDSzshFoEYThF-KG-Jjw5k.crl
rsync://rpki.ripe.net/repository/DEFAULT/5e/dd981d-e1f5-4837-9027-c9bf55d9d1ba/1/U8dzEuDSzshFoEYThF-KG-Jjw5k.mft
rsync://rpki.ripe.net/repository/DEFAULT/U8dzEuDSzshFoEYThF-KG-Jjw5k.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 20 Apr 2025 07:26:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:4d:eb:f0:d2:7c:07:bd:73:bb:2a:ca:db:21:07:5d:25
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=53c77312e0d2cec845a04613845f8a1be263c399
Validity
Not Before: Apr 19 12:00:30 2025 GMT
Not After : Apr 20 12:00:30 2025 GMT
Subject: CN=586f017ababdc644e8f8a442714ca010472bc09c
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c5:cd:3a:f3:36:90:dd:52:89:55:c2:59:59:4f:
14:8e:eb:8b:de:61:13:4b:64:67:4c:bc:cc:93:42:
1c:72:f0:27:66:9f:22:60:35:65:51:e1:39:2b:5f:
e8:d8:56:e7:5b:94:c6:d6:76:fe:14:60:fa:20:74:
34:87:9e:92:70:9b:d6:7b:8f:9e:15:37:e3:73:20:
4f:9a:1e:59:92:52:8a:78:c7:03:6c:bc:e4:c0:3e:
3e:99:71:84:9f:47:4d:b6:9e:aa:a1:e7:5d:97:a8:
e2:50:4d:04:28:6d:62:d6:01:39:01:6c:a4:d0:8a:
75:b5:52:03:43:c2:50:19:73:be:64:b3:54:af:0b:
5f:dc:cd:ec:47:99:d6:b2:86:02:14:79:d7:a4:b2:
4a:02:18:2d:b2:39:6d:7a:90:f5:2f:57:f1:46:ee:
61:c5:af:c5:93:f5:e7:e7:5c:07:e7:59:82:55:ec:
de:5f:de:01:9b:15:1f:6a:ac:a7:53:2d:50:fb:f2:
73:51:a4:0b:7c:7a:0a:8d:fc:ed:cd:ec:59:3f:44:
29:43:71:fe:c7:92:19:c2:df:39:61:95:6e:d7:49:
b2:75:83:86:13:c0:c4:47:72:b8:ed:ca:86:8c:58:
fe:6c:75:eb:c6:0d:34:57:9a:82:53:fa:a0:70:29:
98:6d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
58:6F:01:7A:BA:BD:C6:44:E8:F8:A4:42:71:4C:A0:10:47:2B:C0:9C
X509v3 Authority Key Identifier:
keyid:53:C7:73:12:E0:D2:CE:C8:45:A0:46:13:84:5F:8A:1B:E2:63:C3:99
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/U8dzEuDSzshFoEYThF-KG-Jjw5k.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5e/dd981d-e1f5-4837-9027-c9bf55d9d1ba/1/U8dzEuDSzshFoEYThF-KG-Jjw5k.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/5e/dd981d-e1f5-4837-9027-c9bf55d9d1ba/1/U8dzEuDSzshFoEYThF-KG-Jjw5k.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
84:30:1d:a1:b2:42:15:f1:0f:e4:46:38:75:2d:7a:97:ad:26:
c4:05:c8:87:a0:27:de:31:e1:3f:9b:4b:2a:58:d3:63:8a:cd:
91:55:c2:dc:e2:89:fb:80:34:4f:82:50:a4:b6:be:0b:92:dc:
0b:06:80:3c:99:5c:e3:4a:43:78:d1:bd:c9:36:74:a7:83:42:
62:ab:a1:ea:e0:41:79:57:71:d0:40:e8:33:63:3d:3c:d7:f5:
aa:cf:cb:6f:68:28:d4:5f:c8:86:2b:e9:23:39:90:a9:22:d6:
cf:78:89:2d:e9:f2:9d:a1:53:7a:27:86:d6:04:83:9c:da:0d:
59:e1:15:1b:f5:21:1a:d3:a2:83:83:1f:8a:b6:b7:e0:a3:78:
82:aa:2b:b0:fb:46:98:74:fd:1f:c1:95:03:02:95:79:06:6a:
0a:f1:5b:7f:4d:5e:fd:18:70:ea:e5:76:65:b8:92:eb:d3:23:
fc:f5:d1:0b:07:7f:aa:54:92:7f:c2:31:0e:e6:3c:e6:6b:ce:
98:f1:b1:3e:f9:0e:02:3d:78:d7:f6:0e:ee:bc:ba:22:f7:7f:
9c:52:c9:24:e6:86:c7:e4:ad:6a:e8:ad:a7:eb:86:ba:73:26:
ce:ee:f0:59:82:f6:d8:a9:74:4b:79:bf:34:22:2d:ea:3e:bd:
1d:3d:26:0b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 19 15:15:48 2025 by rpki-client