Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/79/4c0413-ce81-4dc8-8a4d-a70eee3db5e5/1/U0lylWvf-DsNiB4Br9PWxSZR4Es.mft
File: U0lylWvf-DsNiB4Br9PWxSZR4Es.mft (raw, json)
Hash identifier: U+23VcR9UrVhdGznVI2SX3sawimjihhwBbFHvcxhuYk=
Subject key identifier: 52:8A:34:D3:BD:24:B8:F3:5B:3B:44:65:69:0C:67:F6:1E:47:26:6D
Authority key identifier: 53:49:72:95:6B:DF:F8:3B:0D:88:1E:01:AF:D3:D6:C5:26:51:E0:4B
Certificate issuer: /CN=534972956bdff83b0d881e01afd3d6c52651e04b
Certificate serial: 01964331D746023FA539A1C4FCE0F37BF833
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/U0lylWvf-DsNiB4Br9PWxSZR4Es.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/79/4c0413-ce81-4dc8-8a4d-a70eee3db5e5/1/U0lylWvf-DsNiB4Br9PWxSZR4Es.mft
Manifest number: 05A3
Signing time: Thu 17 Apr 2025 10:01:01 +0000
Manifest this update: Thu 17 Apr 2025 10:01:01 +0000
Manifest next update: Fri 18 Apr 2025 10:01:01 +0000
Files and hashes: 1: U0lylWvf-DsNiB4Br9PWxSZR4Es.crl (hash: 85dkwweud0MS6VawliSOf5VRXI1rVwTdqdZrIbBFE0M=)
2: gB1MwA1mtIVkiFQ2EqzsfbYOK18.roa (hash: xnYJIQNoCXwxomDZp5xDNLGopiNTka87rzFXVihnDvs=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/79/4c0413-ce81-4dc8-8a4d-a70eee3db5e5/1/U0lylWvf-DsNiB4Br9PWxSZR4Es.crl
rsync://rpki.ripe.net/repository/DEFAULT/79/4c0413-ce81-4dc8-8a4d-a70eee3db5e5/1/U0lylWvf-DsNiB4Br9PWxSZR4Es.mft
rsync://rpki.ripe.net/repository/DEFAULT/U0lylWvf-DsNiB4Br9PWxSZR4Es.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 18 Apr 2025 10:01:01 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:43:31:d7:46:02:3f:a5:39:a1:c4:fc:e0:f3:7b:f8:33
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=534972956bdff83b0d881e01afd3d6c52651e04b
Validity
Not Before: Apr 17 10:01:01 2025 GMT
Not After : Apr 18 10:01:01 2025 GMT
Subject: CN=528a34d3bd24b8f35b3b4465690c67f61e47266d
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cc:aa:b4:67:ed:31:c6:79:8c:e0:15:45:f5:57:
87:f3:07:bf:a6:bb:43:4b:ac:0f:46:b9:91:c3:e8:
25:a4:3d:65:bf:13:53:f7:c0:07:48:66:3e:e6:64:
33:89:e2:1b:8b:5b:40:53:36:4c:48:05:fc:73:fe:
5e:f0:f9:ce:a1:e1:ed:a0:30:e9:44:40:f0:84:14:
53:5e:db:ad:d6:60:42:e3:08:20:d6:22:88:78:53:
79:ff:8a:13:ed:02:77:b8:d2:7c:ca:62:3a:48:54:
a1:76:62:06:2e:cc:6e:2f:1d:cf:6a:9b:29:ab:89:
73:0a:cd:f3:c3:cb:69:8d:ab:a0:49:a5:76:00:86:
e0:8c:3f:6f:14:7c:9f:49:d0:4e:39:c1:f7:2c:72:
b2:f2:48:6d:ac:c8:74:d3:df:e0:ab:a7:4c:63:06:
ff:7c:0b:06:64:d9:06:17:11:8b:68:92:b7:ed:b4:
6d:1f:9a:10:34:b3:eb:e9:21:ba:b0:9f:2a:10:31:
29:8f:e0:d1:fd:4d:25:f2:7c:23:b7:f3:83:a1:ec:
f7:d8:00:91:8d:8a:38:3f:19:1f:41:a7:bf:ea:ff:
d1:e4:03:b5:0d:72:f0:90:cb:ad:8c:c8:74:ef:bc:
79:b6:ac:d1:19:17:7a:f7:78:84:c7:da:e9:61:b9:
d6:93
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
52:8A:34:D3:BD:24:B8:F3:5B:3B:44:65:69:0C:67:F6:1E:47:26:6D
X509v3 Authority Key Identifier:
keyid:53:49:72:95:6B:DF:F8:3B:0D:88:1E:01:AF:D3:D6:C5:26:51:E0:4B
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/U0lylWvf-DsNiB4Br9PWxSZR4Es.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/79/4c0413-ce81-4dc8-8a4d-a70eee3db5e5/1/U0lylWvf-DsNiB4Br9PWxSZR4Es.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/79/4c0413-ce81-4dc8-8a4d-a70eee3db5e5/1/U0lylWvf-DsNiB4Br9PWxSZR4Es.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
a0:f4:13:73:ea:2b:b6:99:ff:26:23:6e:26:8c:99:35:18:e2:
19:43:a3:a0:08:41:3f:7b:0d:80:08:95:70:dd:f3:5c:3c:6b:
b2:8c:94:a7:3f:00:76:df:c7:8c:2a:11:fa:91:86:6a:1b:ba:
6f:ce:1b:13:cc:77:fe:4b:12:ae:fb:a7:a3:82:3f:d3:1b:e5:
d4:f1:e5:c8:2b:fd:54:3c:d5:4a:d3:20:d5:91:71:c4:09:aa:
3a:02:8b:25:99:2e:ed:a1:95:50:49:fc:e0:31:ec:ca:e9:11:
ec:a9:e9:bc:23:49:b7:59:95:3d:86:b6:5d:b3:db:fb:ee:1d:
6c:c7:9c:9e:31:5b:f6:f3:71:c2:1e:ae:c0:9d:62:4d:b3:12:
cb:c0:73:1a:a3:7c:f7:62:69:ad:e8:03:57:6a:8b:5c:5f:be:
f5:5c:2e:f0:0e:5f:49:84:4d:a0:f7:0b:c7:29:9b:ab:72:4c:
7b:f1:42:73:98:95:ff:a3:51:a2:51:93:c5:fe:00:4a:fc:71:
e2:62:e6:d7:1f:93:a0:73:c8:38:40:3e:76:a3:61:f5:dc:91:
62:63:db:1b:8b:33:21:c5:03:72:6a:31:52:c3:8e:65:32:cd:
25:c3:bf:ad:08:4f:e3:c3:c3:fa:53:ab:ec:6a:b9:c2:d0:cb:
bf:15:f6:49
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Apr 17 20:16:02 2025 by rpki-client