Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/a7/d8776b-284a-4f78-a71c-4574062aecb5/1/_u_5L8n-U1R7fjvh-DYIgJxFZsk.mft
File: _u_5L8n-U1R7fjvh-DYIgJxFZsk.mft (raw, json)
Hash identifier: frYB8uye7Whq5TKwFrujUs7Zay8O+FiYagZ8qUCbYzY=
Subject key identifier: 39:E5:8F:1D:3C:8E:EF:CE:23:87:3C:43:E7:83:5A:01:AD:02:10:83
Authority key identifier: FE:EF:F9:2F:C9:FE:53:54:7B:7E:3B:E1:F8:36:08:80:9C:45:66:C9
Certificate issuer: /CN=feeff92fc9fe53547b7e3be1f83608809c4566c9
Certificate serial: 019649D8494FB0E3A5E43DA5F2B58B04B600
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/_u_5L8n-U1R7fjvh-DYIgJxFZsk.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/a7/d8776b-284a-4f78-a71c-4574062aecb5/1/_u_5L8n-U1R7fjvh-DYIgJxFZsk.mft
Manifest number: 0592
Signing time: Fri 18 Apr 2025 17:00:33 +0000
Manifest this update: Fri 18 Apr 2025 17:00:33 +0000
Manifest next update: Sat 19 Apr 2025 17:00:33 +0000
Files and hashes: 1: RdGYazcblxjw10A1GXBrScv2ZUw.roa (hash: cthxVd9Tm4tHhJQTv20dl7UKI0DsMHEY2NNEIm16wNQ=)
2: _u_5L8n-U1R7fjvh-DYIgJxFZsk.crl (hash: vxaFAoZ+yaLujI72d8i8xvbfoAlLJxXGndR6hiSzxjA=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/a7/d8776b-284a-4f78-a71c-4574062aecb5/1/_u_5L8n-U1R7fjvh-DYIgJxFZsk.crl
rsync://rpki.ripe.net/repository/DEFAULT/a7/d8776b-284a-4f78-a71c-4574062aecb5/1/_u_5L8n-U1R7fjvh-DYIgJxFZsk.mft
rsync://rpki.ripe.net/repository/DEFAULT/_u_5L8n-U1R7fjvh-DYIgJxFZsk.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 19 Apr 2025 17:00:33 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:49:d8:49:4f:b0:e3:a5:e4:3d:a5:f2:b5:8b:04:b6:00
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=feeff92fc9fe53547b7e3be1f83608809c4566c9
Validity
Not Before: Apr 18 17:00:33 2025 GMT
Not After : Apr 19 17:00:33 2025 GMT
Subject: CN=39e58f1d3c8eefce23873c43e7835a01ad021083
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:aa:15:44:8e:d9:76:bd:3a:0f:6e:06:7c:2d:a4:
fd:d0:42:75:7a:0b:f5:46:8b:95:f4:3e:3b:9a:99:
6d:f7:13:d6:39:9c:5a:ec:9b:6c:2c:07:37:6d:5f:
a9:0e:1a:bf:30:a4:a0:8e:09:3b:8c:47:1f:d4:f3:
c1:c4:39:02:3f:b6:ba:82:84:09:ed:1d:dd:07:98:
ee:25:2b:2e:b3:87:fa:6f:4f:60:4c:47:57:e0:16:
6d:70:12:a0:62:05:fd:82:d9:d9:a4:9c:6d:50:91:
3d:fa:d4:ee:1a:ee:82:2e:7c:d3:4d:c9:e0:70:71:
1f:f5:43:90:83:a0:af:9d:1b:a5:ef:51:c8:52:3a:
4f:38:ff:92:9d:20:f8:5a:a0:e8:0f:b4:9b:c9:7a:
82:da:80:18:e3:27:0a:64:dd:56:32:4b:31:7b:6d:
46:17:2a:39:ed:2e:1d:d4:d9:9c:ce:c1:43:38:e4:
46:e3:53:31:5b:47:f1:20:13:04:63:44:50:1b:39:
76:34:ec:af:45:7e:22:29:fe:9a:e8:9c:63:1c:fa:
f7:94:94:ba:59:70:90:3d:65:9d:59:4e:e5:83:c3:
60:9b:af:08:be:9d:b1:db:84:05:4e:8e:58:ea:5f:
4b:d1:24:d0:15:a6:78:f5:77:58:22:7e:eb:e2:de:
a3:71
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
39:E5:8F:1D:3C:8E:EF:CE:23:87:3C:43:E7:83:5A:01:AD:02:10:83
X509v3 Authority Key Identifier:
keyid:FE:EF:F9:2F:C9:FE:53:54:7B:7E:3B:E1:F8:36:08:80:9C:45:66:C9
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/_u_5L8n-U1R7fjvh-DYIgJxFZsk.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a7/d8776b-284a-4f78-a71c-4574062aecb5/1/_u_5L8n-U1R7fjvh-DYIgJxFZsk.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/a7/d8776b-284a-4f78-a71c-4574062aecb5/1/_u_5L8n-U1R7fjvh-DYIgJxFZsk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
9b:74:aa:98:4d:26:22:ad:9b:75:71:94:21:26:6f:89:a0:f6:
56:0b:ec:92:c7:a9:a1:ac:1e:b5:86:84:2f:b9:67:31:01:13:
c5:e8:d0:2c:b1:aa:b7:07:cd:30:52:3e:35:fc:84:c7:e5:27:
6b:20:d1:ee:52:88:66:4e:a3:a7:f6:43:8d:16:7d:ec:b5:83:
09:a5:33:27:4b:84:43:50:43:66:6d:fa:be:89:dd:46:6a:fe:
5a:0c:bb:15:f7:35:03:ee:aa:3c:a0:0b:55:d2:9d:27:a7:e7:
f5:56:21:dd:74:64:d7:3c:7c:69:bd:f5:a3:8b:a9:22:9b:57:
08:1c:28:f8:14:60:7d:2b:29:51:be:f9:02:30:d9:c7:0b:88:
fd:a1:eb:e8:0f:46:4e:ee:d0:a1:87:39:75:20:ca:af:1d:aa:
ca:58:b0:ec:c6:bd:0a:fc:87:e0:6d:0c:ac:bc:c5:3b:61:66:
36:b3:ef:31:9d:38:25:35:f4:7f:c0:a0:19:4f:e9:96:e5:83:
61:43:24:2f:c9:21:5a:c0:cb:cc:6a:64:cc:52:92:5e:33:04:
82:b6:17:b8:57:ed:8e:bd:c5:3e:79:c7:7b:21:75:60:65:32:
91:fb:e1:55:53:c2:4c:47:ee:82:01:93:dc:9c:05:d4:64:fd:
6b:06:c1:79
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 19 01:57:49 2025 by rpki-client