Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/a7/fef2e0-ba37-4812-95ad-411a2712164d/1/U8NcqD_N9xskTtgDrEaOFFPYJo8.mft
File: U8NcqD_N9xskTtgDrEaOFFPYJo8.mft (raw, json)
Hash identifier: C/bwsrEgK3dGMWEtQlslmwkNaNjLhboL/e2/rtP6lVw=
Subject key identifier: D6:CE:58:00:63:CA:04:3E:1F:4A:11:8E:68:FB:E5:5D:D4:8D:54:59
Authority key identifier: 53:C3:5C:A8:3F:CD:F7:1B:24:4E:D8:03:AC:46:8E:14:53:D8:26:8F
Certificate issuer: /CN=53c35ca83fcdf71b244ed803ac468e1453d8268f
Certificate serial: 01960A1E54BF146D3F527EBFD5D33DAF9C2C
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/U8NcqD_N9xskTtgDrEaOFFPYJo8.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/a7/fef2e0-ba37-4812-95ad-411a2712164d/1/U8NcqD_N9xskTtgDrEaOFFPYJo8.mft
Manifest number: 071C
Signing time: Sun 06 Apr 2025 08:01:22 +0000
Manifest this update: Sun 06 Apr 2025 08:01:22 +0000
Manifest next update: Mon 07 Apr 2025 08:01:22 +0000
Files and hashes: 1: H-gKJ0jecc_epGWL1KeKZGljJsk.roa (hash: DugijbjySOcyT+ldEPL+0Bc6mUPT5+rGRZ55YajcPYw=)
2: U8NcqD_N9xskTtgDrEaOFFPYJo8.crl (hash: zIQNXXIg2n4YMPr5GMpm6uPaVqvpdijZ2kI2rhQEml0=)
3: jMo_zU9oPYD4-ORBa0HOxz6ElxQ.roa (hash: B6xq/IGkR0N1YUdtA/OK7mLlIr8yn5LM2g8dHTL3gUI=)
4: qy2YkDqljayW8L1eKrjgUU5sPyQ.roa (hash: AsWZRC0AXC3FY0BmIha8yHFLeU4GKo6EqdCK1jqHGe4=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/a7/fef2e0-ba37-4812-95ad-411a2712164d/1/U8NcqD_N9xskTtgDrEaOFFPYJo8.crl
rsync://rpki.ripe.net/repository/DEFAULT/a7/fef2e0-ba37-4812-95ad-411a2712164d/1/U8NcqD_N9xskTtgDrEaOFFPYJo8.mft
rsync://rpki.ripe.net/repository/DEFAULT/U8NcqD_N9xskTtgDrEaOFFPYJo8.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 07 Apr 2025 07:00:49 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:0a:1e:54:bf:14:6d:3f:52:7e:bf:d5:d3:3d:af:9c:2c
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=53c35ca83fcdf71b244ed803ac468e1453d8268f
Validity
Not Before: Apr 6 08:01:22 2025 GMT
Not After : Apr 7 08:01:22 2025 GMT
Subject: CN=d6ce580063ca043e1f4a118e68fbe55dd48d5459
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ec:80:8f:c9:60:2f:b4:8b:f4:01:60:13:c8:fe:
65:c0:4f:fb:36:77:83:fa:99:74:1e:e7:42:6e:aa:
90:32:ed:b3:2f:ab:a9:79:f1:1c:b5:98:0b:36:61:
2c:89:2e:a2:9b:27:f8:26:f8:62:18:05:bb:db:9c:
27:1f:fb:f9:fd:40:46:07:2d:2c:80:5b:4a:c9:3e:
91:b4:32:81:bb:36:1f:b4:45:36:77:55:a8:8a:81:
f2:79:b5:e8:0d:86:eb:ee:37:ab:b8:f6:ce:19:eb:
d9:20:d2:36:a2:23:e9:a4:3f:46:49:53:66:23:e8:
3c:44:2f:47:20:76:2c:38:a8:ae:86:5e:47:4f:af:
0e:3a:23:54:ec:2f:c1:2d:7b:ae:9e:c4:d3:52:90:
a2:7e:80:2a:10:4b:c8:ab:86:ba:4e:38:16:39:38:
56:0d:6a:07:39:8e:2b:3a:c5:ae:3b:0f:af:c8:92:
49:a0:56:30:d6:ce:83:5e:e4:ea:30:af:cf:11:8e:
50:32:27:b8:c7:3e:8f:bc:f4:44:86:b3:d0:0a:07:
bc:ab:2d:9f:91:be:56:7b:74:a1:ee:64:33:72:33:
96:1b:49:75:91:ca:99:4d:a4:19:e5:78:86:84:ae:
84:44:23:6a:99:14:93:b5:3b:6f:8f:e5:8d:52:74:
d9:85
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D6:CE:58:00:63:CA:04:3E:1F:4A:11:8E:68:FB:E5:5D:D4:8D:54:59
X509v3 Authority Key Identifier:
keyid:53:C3:5C:A8:3F:CD:F7:1B:24:4E:D8:03:AC:46:8E:14:53:D8:26:8F
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/U8NcqD_N9xskTtgDrEaOFFPYJo8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a7/fef2e0-ba37-4812-95ad-411a2712164d/1/U8NcqD_N9xskTtgDrEaOFFPYJo8.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/a7/fef2e0-ba37-4812-95ad-411a2712164d/1/U8NcqD_N9xskTtgDrEaOFFPYJo8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
60:26:f0:69:d7:4c:da:f3:73:78:48:aa:53:41:38:f7:3a:63:
01:a5:b8:38:3f:d8:fe:05:cb:a1:5d:a6:8c:71:96:ce:ab:f4:
df:fd:b5:0c:d4:89:9b:78:46:d9:82:4b:64:e0:49:d4:19:21:
55:a4:f0:6e:73:2b:08:a8:b7:10:8e:ad:c8:d4:ed:bd:1c:6c:
ea:cb:57:89:4f:a8:17:ad:4e:89:a1:1a:c4:6c:77:d9:db:d7:
81:64:58:50:fd:70:1a:7b:51:6b:61:71:b7:6e:a2:02:a6:4f:
1e:fd:bc:a3:cf:53:ac:ff:4a:74:06:5e:b1:75:0d:c7:e8:d3:
ea:d9:28:2b:cd:c8:1f:ab:7b:9b:c2:c5:c2:ac:23:56:ca:de:
bf:73:cb:e9:ff:ee:9d:79:06:df:65:27:2d:c3:89:90:21:54:
81:74:d4:fe:8d:d4:85:91:41:80:25:1e:6c:c7:21:a6:a4:8f:
e1:62:69:39:c8:ef:75:ed:d3:72:b4:55:d2:f7:6d:9e:e1:89:
f6:4c:72:64:5e:13:cf:31:7a:00:dc:44:f6:12:33:ce:97:0a:
0a:f4:83:e0:86:c5:86:06:d9:8f:ea:98:aa:d5:b9:cb:1c:c2:
89:97:61:3a:2b:d7:d2:d2:b4:d9:fd:1e:a7:e1:b8:c5:14:df:
0f:4b:c7:18
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Apr 6 15:35:04 2025 by rpki-client