Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ac/091e11-ee0c-49ec-95d7-6dbad31dbc41/1/U_azaGcjiqcYvhfm5zzkCpiVeKA.mft
File: U_azaGcjiqcYvhfm5zzkCpiVeKA.mft (raw, json)
Hash identifier: p1w+Ofr8eijpdyeKQZa66c5ArVjIUjWI0QAWis0x6YA=
Subject key identifier: 51:F2:24:E5:55:78:2E:BC:05:66:12:11:D3:86:9C:0A:A2:AC:03:D0
Authority key identifier: 53:F6:B3:68:67:23:8A:A7:18:BE:17:E6:E7:3C:E4:0A:98:95:78:A0
Certificate issuer: /CN=53f6b36867238aa718be17e6e73ce40a989578a0
Certificate serial: 01974CD70B3232B8CB9BC5380D92828B7F4F
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/U_azaGcjiqcYvhfm5zzkCpiVeKA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ac/091e11-ee0c-49ec-95d7-6dbad31dbc41/1/U_azaGcjiqcYvhfm5zzkCpiVeKA.mft
Manifest number: 128B
Signing time: Sun 08 Jun 2025 00:00:50 +0000
Manifest this update: Sun 08 Jun 2025 00:00:50 +0000
Manifest next update: Mon 09 Jun 2025 00:00:50 +0000
Files and hashes: 1: U_azaGcjiqcYvhfm5zzkCpiVeKA.crl (hash: h4yR4iQMWLZnCSsVNgjTf94NXIl51ZvHIa/dAqTMHJo=)
2: qm8-rtz9dvYOYtDUdJhFuQx2T1s.roa (hash: nzPHoD1cZfssTTQypaloowKyO3PlyRu1kf/LUUjI60k=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/ac/091e11-ee0c-49ec-95d7-6dbad31dbc41/1/U_azaGcjiqcYvhfm5zzkCpiVeKA.crl
rsync://rpki.ripe.net/repository/DEFAULT/ac/091e11-ee0c-49ec-95d7-6dbad31dbc41/1/U_azaGcjiqcYvhfm5zzkCpiVeKA.mft
rsync://rpki.ripe.net/repository/DEFAULT/U_azaGcjiqcYvhfm5zzkCpiVeKA.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 09 Jun 2025 00:00:50 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:4c:d7:0b:32:32:b8:cb:9b:c5:38:0d:92:82:8b:7f:4f
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=53f6b36867238aa718be17e6e73ce40a989578a0
Validity
Not Before: Jun 8 00:00:50 2025 GMT
Not After : Jun 9 00:00:50 2025 GMT
Subject: CN=51f224e555782ebc05661211d3869c0aa2ac03d0
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:93:f9:9a:1e:4e:fd:89:88:2c:5d:67:c4:34:57:
eb:7d:87:52:28:2d:af:8e:30:3f:c3:20:e2:5d:01:
f4:94:5d:67:b8:d7:06:ad:06:3c:89:4a:cb:28:d1:
fb:22:84:5e:30:3a:b7:ea:fe:83:14:21:8c:85:30:
f1:ca:18:95:55:4d:b5:70:e1:94:e6:7e:11:9a:e3:
2d:d8:9a:62:77:71:9f:42:0b:ce:f3:27:64:ba:2d:
28:c5:19:6a:08:a3:67:1a:e2:c7:54:a4:1e:e2:e5:
9c:df:ef:90:8c:f8:ca:22:37:07:70:a3:38:0b:33:
a2:38:28:0c:e8:ee:76:ef:b1:d4:5d:c1:ad:fa:21:
91:05:27:e4:e9:9d:0b:a5:c3:59:5f:1f:62:88:00:
e6:4b:17:6c:12:81:24:b3:b0:c6:27:ff:19:bd:e1:
a2:cb:ab:1e:e7:07:0d:f0:59:44:35:86:cb:9e:c2:
0e:be:34:b4:07:65:ab:8a:85:9a:3e:e4:39:62:35:
47:99:01:fa:ec:af:48:ad:d7:b9:a9:6e:8e:34:1d:
9e:b4:aa:38:a9:18:13:6e:99:18:51:c3:a2:6a:64:
ca:e0:0c:41:39:96:ee:62:36:9b:33:21:ad:a0:86:
b2:da:ad:7a:50:18:52:6b:61:47:cc:04:ff:94:37:
8b:3f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
51:F2:24:E5:55:78:2E:BC:05:66:12:11:D3:86:9C:0A:A2:AC:03:D0
X509v3 Authority Key Identifier:
keyid:53:F6:B3:68:67:23:8A:A7:18:BE:17:E6:E7:3C:E4:0A:98:95:78:A0
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/U_azaGcjiqcYvhfm5zzkCpiVeKA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ac/091e11-ee0c-49ec-95d7-6dbad31dbc41/1/U_azaGcjiqcYvhfm5zzkCpiVeKA.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/ac/091e11-ee0c-49ec-95d7-6dbad31dbc41/1/U_azaGcjiqcYvhfm5zzkCpiVeKA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
73:a1:a8:f9:4b:87:96:5b:db:d9:41:58:70:06:a8:24:ba:51:
0a:3f:92:56:dc:07:1e:c8:37:c4:4c:e3:94:c1:0f:0b:d8:73:
dc:0f:86:19:0d:54:6f:f7:32:02:64:bf:1a:31:4d:0a:9e:74:
06:0e:e6:34:b1:12:3e:8c:b4:58:bc:1b:8e:11:6e:f6:07:2b:
a6:e2:b2:48:c6:62:ad:4c:1f:4c:90:09:c6:ae:98:53:3c:dc:
3d:fd:08:33:1a:90:e1:fb:38:44:04:8a:b9:4e:0c:76:bc:74:
95:90:77:c5:2b:3f:be:b8:7c:32:11:d3:94:14:68:fc:17:21:
5f:d9:e2:cc:90:74:84:eb:ea:2d:78:ed:e3:81:4d:e6:64:c8:
e4:f2:88:8a:e7:62:91:61:ac:3b:62:f3:59:dd:c3:73:5d:47:
87:4e:86:b4:b6:bd:37:59:01:25:99:0c:b1:d5:6e:1b:5e:3a:
95:b2:a2:a4:08:e6:10:11:84:c8:91:26:25:95:e4:03:17:3f:
9f:b2:76:9b:c6:cd:2d:8b:5b:cf:97:b0:80:69:93:43:c5:01:
41:12:d3:55:89:d2:98:47:39:27:46:b9:b0:10:82:ee:0e:1d:
31:df:1a:3b:7d:89:44:10:ab:c8:3d:59:9c:55:ca:e7:85:f3:
5a:4c:16:1e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jun 8 07:43:01 2025 by rpki-client