Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b1/6e264e-d6ce-42d5-b05d-e15f4f8409e6/1/U70JkochUqhtYNljuH0BgXwA_FM.mft
File: U70JkochUqhtYNljuH0BgXwA_FM.mft (raw, json)
Hash identifier: PTKzSV9LoI7N1f96nWWfbLafMjzV5KvoF7tdIZZIHdY=
Subject key identifier: 6C:00:30:70:01:3C:25:A6:27:B6:FE:55:F4:2B:91:4B:EF:EE:1C:0E
Authority key identifier: 53:BD:09:92:87:21:52:A8:6D:60:D9:63:B8:7D:01:81:7C:00:FC:53
Certificate issuer: /CN=53bd0992872152a86d60d963b87d01817c00fc53
Certificate serial: 01962C3C7EBC60D6CC82ABB2FCE125435FF3
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/U70JkochUqhtYNljuH0BgXwA_FM.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/b1/6e264e-d6ce-42d5-b05d-e15f4f8409e6/1/U70JkochUqhtYNljuH0BgXwA_FM.mft
Manifest number: 14E9
Signing time: Sat 12 Apr 2025 23:01:24 +0000
Manifest this update: Sat 12 Apr 2025 23:01:24 +0000
Manifest next update: Sun 13 Apr 2025 23:01:24 +0000
Files and hashes: 1: 8hWTGCLXxSwODB2tKv40DFwDRSA.roa (hash: LnqtzTwP6Z/uj/Pahytsa4k9TTsa7E1q6xNsCMwJ/r4=)
2: KdlAk3dh27bShWAn4-0kWb61hVQ.roa (hash: ATJYV8SWOcnAG9fqVBljwxaiv5XnfJ4U40CX0lPgLrE=)
3: U70JkochUqhtYNljuH0BgXwA_FM.crl (hash: sbLJL358IjD5v7I99ASXKGBjo+OcA3i/qW3S5OioC/s=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/b1/6e264e-d6ce-42d5-b05d-e15f4f8409e6/1/U70JkochUqhtYNljuH0BgXwA_FM.crl
rsync://rpki.ripe.net/repository/DEFAULT/b1/6e264e-d6ce-42d5-b05d-e15f4f8409e6/1/U70JkochUqhtYNljuH0BgXwA_FM.mft
rsync://rpki.ripe.net/repository/DEFAULT/U70JkochUqhtYNljuH0BgXwA_FM.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 13 Apr 2025 18:34:59 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:2c:3c:7e:bc:60:d6:cc:82:ab:b2:fc:e1:25:43:5f:f3
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=53bd0992872152a86d60d963b87d01817c00fc53
Validity
Not Before: Apr 12 23:01:24 2025 GMT
Not After : Apr 13 23:01:24 2025 GMT
Subject: CN=6c003070013c25a627b6fe55f42b914befee1c0e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9a:97:44:06:ee:02:5c:24:f0:ad:ac:ce:0f:48:
c6:77:90:ec:3b:8a:8a:9d:ac:8e:e9:a3:6c:b1:97:
76:be:3f:a8:2e:c9:63:e1:28:57:b7:47:13:54:e9:
71:34:92:ef:82:5a:0b:9e:9f:f3:1d:46:4e:f0:83:
16:70:22:01:6b:5d:62:0c:aa:22:10:a9:65:83:94:
f3:e2:5d:d2:9c:e8:ff:1b:c6:71:b7:75:2d:31:96:
c3:85:4d:35:7d:e1:5e:9c:a6:f2:f9:21:92:ac:62:
4e:49:79:bb:9d:85:c2:e5:24:e9:d0:21:40:89:fd:
bc:a2:b0:a1:34:21:ae:27:34:8a:db:f2:5d:ee:dd:
fd:19:81:39:9a:4a:9d:05:4a:1f:7d:96:6e:fe:b0:
96:30:5b:04:8c:d1:6c:fe:42:2a:0f:b2:58:3f:97:
73:a4:25:88:43:e7:68:2f:66:f5:70:13:b7:9d:bd:
1c:54:f8:01:20:77:3d:9c:f0:6d:56:19:08:c7:aa:
97:9e:3f:f5:a5:a0:4e:60:61:4a:a8:ec:b0:52:84:
d1:cb:b0:70:f7:8d:4a:b0:b8:15:4c:e3:f0:62:34:
46:9b:be:bc:84:00:e9:66:e7:b4:33:aa:ad:34:25:
6e:f8:83:e1:d4:00:63:fc:99:20:0a:d8:bb:01:c2:
72:b9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
6C:00:30:70:01:3C:25:A6:27:B6:FE:55:F4:2B:91:4B:EF:EE:1C:0E
X509v3 Authority Key Identifier:
keyid:53:BD:09:92:87:21:52:A8:6D:60:D9:63:B8:7D:01:81:7C:00:FC:53
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/U70JkochUqhtYNljuH0BgXwA_FM.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b1/6e264e-d6ce-42d5-b05d-e15f4f8409e6/1/U70JkochUqhtYNljuH0BgXwA_FM.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/b1/6e264e-d6ce-42d5-b05d-e15f4f8409e6/1/U70JkochUqhtYNljuH0BgXwA_FM.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
2a:58:ff:2b:fc:95:0f:d2:5f:b0:5f:b4:b6:a0:b7:57:82:be:
05:13:d5:ff:50:de:dd:6f:c0:53:5b:a6:c6:31:1b:fa:70:ca:
d2:3d:bf:b6:e1:d6:f4:a8:36:00:59:b5:20:bb:6e:ad:57:42:
e2:fe:87:4a:ce:90:08:36:1a:d0:b9:fd:01:c7:15:cb:a5:cb:
8c:51:48:22:7c:02:30:26:0d:47:bc:7c:b1:cd:b1:71:7a:b0:
1c:9c:e6:5c:1d:18:76:d2:22:b4:f6:79:0d:2e:c5:56:25:23:
e4:a6:0c:36:29:19:fb:d2:0f:bf:da:e4:ac:a3:78:0c:61:f3:
b8:51:22:f8:f8:c7:08:8e:68:23:51:12:15:34:c7:9a:c2:dc:
cc:3d:85:dc:49:10:37:21:d4:c0:e4:3f:1a:24:9e:2f:05:1e:
be:ff:5f:db:b5:23:77:e4:54:01:da:38:61:36:f5:2a:26:6d:
58:9b:2e:12:6b:ea:49:fb:5a:f3:c4:e3:f6:2e:ee:96:40:93:
f1:14:85:0b:15:13:f0:8b:d6:d5:0a:7a:12:21:47:ed:2e:92:
33:dd:08:ee:73:73:e2:0c:2e:a2:df:f6:9f:61:40:f9:b8:d8:
12:63:2a:4e:c8:84:f1:fa:bb:ac:8c:29:7b:92:4e:2d:4f:2e:
ce:f3:03:47
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Apr 13 02:57:20 2025 by rpki-client