Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e9/13a57c-cc4f-45bc-af9f-9367e42389d9/1/U-8ohOShM1XbZJo0k1J8RCKJc7g.mft
File: U-8ohOShM1XbZJo0k1J8RCKJc7g.mft (raw, json)
Hash identifier: jOiRXIU0zOMci9t/c4mAWNsmKkFMs5ekTA0WLawwtYs=
Subject key identifier: DF:17:2E:92:F3:E0:04:0D:45:C7:EE:F0:88:E1:95:25:DA:92:D9:3D
Authority key identifier: 53:EF:28:84:E4:A1:33:55:DB:64:9A:34:93:52:7C:44:22:89:73:B8
Certificate issuer: /CN=53ef2884e4a13355db649a3493527c44228973b8
Certificate serial: 01964F35D431A837B81F0D0EABEA76F869AF
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/U-8ohOShM1XbZJo0k1J8RCKJc7g.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/e9/13a57c-cc4f-45bc-af9f-9367e42389d9/1/U-8ohOShM1XbZJo0k1J8RCKJc7g.mft
Manifest number: 0FF9
Signing time: Sat 19 Apr 2025 18:00:49 +0000
Manifest this update: Sat 19 Apr 2025 18:00:49 +0000
Manifest next update: Sun 20 Apr 2025 18:00:49 +0000
Files and hashes: 1: 7mSFLMU3pbLGF1eJYN7bCpXwo10.roa (hash: Gi9mXnC7oL2MgZs534EZSdtoL7fLCIIFaJEq+xFNvfg=)
2: U-8ohOShM1XbZJo0k1J8RCKJc7g.crl (hash: 4rcrzKijTlyJZrZhk6zVypr+7So/q/IZX56R+cuFLi0=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/e9/13a57c-cc4f-45bc-af9f-9367e42389d9/1/U-8ohOShM1XbZJo0k1J8RCKJc7g.crl
rsync://rpki.ripe.net/repository/DEFAULT/e9/13a57c-cc4f-45bc-af9f-9367e42389d9/1/U-8ohOShM1XbZJo0k1J8RCKJc7g.mft
rsync://rpki.ripe.net/repository/DEFAULT/U-8ohOShM1XbZJo0k1J8RCKJc7g.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 20 Apr 2025 18:00:49 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:4f:35:d4:31:a8:37:b8:1f:0d:0e:ab:ea:76:f8:69:af
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=53ef2884e4a13355db649a3493527c44228973b8
Validity
Not Before: Apr 19 18:00:49 2025 GMT
Not After : Apr 20 18:00:49 2025 GMT
Subject: CN=df172e92f3e0040d45c7eef088e19525da92d93d
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a7:b9:82:cc:6e:7e:14:35:29:95:65:38:bd:38:
b8:0d:51:a4:18:14:ba:a0:f3:11:fa:14:0e:8b:32:
75:6e:cf:ef:dc:27:01:c0:fa:51:34:76:ad:ed:3f:
7d:81:88:63:48:5b:d9:84:18:7b:34:51:d5:56:64:
07:c0:bd:a6:33:14:4f:97:21:c9:e4:1e:e4:a8:83:
f8:43:21:a6:6b:82:af:3e:f5:39:74:15:3e:ae:40:
33:3a:fa:c7:41:25:7a:08:58:ab:62:e4:00:3b:f6:
fa:17:52:ad:e9:e9:5a:0f:19:a2:a2:24:10:e0:3e:
80:b4:a2:a7:e5:d0:c0:fb:35:b8:cc:8c:fb:fb:30:
b9:81:68:a3:55:0b:c0:06:18:b0:d4:87:4f:d0:29:
a0:3a:46:d8:bf:9d:aa:18:f9:65:3c:9a:04:9d:52:
c9:4f:75:94:db:8a:ef:f6:81:dc:1c:6d:75:9b:3a:
3f:05:95:44:d8:da:f3:e7:b2:6b:f7:ee:e6:1d:1a:
e5:5a:87:41:9b:1e:e1:a8:57:4a:1f:16:ac:b4:a1:
b3:ff:bd:5e:fb:6d:7b:e8:d3:4b:fb:32:8e:c2:e4:
ce:5b:08:01:b0:dd:a8:be:2e:e0:5c:fc:18:f4:a4:
3c:eb:cf:85:b8:ef:36:79:17:61:70:03:62:94:fa:
1e:4f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
DF:17:2E:92:F3:E0:04:0D:45:C7:EE:F0:88:E1:95:25:DA:92:D9:3D
X509v3 Authority Key Identifier:
keyid:53:EF:28:84:E4:A1:33:55:DB:64:9A:34:93:52:7C:44:22:89:73:B8
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/U-8ohOShM1XbZJo0k1J8RCKJc7g.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e9/13a57c-cc4f-45bc-af9f-9367e42389d9/1/U-8ohOShM1XbZJo0k1J8RCKJc7g.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/e9/13a57c-cc4f-45bc-af9f-9367e42389d9/1/U-8ohOShM1XbZJo0k1J8RCKJc7g.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
40:f5:c4:42:45:34:16:3e:d9:30:53:1a:dc:8d:57:bc:1f:1e:
73:52:fc:37:cd:b5:11:51:6a:b3:8f:89:d5:ee:ea:bc:f9:68:
d1:54:91:2b:d2:dc:16:57:90:82:69:bb:c6:46:c6:4c:bd:6e:
39:ce:00:52:31:77:c3:3c:33:2e:43:01:c6:ea:27:78:e4:71:
c4:2d:46:59:5b:c4:a0:9a:d5:84:2f:97:69:77:b1:7b:0d:f2:
42:13:26:cd:09:16:19:03:f9:4a:c0:69:ae:e9:f7:9e:44:08:
8a:20:23:8c:5d:0e:00:f3:15:63:01:7b:f5:8a:38:1e:32:f9:
d9:0b:b7:c5:39:ab:9e:c4:75:a0:1e:90:55:7d:fc:42:24:6b:
7a:3d:f6:35:ee:c6:2f:be:5c:ad:ed:1e:d5:6b:c5:69:c4:46:
b4:c1:4e:e3:80:3d:5c:f9:90:06:29:33:ee:f1:c2:b8:a2:b2:
83:7a:d3:72:07:1c:71:ea:af:2f:88:45:b3:ec:da:ce:e8:26:
8b:22:03:52:2d:e3:86:92:eb:21:5f:6d:51:3c:14:4c:e4:59:
69:eb:66:70:58:82:08:9f:3a:cd:ec:8f:ad:fc:d3:41:df:4b:
2d:aa:b5:e3:15:88:67:86:ec:f4:4e:3a:87:db:a1:1f:9d:03:
36:95:1b:9b
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZZPNdQxqDe4Hw0Oq+p2+GmvMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDUzZWYyODg0ZTRhMTMzNTVkYjY0OWEzNDkzNTI3YzQ0MjI4
OTczYjgwHhcNMjUwNDE5MTgwMDQ5WhcNMjUwNDIwMTgwMDQ5WjAzMTEwLwYDVQQD
EyhkZjE3MmU5MmYzZTAwNDBkNDVjN2VlZjA4OGUxOTUyNWRhOTJkOTNkMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAp7mCzG5+FDUplWU4vTi4DVGkGBS6
oPMR+hQOizJ1bs/v3CcBwPpRNHat7T99gYhjSFvZhBh7NFHVVmQHwL2mMxRPlyHJ
5B7kqIP4QyGma4KvPvU5dBU+rkAzOvrHQSV6CFirYuQAO/b6F1Kt6elaDxmioiQQ
4D6AtKKn5dDA+zW4zIz7+zC5gWijVQvABhiw1IdP0CmgOkbYv52qGPllPJoEnVLJ
T3WU24rv9oHcHG11mzo/BZVE2Nrz57Jr9+7mHRrlWodBmx7hqFdKHxastKGz/71e
+2176NNL+zKOwuTOWwgBsN2ovi7gXPwY9KQ868+FuO82eRdhcANilPoeTwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFN8XLpLz4AQNRcfu8IjhlSXaktk9MB8GA1UdIwQY
MBaAFFPvKITkoTNV22SaNJNSfEQiiXO4MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvVS04b2hPU2hNMVhiWkpvMGsxSjhSQ0tKYzdnLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9lOS8xM2E1N2MtY2M0Zi00NWJjLWFmOWYt
OTM2N2U0MjM4OWQ5LzEvVS04b2hPU2hNMVhiWkpvMGsxSjhSQ0tKYzdnLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9lOS8xM2E1N2MtY2M0Zi00NWJjLWFmOWYtOTM2N2U0MjM4OWQ5
LzEvVS04b2hPU2hNMVhiWkpvMGsxSjhSQ0tKYzdnLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAQPXEQkU0
Fj7ZMFMa3I1XvB8ec1L8N821EVFqs4+J1e7qvPlo0VSRK9LcFleQgmm7xkbGTL1u
Oc4AUjF3wzwzLkMBxuoneORxxC1GWVvEoJrVhC+XaXexew3yQhMmzQkWGQP5SsBp
run3nkQIiiAjjF0OAPMVYwF79Yo4HjL52Qu3xTmrnsR1oB6QVX38QiRrej32Ne7G
L75cre0e1WvFacRGtMFO44A9XPmQBikz7vHCuKKyg3rTcgccceqvL4hFs+zazugm
iyIDUi3jhpLrIV9tUTwUTORZaetmcFiCCJ86zeyPrfzTQd9LLaq14xWIZ4bs9E46
h9uhH50DNpUbmw==
-----END CERTIFICATE-----
Generated at Sun Apr 20 04:23:34 2025 by rpki-client