Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f5/dce44a-4a90-43ea-b1fb-a2d116560aca/1/U8vRR3BEoDQEx_xDlhwsg7unW7w.mft
File: U8vRR3BEoDQEx_xDlhwsg7unW7w.mft (raw, json)
Hash identifier: BMz87O7dac5hZTV1sJbqEGBsaBwz5gRZ52StJNP9bC4=
Subject key identifier: CE:05:50:70:F9:81:FB:08:21:AF:FC:D3:0A:BE:CD:09:20:97:CF:0F
Authority key identifier: 53:CB:D1:47:70:44:A0:34:04:C7:FC:43:96:1C:2C:83:BB:A7:5B:BC
Certificate issuer: /CN=53cbd1477044a03404c7fc43961c2c83bba75bbc
Certificate serial: 019650ED49E159F1A0BEAD7698BB3BFF6C6F
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/U8vRR3BEoDQEx_xDlhwsg7unW7w.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/f5/dce44a-4a90-43ea-b1fb-a2d116560aca/1/U8vRR3BEoDQEx_xDlhwsg7unW7w.mft
Manifest number: 0D2A
Signing time: Sun 20 Apr 2025 02:00:50 +0000
Manifest this update: Sun 20 Apr 2025 02:00:50 +0000
Manifest next update: Mon 21 Apr 2025 02:00:50 +0000
Files and hashes: 1: B2DVcbdBAKRHBDsOlZrrOVepTcQ.roa (hash: qvvp5nQI7KpPFAu+iSrl9WmgfsagnJRM0T+yv2PLO1U=)
2: MyfnN7_GeDEIFOv2Po3D--A0qr4.roa (hash: Q+ck4wNBk8gHUXF8i3xSK2P0e3p9/YGq6s+8125aWKo=)
3: U8vRR3BEoDQEx_xDlhwsg7unW7w.crl (hash: Yw0eZ7acZJY//oF0LT3uWgACGalV4CaNpXOJ0i6zjdg=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/f5/dce44a-4a90-43ea-b1fb-a2d116560aca/1/U8vRR3BEoDQEx_xDlhwsg7unW7w.crl
rsync://rpki.ripe.net/repository/DEFAULT/f5/dce44a-4a90-43ea-b1fb-a2d116560aca/1/U8vRR3BEoDQEx_xDlhwsg7unW7w.mft
rsync://rpki.ripe.net/repository/DEFAULT/U8vRR3BEoDQEx_xDlhwsg7unW7w.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 21 Apr 2025 02:00:50 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:50:ed:49:e1:59:f1:a0:be:ad:76:98:bb:3b:ff:6c:6f
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=53cbd1477044a03404c7fc43961c2c83bba75bbc
Validity
Not Before: Apr 20 02:00:50 2025 GMT
Not After : Apr 21 02:00:50 2025 GMT
Subject: CN=ce055070f981fb0821affcd30abecd092097cf0f
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a9:c4:a1:25:b2:dc:05:36:28:5f:86:ba:6e:f8:
b2:c1:5c:b9:46:ab:5b:37:33:7c:36:47:e3:21:11:
c5:53:84:5b:82:bc:5d:32:40:eb:66:3b:72:e8:01:
4e:55:b6:e0:c7:5c:55:35:e0:bc:b3:0b:26:7b:bb:
c1:36:0d:d4:c6:ee:f6:e8:04:8c:5c:9e:50:82:6a:
81:45:b3:9b:88:88:ee:64:2e:ec:aa:91:e1:53:a4:
65:c4:b7:25:ab:3e:dd:c3:b6:93:1e:55:6c:ae:b0:
4f:ca:d3:7b:c0:14:f4:78:45:e7:28:25:e5:7f:7e:
11:6b:77:d4:fd:d7:a8:17:e5:ff:06:1c:ef:c1:0c:
53:fc:40:36:b2:cc:b7:e7:7c:60:f7:3a:c1:30:30:
07:94:d5:b1:f5:50:5e:f2:45:a8:08:35:cd:f5:09:
f4:ec:1e:0b:05:33:b0:ee:f0:c8:cc:3a:0c:5b:d2:
44:14:d6:26:be:1c:ce:be:d7:01:85:75:f5:bf:c8:
f3:6c:c1:d8:33:3b:28:01:bc:e9:72:51:7d:3a:4a:
99:7d:ed:45:e6:ca:3d:62:a2:18:d2:c6:f5:1d:8d:
88:c8:25:9b:ac:5a:91:c3:cb:3d:87:61:90:60:21:
cf:9b:45:c9:ec:c4:99:0e:17:da:19:4a:20:ac:48:
ba:05
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
CE:05:50:70:F9:81:FB:08:21:AF:FC:D3:0A:BE:CD:09:20:97:CF:0F
X509v3 Authority Key Identifier:
keyid:53:CB:D1:47:70:44:A0:34:04:C7:FC:43:96:1C:2C:83:BB:A7:5B:BC
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/U8vRR3BEoDQEx_xDlhwsg7unW7w.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f5/dce44a-4a90-43ea-b1fb-a2d116560aca/1/U8vRR3BEoDQEx_xDlhwsg7unW7w.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/f5/dce44a-4a90-43ea-b1fb-a2d116560aca/1/U8vRR3BEoDQEx_xDlhwsg7unW7w.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
a6:45:1c:3e:70:b4:3e:6c:15:30:5d:6b:6c:d3:c7:3a:7f:2d:
57:8b:fc:35:4a:f5:1e:d4:63:33:12:e9:d7:d6:0c:9f:5f:9d:
a6:1b:ef:8c:ff:67:9a:6b:40:83:d7:7e:45:8c:de:af:c7:f0:
99:b8:aa:0a:06:dc:90:8b:7f:03:91:19:ba:0b:48:10:d9:cb:
14:5a:71:0f:7c:1f:45:41:7e:89:9e:31:4b:91:a8:17:bc:32:
6e:95:12:9d:87:39:3a:ca:e8:f5:15:b8:d3:5a:8f:20:a1:66:
53:50:71:eb:a4:38:4c:40:16:3f:a1:58:40:48:da:e3:44:50:
95:d7:dd:9c:ee:ba:1f:ce:82:32:bb:80:83:a5:18:3a:2a:58:
d2:18:ce:7f:cd:24:10:c5:bf:97:70:90:aa:2e:b7:7f:1a:22:
86:ca:fe:10:1a:db:32:3b:46:ca:ac:95:7d:8f:c8:01:2b:ea:
d2:45:cc:68:46:a3:9b:00:85:fe:90:1b:35:d5:22:8d:c9:13:
12:e6:55:5d:5a:7d:8f:46:50:6f:c1:33:9c:b7:2c:8d:cf:c9:
f1:c7:a1:b1:dc:2d:41:ca:1c:87:02:eb:5f:8e:3e:5c:28:2c:
1e:3b:e9:93:2d:ff:33:d6:be:eb:9f:db:52:07:a0:06:81:dd:
3a:fe:43:69
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Apr 20 12:35:19 2025 by rpki-client