Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/25/506db9-12aa-463c-a7ea-d3cdd5c3392c/1/U6i3vKixHSeFDpGMpZlmmIAWKSk.mft
File: U6i3vKixHSeFDpGMpZlmmIAWKSk.mft (raw, json)
Hash identifier: g2KFsahf9Nz9vtr0yePrUmwaI/FWtdgEVGuw8eEzTPg=
Subject key identifier: E5:30:57:FF:52:F9:B6:18:84:7C:CC:39:9C:F4:78:A2:6C:A7:32:5A
Authority key identifier: 53:A8:B7:BC:A8:B1:1D:27:85:0E:91:8C:A5:99:66:98:80:16:29:29
Certificate issuer: /CN=53a8b7bca8b11d27850e918ca599669880162929
Certificate serial: 019847ADBD1390401A203698A63D482AC0CA
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/U6i3vKixHSeFDpGMpZlmmIAWKSk.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/25/506db9-12aa-463c-a7ea-d3cdd5c3392c/1/U6i3vKixHSeFDpGMpZlmmIAWKSk.mft
Manifest number: 0210
Signing time: Sat 26 Jul 2025 17:00:25 +0000
Manifest this update: Sat 26 Jul 2025 17:00:25 +0000
Manifest next update: Sun 27 Jul 2025 17:00:25 +0000
Files and hashes: 1: U6i3vKixHSeFDpGMpZlmmIAWKSk.crl (hash: 3fMmybCdtjynqay+LoqoA/YNXAe/UPIr9g7WdeXEGOY=)
2: qST1YzpfG0Aj9HfkTwxj9U8CUhI.roa (hash: wruCCghr0kJqtbuyZdJFoTZhRH+nhRjwzTxdaCBX4hs=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/25/506db9-12aa-463c-a7ea-d3cdd5c3392c/1/U6i3vKixHSeFDpGMpZlmmIAWKSk.crl
rsync://rpki.ripe.net/repository/DEFAULT/25/506db9-12aa-463c-a7ea-d3cdd5c3392c/1/U6i3vKixHSeFDpGMpZlmmIAWKSk.mft
rsync://rpki.ripe.net/repository/DEFAULT/U6i3vKixHSeFDpGMpZlmmIAWKSk.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 27 Jul 2025 11:00:05 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:47:ad:bd:13:90:40:1a:20:36:98:a6:3d:48:2a:c0:ca
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=53a8b7bca8b11d27850e918ca599669880162929
Validity
Not Before: Jul 26 17:00:25 2025 GMT
Not After : Jul 27 17:00:25 2025 GMT
Subject: CN=e53057ff52f9b618847ccc399cf478a26ca7325a
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c6:76:4c:a1:76:28:af:f2:36:b3:89:e0:cd:54:
a5:64:2c:0c:46:90:1d:21:85:9c:4e:cc:cd:2f:ea:
30:89:d9:51:2d:9c:30:93:3b:4b:aa:12:23:9a:a5:
7a:1a:89:63:32:22:98:f7:6d:53:1f:2d:a1:9e:09:
2c:4d:e1:54:df:66:de:3a:38:45:69:77:83:77:12:
a4:d6:71:a5:8f:b0:24:d1:3d:13:b2:1e:66:3e:d2:
43:6c:2a:d9:bd:f7:31:a3:ec:cc:77:ab:4f:76:2c:
ed:d7:45:5b:a6:f6:aa:19:ca:33:73:d4:e0:ff:61:
b3:46:2c:a5:94:60:70:d3:2a:34:d2:0f:95:a8:0c:
ec:f2:3a:c2:15:14:3a:33:06:95:de:9b:2b:d4:18:
2d:c8:b3:30:31:ee:d9:45:99:54:c5:20:16:de:64:
e4:87:36:62:7f:ac:b7:38:7e:db:3b:61:7c:3c:c7:
6f:49:3e:3b:6d:3b:08:23:d7:35:f5:e7:c4:7c:b2:
18:6b:8a:63:32:2b:6d:4d:46:9b:97:ba:66:ec:8e:
14:09:04:cb:69:3b:67:a8:71:60:fd:9d:53:ec:3a:
fd:d1:ca:90:81:f8:c0:40:af:07:c3:0c:f3:ff:2d:
97:07:24:e1:cf:48:85:d6:1a:44:82:e1:3b:33:ca:
b9:6d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E5:30:57:FF:52:F9:B6:18:84:7C:CC:39:9C:F4:78:A2:6C:A7:32:5A
X509v3 Authority Key Identifier:
keyid:53:A8:B7:BC:A8:B1:1D:27:85:0E:91:8C:A5:99:66:98:80:16:29:29
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/U6i3vKixHSeFDpGMpZlmmIAWKSk.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/25/506db9-12aa-463c-a7ea-d3cdd5c3392c/1/U6i3vKixHSeFDpGMpZlmmIAWKSk.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/25/506db9-12aa-463c-a7ea-d3cdd5c3392c/1/U6i3vKixHSeFDpGMpZlmmIAWKSk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
5c:29:66:e8:21:dc:d0:a3:2d:53:01:4f:dd:a7:2c:d2:d7:a7:
4d:d9:29:6e:69:7a:ea:3f:7e:7d:17:c9:21:ba:99:66:3b:ce:
3f:13:c4:d3:07:b3:b5:cb:11:df:88:63:2f:c1:34:64:f5:51:
b9:22:fe:55:64:0e:9e:24:29:ba:5c:50:08:c4:02:86:7e:6c:
bd:ac:87:0c:64:1f:09:9d:31:3d:f1:80:46:df:b4:4e:f8:13:
ab:06:de:9f:75:bb:eb:85:e5:68:22:cd:2d:e4:5c:7c:43:d6:
e9:4f:07:45:8d:f8:1e:c3:df:e2:65:4c:c1:3b:9c:57:c5:cf:
94:7c:09:94:57:02:46:47:6d:df:5c:59:60:fc:3e:2d:fe:43:
0a:0a:eb:f7:61:78:17:0d:ed:c4:83:2a:0a:f4:97:24:84:a5:
38:57:6b:7e:c1:8c:62:6c:4a:9a:c6:87:46:90:09:83:00:18:
b2:cf:4a:be:40:b1:92:84:16:75:7d:c6:81:05:01:83:83:30:
53:8d:2d:57:56:4e:5e:1f:b9:fa:80:28:da:2d:11:1c:f1:2d:
1d:08:6e:0a:4a:5d:ac:04:f9:c2:e0:c2:a4:08:59:b5:3c:20:
59:60:59:20:b5:e4:72:8b:ba:b7:00:bf:05:c4:07:e4:61:4a:
55:60:0b:4c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jul 26 20:27:25 2025 by rpki-client