Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/be/553dc6-12d0-4d4a-a294-97c5d59b0bbf/1/pu1EK5HU6Dpt45-2eXGh55xrHtU.mft
File: pu1EK5HU6Dpt45-2eXGh55xrHtU.mft (raw, json)
Hash identifier: zZfGeq7LljX9SqTLrnrJV/wpQ34rLEwkpuiZWHqMsuo=
Subject key identifier: C8:1F:D5:51:5C:C0:4E:91:ED:34:CF:69:EC:C2:7E:30:FE:22:A2:5B
Authority key identifier: A6:ED:44:2B:91:D4:E8:3A:6D:E3:9F:B6:79:71:A1:E7:9C:6B:1E:D5
Certificate issuer: /CN=a6ed442b91d4e83a6de39fb67971a1e79c6b1ed5
Certificate serial: 0198353A1ADAF52850F30FEB2BDFCB24D886
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/pu1EK5HU6Dpt45-2eXGh55xrHtU.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/be/553dc6-12d0-4d4a-a294-97c5d59b0bbf/1/pu1EK5HU6Dpt45-2eXGh55xrHtU.mft
Manifest number: 15FA
Signing time: Wed 23 Jul 2025 03:00:56 +0000
Manifest this update: Wed 23 Jul 2025 03:00:56 +0000
Manifest next update: Thu 24 Jul 2025 03:00:56 +0000
Files and hashes: 1: afYIwWyHQiLcIQms6TYRdepOKaQ.roa (hash: lsNGKgQ/6XCDDm1UAjxRivXeZCbEHxdqSvl0LRt4pPk=)
2: lfrC4B88Afpo1TBPZMxOLIcU1Ck.roa (hash: t/3zF86JRbmij67yXF/+H8nTDumbM7s5DdE5qv8C5Js=)
3: pu1EK5HU6Dpt45-2eXGh55xrHtU.crl (hash: GPHE/t4T1/QLPvvw/dGJAJr5bbduCc7nRHikrs96q9o=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/be/553dc6-12d0-4d4a-a294-97c5d59b0bbf/1/pu1EK5HU6Dpt45-2eXGh55xrHtU.crl
rsync://rpki.ripe.net/repository/DEFAULT/be/553dc6-12d0-4d4a-a294-97c5d59b0bbf/1/pu1EK5HU6Dpt45-2eXGh55xrHtU.mft
rsync://rpki.ripe.net/repository/DEFAULT/pu1EK5HU6Dpt45-2eXGh55xrHtU.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 24 Jul 2025 03:00:56 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:35:3a:1a:da:f5:28:50:f3:0f:eb:2b:df:cb:24:d8:86
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=a6ed442b91d4e83a6de39fb67971a1e79c6b1ed5
Validity
Not Before: Jul 23 03:00:56 2025 GMT
Not After : Jul 24 03:00:56 2025 GMT
Subject: CN=c81fd5515cc04e91ed34cf69ecc27e30fe22a25b
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:de:46:1e:82:41:44:dc:ea:67:e8:bd:27:ae:be:
8d:66:16:f3:e9:9d:89:db:6d:7e:33:ba:c8:35:a6:
1f:43:b2:93:2e:50:07:35:4e:02:69:92:63:34:2e:
c7:6a:ee:99:e3:e5:12:db:07:90:50:ac:e5:7a:00:
e2:1f:48:db:d6:29:ae:e8:44:7e:61:da:65:be:74:
cd:7f:14:95:7b:05:05:92:f6:05:54:19:32:8e:89:
f1:f4:b4:8c:9f:2f:73:4f:3b:6f:ef:8b:97:32:3d:
b5:e8:11:48:a5:28:de:94:79:21:02:50:52:26:7f:
f5:9b:94:d3:e2:65:3f:59:fe:9e:a1:6a:ba:94:c6:
b7:e1:a2:3b:0e:ae:e1:0f:28:72:38:f4:b4:15:41:
4d:f8:78:88:35:9a:3a:a9:4f:cd:1d:51:58:60:68:
a4:9e:f9:8a:2c:82:4f:20:41:1e:54:fe:55:ea:e4:
37:55:ad:82:db:f0:2a:3f:ba:0d:8f:32:fc:d5:47:
e8:6e:4b:e4:de:ef:b5:9a:06:45:92:aa:f6:8b:1f:
bd:7c:44:fd:c2:11:9b:96:92:69:63:81:9b:5e:36:
e3:42:27:c4:07:85:06:7b:db:4d:86:f6:07:29:a2:
75:a6:2b:16:88:5e:68:de:70:2f:08:21:77:26:c0:
ea:c3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C8:1F:D5:51:5C:C0:4E:91:ED:34:CF:69:EC:C2:7E:30:FE:22:A2:5B
X509v3 Authority Key Identifier:
keyid:A6:ED:44:2B:91:D4:E8:3A:6D:E3:9F:B6:79:71:A1:E7:9C:6B:1E:D5
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/pu1EK5HU6Dpt45-2eXGh55xrHtU.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/be/553dc6-12d0-4d4a-a294-97c5d59b0bbf/1/pu1EK5HU6Dpt45-2eXGh55xrHtU.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/be/553dc6-12d0-4d4a-a294-97c5d59b0bbf/1/pu1EK5HU6Dpt45-2eXGh55xrHtU.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
21:d5:44:c6:89:6e:cc:19:b8:c1:d4:56:2e:95:f4:34:65:d2:
5e:6e:e8:7a:47:ee:55:a7:cb:a1:f6:15:82:58:32:5c:aa:db:
52:89:5e:08:76:e6:36:4d:69:3f:6f:04:7f:07:a3:c6:cb:c8:
4d:41:84:4b:58:04:7f:56:54:73:2e:bf:6d:81:f7:ac:66:56:
42:75:ca:62:e2:ab:cf:00:d2:a3:3e:e7:7b:36:5f:13:cc:f0:
1b:69:75:2e:d9:a5:98:61:a4:14:22:4c:46:29:c8:a2:46:01:
c8:b3:9a:aa:27:ef:97:81:af:4a:1b:9b:c4:7d:dd:11:ef:19:
a0:4a:ed:02:fb:69:27:56:2c:f0:01:ed:e8:48:5b:62:04:b1:
61:19:91:7d:5d:89:b2:5f:39:52:e3:63:ee:59:63:49:ff:c3:
ce:29:f6:c6:4c:fd:6b:07:9b:bc:bb:78:9f:06:7b:e4:fd:ee:
24:81:13:d7:bb:35:39:b1:87:d9:0c:12:0c:39:c4:85:9a:c9:
a4:95:81:e0:ae:9d:85:38:84:b3:cc:e4:e1:95:44:25:ae:f4:
57:2f:c2:65:cb:48:1e:4a:e8:1c:09:2d:45:67:cb:55:b9:ee:
cf:9c:22:f5:5c:7c:00:7e:12:a1:a3:8c:df:14:ec:31:06:27:
eb:03:db:35
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jul 23 11:56:50 2025 by rpki-client