Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/03/6679f4-9165-4a8b-8892-7dea8fff2e08/1/uG3av8SJUr7ibW1fgogx9ZahVOk.mft
File: uG3av8SJUr7ibW1fgogx9ZahVOk.mft (raw, json)
Hash identifier: VNdwHYREw2sTHLR7FHKZrn7V6VjnwJvT54ApykBFH48=
Subject key identifier: 86:53:27:58:14:70:15:10:D2:D2:BD:04:CC:FF:D9:F0:DF:30:5D:BC
Authority key identifier: B8:6D:DA:BF:C4:89:52:BE:E2:6D:6D:5F:82:88:31:F5:96:A1:54:E9
Certificate issuer: /CN=b86ddabfc48952bee26d6d5f828831f596a154e9
Certificate serial: 01974AE8DD6606BA1140226B98E6FBE4FD85
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/uG3av8SJUr7ibW1fgogx9ZahVOk.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/03/6679f4-9165-4a8b-8892-7dea8fff2e08/1/uG3av8SJUr7ibW1fgogx9ZahVOk.mft
Manifest number: 03D3
Signing time: Sat 07 Jun 2025 15:01:04 +0000
Manifest this update: Sat 07 Jun 2025 15:01:04 +0000
Manifest next update: Sun 08 Jun 2025 15:01:04 +0000
Files and hashes: 1: XAkJAeMsm3qGc5VmVm5cet8IGU0.roa (hash: lDEEW1AxkG0v1QYe+CdCiOCSdsED9l+6Ar+8XrHNs4Y=)
2: uG3av8SJUr7ibW1fgogx9ZahVOk.crl (hash: Un7xx2IXU9lX2Djc66143PnTDHcQWTjB5nKZGn67VzQ=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/03/6679f4-9165-4a8b-8892-7dea8fff2e08/1/uG3av8SJUr7ibW1fgogx9ZahVOk.crl
rsync://rpki.ripe.net/repository/DEFAULT/03/6679f4-9165-4a8b-8892-7dea8fff2e08/1/uG3av8SJUr7ibW1fgogx9ZahVOk.mft
rsync://rpki.ripe.net/repository/DEFAULT/uG3av8SJUr7ibW1fgogx9ZahVOk.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 08 Jun 2025 15:01:04 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:4a:e8:dd:66:06:ba:11:40:22:6b:98:e6:fb:e4:fd:85
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=b86ddabfc48952bee26d6d5f828831f596a154e9
Validity
Not Before: Jun 7 15:01:04 2025 GMT
Not After : Jun 8 15:01:04 2025 GMT
Subject: CN=8653275814701510d2d2bd04ccffd9f0df305dbc
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9e:47:6b:06:8f:37:3c:a4:e7:4c:0d:58:08:2a:
1e:5f:6d:74:eb:14:a5:ef:1e:ca:9b:27:24:a7:2b:
96:86:74:b5:78:25:fb:80:53:b8:dd:91:b2:3e:a6:
2f:1d:a4:af:62:e1:b1:94:e6:cb:aa:c5:50:0d:46:
e2:a0:5d:bb:05:23:a7:a8:69:45:c5:49:d3:2b:c9:
46:f4:c8:18:7e:ba:c9:15:79:44:99:64:b6:19:3d:
aa:e2:ea:d2:33:88:53:22:78:31:cd:1f:4f:aa:a7:
4d:97:71:56:87:85:71:a2:01:be:31:c8:62:22:d1:
d2:42:56:9b:ff:6a:fa:e1:58:08:a6:9d:37:14:06:
05:04:01:0b:11:f9:ec:d6:f0:4e:78:5a:79:c7:a2:
41:36:5f:17:d4:5f:19:21:dd:07:ef:5e:f8:60:ad:
69:32:bc:bb:a3:0b:9f:c8:a6:fe:49:eb:1f:eb:c3:
fd:a4:6b:c1:f6:e0:05:82:97:82:a9:e7:10:5c:21:
9a:36:40:4d:5e:6c:ea:41:08:a6:e9:50:a5:e4:10:
eb:a3:2d:e7:22:6b:7b:31:89:bb:53:49:eb:87:e3:
bd:05:e7:30:8f:86:dc:28:1a:ce:95:4f:ab:08:e2:
fa:59:1f:eb:1d:b6:f8:09:a4:c4:14:28:8a:08:dc:
5a:83
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
86:53:27:58:14:70:15:10:D2:D2:BD:04:CC:FF:D9:F0:DF:30:5D:BC
X509v3 Authority Key Identifier:
keyid:B8:6D:DA:BF:C4:89:52:BE:E2:6D:6D:5F:82:88:31:F5:96:A1:54:E9
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/uG3av8SJUr7ibW1fgogx9ZahVOk.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/03/6679f4-9165-4a8b-8892-7dea8fff2e08/1/uG3av8SJUr7ibW1fgogx9ZahVOk.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/03/6679f4-9165-4a8b-8892-7dea8fff2e08/1/uG3av8SJUr7ibW1fgogx9ZahVOk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
c9:80:aa:9e:94:91:26:3d:20:5d:e0:8f:82:36:91:81:a4:38:
51:06:ef:02:6b:85:23:a9:f0:37:17:36:04:c7:37:f8:fc:39:
f3:26:4a:03:15:bf:04:2e:2a:2b:13:64:75:57:dd:77:7a:d0:
9f:91:00:72:76:95:40:17:11:ce:69:fb:79:5d:7a:bd:05:29:
6c:f7:2c:56:ca:52:ed:e3:4f:d4:f1:35:4a:81:00:22:f9:3d:
13:5a:5f:73:3f:4c:f8:42:56:e3:4d:b8:4b:30:85:15:51:3a:
54:59:63:4c:77:89:8b:23:d0:17:37:30:40:de:1a:95:75:d2:
8b:02:b9:f6:60:f1:03:44:d6:4c:c4:91:47:e1:18:b4:70:f3:
13:52:1c:0f:63:bc:87:67:b1:b9:ba:6f:6e:97:93:f8:ec:71:
a9:ff:be:16:e5:fa:ee:2a:99:ac:60:a8:78:f7:a1:43:9f:41:
9c:bf:c9:29:b8:00:29:d4:d4:7e:84:83:b3:9c:74:90:89:70:
2b:dd:7a:a6:ed:ce:4b:98:d6:6f:48:07:1c:5c:39:0c:d1:a7:
e1:20:35:3c:5d:aa:5e:5b:8d:73:f9:c9:6f:55:50:e5:a1:3d:
45:b2:f7:21:92:b7:8e:70:0f:4a:a7:3b:86:84:fe:81:5e:56:
33:41:50:ae
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jun 8 00:52:19 2025 by rpki-client