Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/0b/89c4ab-984b-4f6c-bdd0-33d7ac370979/1/UzkLE8nvSvz9CBJBEeb2PcMBZao.mft
File: UzkLE8nvSvz9CBJBEeb2PcMBZao.mft (raw, json)
Hash identifier: AUHRvENPQpnGUksXKJuCqIU+cxtw9LrQoeQSFFz57CE=
Subject key identifier: 6D:E5:CD:D4:80:DB:D9:63:F3:E8:64:CE:6F:5A:56:96:1D:99:89:7F
Authority key identifier: 53:39:0B:13:C9:EF:4A:FC:FD:08:12:41:11:E6:F6:3D:C3:01:65:AA
Certificate issuer: /CN=53390b13c9ef4afcfd08124111e6f63dc30165aa
Certificate serial: 01974BC44F26979ACF48DCF980FE1ECF8E42
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/UzkLE8nvSvz9CBJBEeb2PcMBZao.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/0b/89c4ab-984b-4f6c-bdd0-33d7ac370979/1/UzkLE8nvSvz9CBJBEeb2PcMBZao.mft
Manifest number: 1550
Signing time: Sat 07 Jun 2025 19:00:45 +0000
Manifest this update: Sat 07 Jun 2025 19:00:45 +0000
Manifest next update: Sun 08 Jun 2025 19:00:45 +0000
Files and hashes: 1: FNCzHrm4Mhf_pUlLlpWPWnQnnOo.roa (hash: m1dgFfAYSERrYZAtXBbjJ6qPJN5B/vD9qgbql5DrAM0=)
2: UzkLE8nvSvz9CBJBEeb2PcMBZao.crl (hash: qNZFrh42eL/gEZQ3EW2+ZiaNceMQc5ZU92EIxL/DRQ8=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/0b/89c4ab-984b-4f6c-bdd0-33d7ac370979/1/UzkLE8nvSvz9CBJBEeb2PcMBZao.crl
rsync://rpki.ripe.net/repository/DEFAULT/0b/89c4ab-984b-4f6c-bdd0-33d7ac370979/1/UzkLE8nvSvz9CBJBEeb2PcMBZao.mft
rsync://rpki.ripe.net/repository/DEFAULT/UzkLE8nvSvz9CBJBEeb2PcMBZao.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 08 Jun 2025 19:00:45 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:4b:c4:4f:26:97:9a:cf:48:dc:f9:80:fe:1e:cf:8e:42
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=53390b13c9ef4afcfd08124111e6f63dc30165aa
Validity
Not Before: Jun 7 19:00:45 2025 GMT
Not After : Jun 8 19:00:45 2025 GMT
Subject: CN=6de5cdd480dbd963f3e864ce6f5a56961d99897f
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:dd:46:88:b3:73:57:cf:4c:9d:1c:b4:ce:f5:67:
6b:4c:16:6d:26:b7:7f:4a:6e:bb:c5:88:1d:d1:e8:
b2:86:6d:af:d4:44:91:12:41:67:14:bd:ab:55:c8:
e7:c4:8f:c5:21:4b:e1:2f:a6:b3:b9:5c:17:c0:1b:
da:66:1b:ac:d9:83:35:ab:fa:23:9d:96:cd:f0:ff:
6d:3b:94:85:5a:fa:b0:78:41:39:ae:ab:ca:a6:22:
21:92:79:71:03:9d:8f:75:bd:11:7d:18:3f:31:11:
45:c7:b9:af:08:d5:06:40:c7:eb:2f:ac:52:bd:96:
20:65:d7:6a:cc:47:74:d0:f4:48:1b:59:00:58:b7:
bc:e8:9d:0a:bc:f9:85:3b:88:85:b9:92:43:08:aa:
f6:7b:bc:f0:e2:74:25:d0:7d:29:4e:f3:69:3a:6d:
04:aa:fc:33:a2:bf:d5:c5:f1:3e:b8:eb:03:80:89:
98:eb:a9:5e:d7:87:af:3b:93:6b:3f:5f:f7:5a:5a:
31:82:46:48:d2:12:73:5c:fa:e0:d5:3c:b8:28:17:
ed:a0:70:0b:01:c4:51:1a:93:68:ad:e7:69:b2:e1:
ca:6a:d9:0c:a3:f5:59:c9:a4:85:82:a3:d5:c8:00:
b4:c0:1c:27:f6:4f:5c:d3:c8:9b:61:61:87:77:7d:
60:59
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
6D:E5:CD:D4:80:DB:D9:63:F3:E8:64:CE:6F:5A:56:96:1D:99:89:7F
X509v3 Authority Key Identifier:
keyid:53:39:0B:13:C9:EF:4A:FC:FD:08:12:41:11:E6:F6:3D:C3:01:65:AA
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/UzkLE8nvSvz9CBJBEeb2PcMBZao.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/0b/89c4ab-984b-4f6c-bdd0-33d7ac370979/1/UzkLE8nvSvz9CBJBEeb2PcMBZao.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/0b/89c4ab-984b-4f6c-bdd0-33d7ac370979/1/UzkLE8nvSvz9CBJBEeb2PcMBZao.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
5f:65:37:54:d1:b1:11:5b:4e:8b:df:e0:e4:39:96:80:b4:79:
e8:d4:82:d7:74:86:9e:a7:ac:ad:e3:75:7f:ca:d3:d5:03:ae:
51:db:d3:d0:03:ef:9d:c6:5c:27:a1:4a:6d:8f:4a:0d:6b:fb:
3b:85:f4:03:ac:78:b1:58:00:dc:f3:d4:6a:9a:20:e7:42:04:
5b:be:d3:a8:9e:09:7d:aa:4e:12:fe:c8:e0:e1:d1:fe:2d:46:
c2:8f:04:60:c1:34:32:f3:e1:9f:e1:b2:8d:28:5c:1c:0d:3b:
a2:3f:8e:47:3e:6e:bc:6d:97:49:b5:d7:d3:d9:69:5d:5b:9c:
08:a3:30:ee:c5:44:62:e5:72:f9:c2:e1:c2:83:11:21:83:ed:
42:30:e6:03:7c:d5:74:11:34:ff:1d:f8:86:6f:4d:ae:8c:0d:
24:bd:8c:e0:c4:70:16:68:b5:f9:f9:25:a9:0f:23:73:c5:37:
f9:58:bf:8a:65:66:13:df:c6:8d:cd:d1:5b:c1:da:9a:93:9f:
8d:ff:29:1d:90:74:e4:7b:59:e3:7a:27:74:01:c8:aa:85:5b:
16:bf:34:b5:bd:5f:fd:03:33:cc:44:fe:47:2c:3c:9c:93:84:
a0:45:bf:4f:45:a2:f4:05:34:9a:77:9f:9c:22:8c:7c:80:66:
95:8d:4c:5d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jun 8 06:13:10 2025 by rpki-client