Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/0e/3f6178-5fd3-403f-8fec-1a89ff11965e/1/Ua1nkbjb6cNSvWSpMiFytBxLIXE.mft
File: Ua1nkbjb6cNSvWSpMiFytBxLIXE.mft (raw, json)
Hash identifier: L1uE6KEj+An5Zzs62KQEGJl4FOlg35fx5wmI9jXOJVU=
Subject key identifier: C1:1F:B1:C3:7B:60:C4:57:E6:DE:1E:FA:1E:9C:61:5B:73:43:05:23
Authority key identifier: 51:AD:67:91:B8:DB:E9:C3:52:BD:64:A9:32:21:72:B4:1C:4B:21:71
Certificate issuer: /CN=51ad6791b8dbe9c352bd64a9322172b41c4b2171
Certificate serial: 01974AE85AE7D15CAA1AC94443B03409FF22
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Ua1nkbjb6cNSvWSpMiFytBxLIXE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/0e/3f6178-5fd3-403f-8fec-1a89ff11965e/1/Ua1nkbjb6cNSvWSpMiFytBxLIXE.mft
Manifest number: 054E
Signing time: Sat 07 Jun 2025 15:00:30 +0000
Manifest this update: Sat 07 Jun 2025 15:00:30 +0000
Manifest next update: Sun 08 Jun 2025 15:00:30 +0000
Files and hashes: 1: Hi9hJLSsqdfwwjDafJDvlExJJoI.roa (hash: PID2YEd+ZOdlQLJzFIlElIOxp8cs3tI73VYlO3AzPb4=)
2: Ua1nkbjb6cNSvWSpMiFytBxLIXE.crl (hash: 2ZYw1BO90Ci0Wv3QoPkISNXud6LSgup7P2YJbDIShsA=)
3: Yy7EyL4jOYhS2ny07A-uohis4hw.roa (hash: 939gAFuZ8T1J06oXgjy3uy3jHGyJvoFV29uIXoQOhss=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/0e/3f6178-5fd3-403f-8fec-1a89ff11965e/1/Ua1nkbjb6cNSvWSpMiFytBxLIXE.crl
rsync://rpki.ripe.net/repository/DEFAULT/0e/3f6178-5fd3-403f-8fec-1a89ff11965e/1/Ua1nkbjb6cNSvWSpMiFytBxLIXE.mft
rsync://rpki.ripe.net/repository/DEFAULT/Ua1nkbjb6cNSvWSpMiFytBxLIXE.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 08 Jun 2025 11:24:49 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:4a:e8:5a:e7:d1:5c:aa:1a:c9:44:43:b0:34:09:ff:22
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=51ad6791b8dbe9c352bd64a9322172b41c4b2171
Validity
Not Before: Jun 7 15:00:30 2025 GMT
Not After : Jun 8 15:00:30 2025 GMT
Subject: CN=c11fb1c37b60c457e6de1efa1e9c615b73430523
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:eb:7a:0c:31:25:9c:ba:1c:18:3e:be:da:ca:61:
a9:e3:59:67:7f:6e:fa:1c:b3:fb:3e:ae:ec:a2:80:
73:48:6d:79:ee:3c:df:f6:9e:87:cf:fc:9f:a5:8b:
79:5a:2d:29:df:6e:7b:ea:86:05:a4:35:bb:1c:9b:
f8:2b:48:14:b7:0e:21:e5:b7:0c:0a:66:4d:0a:11:
ec:4e:1d:14:05:d8:6f:52:33:e2:07:5d:8b:3c:bf:
d5:7e:6a:3f:61:8f:21:54:82:46:ba:ee:ef:09:32:
ce:29:e4:82:88:e4:ae:3b:e0:32:29:19:04:8c:6b:
c5:3f:25:54:3a:e3:2c:5f:c5:83:43:81:7c:e9:8a:
69:7a:e1:c4:cb:a8:82:0b:cc:9c:63:76:49:c1:c2:
e6:47:23:7a:6f:b0:37:e5:3a:3e:09:c8:00:dc:8d:
43:85:15:85:c2:c6:44:58:3a:62:34:d0:fc:10:a8:
01:11:1a:a2:63:90:04:94:9e:68:bc:e4:fa:66:61:
09:10:37:90:52:08:b2:e9:ca:b3:be:51:4c:55:bb:
3f:7f:e9:7b:35:79:4d:bb:48:e7:37:da:9f:21:93:
b9:b3:e9:78:66:92:89:05:7c:62:0f:ef:a4:41:e9:
04:1b:0d:fa:ef:e4:3b:14:76:86:fe:e4:24:a5:ba:
cd:d9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C1:1F:B1:C3:7B:60:C4:57:E6:DE:1E:FA:1E:9C:61:5B:73:43:05:23
X509v3 Authority Key Identifier:
keyid:51:AD:67:91:B8:DB:E9:C3:52:BD:64:A9:32:21:72:B4:1C:4B:21:71
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Ua1nkbjb6cNSvWSpMiFytBxLIXE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/0e/3f6178-5fd3-403f-8fec-1a89ff11965e/1/Ua1nkbjb6cNSvWSpMiFytBxLIXE.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/0e/3f6178-5fd3-403f-8fec-1a89ff11965e/1/Ua1nkbjb6cNSvWSpMiFytBxLIXE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
30:ab:a0:f4:71:53:6e:02:07:4f:c3:63:c9:da:4d:2c:b6:8c:
10:8a:2d:15:bf:4a:a0:cb:a0:e8:bc:a5:2c:4d:16:3d:a2:95:
86:c2:df:a1:0e:55:22:e6:3a:3f:32:b1:da:8c:98:d3:ce:72:
a3:6c:54:62:03:e3:84:37:9c:26:ee:91:34:98:0e:08:88:bf:
ab:d1:a2:5a:10:72:65:88:61:f6:7d:fb:e2:73:84:01:8e:87:
9b:fe:fe:6d:1e:c1:4f:f1:11:0e:86:cf:46:14:73:b6:68:06:
4f:48:2e:34:de:c6:51:b6:59:5f:4d:f5:f9:6e:b1:a9:a9:f7:
d6:dd:2c:db:20:ff:46:df:00:5b:b1:6a:3a:df:d4:de:45:ec:
fc:2c:82:c5:aa:c8:7a:a5:ec:36:8a:2a:57:52:7b:bf:3f:7d:
d1:85:88:bd:cf:8a:11:df:1c:90:62:0c:05:da:d0:21:57:e9:
12:ac:f4:65:31:a2:f2:35:c8:20:72:2c:a7:df:df:ed:89:d9:
da:96:0b:d4:91:ca:ed:b6:c3:5e:47:de:1b:d7:aa:b3:c7:ef:
de:bc:f7:95:97:c2:c1:97:96:d6:1f:49:64:5e:88:ae:7e:53:
7d:dd:00:d0:e5:7c:03:fb:fd:dc:78:77:0e:5a:d6:fb:56:c6:
e2:5a:5f:d2
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 7 21:02:13 2025 by rpki-client