Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/10/8bf78d-c3b5-4691-8108-f0cad9ff65be/1/U0Yz8Z9h1lRuur996ft6qYftW_M.mft
File: U0Yz8Z9h1lRuur996ft6qYftW_M.mft (raw, json)
Hash identifier: NHhvu+1FLi1P2O6Zr6VOWM0Uwg548OUlEedXSPLrz18=
Subject key identifier: 28:BA:50:FB:F9:90:E7:0A:FC:8C:9B:2E:21:F2:E2:22:37:1E:59:4B
Authority key identifier: 53:46:33:F1:9F:61:D6:54:6E:BA:BF:7D:E9:FB:7A:A9:87:ED:5B:F3
Certificate issuer: /CN=534633f19f61d6546ebabf7de9fb7aa987ed5bf3
Certificate serial: 01975948B9CE38F0DF2981C0E609AAB9E2B7
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/U0Yz8Z9h1lRuur996ft6qYftW_M.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/10/8bf78d-c3b5-4691-8108-f0cad9ff65be/1/U0Yz8Z9h1lRuur996ft6qYftW_M.mft
Manifest number: 1585
Signing time: Tue 10 Jun 2025 10:00:27 +0000
Manifest this update: Tue 10 Jun 2025 10:00:27 +0000
Manifest next update: Wed 11 Jun 2025 10:00:27 +0000
Files and hashes: 1: U0Yz8Z9h1lRuur996ft6qYftW_M.crl (hash: zpfQYL1BALG1hzgjDkIjeXbY/GGrjbhNJPxIutdu0AE=)
2: dxBH4TV51cTFiAYXOVtwRqrZraY.roa (hash: kYpITsy+89G8dkg3+FaIKDSidYdWIry8+rbXb5yDBDM=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/10/8bf78d-c3b5-4691-8108-f0cad9ff65be/1/U0Yz8Z9h1lRuur996ft6qYftW_M.crl
rsync://rpki.ripe.net/repository/DEFAULT/10/8bf78d-c3b5-4691-8108-f0cad9ff65be/1/U0Yz8Z9h1lRuur996ft6qYftW_M.mft
rsync://rpki.ripe.net/repository/DEFAULT/U0Yz8Z9h1lRuur996ft6qYftW_M.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 11 Jun 2025 09:00:17 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:59:48:b9:ce:38:f0:df:29:81:c0:e6:09:aa:b9:e2:b7
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=534633f19f61d6546ebabf7de9fb7aa987ed5bf3
Validity
Not Before: Jun 10 10:00:27 2025 GMT
Not After : Jun 11 10:00:27 2025 GMT
Subject: CN=28ba50fbf990e70afc8c9b2e21f2e222371e594b
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b2:2b:2b:74:cd:fe:e2:15:2d:c0:43:23:b7:78:
34:8b:4f:b6:a3:b1:25:a3:6c:a3:4f:9c:ca:e8:a7:
64:d3:82:ba:9e:ba:2a:bf:0b:91:ac:8c:b9:91:4f:
13:14:a6:a8:cf:e1:85:e6:20:8a:8c:d7:29:e8:92:
d4:87:67:02:56:b7:01:b2:ac:0e:80:91:92:ea:0d:
1e:b3:08:51:0b:e1:9c:da:f4:b9:ba:e0:2e:15:e3:
8b:cf:6d:82:00:ed:83:42:85:78:48:47:de:af:82:
e5:2b:1e:18:cd:fe:bd:8b:97:53:76:86:dd:b0:df:
bb:10:8b:54:71:48:99:1e:3e:3b:ba:d5:04:03:b5:
b4:02:c6:68:50:ec:cf:3c:f9:1e:ba:be:5a:90:60:
e8:74:c8:08:37:4e:04:dc:1c:03:12:b4:e0:8c:53:
ca:f2:61:47:b8:a0:ea:01:84:7b:1f:eb:8a:4f:a7:
cd:2b:8e:7a:c7:69:42:27:25:5b:b6:00:f1:51:79:
99:8b:32:50:4e:70:a8:d8:c8:d5:83:f2:2c:b7:a8:
a8:07:d0:97:c0:19:96:f0:f7:fa:5c:a5:59:03:4a:
a7:77:fa:30:4a:1e:f0:b6:3c:c9:ec:06:25:50:9a:
1d:17:11:10:df:7b:24:1c:44:0f:c8:1e:31:54:1e:
87:a9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
28:BA:50:FB:F9:90:E7:0A:FC:8C:9B:2E:21:F2:E2:22:37:1E:59:4B
X509v3 Authority Key Identifier:
keyid:53:46:33:F1:9F:61:D6:54:6E:BA:BF:7D:E9:FB:7A:A9:87:ED:5B:F3
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/U0Yz8Z9h1lRuur996ft6qYftW_M.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/10/8bf78d-c3b5-4691-8108-f0cad9ff65be/1/U0Yz8Z9h1lRuur996ft6qYftW_M.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/10/8bf78d-c3b5-4691-8108-f0cad9ff65be/1/U0Yz8Z9h1lRuur996ft6qYftW_M.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
7f:b8:9b:d3:f6:7f:ad:da:2e:6b:e9:7e:97:86:32:c8:88:ab:
69:52:63:de:aa:2b:d3:5c:60:d8:5f:a9:8b:67:b7:48:07:42:
93:fb:84:73:cf:a0:1e:12:80:82:f1:df:72:cd:a3:d0:4c:b9:
d0:7f:cf:83:76:1a:65:63:ac:e4:c1:b4:38:b1:d3:ad:21:47:
72:49:fa:f8:12:80:8b:ad:b5:81:aa:e7:3f:b4:3b:2d:df:56:
f9:5b:91:f2:f7:e4:ac:8a:0e:2f:e1:e9:9e:18:83:aa:ea:e0:
2c:4d:91:62:f9:56:ac:13:b4:ab:cd:77:1e:f7:b3:f0:63:6c:
9b:42:c6:c6:5d:6d:16:0c:5e:b4:b3:91:4b:3a:a4:a2:5e:6d:
9f:20:13:81:42:58:68:2d:d0:78:66:94:92:9d:87:3d:2b:37:
ae:d5:eb:bf:df:5f:fe:89:8a:a6:8f:16:02:e9:5e:92:2e:fb:
0d:34:63:b6:ca:1c:8a:96:cb:7f:19:8c:f4:3c:14:55:9a:d4:
bb:86:15:a3:04:e1:3d:50:dd:1a:84:4a:d7:17:5f:2d:ec:5f:
d3:11:71:e0:d8:82:a2:7e:1c:36:3c:cb:62:01:cd:d7:10:2c:
56:a8:0c:f4:1f:70:1e:9a:e0:72:b0:22:c2:4d:35:f1:84:3d:
2f:a9:15:5b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Jun 10 12:51:11 2025 by rpki-client