
Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/10/8bf78d-c3b5-4691-8108-f0cad9ff65be/1/U0Yz8Z9h1lRuur996ft6qYftW_M.mft
File: U0Yz8Z9h1lRuur996ft6qYftW_M.mft (raw, json)
Hash identifier: isggEkIvuFLpd3DEwHLQ5mXssLcvwfXsGRbLamc5qlo=
Subject key identifier: F1:2F:38:77:0B:14:78:74:78:B2:4E:10:5E:04:CF:14:FA:26:19:62
Authority key identifier: 53:46:33:F1:9F:61:D6:54:6E:BA:BF:7D:E9:FB:7A:A9:87:ED:5B:F3
Certificate issuer: /CN=534633f19f61d6546ebabf7de9fb7aa987ed5bf3
Certificate serial: 01976E8710F48E2239EF77971CBA0B675E3D
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/U0Yz8Z9h1lRuur996ft6qYftW_M.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/10/8bf78d-c3b5-4691-8108-f0cad9ff65be/1/U0Yz8Z9h1lRuur996ft6qYftW_M.mft
Manifest number: 1590
Signing time: Sat 14 Jun 2025 13:00:34 +0000
Manifest this update: Sat 14 Jun 2025 13:00:34 +0000
Manifest next update: Sun 15 Jun 2025 13:00:34 +0000
Files and hashes: 1: U0Yz8Z9h1lRuur996ft6qYftW_M.crl (hash: JCO8/q9afvMSeFTSH03MZ0jcuV25bA6ybGePO+cqgt4=)
2: dxBH4TV51cTFiAYXOVtwRqrZraY.roa (hash: kYpITsy+89G8dkg3+FaIKDSidYdWIry8+rbXb5yDBDM=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/10/8bf78d-c3b5-4691-8108-f0cad9ff65be/1/U0Yz8Z9h1lRuur996ft6qYftW_M.crl
rsync://rpki.ripe.net/repository/DEFAULT/10/8bf78d-c3b5-4691-8108-f0cad9ff65be/1/U0Yz8Z9h1lRuur996ft6qYftW_M.mft
rsync://rpki.ripe.net/repository/DEFAULT/U0Yz8Z9h1lRuur996ft6qYftW_M.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 15 Jun 2025 12:00:17 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:6e:87:10:f4:8e:22:39:ef:77:97:1c:ba:0b:67:5e:3d
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=534633f19f61d6546ebabf7de9fb7aa987ed5bf3
Validity
Not Before: Jun 14 13:00:34 2025 GMT
Not After : Jun 15 13:00:34 2025 GMT
Subject: CN=f12f38770b14787478b24e105e04cf14fa261962
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b9:70:3d:74:29:59:92:6b:df:0c:d2:8a:eb:ee:
2b:b3:32:d1:d1:ff:21:1b:ac:c9:14:a9:69:2e:5c:
88:11:65:e1:9d:1d:34:99:e7:4f:f3:1d:b9:f6:07:
49:2c:af:b8:0d:d1:6b:a9:1b:d2:df:05:d4:08:a8:
2f:6a:a5:ba:ca:45:55:0c:ae:f6:13:0c:ca:bb:41:
9e:04:18:6a:26:4a:60:97:41:eb:4f:02:26:62:9f:
53:47:17:28:4f:34:51:ab:cc:80:fd:79:e2:04:93:
26:c8:94:28:a7:a3:a1:af:c2:b3:5f:8d:c3:b0:c9:
8b:2f:55:85:72:80:e2:88:f3:98:c8:be:9d:d6:ea:
5b:23:ff:72:29:2f:b2:70:30:b4:34:52:23:a5:8d:
51:9d:5f:21:99:33:4f:8b:95:0e:39:45:90:e0:b2:
2c:59:0a:fa:6d:e4:47:1f:1e:66:60:81:05:c2:56:
e9:0d:8d:42:c0:ee:66:d6:e9:c5:c3:8d:81:6e:f4:
47:b2:f8:6f:d1:d8:3a:9b:87:f5:59:d4:8e:d4:c7:
33:7e:8a:93:91:54:32:cd:80:e3:29:0a:47:f2:a4:
3e:19:a1:04:09:fa:fc:b1:1f:60:9a:fa:33:9f:9e:
b1:a1:bf:f4:2f:e5:41:5d:d6:04:b9:b7:43:3d:d5:
d9:e7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F1:2F:38:77:0B:14:78:74:78:B2:4E:10:5E:04:CF:14:FA:26:19:62
X509v3 Authority Key Identifier:
keyid:53:46:33:F1:9F:61:D6:54:6E:BA:BF:7D:E9:FB:7A:A9:87:ED:5B:F3
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/U0Yz8Z9h1lRuur996ft6qYftW_M.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/10/8bf78d-c3b5-4691-8108-f0cad9ff65be/1/U0Yz8Z9h1lRuur996ft6qYftW_M.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/10/8bf78d-c3b5-4691-8108-f0cad9ff65be/1/U0Yz8Z9h1lRuur996ft6qYftW_M.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
34:c0:f4:d1:00:54:b8:32:7f:94:1e:70:71:57:28:ec:30:0c:
19:02:85:ce:3a:9f:02:24:41:b3:40:9f:b8:07:3c:40:5f:dc:
44:95:db:6f:37:50:6c:8f:40:11:f6:e5:bb:15:a9:09:2b:49:
f1:c6:07:b3:c4:fb:16:90:5b:36:d2:b6:b1:1e:aa:3b:07:2f:
81:09:ad:e0:a1:0b:6e:41:b3:bc:83:ba:67:bb:6f:a5:e5:f7:
b7:54:b3:b2:74:dd:17:2a:ff:57:62:58:b5:d8:2a:1c:1c:f3:
44:c1:54:e4:e6:0d:00:e8:44:84:23:5a:a5:9b:8b:fb:fb:91:
04:d1:3f:1c:c5:a3:27:6f:0b:e9:cf:fc:a6:06:93:02:2b:dd:
8e:b2:c9:83:fb:ce:77:9a:a0:2f:fc:2e:71:b7:db:a5:a3:bd:
63:4e:a3:11:8a:dd:be:1d:78:fa:d7:4c:34:6b:00:a5:60:32:
bc:9d:f2:f0:6a:d7:35:8d:50:82:19:1d:d8:c4:6d:c3:33:f3:
68:2a:b0:49:85:df:3f:fb:dd:f3:e2:01:64:db:75:32:10:3d:
a3:82:62:0e:3e:e6:bc:b3:53:0c:7b:b4:88:a5:71:54:48:a4:
9b:ce:36:cf:41:d2:f4:ed:c3:40:91:b5:de:be:a5:9e:4a:a9:
fe:57:09:9b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 14 21:20:41 2025 by rpki-client