Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/15/decaeb-3f95-4f2a-af65-0c020a7e4a44/1/Us7uLW16UMkkmdoaIfKrt6KndMg.mft
File: Us7uLW16UMkkmdoaIfKrt6KndMg.mft (raw, json)
Hash identifier: MXvlfnI+01fR8Ut5bTpg/DG6fNGlhvwoKlXD40khzOQ=
Subject key identifier: F1:69:B8:F1:9A:BC:C7:EC:7E:D6:B6:02:58:3C:4F:4F:AD:F3:E7:7F
Authority key identifier: 52:CE:EE:2D:6D:7A:50:C9:24:99:DA:1A:21:F2:AB:B7:A2:A7:74:C8
Certificate issuer: /CN=52ceee2d6d7a50c92499da1a21f2abb7a2a774c8
Certificate serial: 0197499F492C5545896269EC7DB9DC1059FE
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Us7uLW16UMkkmdoaIfKrt6KndMg.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/15/decaeb-3f95-4f2a-af65-0c020a7e4a44/1/Us7uLW16UMkkmdoaIfKrt6KndMg.mft
Manifest number: 0A1A
Signing time: Sat 07 Jun 2025 09:01:05 +0000
Manifest this update: Sat 07 Jun 2025 09:01:05 +0000
Manifest next update: Sun 08 Jun 2025 09:01:05 +0000
Files and hashes: 1: HgzDmPqeZBdX21PHNQn3j0-FDSk.roa (hash: jL+abeK7Dj613IZkXcAHwX1ldRNUAWLyPE0MF0XmQTs=)
2: JmahROWNlzzWLOhj6faRjwc1jmM.roa (hash: 8En7I8LLB7AUar/hMjwx3dkXSNApjPuQ8H4paRvFqeg=)
3: Us7uLW16UMkkmdoaIfKrt6KndMg.crl (hash: grYen7ejFXsN+ScZgDrsyqnXWJSpnp6NFwHsvdSThTE=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/15/decaeb-3f95-4f2a-af65-0c020a7e4a44/1/Us7uLW16UMkkmdoaIfKrt6KndMg.crl
rsync://rpki.ripe.net/repository/DEFAULT/15/decaeb-3f95-4f2a-af65-0c020a7e4a44/1/Us7uLW16UMkkmdoaIfKrt6KndMg.mft
rsync://rpki.ripe.net/repository/DEFAULT/Us7uLW16UMkkmdoaIfKrt6KndMg.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 08 Jun 2025 07:00:17 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:49:9f:49:2c:55:45:89:62:69:ec:7d:b9:dc:10:59:fe
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=52ceee2d6d7a50c92499da1a21f2abb7a2a774c8
Validity
Not Before: Jun 7 09:01:05 2025 GMT
Not After : Jun 8 09:01:05 2025 GMT
Subject: CN=f169b8f19abcc7ec7ed6b602583c4f4fadf3e77f
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8c:c1:35:92:8e:52:dd:ec:20:c1:41:67:67:f1:
0e:4d:41:0a:15:4c:9e:57:74:54:91:d3:e4:79:89:
85:75:57:4e:6a:50:5e:6a:6f:5e:da:53:f6:9b:6e:
1b:bf:6f:b1:bc:97:e9:8f:27:b1:33:d1:39:af:58:
91:4d:26:19:24:a3:24:bf:f8:04:79:76:45:d7:17:
25:e2:16:88:fd:cb:1a:63:a8:40:b7:48:d2:b5:17:
11:fb:27:a3:b6:c6:79:87:bf:c6:52:b4:0f:f2:2d:
df:46:b6:d0:61:99:83:0b:17:ff:b3:c0:59:93:94:
2b:87:e7:07:b8:52:9a:d5:14:51:87:84:bd:e3:38:
5c:06:4b:61:0c:05:a9:ed:ca:93:ac:04:6a:55:c4:
f5:44:70:84:94:89:b7:4e:51:e3:a1:b0:be:ef:c4:
4a:22:35:0a:54:9e:da:bc:97:ea:bd:02:81:9c:29:
71:d2:2d:ba:36:28:2d:76:04:94:f5:21:c8:36:91:
c4:9d:6e:c0:a1:dd:a2:d7:f5:55:09:36:78:f7:e3:
b3:ac:52:e5:09:f9:cb:0a:1b:0e:d9:80:29:06:eb:
a1:f3:08:c3:a2:4e:8c:73:46:fe:19:5d:79:2c:39:
23:f4:2b:28:88:62:65:6b:33:a2:9e:5a:3b:df:ef:
bf:1d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F1:69:B8:F1:9A:BC:C7:EC:7E:D6:B6:02:58:3C:4F:4F:AD:F3:E7:7F
X509v3 Authority Key Identifier:
keyid:52:CE:EE:2D:6D:7A:50:C9:24:99:DA:1A:21:F2:AB:B7:A2:A7:74:C8
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Us7uLW16UMkkmdoaIfKrt6KndMg.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/15/decaeb-3f95-4f2a-af65-0c020a7e4a44/1/Us7uLW16UMkkmdoaIfKrt6KndMg.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/15/decaeb-3f95-4f2a-af65-0c020a7e4a44/1/Us7uLW16UMkkmdoaIfKrt6KndMg.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
c0:f2:09:ba:3d:21:aa:88:26:5a:8e:f5:d0:23:cf:4f:d6:5a:
47:63:79:19:2e:ce:02:bf:4c:67:72:4a:3c:4e:84:b8:2c:ee:
b2:01:8d:f0:93:88:24:75:d2:21:23:43:e9:9a:0a:f7:2b:6a:
44:c4:1a:22:39:a3:92:75:a8:54:3d:70:fa:74:08:ff:22:16:
6f:d6:a8:84:44:f3:ea:95:2d:02:cd:4b:62:d2:af:70:3d:a5:
90:29:52:04:6a:91:c1:3c:92:c6:01:13:e5:22:8d:da:ca:12:
e2:ab:a1:6f:57:d7:63:06:5f:ad:33:45:32:16:5d:94:23:11:
c2:ef:26:5b:48:68:cc:0d:bb:4e:b9:2a:60:45:e2:47:bc:28:
23:49:d4:e0:39:d3:42:91:62:50:7e:db:d9:f5:95:7f:7a:9e:
62:eb:28:1b:6e:ca:c0:0b:f5:f7:19:f9:2b:6b:12:08:f3:3f:
c6:11:34:07:10:f8:2c:6d:59:0f:32:cc:cb:fe:f0:d4:18:a3:
d0:2c:03:06:21:07:2f:69:bc:b7:23:8f:97:60:3c:8c:75:33:
7e:a1:64:67:04:16:ae:24:4a:b7:18:1a:88:3c:bf:4c:ab:03:
d3:f7:48:41:c0:4f:53:33:47:04:28:a1:f8:eb:02:bf:08:d6:
4d:20:c0:55
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 7 10:48:02 2025 by rpki-client