Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/16/5f1511-10fc-43e7-a8e0-58b79bc9bcc7/1/UHx3C7awjctNbqmwyWJyrzpvnHE.mft
File: UHx3C7awjctNbqmwyWJyrzpvnHE.mft (raw, json)
Hash identifier: 60OZUZIZiwc3vH//HGujk93Vb2yAUQ+8Lna2hd7HPQc=
Subject key identifier: 79:F0:DC:F6:12:3B:01:8A:40:88:74:D8:9D:B3:A8:60:A0:B0:E8:9B
Authority key identifier: 50:7C:77:0B:B6:B0:8D:CB:4D:6E:A9:B0:C9:62:72:AF:3A:6F:9C:71
Certificate issuer: /CN=507c770bb6b08dcb4d6ea9b0c96272af3a6f9c71
Certificate serial: 01974AB17721D13D86449891629F5AB9C5D6
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/UHx3C7awjctNbqmwyWJyrzpvnHE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/16/5f1511-10fc-43e7-a8e0-58b79bc9bcc7/1/UHx3C7awjctNbqmwyWJyrzpvnHE.mft
Manifest number: 4E
Signing time: Sat 07 Jun 2025 14:00:33 +0000
Manifest this update: Sat 07 Jun 2025 14:00:33 +0000
Manifest next update: Sun 08 Jun 2025 14:00:33 +0000
Files and hashes: 1: 7vKO7KJon2U-PLT4fG2hAFvhGko.roa (hash: zjVmGhrF2p6uK4Xne1JZdTjHYFdY+pPfwr5U6yqo03M=)
2: EdaEcdzfZKUU8pzTsayBRrh8XNY.roa (hash: O3+hPZUQsLmn/0ZqbZYW7yg/F0HNHy5aqWBZDmT4tfM=)
3: UHx3C7awjctNbqmwyWJyrzpvnHE.crl (hash: V/12/CvUeo6Vd3h6aggo2LPGuSeFnF+cMw4ByDWcAl8=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/16/5f1511-10fc-43e7-a8e0-58b79bc9bcc7/1/UHx3C7awjctNbqmwyWJyrzpvnHE.crl
rsync://rpki.ripe.net/repository/DEFAULT/16/5f1511-10fc-43e7-a8e0-58b79bc9bcc7/1/UHx3C7awjctNbqmwyWJyrzpvnHE.mft
rsync://rpki.ripe.net/repository/DEFAULT/UHx3C7awjctNbqmwyWJyrzpvnHE.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 08 Jun 2025 09:00:17 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:4a:b1:77:21:d1:3d:86:44:98:91:62:9f:5a:b9:c5:d6
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=507c770bb6b08dcb4d6ea9b0c96272af3a6f9c71
Validity
Not Before: Jun 7 14:00:33 2025 GMT
Not After : Jun 8 14:00:33 2025 GMT
Subject: CN=79f0dcf6123b018a408874d89db3a860a0b0e89b
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b4:09:2d:47:ed:32:11:a6:43:6e:91:f1:9c:7d:
32:ae:2e:74:f0:20:6d:90:b1:f5:51:83:eb:53:32:
98:b4:d8:94:19:ec:a7:05:1f:5a:cb:6a:da:13:7b:
67:14:19:e6:ba:f8:ed:4b:39:46:47:3e:a1:ec:29:
ca:17:44:66:72:1b:6a:f3:3c:e1:df:e1:22:fa:69:
25:d8:7e:5b:48:07:ec:8a:be:b1:5e:d5:01:21:ea:
63:be:30:80:c6:70:f1:68:3c:e5:ba:ba:fb:c9:2a:
d5:c7:57:7a:9f:52:48:fc:9e:e5:dd:00:66:67:9f:
4c:51:82:b2:f8:7d:fe:d4:63:a9:f0:ce:4d:2a:55:
bc:5b:f2:1b:d2:24:b5:de:e5:30:f8:d4:9e:52:4f:
5c:95:fd:aa:1e:11:47:f7:d6:10:bd:19:6e:81:82:
d0:8d:a3:60:ad:6c:67:76:cc:fb:f0:d1:ff:eb:99:
9a:c8:b6:8a:62:5d:2a:04:5b:d8:d3:89:f5:df:8c:
53:b6:27:b1:0d:48:f5:91:97:8b:82:ab:6d:c0:b3:
05:45:e0:7a:50:af:e4:65:3e:ee:d2:08:f4:34:14:
1f:63:c4:54:57:b6:79:35:23:dd:91:bf:32:08:b3:
13:98:ad:e9:44:38:89:53:fc:d4:eb:bc:46:96:43:
d5:19
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
79:F0:DC:F6:12:3B:01:8A:40:88:74:D8:9D:B3:A8:60:A0:B0:E8:9B
X509v3 Authority Key Identifier:
keyid:50:7C:77:0B:B6:B0:8D:CB:4D:6E:A9:B0:C9:62:72:AF:3A:6F:9C:71
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/UHx3C7awjctNbqmwyWJyrzpvnHE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/16/5f1511-10fc-43e7-a8e0-58b79bc9bcc7/1/UHx3C7awjctNbqmwyWJyrzpvnHE.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/16/5f1511-10fc-43e7-a8e0-58b79bc9bcc7/1/UHx3C7awjctNbqmwyWJyrzpvnHE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
af:f5:d6:09:e2:3c:21:ad:6e:31:64:cb:cb:e4:88:e3:b9:c0:
31:9e:4d:2f:bc:80:21:2e:8b:06:dd:ca:f5:84:1f:74:f3:e8:
fd:b1:52:2e:52:42:f7:9d:ef:27:4d:6a:5c:10:29:62:80:ff:
b9:ce:82:c4:ef:9f:89:c8:21:8c:d0:34:66:7f:53:7e:3b:d2:
6e:39:a2:c1:5a:b5:e4:96:5e:b6:07:80:0e:ac:ce:a1:20:b0:
90:f9:9e:88:3f:68:12:f7:c3:92:84:af:73:16:86:da:37:b7:
82:b7:0b:8a:51:46:f2:26:22:88:85:97:23:3a:08:c1:dd:78:
86:09:43:77:a7:d2:e6:9f:60:2b:d5:36:64:ad:c6:94:d2:23:
7b:dd:05:80:11:9d:1d:99:18:1c:39:ed:83:b8:b5:f3:6e:09:
49:2a:b3:a0:88:05:f9:f6:53:fd:01:6c:c7:8d:65:37:ae:c8:
e6:9f:2b:f2:b8:3f:6a:c1:01:64:06:74:d0:d3:92:c1:73:82:
a8:5d:0b:59:9a:73:f1:2b:b0:ba:1d:34:3d:25:76:b9:9a:38:
d3:66:04:a8:38:ae:ce:c0:68:22:64:86:2d:50:22:85:12:aa:
65:9d:3b:cb:fc:33:2f:b3:af:a1:96:a4:1f:c9:c4:ff:c2:73:
7d:4b:1f:7f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 7 15:32:11 2025 by rpki-client