Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/1c/ac9af6-7fc3-4d13-a594-060a4738091d/1/U7Rqt5ufxY9dxM8p1y3FJn7D7d4.mft
File: U7Rqt5ufxY9dxM8p1y3FJn7D7d4.mft (raw, json)
Hash identifier: QTheJ7JsIaBS9ZGxqGhaP2jEGoCDb5yxh+NGp2x3LS0=
Subject key identifier: 67:87:A9:B5:90:FD:8E:58:27:52:E9:18:C0:A8:F3:DD:CC:E9:73:27
Authority key identifier: 53:B4:6A:B7:9B:9F:C5:8F:5D:C4:CF:29:D7:2D:C5:26:7E:C3:ED:DE
Certificate issuer: /CN=53b46ab79b9fc58f5dc4cf29d72dc5267ec3edde
Certificate serial: 01974A7B41AF506FD32A30D468A4A73CF0CC
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/U7Rqt5ufxY9dxM8p1y3FJn7D7d4.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/1c/ac9af6-7fc3-4d13-a594-060a4738091d/1/U7Rqt5ufxY9dxM8p1y3FJn7D7d4.mft
Manifest number: 09DC
Signing time: Sat 07 Jun 2025 13:01:20 +0000
Manifest this update: Sat 07 Jun 2025 13:01:20 +0000
Manifest next update: Sun 08 Jun 2025 13:01:20 +0000
Files and hashes: 1: 1-AOVRFLZrj2nPYVaoQTOsQL1WlQ.roa (hash: o++gvFVPi/+ixRZFv2gXzhdCHbthUj+xLJ1n6s73kig=)
2: U7Rqt5ufxY9dxM8p1y3FJn7D7d4.crl (hash: whzU4ahrGTDnyzRMgeDWUgplsrlrHNQfgR5D7qIuoVc=)
3: iPclpyCcjmZRUirmlpynRe1jVlQ.roa (hash: 9e/d5wv0jrIlrbYbKSFVCEW56rVM8D3l+wGRzbJ1rM0=)
4: k3_oz24o1aoYtUGxnQB-tgEqkWA.roa (hash: xn4nb296At8c6SRwQOq+N62PJ2qN+1mD+HyDa0byceo=)
5: kaIqrvIylKzH38yKAlXttfxPtJc.roa (hash: PlwxrbNQdnXd0tF4s7w1NH4MDh/rQaSBAh1pK6XUPBU=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/1c/ac9af6-7fc3-4d13-a594-060a4738091d/1/U7Rqt5ufxY9dxM8p1y3FJn7D7d4.crl
rsync://rpki.ripe.net/repository/DEFAULT/1c/ac9af6-7fc3-4d13-a594-060a4738091d/1/U7Rqt5ufxY9dxM8p1y3FJn7D7d4.mft
rsync://rpki.ripe.net/repository/DEFAULT/U7Rqt5ufxY9dxM8p1y3FJn7D7d4.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 08 Jun 2025 13:01:20 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:4a:7b:41:af:50:6f:d3:2a:30:d4:68:a4:a7:3c:f0:cc
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=53b46ab79b9fc58f5dc4cf29d72dc5267ec3edde
Validity
Not Before: Jun 7 13:01:20 2025 GMT
Not After : Jun 8 13:01:20 2025 GMT
Subject: CN=6787a9b590fd8e582752e918c0a8f3ddcce97327
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d0:70:88:09:27:5a:d1:67:b5:ec:44:14:4e:3e:
99:f6:60:b5:3c:46:e2:cb:bb:5a:9f:ad:39:14:3e:
2e:f6:12:5b:85:97:5b:80:e3:8c:7f:e6:52:ec:ca:
35:5d:23:fb:23:0e:2a:4c:99:ed:e4:aa:fe:e8:b9:
e3:6f:c4:f2:b4:cf:86:9c:df:7a:db:5c:fa:67:72:
2e:71:09:00:d8:f3:ab:f4:ad:36:0b:9e:7d:8f:24:
6d:39:fd:93:2b:8a:0e:97:2a:f3:e4:ea:98:bd:bb:
d5:75:e4:84:af:73:08:85:e4:64:e7:e7:be:0f:53:
b8:a9:bf:95:1e:1a:3f:1e:96:f0:39:0e:2f:f4:d4:
0b:b2:d6:53:9b:a9:a5:3f:b9:f2:4d:d5:a7:40:c4:
3f:f7:ba:4a:00:19:cb:ff:a9:9a:d2:7e:2f:e5:7f:
f7:f1:8c:af:39:b9:f9:33:f9:ca:dc:5c:2f:39:fa:
20:cd:72:00:20:b4:86:92:86:7d:83:fe:05:59:70:
1f:fe:58:fd:e1:9a:4d:33:0d:84:d8:9c:e0:0b:93:
b0:83:a3:32:b3:55:85:ff:c8:77:93:d6:04:94:d5:
00:b0:0d:cb:f4:d0:1e:cd:93:07:09:d8:dc:b2:fb:
95:f2:a1:ee:83:ac:00:f3:f8:36:c8:60:9b:05:e9:
8a:a1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
67:87:A9:B5:90:FD:8E:58:27:52:E9:18:C0:A8:F3:DD:CC:E9:73:27
X509v3 Authority Key Identifier:
keyid:53:B4:6A:B7:9B:9F:C5:8F:5D:C4:CF:29:D7:2D:C5:26:7E:C3:ED:DE
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/U7Rqt5ufxY9dxM8p1y3FJn7D7d4.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/1c/ac9af6-7fc3-4d13-a594-060a4738091d/1/U7Rqt5ufxY9dxM8p1y3FJn7D7d4.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/1c/ac9af6-7fc3-4d13-a594-060a4738091d/1/U7Rqt5ufxY9dxM8p1y3FJn7D7d4.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
4d:5c:b7:0f:87:5c:10:89:2f:8f:66:b4:96:a3:cd:da:dc:5b:
5d:af:c1:2d:d1:c8:32:a4:2f:b4:13:e2:d7:27:0e:b0:72:7a:
14:be:8b:f8:f7:ee:cc:f9:21:ba:a1:50:5d:2d:7f:c6:68:00:
d5:e4:ae:b7:d9:71:ed:a6:92:0e:85:0f:89:ae:ca:99:e6:19:
37:49:87:0d:4d:dd:71:81:07:dd:f6:25:36:16:3b:fc:d5:9c:
59:41:83:85:17:93:26:e5:b0:5a:5b:a8:b2:5e:c2:04:7d:b8:
37:ed:f0:1b:51:dd:78:ab:17:ad:27:48:53:b1:65:36:9b:5b:
a3:42:ff:81:18:51:4b:df:bb:fa:b6:21:ff:4d:51:5b:47:a0:
de:32:3a:d4:3d:fd:79:58:09:35:63:ac:b1:5e:3b:77:83:f1:
58:58:93:ba:f6:1f:bf:e5:95:e3:2f:dd:af:4a:34:43:f6:dd:
f4:d6:82:4a:38:63:f4:8c:5e:cf:ac:b8:bd:84:4c:13:1e:37:
a7:07:69:fe:24:2e:e0:8e:57:9f:e7:d4:a1:4e:54:a9:a8:67:
4d:3e:3b:98:1f:5b:76:9d:67:5b:e6:5e:9c:95:09:81:4f:74:
67:6c:53:e7:16:d2:04:32:67:f0:1c:c5:4d:f0:7b:73:a5:f1:
b8:62:79:9e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 7 21:48:09 2025 by rpki-client