Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/1f/62ff71-c4f2-4929-8899-c38330cbd965/1/U6EliQpK8JJFWrx7tav-SM2FLAY.mft
File: U6EliQpK8JJFWrx7tav-SM2FLAY.mft (raw, json)
Hash identifier: xQfMbnW0NDTn7zNgobj9SP7i5UZ9UeZTI/0tVFx/fX0=
Subject key identifier: EE:71:0B:B2:34:11:A2:C6:98:CF:9A:6B:9B:2F:24:6E:AF:D9:8F:14
Authority key identifier: 53:A1:25:89:0A:4A:F0:92:45:5A:BC:7B:B5:AB:FE:48:CD:85:2C:06
Certificate issuer: /CN=53a125890a4af092455abc7bb5abfe48cd852c06
Certificate serial: 01975AC91AA6204821FFF6D5764A69D718C6
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/U6EliQpK8JJFWrx7tav-SM2FLAY.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/1f/62ff71-c4f2-4929-8899-c38330cbd965/1/U6EliQpK8JJFWrx7tav-SM2FLAY.mft
Manifest number: 05C2
Signing time: Tue 10 Jun 2025 17:00:18 +0000
Manifest this update: Tue 10 Jun 2025 17:00:18 +0000
Manifest next update: Wed 11 Jun 2025 17:00:18 +0000
Files and hashes: 1: U6EliQpK8JJFWrx7tav-SM2FLAY.crl (hash: qSCQ4EA9GZkBqsw9Voblrar1JRvUrfwpGgjvWRHGnqo=)
2: mPrAq7i6F1N2tGPKknWc6Bt67HU.roa (hash: xb6E0qAX3tyhIALebAGCZ4pPlVaSftpzNQeR/KwCvno=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/1f/62ff71-c4f2-4929-8899-c38330cbd965/1/U6EliQpK8JJFWrx7tav-SM2FLAY.crl
rsync://rpki.ripe.net/repository/DEFAULT/1f/62ff71-c4f2-4929-8899-c38330cbd965/1/U6EliQpK8JJFWrx7tav-SM2FLAY.mft
rsync://rpki.ripe.net/repository/DEFAULT/U6EliQpK8JJFWrx7tav-SM2FLAY.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 11 Jun 2025 17:00:18 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:5a:c9:1a:a6:20:48:21:ff:f6:d5:76:4a:69:d7:18:c6
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=53a125890a4af092455abc7bb5abfe48cd852c06
Validity
Not Before: Jun 10 17:00:18 2025 GMT
Not After : Jun 11 17:00:18 2025 GMT
Subject: CN=ee710bb23411a2c698cf9a6b9b2f246eafd98f14
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c3:33:90:cb:4f:90:ab:e4:b2:4b:a0:7d:fa:11:
58:45:9c:ff:a0:55:fd:5f:09:a5:4e:90:45:2c:9d:
83:7d:d2:4c:97:b9:d4:67:90:d7:bb:55:b1:a4:2f:
c9:82:b6:74:28:8a:a9:a8:30:cb:2a:17:3b:24:7b:
40:75:b7:53:74:6b:1c:76:c0:e3:94:5d:73:e5:00:
c3:11:47:40:4b:2b:47:59:a5:54:d3:80:f2:25:f6:
a3:d1:20:47:00:0f:d8:c6:3d:0d:3d:9b:88:11:db:
ac:c8:04:61:fe:a0:d4:60:1e:69:73:56:9b:14:fc:
d0:e5:03:96:4c:ce:2d:aa:71:34:cf:6a:64:28:05:
41:85:a1:fc:33:6c:14:57:2a:92:9f:af:2b:50:a7:
ba:ee:5c:aa:f9:ec:34:20:97:fa:04:f9:b9:54:7b:
8a:3b:83:6c:bc:dd:bb:cb:82:ac:99:8c:ac:f3:c4:
4d:19:e4:3a:03:9f:18:0b:04:9f:c4:3d:b9:2a:e9:
ff:0c:dd:4d:10:2a:e8:c7:d6:2a:7b:9d:5c:9f:23:
25:5c:1e:1c:25:3c:dc:ba:a8:96:37:8a:2b:04:d7:
67:f2:eb:d0:6c:03:4f:6b:c2:e6:74:a6:98:8c:04:
7a:9b:19:be:1a:da:12:04:90:ce:61:9a:8b:f9:73:
09:2f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
EE:71:0B:B2:34:11:A2:C6:98:CF:9A:6B:9B:2F:24:6E:AF:D9:8F:14
X509v3 Authority Key Identifier:
keyid:53:A1:25:89:0A:4A:F0:92:45:5A:BC:7B:B5:AB:FE:48:CD:85:2C:06
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/U6EliQpK8JJFWrx7tav-SM2FLAY.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/1f/62ff71-c4f2-4929-8899-c38330cbd965/1/U6EliQpK8JJFWrx7tav-SM2FLAY.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/1f/62ff71-c4f2-4929-8899-c38330cbd965/1/U6EliQpK8JJFWrx7tav-SM2FLAY.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
0b:1f:fd:4b:d9:13:a1:ff:03:3c:28:e8:86:90:74:67:2c:01:
08:d5:26:6d:61:a1:41:56:76:d1:91:b2:ae:5e:01:c0:ed:f7:
0e:4e:69:69:14:20:a2:4f:fb:59:d3:a3:c5:53:02:ad:76:dd:
86:ba:c1:89:eb:ce:bb:bc:3b:3c:5e:f3:83:76:2e:94:af:72:
b6:6d:73:9c:3c:ae:3e:af:23:9e:50:ad:76:74:a4:1d:19:49:
2c:43:9a:3b:db:1a:cd:b2:4e:d8:2d:da:cf:fd:f4:ae:b9:89:
09:02:34:94:37:88:21:47:9d:6f:53:20:a1:9e:b4:21:66:b8:
37:bc:e2:9e:6f:46:2b:c4:6a:60:75:55:6a:5a:96:58:66:df:
eb:f2:e5:b0:b2:5e:27:93:30:88:1e:1d:af:32:de:ac:cb:5c:
fb:1a:30:29:4f:aa:ba:31:30:b2:5c:b0:c1:76:24:7e:44:73:
43:27:13:31:ed:33:58:d8:72:3d:24:95:23:36:3a:27:47:45:
08:c3:b9:e1:17:a5:8b:a9:fb:bd:b5:a9:21:f2:94:db:bd:71:
d6:57:e5:0d:f5:04:b9:f5:2d:5d:23:d5:49:2f:b5:33:2d:5c:
39:10:fc:b5:9e:de:8c:75:1c:b2:00:ce:ca:1a:b9:fd:10:f3:
54:6d:92:72
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jun 11 03:44:27 2025 by rpki-client