Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/25/587a79-1b6c-4c2a-b139-24aab44f2539/1/U0bE0gD-UDXGGwyJS5RU5y0nyR8.mft
File: U0bE0gD-UDXGGwyJS5RU5y0nyR8.mft (raw, json)
Hash identifier: Xm3rU6HnHI7UBRYPeejLBo5WfTddtRL23hDhTvlKN8o=
Subject key identifier: 01:15:C9:98:4E:F9:06:D4:AB:9B:79:34:4F:00:8B:9A:36:14:5A:0E
Authority key identifier: 53:46:C4:D2:00:FE:50:35:C6:1B:0C:89:4B:94:54:E7:2D:27:C9:1F
Certificate issuer: /CN=5346c4d200fe5035c61b0c894b9454e72d27c91f
Certificate serial: 019752D8B481E65A00337FAD0F6DC6A4F60A
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/U0bE0gD-UDXGGwyJS5RU5y0nyR8.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/25/587a79-1b6c-4c2a-b139-24aab44f2539/1/U0bE0gD-UDXGGwyJS5RU5y0nyR8.mft
Manifest number: 1583
Signing time: Mon 09 Jun 2025 04:00:22 +0000
Manifest this update: Mon 09 Jun 2025 04:00:22 +0000
Manifest next update: Tue 10 Jun 2025 04:00:22 +0000
Files and hashes: 1: ECD7apX3eHOOfrh7KlF7PFjYZG4.roa (hash: 71V9g38SO7JBAaQym2ThymDLgJtxxyPJi6oj0bVn0zY=)
2: U0bE0gD-UDXGGwyJS5RU5y0nyR8.crl (hash: xdfwZvmRYbM1e+oZek1HnjchYn9Jj5GZZ9dd2+8VPzA=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/25/587a79-1b6c-4c2a-b139-24aab44f2539/1/U0bE0gD-UDXGGwyJS5RU5y0nyR8.crl
rsync://rpki.ripe.net/repository/DEFAULT/25/587a79-1b6c-4c2a-b139-24aab44f2539/1/U0bE0gD-UDXGGwyJS5RU5y0nyR8.mft
rsync://rpki.ripe.net/repository/DEFAULT/U0bE0gD-UDXGGwyJS5RU5y0nyR8.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 09 Jun 2025 21:00:17 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:52:d8:b4:81:e6:5a:00:33:7f:ad:0f:6d:c6:a4:f6:0a
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=5346c4d200fe5035c61b0c894b9454e72d27c91f
Validity
Not Before: Jun 9 04:00:22 2025 GMT
Not After : Jun 10 04:00:22 2025 GMT
Subject: CN=0115c9984ef906d4ab9b79344f008b9a36145a0e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d3:57:64:5e:ea:51:8e:e2:c4:49:c1:04:5d:b6:
21:9f:a2:be:67:3d:cd:5c:ab:7c:d9:a9:d5:88:60:
48:59:16:47:1b:20:09:7e:1f:5f:b4:5d:d3:30:a2:
fe:07:de:01:61:a2:3f:1c:1c:e8:81:fe:31:c1:68:
42:19:bd:24:44:23:dd:f2:42:2b:11:59:54:d5:f6:
fe:ea:8a:16:11:e2:87:77:b1:60:52:df:01:e6:36:
15:cc:39:a6:b4:9c:c8:76:1f:d6:c1:9f:b7:53:a9:
0e:f6:e3:31:e0:61:1f:ab:ee:51:4d:09:c7:d4:d8:
65:df:73:fb:0e:f2:67:f2:37:21:25:60:99:b0:0c:
64:01:f5:e8:a8:d1:eb:81:de:27:69:5e:a1:0c:ed:
c3:fd:ea:df:2d:2f:b3:55:f6:82:2a:e4:c0:e4:8f:
7b:fa:60:e0:27:ad:82:3c:ca:8e:73:64:25:0f:b6:
cf:d3:f3:1a:56:48:69:02:e4:ea:28:16:75:f6:bc:
d3:2f:35:a1:09:fe:e9:fa:5d:b0:da:ab:66:9f:13:
7b:79:b7:4d:19:64:83:d2:44:4e:5c:65:58:f7:ca:
2e:01:dc:7f:22:3c:2e:73:00:8e:1d:7c:66:cd:12:
4a:38:82:de:95:98:81:46:8e:ca:86:ce:5f:3e:e7:
31:d9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
01:15:C9:98:4E:F9:06:D4:AB:9B:79:34:4F:00:8B:9A:36:14:5A:0E
X509v3 Authority Key Identifier:
keyid:53:46:C4:D2:00:FE:50:35:C6:1B:0C:89:4B:94:54:E7:2D:27:C9:1F
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/U0bE0gD-UDXGGwyJS5RU5y0nyR8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/25/587a79-1b6c-4c2a-b139-24aab44f2539/1/U0bE0gD-UDXGGwyJS5RU5y0nyR8.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/25/587a79-1b6c-4c2a-b139-24aab44f2539/1/U0bE0gD-UDXGGwyJS5RU5y0nyR8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
63:25:75:4c:8c:98:fd:76:17:be:c6:4b:c0:6d:00:40:a1:1e:
a5:28:e7:55:18:16:63:c4:e9:30:99:59:11:d6:f9:05:31:76:
c3:39:c8:11:54:d7:ec:1b:aa:b6:e1:72:a0:81:bb:4a:87:1e:
6d:99:a6:80:e6:d7:8a:eb:a8:ad:d0:0d:74:b9:e8:4a:cf:3f:
d0:7f:8f:16:f1:78:05:12:95:82:19:ae:ca:4f:f4:4a:75:a1:
c7:d1:25:19:6a:d0:37:cd:ef:51:cf:7e:a3:de:8e:ed:e0:ce:
87:40:75:98:51:31:45:82:28:89:26:51:cd:99:f0:0e:d0:1f:
ad:87:63:ff:e9:f6:23:f0:0a:fe:c1:f9:c6:9c:f5:58:0f:fb:
55:5e:ed:6a:3a:e3:48:74:07:9d:28:c9:cd:a2:35:d3:e3:ed:
2a:a6:9c:dd:a0:be:74:c1:5f:4e:88:9b:d0:61:99:d5:d3:e3:
c6:3f:3f:f3:d7:ac:3e:f7:be:42:fe:d5:89:ee:24:e1:25:1d:
2b:fc:70:64:70:cb:70:18:7a:ed:ac:bc:98:5f:cf:7e:9d:46:
ea:ff:66:7f:be:4c:c8:08:6a:29:22:04:b8:33:1f:ac:4d:e2:
0c:9f:01:63:1e:d3:c6:20:ad:42:65:fa:7c:98:e4:50:85:e9:
35:fa:27:36
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Jun 9 06:48:28 2025 by rpki-client