Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/26/1faa3e-884c-445f-845d-79b3db659dfc/1/UYje2s3CQLSy94bxI0LgqD2K6A8.mft
File: UYje2s3CQLSy94bxI0LgqD2K6A8.mft (raw, json)
Hash identifier: DoiNuWNOHSwYQxE5SbV0vkAzE4oT4cjqkIwJRpR5s54=
Subject key identifier: 14:16:CE:67:E2:73:41:B2:7D:15:33:FD:F9:2E:06:55:C3:E2:B2:83
Authority key identifier: 51:88:DE:DA:CD:C2:40:B4:B2:F7:86:F1:23:42:E0:A8:3D:8A:E8:0F
Certificate issuer: /CN=5188dedacdc240b4b2f786f12342e0a83d8ae80f
Certificate serial: 019749317E934E59F5DC8E5F0C90203E09DC
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/UYje2s3CQLSy94bxI0LgqD2K6A8.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/26/1faa3e-884c-445f-845d-79b3db659dfc/1/UYje2s3CQLSy94bxI0LgqD2K6A8.mft
Manifest number: 1585
Signing time: Sat 07 Jun 2025 07:01:09 +0000
Manifest this update: Sat 07 Jun 2025 07:01:09 +0000
Manifest next update: Sun 08 Jun 2025 07:01:09 +0000
Files and hashes: 1: 7qvgIj3jypWMSKFnvSypb6eNA_Y.roa (hash: MROlFsFZhg7uUHfqBSW5TAr927G+FcG0aizwMj7xAAs=)
2: UYje2s3CQLSy94bxI0LgqD2K6A8.crl (hash: W5la68G4fe04BJxdftat7Bmvs0tGqjv1WqBzrLTkpYU=)
3: VzEuM4wQpuwbT-xJ7bC1xNm7YDc.roa (hash: Pz1SZUH98WHk5LHtbhA9Ppfrk48GkT05UG0eFHMTuIU=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/26/1faa3e-884c-445f-845d-79b3db659dfc/1/UYje2s3CQLSy94bxI0LgqD2K6A8.crl
rsync://rpki.ripe.net/repository/DEFAULT/26/1faa3e-884c-445f-845d-79b3db659dfc/1/UYje2s3CQLSy94bxI0LgqD2K6A8.mft
rsync://rpki.ripe.net/repository/DEFAULT/UYje2s3CQLSy94bxI0LgqD2K6A8.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 08 Jun 2025 00:00:17 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:49:31:7e:93:4e:59:f5:dc:8e:5f:0c:90:20:3e:09:dc
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=5188dedacdc240b4b2f786f12342e0a83d8ae80f
Validity
Not Before: Jun 7 07:01:09 2025 GMT
Not After : Jun 8 07:01:09 2025 GMT
Subject: CN=1416ce67e27341b27d1533fdf92e0655c3e2b283
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:fc:bb:6b:ac:68:52:67:41:b4:10:a9:49:1a:32:
d9:42:ea:63:28:0c:94:1d:3c:70:69:c7:f2:a3:1d:
fb:fe:4e:58:42:40:f1:8d:34:6a:b0:8f:c9:68:02:
90:9d:08:cf:25:5c:ac:49:ad:e4:d4:85:33:41:16:
17:e4:db:87:17:85:a9:24:b6:fd:4b:d1:e3:7f:bb:
f0:bb:e8:8d:ac:ef:9e:b0:7a:b9:9c:5f:b8:e2:64:
80:22:58:d8:73:9d:71:02:60:8b:fe:0e:5c:fb:c2:
5f:f6:1c:29:00:d5:a5:c8:0e:29:ab:2f:82:d2:7a:
ba:74:cf:ba:58:71:36:2f:d2:87:6b:5c:07:1c:5d:
09:68:08:28:84:79:d4:80:60:63:ab:19:25:2f:93:
a8:09:38:c1:37:c0:4e:61:c2:65:06:1b:8d:42:3f:
87:de:b3:3a:93:26:d6:8d:0a:42:03:11:0f:b7:bd:
d4:95:b1:24:97:e6:1e:bf:8e:a3:1d:72:3c:fc:7f:
df:99:3e:29:a2:36:95:2d:fb:6f:c0:fa:88:80:00:
23:b4:24:73:76:d6:c1:06:24:c4:02:2f:c6:cf:7b:
3a:e4:89:f4:ec:86:66:27:c2:ec:b5:0e:a5:12:c9:
a4:c1:33:37:fd:1b:1a:53:4a:b1:5b:95:1b:59:c5:
8a:0f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
14:16:CE:67:E2:73:41:B2:7D:15:33:FD:F9:2E:06:55:C3:E2:B2:83
X509v3 Authority Key Identifier:
keyid:51:88:DE:DA:CD:C2:40:B4:B2:F7:86:F1:23:42:E0:A8:3D:8A:E8:0F
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/UYje2s3CQLSy94bxI0LgqD2K6A8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/26/1faa3e-884c-445f-845d-79b3db659dfc/1/UYje2s3CQLSy94bxI0LgqD2K6A8.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/26/1faa3e-884c-445f-845d-79b3db659dfc/1/UYje2s3CQLSy94bxI0LgqD2K6A8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
48:df:31:11:a3:87:28:c0:7f:64:0e:9f:35:7c:5f:a0:60:d2:
b6:14:54:25:2e:e0:c2:a6:6b:c7:a6:ee:7e:c1:2a:f8:1b:11:
34:d7:f9:06:9e:bb:a9:5f:c4:ee:a4:96:41:c1:9f:cd:29:82:
ab:df:b2:6f:3c:fa:6b:67:63:3d:87:6e:ea:ae:ec:64:10:6d:
d0:6b:60:a9:ce:80:39:29:fb:a3:69:0a:b5:23:6e:8b:a3:f7:
0f:df:18:35:30:2e:3b:10:cd:73:1e:d6:63:e5:3c:00:bd:30:
d9:4e:b9:51:01:c1:36:85:23:c3:5f:30:6b:aa:b4:e1:7b:01:
94:23:fd:a6:fd:ec:a5:00:a1:82:a2:e7:7e:ea:48:27:5c:27:
2a:f1:88:1d:e3:8f:2f:51:cb:ba:35:5c:ff:3a:3c:c3:ab:1e:
95:49:5a:83:7c:8b:01:9f:ba:46:f0:ab:65:7e:c3:85:ef:0f:
d9:59:2e:40:3c:fc:d3:7d:5a:f8:f1:71:3d:fe:51:87:dd:ad:
b2:46:27:2d:4d:eb:d3:08:e3:85:88:09:47:e3:fa:c7:92:56:
c9:4f:d2:d7:ff:8e:64:6e:4c:94:89:92:db:bb:81:5d:3f:a9:
fb:66:0d:c3:ff:33:62:3b:47:87:83:71:ca:10:ff:e2:cf:58:
e0:75:84:fb
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 7 09:04:31 2025 by rpki-client