Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/2a/8f3942-17f7-493c-bc6b-4f4fe803b015/1/u5tW2NluvLX8-H3i7CtSwZTM-fk.mft
File: u5tW2NluvLX8-H3i7CtSwZTM-fk.mft (raw, json)
Hash identifier: TJY95uJj0QQtn1wjkXfQzxECnJQ/WY0Ml/HeiweN7Pg=
Subject key identifier: 33:64:26:3B:B9:B0:08:B8:3C:56:6F:06:31:F4:C7:E8:B3:91:B3:21
Authority key identifier: BB:9B:56:D8:D9:6E:BC:B5:FC:F8:7D:E2:EC:2B:52:C1:94:CC:F9:F9
Certificate issuer: /CN=bb9b56d8d96ebcb5fcf87de2ec2b52c194ccf9f9
Certificate serial: 019749D5F5F5081B56A5220B0334D19BB474
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/u5tW2NluvLX8-H3i7CtSwZTM-fk.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/2a/8f3942-17f7-493c-bc6b-4f4fe803b015/1/u5tW2NluvLX8-H3i7CtSwZTM-fk.mft
Manifest number: 1582
Signing time: Sat 07 Jun 2025 10:00:48 +0000
Manifest this update: Sat 07 Jun 2025 10:00:48 +0000
Manifest next update: Sun 08 Jun 2025 10:00:48 +0000
Files and hashes: 1: 6XCQPd-gBaWI9uUfOl9Oxd_9HlY.roa (hash: rYTYbZJWQOZnH0RagwK8UwoxwTXRP+nIxOLYvS6LJxg=)
2: Sz4cgZk58K5KT8c6QEb0Ql3mAiY.roa (hash: XD1k9LSsxBfImI/ORmlcMWAQZfP4H0hZi+Dr1QtMaAI=)
3: bvhxhmAqyDusWG8L2BubxFp6Byg.roa (hash: SHS3jK9UFMV78c0xUf6ZLaaMiJ9/VJhwk1oZbalxq7g=)
4: q0ZcAaJC0NdgaZbJABmMG3a-wuc.roa (hash: SUYYeTh6yzkAt8ag+Tk4xijbvUF82bkEC5ALi/AihH0=)
5: u5tW2NluvLX8-H3i7CtSwZTM-fk.crl (hash: 6bHmoZYB4ndGZB9XVdR/r9iuPLBzYKPgDGjnDP6K7d8=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/2a/8f3942-17f7-493c-bc6b-4f4fe803b015/1/u5tW2NluvLX8-H3i7CtSwZTM-fk.crl
rsync://rpki.ripe.net/repository/DEFAULT/2a/8f3942-17f7-493c-bc6b-4f4fe803b015/1/u5tW2NluvLX8-H3i7CtSwZTM-fk.mft
rsync://rpki.ripe.net/repository/DEFAULT/u5tW2NluvLX8-H3i7CtSwZTM-fk.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 08 Jun 2025 09:00:17 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:49:d5:f5:f5:08:1b:56:a5:22:0b:03:34:d1:9b:b4:74
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=bb9b56d8d96ebcb5fcf87de2ec2b52c194ccf9f9
Validity
Not Before: Jun 7 10:00:48 2025 GMT
Not After : Jun 8 10:00:48 2025 GMT
Subject: CN=3364263bb9b008b83c566f0631f4c7e8b391b321
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cd:ab:07:20:68:b8:79:42:53:74:63:9e:65:52:
d3:ad:9d:e6:b1:37:78:b7:73:3e:99:cc:a9:3e:3d:
32:6d:fb:02:f3:ef:58:a4:52:ed:b7:a9:4d:c9:d6:
a6:ff:30:37:50:5b:48:cc:e4:2e:cc:ac:38:fa:71:
60:8a:87:d0:33:e0:33:15:57:0e:e3:22:ff:f0:8d:
19:4e:97:f5:50:03:fd:08:d1:4a:63:12:d4:fd:12:
87:8c:28:13:aa:7a:eb:83:a8:e8:7d:0e:71:dd:d3:
a1:52:da:b0:04:81:6c:22:da:d7:6a:8e:f7:9c:38:
78:63:77:61:93:81:27:5a:80:aa:26:f5:16:3a:38:
c8:8c:96:20:1d:ff:ed:73:e2:b0:73:df:c7:ca:a7:
01:90:c7:d7:b7:4c:2c:96:d4:47:cf:c3:73:2f:fc:
1e:ea:2a:c4:32:a4:e3:4f:d6:4a:c6:1e:a7:18:d4:
5b:a2:77:e6:25:9f:d5:a0:ba:ce:a7:bc:6c:94:8c:
58:95:2f:d5:e8:63:83:58:61:56:0b:65:8b:67:04:
3c:cb:bb:3b:8c:fd:24:d5:a2:6e:4a:eb:e8:e5:0b:
e1:d6:2e:ae:c0:97:8e:b8:52:b2:69:be:e8:f8:98:
40:e5:6c:20:ca:f5:40:64:dc:77:ae:19:76:b4:46:
86:35
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
33:64:26:3B:B9:B0:08:B8:3C:56:6F:06:31:F4:C7:E8:B3:91:B3:21
X509v3 Authority Key Identifier:
keyid:BB:9B:56:D8:D9:6E:BC:B5:FC:F8:7D:E2:EC:2B:52:C1:94:CC:F9:F9
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/u5tW2NluvLX8-H3i7CtSwZTM-fk.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/2a/8f3942-17f7-493c-bc6b-4f4fe803b015/1/u5tW2NluvLX8-H3i7CtSwZTM-fk.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/2a/8f3942-17f7-493c-bc6b-4f4fe803b015/1/u5tW2NluvLX8-H3i7CtSwZTM-fk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
84:29:e5:f6:cf:c4:98:39:ef:6c:d8:f5:01:e2:72:b9:d9:7d:
d7:ca:b1:c8:94:d9:53:bb:29:38:58:5e:f5:f1:85:78:64:53:
91:71:60:53:72:ee:05:79:c8:d2:41:3b:d1:3f:cd:65:47:66:
28:f4:da:0e:13:b2:40:0a:a4:b1:09:9b:2b:4e:4b:56:13:c2:
03:e6:d3:fd:4d:36:5b:8d:df:b4:e1:9f:2d:22:b5:1d:d1:cc:
31:83:86:bb:6b:90:40:de:f2:87:da:14:5a:11:2d:e0:9c:ec:
c0:d1:9e:12:db:66:13:a1:d2:f5:a6:b8:f9:ab:1d:89:2d:a7:
24:90:16:08:7c:72:b6:f5:cd:ea:28:40:43:0f:65:70:a6:ee:
46:21:22:ba:24:b6:57:1c:f2:5a:15:f5:7e:31:48:21:14:79:
1a:ce:1e:91:1b:c9:d8:2c:e2:7a:97:63:09:63:c1:2d:cc:62:
b8:ce:3b:e5:69:ed:2b:11:bf:5e:c7:b5:41:39:58:4c:e9:80:
f4:82:7a:19:32:90:5b:dd:74:76:cd:b1:7b:81:89:44:36:93:
e1:4c:5d:0f:cf:06:ec:ec:93:6b:13:40:ac:87:db:99:78:8b:
77:67:93:6d:67:4e:d5:47:56:d9:29:6e:37:d7:7d:fa:60:78:
51:c6:f5:e4
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 7 14:02:15 2025 by rpki-client