Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/3a/9f00a9-b60f-4e32-9037-04dfc3663e35/1/U1dhkT9XXEEcmSMi67Bs0vN_AqI.mft
File: U1dhkT9XXEEcmSMi67Bs0vN_AqI.mft (raw, json)
Hash identifier: It2dwj1Vauur/1lmxpZwFHXgWX2Wp4naHdoxKo39UxU=
Subject key identifier: 32:20:40:CA:46:77:A2:1D:F6:03:14:89:89:CF:39:6B:EE:DC:FB:2B
Authority key identifier: 53:57:61:91:3F:57:5C:41:1C:99:23:22:EB:B0:6C:D2:F3:7F:02:A2
Certificate issuer: /CN=535761913f575c411c992322ebb06cd2f37f02a2
Certificate serial: 01974F33B00FADD645835BC3BCC3E65FD7CE
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/U1dhkT9XXEEcmSMi67Bs0vN_AqI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/3a/9f00a9-b60f-4e32-9037-04dfc3663e35/1/U1dhkT9XXEEcmSMi67Bs0vN_AqI.mft
Manifest number: 1581
Signing time: Sun 08 Jun 2025 11:01:16 +0000
Manifest this update: Sun 08 Jun 2025 11:01:16 +0000
Manifest next update: Mon 09 Jun 2025 11:01:16 +0000
Files and hashes: 1: 9jLVpGilYmQEGxg1WpK2yNt9KVk.roa (hash: z5eyd/uvSVUU4CsN83uQVJdluniXFQjAaunOHdc2Khs=)
2: U1dhkT9XXEEcmSMi67Bs0vN_AqI.crl (hash: Cp10DbLh6O3K92eVnSGM+P0Y3Ijxihfo4sed+LzVAGY=)
3: bjlUEqaZF5EwCSDk_Sxf_mEHztc.roa (hash: RU5KJnOEEBCQibHDxtY5+aLGfLDV7MxXDGkjvgxmqg8=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/3a/9f00a9-b60f-4e32-9037-04dfc3663e35/1/U1dhkT9XXEEcmSMi67Bs0vN_AqI.crl
rsync://rpki.ripe.net/repository/DEFAULT/3a/9f00a9-b60f-4e32-9037-04dfc3663e35/1/U1dhkT9XXEEcmSMi67Bs0vN_AqI.mft
rsync://rpki.ripe.net/repository/DEFAULT/U1dhkT9XXEEcmSMi67Bs0vN_AqI.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 09 Jun 2025 11:01:16 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:4f:33:b0:0f:ad:d6:45:83:5b:c3:bc:c3:e6:5f:d7:ce
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=535761913f575c411c992322ebb06cd2f37f02a2
Validity
Not Before: Jun 8 11:01:16 2025 GMT
Not After : Jun 9 11:01:16 2025 GMT
Subject: CN=322040ca4677a21df603148989cf396beedcfb2b
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b0:92:e3:0c:8f:56:5c:09:1c:0e:f2:a9:e9:7e:
fa:d5:65:94:11:ea:39:51:25:85:5a:c6:e9:19:08:
e6:1a:fc:db:65:d4:86:1d:ca:e8:81:04:d8:05:70:
d3:bb:31:f8:b5:1f:fe:c3:48:05:b0:7e:b8:b3:b4:
70:d0:45:4e:70:a4:9e:ef:bb:55:a8:f8:03:1c:2e:
4a:70:23:5c:c7:54:de:8d:41:b3:b5:24:06:11:fe:
e6:3e:e2:67:27:99:13:4d:9a:64:dd:25:e2:68:c5:
85:30:3f:49:14:1b:f6:c3:f8:23:8d:15:b1:12:29:
5e:0e:30:09:5e:46:47:29:50:96:9e:ac:ed:19:67:
b7:a6:b2:2b:2b:62:f3:49:d5:32:f5:f7:ba:61:a9:
b6:fd:fd:c8:45:a9:04:ea:00:58:10:9e:56:0c:6f:
61:eb:70:f3:b0:e6:35:9e:c8:fb:38:24:9f:cd:6c:
60:4d:e3:d6:93:7a:1b:8d:80:7b:a8:6e:b3:f2:69:
48:16:34:9a:6b:7a:6f:82:67:8f:bc:f0:d5:76:3b:
10:da:37:17:18:e4:11:e5:89:68:fc:31:6a:98:1a:
be:ea:40:31:ce:03:a1:23:e1:f8:43:26:70:2b:ba:
d4:19:ee:d8:4b:2a:de:7a:cf:04:e4:82:9b:63:e5:
dc:45
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
32:20:40:CA:46:77:A2:1D:F6:03:14:89:89:CF:39:6B:EE:DC:FB:2B
X509v3 Authority Key Identifier:
keyid:53:57:61:91:3F:57:5C:41:1C:99:23:22:EB:B0:6C:D2:F3:7F:02:A2
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/U1dhkT9XXEEcmSMi67Bs0vN_AqI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/3a/9f00a9-b60f-4e32-9037-04dfc3663e35/1/U1dhkT9XXEEcmSMi67Bs0vN_AqI.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/3a/9f00a9-b60f-4e32-9037-04dfc3663e35/1/U1dhkT9XXEEcmSMi67Bs0vN_AqI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
35:84:25:43:e9:51:7f:1f:1e:97:98:a3:07:3f:91:74:ab:9b:
0f:b3:cb:53:fb:8b:c8:ab:45:42:1a:fd:eb:5c:21:b1:9a:68:
88:de:e6:e2:41:7c:18:16:bc:a5:e5:8b:b5:37:fb:60:eb:22:
ba:52:82:91:e1:9d:fc:33:9d:71:dc:de:5b:fc:04:3f:d2:1b:
2b:71:69:b2:af:cf:a9:81:d7:97:a6:2d:62:49:1d:24:f0:6b:
02:da:40:fc:aa:76:6c:a9:62:34:c8:a0:e8:3f:1c:98:0b:68:
b0:bf:a1:c3:0a:90:45:3a:cf:38:d7:3b:85:b2:66:ab:b6:ea:
04:f7:06:06:97:67:34:36:1f:6a:ec:36:36:2d:19:e1:2a:00:
6a:72:05:0e:14:18:ac:af:3c:2f:70:d9:2e:52:07:c5:c7:51:
45:b4:0a:7f:6f:70:b3:64:c0:aa:a6:76:e4:f5:23:bd:60:e2:
e8:30:7e:66:3b:84:1c:74:0d:63:fa:c7:45:ef:ba:cb:8a:e2:
28:17:48:cc:9d:d0:fe:17:4f:20:a3:95:96:db:93:79:65:76:
6b:50:dd:01:58:cf:d6:be:a2:66:f0:29:51:f9:a1:7c:d3:95:
e7:95:0c:32:a2:56:84:51:dd:25:3b:52:25:19:42:55:74:da:
ad:6e:a7:14
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jun 8 14:47:36 2025 by rpki-client