
Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/3f/44aa17-2d36-49c3-ba4f-cd14fe2d9571/1/UbLPdJr2lnB4wEvQxwtRQfTlpgo.mft
File: UbLPdJr2lnB4wEvQxwtRQfTlpgo.mft (raw, json)
Hash identifier: NBEKBgpVXnVAmnsh8ewgE8/qHEPuR2lfpbTfd7z57/4=
Subject key identifier: CC:5A:5A:69:2C:F3:CA:00:63:C8:3A:B2:DC:C1:EC:D0:CC:84:58:E9
Authority key identifier: 51:B2:CF:74:9A:F6:96:70:78:C0:4B:D0:C7:0B:51:41:F4:E5:A6:0A
Certificate issuer: /CN=51b2cf749af6967078c04bd0c70b5141f4e5a60a
Certificate serial: 01974CD782F03C2C29DCCFE3CF746FF0091B
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/UbLPdJr2lnB4wEvQxwtRQfTlpgo.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/3f/44aa17-2d36-49c3-ba4f-cd14fe2d9571/1/UbLPdJr2lnB4wEvQxwtRQfTlpgo.mft
Manifest number: 157F
Signing time: Sun 08 Jun 2025 00:01:21 +0000
Manifest this update: Sun 08 Jun 2025 00:01:21 +0000
Manifest next update: Mon 09 Jun 2025 00:01:21 +0000
Files and hashes: 1: JL64IYR_TQ5Xa-d3oTnZf7vCvf0.roa (hash: c5BJIDGV82v4laDV3iiKoaLBLmXbJfkmjmJFVhYfRik=)
2: UbLPdJr2lnB4wEvQxwtRQfTlpgo.crl (hash: +NKNYYugGd5t1aJJal2xzDZnDY6CmmB0FrdhFkf0czc=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/3f/44aa17-2d36-49c3-ba4f-cd14fe2d9571/1/UbLPdJr2lnB4wEvQxwtRQfTlpgo.crl
rsync://rpki.ripe.net/repository/DEFAULT/3f/44aa17-2d36-49c3-ba4f-cd14fe2d9571/1/UbLPdJr2lnB4wEvQxwtRQfTlpgo.mft
rsync://rpki.ripe.net/repository/DEFAULT/UbLPdJr2lnB4wEvQxwtRQfTlpgo.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 09 Jun 2025 00:01:21 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:4c:d7:82:f0:3c:2c:29:dc:cf:e3:cf:74:6f:f0:09:1b
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=51b2cf749af6967078c04bd0c70b5141f4e5a60a
Validity
Not Before: Jun 8 00:01:21 2025 GMT
Not After : Jun 9 00:01:21 2025 GMT
Subject: CN=cc5a5a692cf3ca0063c83ab2dcc1ecd0cc8458e9
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c0:a3:a9:7c:92:91:4e:b2:de:8a:bf:93:eb:29:
62:25:87:f1:a7:15:04:7e:ee:70:60:fa:bb:52:60:
79:95:89:da:fc:1f:b8:f6:87:70:e8:06:87:48:6f:
7c:30:25:e1:2e:90:73:8a:89:f5:87:3b:4d:89:37:
79:98:e8:a9:f5:6f:75:f9:71:d7:83:e5:49:d6:53:
78:2d:af:89:c7:da:16:cc:0d:49:a9:13:64:d7:1a:
78:fb:bf:d4:4d:cf:ec:19:31:8b:ba:f1:6f:59:81:
6f:82:95:92:63:27:f7:21:4c:d2:ac:be:b4:fc:8c:
b5:c4:b9:5d:8b:59:18:39:37:72:08:c2:c9:4c:80:
eb:27:80:60:05:73:50:66:02:b6:ae:83:69:74:5c:
6a:40:ca:2b:aa:28:a7:1c:11:28:e5:ac:2a:05:7f:
b9:05:23:91:9c:8d:fd:15:f4:8e:6f:1f:f7:ec:fe:
48:0b:03:8c:ab:bf:1a:26:93:33:0a:19:ee:f3:0d:
2a:d6:51:30:cb:bf:e6:7f:e4:d9:83:e1:ba:31:02:
be:cc:c6:e1:60:fd:3a:f7:da:95:53:4e:82:83:fc:
24:57:58:16:66:08:37:a2:0d:d4:9f:60:3a:0c:0c:
88:89:26:e9:07:2e:0f:fc:93:7f:63:19:87:5f:77:
df:f9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
CC:5A:5A:69:2C:F3:CA:00:63:C8:3A:B2:DC:C1:EC:D0:CC:84:58:E9
X509v3 Authority Key Identifier:
keyid:51:B2:CF:74:9A:F6:96:70:78:C0:4B:D0:C7:0B:51:41:F4:E5:A6:0A
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/UbLPdJr2lnB4wEvQxwtRQfTlpgo.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/3f/44aa17-2d36-49c3-ba4f-cd14fe2d9571/1/UbLPdJr2lnB4wEvQxwtRQfTlpgo.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/3f/44aa17-2d36-49c3-ba4f-cd14fe2d9571/1/UbLPdJr2lnB4wEvQxwtRQfTlpgo.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
65:ff:21:21:67:04:07:3e:9a:b1:e6:88:71:bc:ca:13:79:ae:
4e:c1:90:a0:7d:e2:f4:12:29:0d:89:f6:bd:f0:db:ea:45:c9:
ea:06:ea:49:c0:12:46:ee:c5:62:32:0e:64:bd:1c:6d:dd:5f:
34:3c:af:5c:bb:cb:4e:f6:53:4e:59:db:75:14:cb:28:e8:32:
b6:ba:fb:3e:39:6c:07:65:4d:86:7b:3b:aa:97:22:d5:85:d9:
9c:91:20:49:e6:51:ea:58:31:04:6d:09:0f:ee:0f:95:88:ed:
2d:5d:91:ad:3b:33:aa:61:db:c8:d2:46:0d:1d:38:bd:ba:94:
20:91:2c:0c:f3:4a:e1:20:97:38:15:c5:b3:8d:ca:16:f7:b5:
17:a6:5f:83:15:b1:b1:42:51:21:ae:63:f1:0f:91:06:34:64:
19:3a:84:4d:f1:86:f8:b0:cf:91:ff:1b:d2:15:e6:ef:d9:a4:
d6:c1:d2:4a:f5:04:ae:95:2d:5a:a7:8e:66:b1:a5:b2:11:3d:
3a:65:8e:eb:a4:80:6f:82:13:69:b7:9c:5b:d0:a5:79:69:0a:
c9:85:8e:73:29:00:c1:58:95:34:1c:2f:e7:01:45:e5:35:3c:
8c:71:6c:dc:bb:1c:62:88:20:41:e9:b5:dc:ac:bc:2f:1d:4f:
b5:a4:3d:1a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jun 8 09:03:53 2025 by rpki-client