Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/47/4791e2-df25-4c7c-89df-76ec4acbb726/1/UeOaZ3aTuvt5JNbqhGl4z0xouMI.mft
File: UeOaZ3aTuvt5JNbqhGl4z0xouMI.mft (raw, json)
Hash identifier: mCS+bPVFHIT20v4gOidKko53Kvf7B2GnxTTJKo6eRlw=
Subject key identifier: 20:D1:A9:D5:69:62:8D:8B:08:2C:2A:70:35:39:A4:C2:65:54:4A:39
Authority key identifier: 51:E3:9A:67:76:93:BA:FB:79:24:D6:EA:84:69:78:CF:4C:68:B8:C2
Certificate issuer: /CN=51e39a677693bafb7924d6ea846978cf4c68b8c2
Certificate serial: 01974B5670D4274E7C45ED33914D9F26B1DD
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/UeOaZ3aTuvt5JNbqhGl4z0xouMI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/47/4791e2-df25-4c7c-89df-76ec4acbb726/1/UeOaZ3aTuvt5JNbqhGl4z0xouMI.mft
Manifest number: 150D
Signing time: Sat 07 Jun 2025 17:00:45 +0000
Manifest this update: Sat 07 Jun 2025 17:00:45 +0000
Manifest next update: Sun 08 Jun 2025 17:00:45 +0000
Files and hashes: 1: UeOaZ3aTuvt5JNbqhGl4z0xouMI.crl (hash: THy7I4adtOQtyxir7Kn/WWj8kHBA324VTbVNJnkTJxY=)
2: w9u-iq9HQmmSpA58usBGj5VWpns.roa (hash: ebZ703D4CGF85tWdcmJd8B3P1oiiNNvM6TpGRigzvuk=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/47/4791e2-df25-4c7c-89df-76ec4acbb726/1/UeOaZ3aTuvt5JNbqhGl4z0xouMI.crl
rsync://rpki.ripe.net/repository/DEFAULT/47/4791e2-df25-4c7c-89df-76ec4acbb726/1/UeOaZ3aTuvt5JNbqhGl4z0xouMI.mft
rsync://rpki.ripe.net/repository/DEFAULT/UeOaZ3aTuvt5JNbqhGl4z0xouMI.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 08 Jun 2025 17:00:45 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:4b:56:70:d4:27:4e:7c:45:ed:33:91:4d:9f:26:b1:dd
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=51e39a677693bafb7924d6ea846978cf4c68b8c2
Validity
Not Before: Jun 7 17:00:45 2025 GMT
Not After : Jun 8 17:00:45 2025 GMT
Subject: CN=20d1a9d569628d8b082c2a703539a4c265544a39
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c2:ba:92:49:05:34:c6:fe:3c:9c:9c:43:d3:d4:
31:d2:06:d9:24:e3:6f:d9:86:f0:2a:e9:00:72:c6:
1e:f4:50:81:fc:0e:a4:d7:18:35:4b:cb:3f:35:7a:
b5:37:53:da:92:0d:74:8d:16:9e:68:22:21:c3:43:
82:f7:f7:94:67:9e:d7:67:3a:a7:bc:e7:21:84:a6:
3b:e8:ce:b4:66:6e:cb:9b:48:75:0e:88:fa:2c:ff:
6b:43:99:12:f4:16:06:26:a7:a1:65:54:07:3b:f7:
41:db:f1:fe:ed:89:92:b0:f5:01:18:d5:c2:b3:b7:
a6:da:b3:6f:fc:77:d8:ca:ec:3e:fc:39:ee:b7:f8:
9d:cb:91:34:64:5b:14:c8:70:6a:4f:5d:12:34:e0:
ae:c0:e9:a5:15:69:86:07:ca:4a:6f:98:1e:79:2c:
a8:a3:0d:90:85:8d:d0:84:44:91:b9:14:d1:d9:29:
ed:f3:09:15:4a:02:9b:49:5e:2f:7e:27:da:9b:76:
b3:89:21:59:ac:d8:f1:2a:af:a0:4f:1d:18:d5:81:
bf:e1:36:4a:81:9b:f0:87:f2:b1:98:82:e1:0e:19:
32:2b:d4:7b:11:f1:61:f8:a0:b3:4a:7e:fa:58:60:
ea:2f:d7:1c:ca:47:3c:54:cb:3a:55:b8:93:72:95:
30:99
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
20:D1:A9:D5:69:62:8D:8B:08:2C:2A:70:35:39:A4:C2:65:54:4A:39
X509v3 Authority Key Identifier:
keyid:51:E3:9A:67:76:93:BA:FB:79:24:D6:EA:84:69:78:CF:4C:68:B8:C2
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/UeOaZ3aTuvt5JNbqhGl4z0xouMI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/47/4791e2-df25-4c7c-89df-76ec4acbb726/1/UeOaZ3aTuvt5JNbqhGl4z0xouMI.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/47/4791e2-df25-4c7c-89df-76ec4acbb726/1/UeOaZ3aTuvt5JNbqhGl4z0xouMI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
bb:5a:b3:07:e3:26:be:7c:d6:2c:1b:da:66:1d:a8:0e:23:29:
46:de:6d:29:80:d3:15:a4:54:71:c1:0c:ea:72:5b:5d:1a:d1:
a0:7d:11:ac:dc:61:84:87:a4:f1:88:6c:67:c0:d2:e1:58:e1:
55:85:f5:f0:c8:fc:03:8a:f7:0b:44:9d:16:75:04:d1:33:aa:
ed:ed:ba:03:a0:22:0c:3a:da:71:53:21:69:11:76:6d:cf:2d:
b3:26:8c:c8:7d:19:3d:20:92:f5:5c:e3:b8:f2:4a:c7:a2:f2:
21:e1:31:5e:b9:a1:0d:77:ab:44:2e:7f:3f:97:6b:02:b9:bc:
68:c9:be:60:f7:d4:eb:57:89:60:6e:40:95:ff:95:32:79:fc:
31:e7:0b:7e:3d:0c:3b:b2:8d:cb:b2:06:f8:5f:9f:86:88:5b:
d3:48:86:7a:f6:9b:31:f5:64:b6:67:70:bc:1e:ee:ea:aa:17:
dd:33:00:a3:01:e0:ee:1d:84:5d:94:0b:a3:b8:10:e5:3e:f9:
19:ae:6e:9e:3d:38:7e:25:23:bf:1a:01:17:0f:4f:c5:1d:c7:
34:50:40:25:b8:b8:65:5e:ab:d3:3a:14:3f:6e:2e:d6:29:7e:
89:1b:f1:d8:35:d1:d4:09:9b:04:e6:6c:3d:94:ef:c8:ea:ce:
f6:ae:cf:89
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 7 22:09:19 2025 by rpki-client