Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/47/70599d-c474-4123-a743-a201dfabdab1/1/Ua-8FGJFXphp1IslexjiO-d6psM.mft
File: Ua-8FGJFXphp1IslexjiO-d6psM.mft (raw, json)
Hash identifier: uIvYk+hxO2920ag6xlWGzkEn7cqzp2Cfj7vLAWgv9UY=
Subject key identifier: 24:4A:EF:58:32:F1:2D:52:0E:FA:8C:77:73:B9:9A:01:99:9F:9A:E4
Authority key identifier: 51:AF:BC:14:62:45:5E:98:69:D4:8B:25:7B:18:E2:3B:E7:7A:A6:C3
Certificate issuer: /CN=51afbc1462455e9869d48b257b18e23be77aa6c3
Certificate serial: 01974666E915F4EB0DA901854494F876A780
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Ua-8FGJFXphp1IslexjiO-d6psM.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/47/70599d-c474-4123-a743-a201dfabdab1/1/Ua-8FGJFXphp1IslexjiO-d6psM.mft
Manifest number: 0DFE
Signing time: Fri 06 Jun 2025 18:00:38 +0000
Manifest this update: Fri 06 Jun 2025 18:00:38 +0000
Manifest next update: Sat 07 Jun 2025 18:00:38 +0000
Files and hashes: 1: PrJQJT3uctgSQDhbXg7t6tQ4QrM.roa (hash: gya9esJQBziUpHHO9F+UZbaGJJEGL38CeXZKg65ppYM=)
2: Ua-8FGJFXphp1IslexjiO-d6psM.crl (hash: u3QqyfZaspKLvROjKmTjyJNpRDH74Tv8ugrYEwIqnio=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/47/70599d-c474-4123-a743-a201dfabdab1/1/Ua-8FGJFXphp1IslexjiO-d6psM.crl
rsync://rpki.ripe.net/repository/DEFAULT/47/70599d-c474-4123-a743-a201dfabdab1/1/Ua-8FGJFXphp1IslexjiO-d6psM.mft
rsync://rpki.ripe.net/repository/DEFAULT/Ua-8FGJFXphp1IslexjiO-d6psM.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 07 Jun 2025 15:00:17 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:46:66:e9:15:f4:eb:0d:a9:01:85:44:94:f8:76:a7:80
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=51afbc1462455e9869d48b257b18e23be77aa6c3
Validity
Not Before: Jun 6 18:00:38 2025 GMT
Not After : Jun 7 18:00:38 2025 GMT
Subject: CN=244aef5832f12d520efa8c7773b99a01999f9ae4
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c1:a7:2a:83:39:c0:91:7f:86:5d:9a:fe:ab:bd:
e4:98:c1:1a:e3:32:2e:57:5f:8c:9d:18:50:90:08:
d6:9b:88:8a:c1:5c:a7:50:6a:23:aa:2d:5e:e1:4e:
0f:ea:89:aa:71:ae:a1:ff:cf:b5:54:56:c8:db:bd:
48:93:8d:be:3e:80:ae:ba:4a:bd:30:52:43:e4:d5:
c8:8f:4b:c3:da:ac:ca:35:8a:42:c2:6a:f2:7c:4e:
70:89:9d:56:36:3b:c4:57:5f:2b:c5:4d:f1:b1:1a:
27:74:c9:9d:99:bf:4f:68:8b:c0:44:65:4d:79:8f:
34:79:ec:59:62:95:b5:b0:30:8a:84:1b:3e:e9:55:
97:f9:91:cb:22:fb:71:e7:ad:7b:b3:8a:ca:34:cf:
8e:58:da:d9:49:b0:3d:07:78:09:1d:8b:1c:0a:f7:
f8:ae:d5:02:38:3c:8d:6c:3f:87:6c:0e:47:99:e0:
cc:84:3e:59:ae:c4:0a:9e:c7:37:8c:b3:3d:87:ca:
59:46:73:d4:67:cb:63:de:29:55:fe:a9:e2:e2:4f:
88:35:c0:98:5a:c4:87:c2:5a:df:9f:7b:1e:f0:36:
27:7d:f7:0c:3d:dc:9b:97:8b:ce:43:18:00:6e:29:
24:fa:a3:0e:0b:2e:c5:58:68:a8:3e:ad:04:87:6e:
3f:3f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
24:4A:EF:58:32:F1:2D:52:0E:FA:8C:77:73:B9:9A:01:99:9F:9A:E4
X509v3 Authority Key Identifier:
keyid:51:AF:BC:14:62:45:5E:98:69:D4:8B:25:7B:18:E2:3B:E7:7A:A6:C3
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Ua-8FGJFXphp1IslexjiO-d6psM.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/47/70599d-c474-4123-a743-a201dfabdab1/1/Ua-8FGJFXphp1IslexjiO-d6psM.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/47/70599d-c474-4123-a743-a201dfabdab1/1/Ua-8FGJFXphp1IslexjiO-d6psM.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
9f:17:dd:6d:58:4e:36:bf:4e:e0:b9:40:c7:c9:12:53:af:e0:
ef:2a:1f:8f:72:74:f1:75:2a:6a:fa:15:bf:bb:14:a7:26:43:
50:36:38:ba:cf:f0:82:ef:bb:58:85:ed:e4:0d:ea:ae:88:45:
55:88:26:47:8f:d9:88:d3:ce:98:1f:a0:e4:1e:5f:2b:43:8b:
19:31:33:9a:ed:b7:51:b3:71:9c:d5:12:dd:8e:d2:bd:3e:eb:
78:2d:2b:26:95:27:25:e4:35:f1:40:4a:72:4e:f0:e6:a1:33:
6c:a6:84:55:6f:6b:1b:1d:f3:8f:c7:3b:2a:98:2d:07:b9:9f:
f5:6a:72:42:0b:12:cb:42:82:ae:15:72:89:9e:91:0a:a5:e7:
57:e1:1e:ed:0e:13:d3:7b:a9:da:8f:12:07:21:5d:c2:78:cf:
66:4a:57:68:a9:b0:5f:30:ab:55:4b:fd:e1:03:6f:8c:84:79:
bf:ca:65:78:36:37:75:95:d7:be:f4:e6:fd:0a:1c:52:09:ec:
16:0b:f3:9d:be:9d:27:05:33:26:45:43:81:c1:90:04:c4:65:
fc:76:30:3c:ff:e8:a8:fa:eb:4d:e8:87:3b:69:31:fa:8d:0c:
ae:3d:10:71:db:6d:31:12:57:73:cb:1f:d3:53:86:13:b1:1d:
76:18:a5:1a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jun 6 23:21:21 2025 by rpki-client