Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/4f/78b190-8a02-4cb8-b484-526f7cc529b7/1/ulS25fzKMIs23I8Wdgay1lmDnPE.mft
File: ulS25fzKMIs23I8Wdgay1lmDnPE.mft (raw, json)
Hash identifier: r0FZLR/SN8chyyGvNB0phfJfY2I0hM91chxT8UPxEOI=
Subject key identifier: 9F:C7:36:BF:2E:09:2F:24:49:13:03:DA:59:DC:5D:FB:8F:BA:3A:83
Authority key identifier: BA:54:B6:E5:FC:CA:30:8B:36:DC:8F:16:76:06:B2:D6:59:83:9C:F1
Certificate issuer: /CN=ba54b6e5fcca308b36dc8f167606b2d659839cf1
Certificate serial: 01974666BD3F79B7693A01D7C85CB99F0EA9
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/ulS25fzKMIs23I8Wdgay1lmDnPE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/4f/78b190-8a02-4cb8-b484-526f7cc529b7/1/ulS25fzKMIs23I8Wdgay1lmDnPE.mft
Manifest number: 1580
Signing time: Fri 06 Jun 2025 18:00:27 +0000
Manifest this update: Fri 06 Jun 2025 18:00:27 +0000
Manifest next update: Sat 07 Jun 2025 18:00:27 +0000
Files and hashes: 1: A_rVLwz6loZEjMXnXd5R_NOTkp4.roa (hash: 8+JgFivo4KszmuGxxyWfRxvtdrWwzQi25zyDQNYA07U=)
2: k1_vQBbHzbDSZOjVFYSurblTDtM.roa (hash: dvuNRuNyVcQXmg6ppjboIbvrEfj7c0W4N1dzZe23qr0=)
3: ulS25fzKMIs23I8Wdgay1lmDnPE.crl (hash: 0xm9s+BY727sj8eCLYy6xz2I+hq7e9EoSMufxf+5F5c=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/4f/78b190-8a02-4cb8-b484-526f7cc529b7/1/ulS25fzKMIs23I8Wdgay1lmDnPE.crl
rsync://rpki.ripe.net/repository/DEFAULT/4f/78b190-8a02-4cb8-b484-526f7cc529b7/1/ulS25fzKMIs23I8Wdgay1lmDnPE.mft
rsync://rpki.ripe.net/repository/DEFAULT/ulS25fzKMIs23I8Wdgay1lmDnPE.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 07 Jun 2025 18:00:27 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:46:66:bd:3f:79:b7:69:3a:01:d7:c8:5c:b9:9f:0e:a9
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=ba54b6e5fcca308b36dc8f167606b2d659839cf1
Validity
Not Before: Jun 6 18:00:27 2025 GMT
Not After : Jun 7 18:00:27 2025 GMT
Subject: CN=9fc736bf2e092f24491303da59dc5dfb8fba3a83
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e1:6b:6b:c4:83:ad:ae:bf:b7:b5:46:23:8d:ec:
c9:0a:68:a0:8e:9e:5a:66:3c:c2:ba:27:cd:ac:72:
e3:ee:3f:b4:a7:3a:cb:69:39:36:a7:a4:ff:8c:14:
c0:60:43:2a:24:76:19:e2:3f:15:3c:78:0f:14:8f:
da:52:69:71:39:0d:eb:6e:1c:5b:8e:cd:ab:0a:34:
6b:dc:c9:72:bb:0b:1d:83:7e:42:31:be:93:47:56:
60:78:54:33:59:35:b6:fe:54:5f:de:72:29:1f:2b:
1a:f0:d7:00:9b:97:a3:55:58:82:dd:1f:7c:4d:69:
14:a3:dc:91:5e:4b:63:20:2c:2c:e1:01:9b:2f:60:
38:38:d2:f5:39:65:63:92:8f:c9:21:e5:fd:99:de:
73:73:1b:aa:5e:b1:c2:60:77:b4:a0:c8:53:b9:77:
1c:63:d5:be:47:c5:9d:0c:ce:7f:af:60:fb:33:c3:
ce:4d:2c:cd:09:29:aa:77:1e:00:8f:dd:04:3f:79:
7d:d8:23:ae:de:94:21:ac:2b:4a:b2:84:ed:6c:ed:
fc:cc:17:b9:4c:bc:4d:4c:b9:3e:9e:ae:1a:e7:db:
e4:ed:18:76:ec:a6:ee:16:9e:e9:1b:dc:cf:b8:c8:
bc:cd:cf:c0:21:c3:e2:fa:bc:c4:81:c6:59:0c:7c:
02:0f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
9F:C7:36:BF:2E:09:2F:24:49:13:03:DA:59:DC:5D:FB:8F:BA:3A:83
X509v3 Authority Key Identifier:
keyid:BA:54:B6:E5:FC:CA:30:8B:36:DC:8F:16:76:06:B2:D6:59:83:9C:F1
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ulS25fzKMIs23I8Wdgay1lmDnPE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/4f/78b190-8a02-4cb8-b484-526f7cc529b7/1/ulS25fzKMIs23I8Wdgay1lmDnPE.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/4f/78b190-8a02-4cb8-b484-526f7cc529b7/1/ulS25fzKMIs23I8Wdgay1lmDnPE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
1f:c4:8c:9e:28:7a:6d:ef:f2:8b:a3:ec:a6:f7:ce:27:c4:55:
61:e7:dc:22:54:1f:43:08:c4:4a:5d:df:8f:a7:48:2b:55:b1:
fb:a7:57:e7:bb:8c:b8:ab:27:a1:ad:b8:d5:a0:89:d9:1a:0f:
3b:df:6c:cc:b2:a5:d0:e4:48:b9:02:a3:a2:45:52:e5:ec:86:
38:ed:b2:35:19:a5:f6:cf:4c:21:3a:50:25:86:a4:90:90:55:
53:bd:97:10:c6:e4:d7:22:62:32:bf:8e:75:11:b6:04:e0:6d:
c7:e3:9d:e3:4e:4a:cf:b5:aa:42:d7:64:00:ef:7d:ba:e4:d4:
c2:2e:58:f8:85:55:c0:af:22:0a:31:e6:00:83:7d:98:f7:d4:
b3:e3:e3:8c:b4:86:66:25:7f:0d:f3:12:ea:86:a5:03:a0:8f:
8d:17:10:07:8d:94:03:41:df:f6:52:d9:c9:37:6c:12:8f:87:
78:86:26:bc:8d:5c:c3:97:5e:d0:6d:73:f1:0e:1f:76:a7:b9:
84:ed:4b:e7:a2:a1:51:ad:f2:25:01:a6:0c:80:58:de:93:01:
0f:62:f6:cf:88:21:c6:c1:1b:ee:14:64:ce:db:06:38:f8:d7:
db:a3:f8:84:f2:b3:83:d5:a7:fc:03:d8:6a:62:b6:79:9c:d3:
1a:33:9c:63
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 7 02:00:24 2025 by rpki-client