Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/50/6558ec-d568-4cb9-a03a-8366b164dd66/1/Ul7JPXynN0Sywfu23aZEk8KklcE.mft
File: Ul7JPXynN0Sywfu23aZEk8KklcE.mft (raw, json)
Hash identifier: lZEI033PRQ9kFCPiWGIC/dH9w67UN04isvUr+V7ck8M=
Subject key identifier: AC:43:B5:97:46:4D:87:5D:90:B1:6A:BC:83:1C:98:20:8C:73:EF:0A
Authority key identifier: 52:5E:C9:3D:7C:A7:37:44:B2:C1:FB:B6:DD:A6:44:93:C2:A4:95:C1
Certificate issuer: /CN=525ec93d7ca73744b2c1fbb6dda64493c2a495c1
Certificate serial: 01976471CAC11BBBAF95DEE42CB302850521
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Ul7JPXynN0Sywfu23aZEk8KklcE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/50/6558ec-d568-4cb9-a03a-8366b164dd66/1/Ul7JPXynN0Sywfu23aZEk8KklcE.mft
Manifest number: 03E9
Signing time: Thu 12 Jun 2025 14:01:08 +0000
Manifest this update: Thu 12 Jun 2025 14:01:08 +0000
Manifest next update: Fri 13 Jun 2025 14:01:08 +0000
Files and hashes: 1: 22DCbI9HvmzBDVGkxBm2WtXk528.roa (hash: 9ILpOZ8JHc5ka7qIZ58Ggk4y/F3lo6ZaZYJCwIqc3NU=)
2: Ul7JPXynN0Sywfu23aZEk8KklcE.crl (hash: 6rGKEAM4MhL3/Hb2lu2ONr7r+IxZ67mO6t1AyEzt+SI=)
3: jeCifaYzZ5yF8G9Sciofq7w0n90.roa (hash: HV83fet9uguwCmg88F5Wp34425cNOk2TAaGpYDTRo7Q=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/50/6558ec-d568-4cb9-a03a-8366b164dd66/1/Ul7JPXynN0Sywfu23aZEk8KklcE.crl
rsync://rpki.ripe.net/repository/DEFAULT/50/6558ec-d568-4cb9-a03a-8366b164dd66/1/Ul7JPXynN0Sywfu23aZEk8KklcE.mft
rsync://rpki.ripe.net/repository/DEFAULT/Ul7JPXynN0Sywfu23aZEk8KklcE.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 13 Jun 2025 14:01:08 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:64:71:ca:c1:1b:bb:af:95:de:e4:2c:b3:02:85:05:21
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=525ec93d7ca73744b2c1fbb6dda64493c2a495c1
Validity
Not Before: Jun 12 14:01:08 2025 GMT
Not After : Jun 13 14:01:08 2025 GMT
Subject: CN=ac43b597464d875d90b16abc831c98208c73ef0a
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ba:6f:e3:fa:72:d7:cb:e3:52:cf:f5:b1:9f:40:
7b:1f:8b:3d:0d:53:fb:6a:55:f9:5e:6d:3b:e1:b5:
b0:80:b7:93:cd:6b:c3:bb:b0:12:9a:d2:59:d6:92:
04:9f:0d:ab:e1:49:dc:2c:5c:fe:96:e6:07:52:6a:
9f:e7:54:55:ce:5c:91:37:22:57:11:ab:2e:8e:00:
3e:57:97:42:9c:15:47:42:02:e8:9e:85:67:01:42:
91:ff:0a:1b:f1:ca:ef:24:1a:6e:17:eb:db:c3:f7:
38:3d:b2:d9:a3:18:c9:56:4a:e1:10:8a:22:3f:4b:
49:fe:f9:8e:83:ce:e3:8c:07:a6:ac:2a:52:db:64:
f4:62:15:f1:5c:89:1b:c2:4b:ea:d2:c4:db:8c:6a:
cc:32:c1:30:71:fc:a2:e8:7e:31:e5:7d:1d:53:2c:
a2:43:63:46:b8:e6:c4:2c:01:55:8d:43:e1:51:ac:
ec:03:b0:79:2d:1c:b9:2b:aa:76:59:78:9b:3d:f7:
b2:fa:03:00:ae:c2:c3:a7:f5:b9:e6:03:da:86:8f:
78:78:1b:17:bf:41:d5:81:53:d2:7d:5a:41:b9:d9:
84:d7:6c:f3:ea:3d:fa:58:76:8a:77:e7:65:ca:69:
48:d6:26:3a:12:4b:cc:db:c5:b2:5e:f0:f5:8b:f8:
a0:ad
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
AC:43:B5:97:46:4D:87:5D:90:B1:6A:BC:83:1C:98:20:8C:73:EF:0A
X509v3 Authority Key Identifier:
keyid:52:5E:C9:3D:7C:A7:37:44:B2:C1:FB:B6:DD:A6:44:93:C2:A4:95:C1
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Ul7JPXynN0Sywfu23aZEk8KklcE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/50/6558ec-d568-4cb9-a03a-8366b164dd66/1/Ul7JPXynN0Sywfu23aZEk8KklcE.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/50/6558ec-d568-4cb9-a03a-8366b164dd66/1/Ul7JPXynN0Sywfu23aZEk8KklcE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
9b:52:05:44:a8:87:18:be:c4:87:c5:c7:32:2a:4a:e6:ca:7b:
21:00:c7:1c:cf:78:fa:be:4c:68:87:2d:4b:7b:1f:63:40:c3:
a3:7f:42:66:c7:92:f8:e2:2d:24:f5:59:f3:c4:8f:b3:63:c4:
0c:1c:ac:be:db:d7:91:91:ea:75:e0:ac:cc:4c:57:fd:b3:34:
a9:b6:0c:52:f1:45:b2:64:57:49:dc:95:0d:62:af:f6:e4:3a:
b3:56:8c:c2:b0:9c:42:37:2a:38:4c:63:0a:95:b8:d8:7a:6e:
21:43:0a:71:0c:3a:91:dd:9e:91:69:4a:49:dc:dc:1d:f6:e3:
05:91:81:57:f9:0b:f3:70:07:f5:94:6f:74:ee:51:fa:b9:4d:
2e:23:0f:25:64:7b:9e:12:5e:87:5e:6b:2d:55:a8:a6:db:0a:
d1:d2:8c:2c:dd:99:a9:15:6e:e6:f7:73:d6:0a:a8:7a:aa:25:
c6:1f:d0:2d:f4:34:56:cb:07:93:98:05:8c:9b:0d:4d:a2:07:
d6:33:f6:c8:e7:03:e6:3e:53:94:be:4c:22:0d:44:c8:07:3d:
29:d7:23:0a:8e:4f:c8:15:61:c7:e2:b8:80:cb:0e:01:66:35:
e6:06:81:5b:db:4f:fb:67:01:84:ca:d8:67:b9:ef:65:75:dd:
34:81:3a:52
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jun 13 01:18:13 2025 by rpki-client