Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/50/6558ec-d568-4cb9-a03a-8366b164dd66/1/Ul7JPXynN0Sywfu23aZEk8KklcE.mft
File: Ul7JPXynN0Sywfu23aZEk8KklcE.mft (raw, json)
Hash identifier: GyhvXUIsEM0A7wzb0heIX+lZcJ30HcRERJAjR+PF0ms=
Subject key identifier: 12:99:17:2C:72:4B:1E:B7:E7:F3:26:6F:D1:02:37:02:38:BB:6E:7D
Authority key identifier: 52:5E:C9:3D:7C:A7:37:44:B2:C1:FB:B6:DD:A6:44:93:C2:A4:95:C1
Certificate issuer: /CN=525ec93d7ca73744b2c1fbb6dda64493c2a495c1
Certificate serial: 0197684E9F63EE4FF3C0C3B29D4AA9675F8C
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Ul7JPXynN0Sywfu23aZEk8KklcE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/50/6558ec-d568-4cb9-a03a-8366b164dd66/1/Ul7JPXynN0Sywfu23aZEk8KklcE.mft
Manifest number: 03EB
Signing time: Fri 13 Jun 2025 08:01:12 +0000
Manifest this update: Fri 13 Jun 2025 08:01:12 +0000
Manifest next update: Sat 14 Jun 2025 08:01:12 +0000
Files and hashes: 1: 22DCbI9HvmzBDVGkxBm2WtXk528.roa (hash: 9ILpOZ8JHc5ka7qIZ58Ggk4y/F3lo6ZaZYJCwIqc3NU=)
2: Ul7JPXynN0Sywfu23aZEk8KklcE.crl (hash: N5aJSK28r7Sa93u8Yq3EBj+ROGTJgob1iEiiEYZaCXw=)
3: jeCifaYzZ5yF8G9Sciofq7w0n90.roa (hash: HV83fet9uguwCmg88F5Wp34425cNOk2TAaGpYDTRo7Q=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/50/6558ec-d568-4cb9-a03a-8366b164dd66/1/Ul7JPXynN0Sywfu23aZEk8KklcE.crl
rsync://rpki.ripe.net/repository/DEFAULT/50/6558ec-d568-4cb9-a03a-8366b164dd66/1/Ul7JPXynN0Sywfu23aZEk8KklcE.mft
rsync://rpki.ripe.net/repository/DEFAULT/Ul7JPXynN0Sywfu23aZEk8KklcE.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 14 Jun 2025 07:00:18 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:68:4e:9f:63:ee:4f:f3:c0:c3:b2:9d:4a:a9:67:5f:8c
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=525ec93d7ca73744b2c1fbb6dda64493c2a495c1
Validity
Not Before: Jun 13 08:01:12 2025 GMT
Not After : Jun 14 08:01:12 2025 GMT
Subject: CN=1299172c724b1eb7e7f3266fd102370238bb6e7d
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9f:c3:cf:b5:a7:6a:ee:32:c5:f8:1c:83:3d:b6:
85:8b:db:66:19:43:13:9b:00:d1:0d:2e:f8:66:75:
c5:ea:c7:67:a7:86:d9:d6:95:80:84:f3:2a:78:ac:
b2:01:c8:4e:21:e8:ba:ee:da:15:dd:8e:bf:2e:7e:
8a:87:11:3b:8e:95:99:77:a0:6f:86:01:92:4f:33:
4c:34:76:92:4d:5a:fc:26:3b:61:16:a1:6a:71:bd:
cc:1e:67:14:4d:1c:80:0a:39:42:94:e7:4d:10:11:
cc:a7:b8:a4:ba:54:e6:7f:94:49:f9:a0:81:0d:2a:
6e:84:30:59:d2:81:78:78:81:dc:ce:0e:d9:df:e4:
9d:a2:cf:06:38:86:da:3c:09:a9:c5:87:90:90:8c:
54:5a:33:d7:ea:ee:fb:ae:48:fa:74:82:64:8c:47:
82:8c:4b:1f:4a:1b:a1:c2:70:36:4b:94:0c:e2:84:
4a:c1:80:ee:90:fe:83:97:dd:13:f2:37:04:43:f3:
b3:78:92:08:af:00:f3:c4:21:a8:ad:b0:ec:0a:1b:
ee:c6:32:0b:7d:00:c6:d5:16:e1:22:88:39:13:f4:
01:65:79:82:f7:2e:bb:1a:9b:68:cd:0d:cf:08:34:
c5:1f:c7:3c:01:7e:59:01:7f:c3:df:e8:e1:1b:36:
be:3d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
12:99:17:2C:72:4B:1E:B7:E7:F3:26:6F:D1:02:37:02:38:BB:6E:7D
X509v3 Authority Key Identifier:
keyid:52:5E:C9:3D:7C:A7:37:44:B2:C1:FB:B6:DD:A6:44:93:C2:A4:95:C1
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Ul7JPXynN0Sywfu23aZEk8KklcE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/50/6558ec-d568-4cb9-a03a-8366b164dd66/1/Ul7JPXynN0Sywfu23aZEk8KklcE.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/50/6558ec-d568-4cb9-a03a-8366b164dd66/1/Ul7JPXynN0Sywfu23aZEk8KklcE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
6c:7c:45:05:38:48:92:8b:be:02:3a:ff:87:21:b1:e3:18:50:
70:02:eb:7f:72:8c:bf:bc:85:2e:fc:ba:98:52:43:51:d8:5f:
be:8d:da:2b:97:86:fc:2e:ad:7c:b0:22:96:7c:4d:7f:fe:74:
9e:01:c2:3d:e8:6b:31:58:24:0d:d0:35:1d:5a:f8:6d:46:4d:
47:39:04:0c:b0:3b:a4:6f:33:77:51:44:26:71:32:81:d3:2a:
03:77:00:de:46:2d:bd:82:7e:48:ee:14:92:08:2e:48:d9:1f:
0d:ac:24:fa:95:20:04:e9:d4:b6:d2:ad:de:90:97:aa:46:11:
a0:83:42:be:81:78:43:92:04:8a:44:2a:91:4a:ed:6f:54:05:
7d:b2:26:99:b5:14:05:42:90:05:d0:ff:c9:32:0e:d7:05:fe:
61:3c:87:85:55:01:f3:c1:5b:c0:67:10:f4:de:fe:a1:f2:c3:
b5:50:7d:cc:af:ab:b8:f5:2c:c2:45:13:ef:e7:f8:36:95:2c:
d8:00:7b:2f:53:a4:0d:7a:e9:b8:09:b9:b9:ee:e5:bd:41:87:
11:d1:b6:69:88:bb:f5:81:e2:b1:62:9d:63:49:94:d4:23:d1:
78:e3:1f:dd:9b:14:d4:b9:9d:05:53:61:92:b5:82:4e:0f:c1:
a8:be:52:05
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jun 13 17:19:48 2025 by rpki-client