Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/5b/42888b-aa3f-4611-803d-2db44c91ae60/1/Uz39bMFAxoo9O7qGulfPO4umqbc.mft
File: Uz39bMFAxoo9O7qGulfPO4umqbc.mft (raw, json)
Hash identifier: kaFidlf/I4+CKh7BBA2re86cO+M9q+iVfUO7l5N/oWQ=
Subject key identifier: C9:C7:CF:8F:14:8F:00:38:C1:C5:CF:30:1E:A5:14:B2:80:2D:47:8A
Authority key identifier: 53:3D:FD:6C:C1:40:C6:8A:3D:3B:BA:86:BA:57:CF:3B:8B:A6:A9:B7
Certificate issuer: /CN=533dfd6cc140c68a3d3bba86ba57cf3b8ba6a9b7
Certificate serial: 0197580070B36B9C81F8DF45C4C9DF3D4FDA
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Uz39bMFAxoo9O7qGulfPO4umqbc.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/5b/42888b-aa3f-4611-803d-2db44c91ae60/1/Uz39bMFAxoo9O7qGulfPO4umqbc.mft
Manifest number: 10CA
Signing time: Tue 10 Jun 2025 04:01:53 +0000
Manifest this update: Tue 10 Jun 2025 04:01:53 +0000
Manifest next update: Wed 11 Jun 2025 04:01:53 +0000
Files and hashes: 1: LuBsqNtq59OLv1AWHpkXInch_bk.roa (hash: IW1LLIgf30eZrheSzd/U0PwBqHlPoD/7QK4BJgtpt6w=)
2: Uz39bMFAxoo9O7qGulfPO4umqbc.crl (hash: b6GiGWiatAp06wuHUSZxfiG+BnnAUfGErunzJ3e9Jgc=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/5b/42888b-aa3f-4611-803d-2db44c91ae60/1/Uz39bMFAxoo9O7qGulfPO4umqbc.crl
rsync://rpki.ripe.net/repository/DEFAULT/5b/42888b-aa3f-4611-803d-2db44c91ae60/1/Uz39bMFAxoo9O7qGulfPO4umqbc.mft
rsync://rpki.ripe.net/repository/DEFAULT/Uz39bMFAxoo9O7qGulfPO4umqbc.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 11 Jun 2025 00:00:17 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:58:00:70:b3:6b:9c:81:f8:df:45:c4:c9:df:3d:4f:da
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=533dfd6cc140c68a3d3bba86ba57cf3b8ba6a9b7
Validity
Not Before: Jun 10 04:01:53 2025 GMT
Not After : Jun 11 04:01:53 2025 GMT
Subject: CN=c9c7cf8f148f0038c1c5cf301ea514b2802d478a
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:f7:49:e3:22:16:7d:b9:fc:51:03:a8:81:4d:4f:
1e:97:4a:a5:41:e3:75:e3:5b:71:53:7d:fa:00:6e:
90:8f:de:c3:eb:3a:69:ff:3e:3e:ff:51:6d:a5:3c:
4f:04:76:14:23:bf:84:8d:47:f8:c4:cb:0c:2a:b0:
74:c2:69:33:c3:61:75:20:5a:6a:68:d4:b5:4e:73:
cc:44:cb:77:cb:93:62:bd:e7:31:43:55:87:56:94:
d6:3e:5d:22:fe:e1:31:ed:ff:94:67:70:ac:5e:d5:
c8:b5:9b:0e:a5:f6:75:e3:52:24:97:92:1d:16:d9:
a7:cf:11:e6:88:28:ae:ad:ea:8d:3f:a3:28:63:92:
70:86:01:9b:8d:b4:29:0b:42:36:0c:a6:53:0d:78:
af:73:59:fb:41:c7:7e:0e:23:5f:44:a6:00:0e:54:
19:b2:33:b0:d4:30:ae:34:95:96:02:79:6f:92:b8:
73:7a:39:60:48:4b:12:e3:b8:7b:bc:c1:0d:78:99:
e1:91:0a:13:7f:4d:79:d4:a4:e0:da:42:f2:be:7b:
6f:6f:f5:1b:e6:b3:29:e2:53:d8:d8:9c:d0:6b:e8:
ba:2f:44:8f:0e:bd:5d:7e:2d:6a:f8:4c:b3:c1:28:
b6:ea:9f:da:90:8e:8e:40:1d:bb:a3:c7:7e:4e:59:
c5:7f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C9:C7:CF:8F:14:8F:00:38:C1:C5:CF:30:1E:A5:14:B2:80:2D:47:8A
X509v3 Authority Key Identifier:
keyid:53:3D:FD:6C:C1:40:C6:8A:3D:3B:BA:86:BA:57:CF:3B:8B:A6:A9:B7
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Uz39bMFAxoo9O7qGulfPO4umqbc.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5b/42888b-aa3f-4611-803d-2db44c91ae60/1/Uz39bMFAxoo9O7qGulfPO4umqbc.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/5b/42888b-aa3f-4611-803d-2db44c91ae60/1/Uz39bMFAxoo9O7qGulfPO4umqbc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
69:c4:1d:62:fa:86:fb:07:a5:11:0b:fa:74:f9:aa:d7:5c:02:
b0:32:2e:0a:17:fb:b1:01:c6:20:37:a6:07:24:c1:95:e9:d2:
53:a5:a4:66:84:f0:f1:72:f8:89:73:23:8e:05:25:40:ce:3d:
26:35:75:ab:77:63:10:31:97:91:c0:83:30:da:89:cc:e8:0f:
81:1a:54:a2:60:10:84:80:fe:24:03:b2:bd:91:ec:08:65:1f:
fc:1d:d4:4b:49:ae:1e:76:bd:c6:6b:45:bf:fd:aa:49:5b:92:
59:fd:3e:c5:e5:e9:dc:d3:8e:68:e1:67:30:06:0a:65:62:5f:
40:00:3f:41:bb:26:2d:02:80:4e:00:a5:82:0a:71:ae:e0:3e:
fd:42:03:74:74:ac:6e:cc:cd:bf:d9:5b:0d:69:1f:64:46:ac:
5f:0e:a1:be:ea:e9:73:a3:d2:1a:a5:57:7b:20:13:76:24:4d:
10:9f:31:6f:85:2c:09:14:9f:39:62:c7:1f:3c:e0:fd:95:78:
1a:f2:c9:91:ee:e8:84:1f:58:f6:6b:3c:1a:60:43:56:90:ef:
24:3e:43:d0:9b:d3:17:c5:b9:d0:1f:de:73:fa:83:27:97:31:
eb:d2:f3:2b:e2:8e:b2:36:2a:35:48:9e:1f:55:49:41:65:75:
e3:ed:30:4c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Jun 10 07:49:39 2025 by rpki-client