Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/5b/42888b-aa3f-4611-803d-2db44c91ae60/1/Uz39bMFAxoo9O7qGulfPO4umqbc.mft
File: Uz39bMFAxoo9O7qGulfPO4umqbc.mft (raw, json)
Hash identifier: sztNFhwRlR5YJxulxU33C+4wkIMZbBIPQ7zp8BxGS8E=
Subject key identifier: DC:17:9A:70:DA:CA:23:7E:58:39:1D:A2:7A:E6:BF:4B:6B:F0:28:AC
Authority key identifier: 53:3D:FD:6C:C1:40:C6:8A:3D:3B:BA:86:BA:57:CF:3B:8B:A6:A9:B7
Certificate issuer: /CN=533dfd6cc140c68a3d3bba86ba57cf3b8ba6a9b7
Certificate serial: 01975FB9927CB3C309B7220DADE0D5A20136
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Uz39bMFAxoo9O7qGulfPO4umqbc.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/5b/42888b-aa3f-4611-803d-2db44c91ae60/1/Uz39bMFAxoo9O7qGulfPO4umqbc.mft
Manifest number: 10CE
Signing time: Wed 11 Jun 2025 16:01:26 +0000
Manifest this update: Wed 11 Jun 2025 16:01:26 +0000
Manifest next update: Thu 12 Jun 2025 16:01:26 +0000
Files and hashes: 1: LuBsqNtq59OLv1AWHpkXInch_bk.roa (hash: IW1LLIgf30eZrheSzd/U0PwBqHlPoD/7QK4BJgtpt6w=)
2: Uz39bMFAxoo9O7qGulfPO4umqbc.crl (hash: Jf0LcIHLfNHVcQqJf8FvitDKhhF8K2xXpHJZ9CbVs1c=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/5b/42888b-aa3f-4611-803d-2db44c91ae60/1/Uz39bMFAxoo9O7qGulfPO4umqbc.crl
rsync://rpki.ripe.net/repository/DEFAULT/5b/42888b-aa3f-4611-803d-2db44c91ae60/1/Uz39bMFAxoo9O7qGulfPO4umqbc.mft
rsync://rpki.ripe.net/repository/DEFAULT/Uz39bMFAxoo9O7qGulfPO4umqbc.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 12 Jun 2025 15:40:17 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:5f:b9:92:7c:b3:c3:09:b7:22:0d:ad:e0:d5:a2:01:36
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=533dfd6cc140c68a3d3bba86ba57cf3b8ba6a9b7
Validity
Not Before: Jun 11 16:01:26 2025 GMT
Not After : Jun 12 16:01:26 2025 GMT
Subject: CN=dc179a70daca237e58391da27ae6bf4b6bf028ac
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bf:70:6f:5e:b7:b6:17:1d:8e:b9:0e:b6:6e:6b:
3b:17:5f:99:2e:80:cf:f1:44:0c:4d:7b:0c:ff:4a:
53:61:c1:86:e9:42:ac:87:99:b9:12:c1:cd:dd:b1:
87:1c:4e:90:a4:79:db:ed:56:d5:55:ca:55:e5:11:
ee:13:43:1c:a9:0f:90:00:a5:ec:47:40:a3:48:b6:
11:1a:73:4c:e8:b5:d6:e7:f9:b6:97:95:fd:a6:7e:
46:fc:93:c4:c7:4e:c3:5c:2f:b4:65:78:0d:7c:9c:
46:1d:90:96:d4:06:18:ec:f4:40:60:c0:19:4e:73:
f0:da:cc:15:ee:ea:16:dc:ea:41:75:bc:21:7c:ab:
3a:74:a0:1d:9e:8f:23:dd:d4:77:db:fe:67:eb:21:
46:16:fb:22:71:f1:24:c7:eb:28:f5:4b:d0:75:21:
f5:be:ef:83:ad:76:8f:dc:86:b2:f1:5d:99:74:9b:
5b:80:79:92:8e:d4:3a:42:b6:66:04:6a:34:56:a8:
b6:ef:5e:95:47:e7:94:a5:44:50:46:37:92:79:51:
e6:e3:6c:53:64:24:9a:13:4d:f6:66:f2:34:69:6c:
11:64:35:fd:06:79:87:a3:85:9e:98:bf:ff:7d:1e:
6a:a4:81:0c:2b:5c:ee:0e:31:9a:7d:8b:d0:ef:d6:
75:37
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
DC:17:9A:70:DA:CA:23:7E:58:39:1D:A2:7A:E6:BF:4B:6B:F0:28:AC
X509v3 Authority Key Identifier:
keyid:53:3D:FD:6C:C1:40:C6:8A:3D:3B:BA:86:BA:57:CF:3B:8B:A6:A9:B7
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Uz39bMFAxoo9O7qGulfPO4umqbc.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5b/42888b-aa3f-4611-803d-2db44c91ae60/1/Uz39bMFAxoo9O7qGulfPO4umqbc.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/5b/42888b-aa3f-4611-803d-2db44c91ae60/1/Uz39bMFAxoo9O7qGulfPO4umqbc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
8a:4e:de:eb:bc:ea:83:01:42:1a:3b:14:0e:8a:cb:5c:6b:cd:
e4:3f:02:3f:a3:2a:28:17:00:c7:e4:3e:97:43:9b:45:47:03:
53:16:51:33:05:1e:a1:72:df:17:e5:52:ad:26:05:90:30:47:
25:f5:ff:17:01:00:28:51:34:09:27:28:12:80:e6:4c:36:bd:
6d:4b:15:78:1e:18:17:22:f1:b4:2c:5c:11:40:60:4c:28:a2:
59:63:9d:a1:9a:6f:98:64:53:13:7b:bb:11:39:d3:23:bd:57:
ad:f6:b9:11:ab:e4:70:f3:95:0c:c2:12:28:ec:66:2e:a7:b9:
2c:6a:17:1d:57:33:cc:32:47:d1:09:ec:3b:05:de:05:9c:5c:
8e:2f:3d:dc:70:a8:5f:d5:5c:0c:97:0b:1b:fc:66:35:3a:ad:
8e:87:94:6e:2d:0b:4b:d0:56:0c:d6:69:47:2f:ee:33:b2:8a:
e5:ba:76:ad:93:7a:94:e8:3e:78:e8:b6:fd:c6:64:3a:be:04:
e0:af:2f:dc:20:ac:ba:5a:d5:69:30:91:3a:bb:9b:7b:eb:24:
b9:bd:3d:d0:63:22:f9:64:91:f3:d4:27:ef:e5:96:d3:a5:2f:
d6:e8:11:9b:9e:b2:bd:89:83:69:60:c7:cf:65:da:f5:0b:12:
1b:d8:34:c9
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jun 11 23:08:35 2025 by rpki-client