Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/5b/42888b-aa3f-4611-803d-2db44c91ae60/1/Uz39bMFAxoo9O7qGulfPO4umqbc.mft
File: Uz39bMFAxoo9O7qGulfPO4umqbc.mft (raw, json)
Hash identifier: Jw7JofvYd0SZpqj3OthjA29llnbJmcxUffASl2Eo47w=
Subject key identifier: A7:A1:7D:B2:D2:45:B6:FF:82:FA:11:23:F8:48:FB:44:9B:E5:4C:A9
Authority key identifier: 53:3D:FD:6C:C1:40:C6:8A:3D:3B:BA:86:BA:57:CF:3B:8B:A6:A9:B7
Certificate issuer: /CN=533dfd6cc140c68a3d3bba86ba57cf3b8ba6a9b7
Certificate serial: 019767733FA42A9ABABDF21368A9DE630526
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Uz39bMFAxoo9O7qGulfPO4umqbc.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/5b/42888b-aa3f-4611-803d-2db44c91ae60/1/Uz39bMFAxoo9O7qGulfPO4umqbc.mft
Manifest number: 10D2
Signing time: Fri 13 Jun 2025 04:01:35 +0000
Manifest this update: Fri 13 Jun 2025 04:01:35 +0000
Manifest next update: Sat 14 Jun 2025 04:01:35 +0000
Files and hashes: 1: LuBsqNtq59OLv1AWHpkXInch_bk.roa (hash: IW1LLIgf30eZrheSzd/U0PwBqHlPoD/7QK4BJgtpt6w=)
2: Uz39bMFAxoo9O7qGulfPO4umqbc.crl (hash: aj0j7VU0mw+fHdUmVSz0+ftLCBcifpBjI8k7M94YWLA=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/5b/42888b-aa3f-4611-803d-2db44c91ae60/1/Uz39bMFAxoo9O7qGulfPO4umqbc.crl
rsync://rpki.ripe.net/repository/DEFAULT/5b/42888b-aa3f-4611-803d-2db44c91ae60/1/Uz39bMFAxoo9O7qGulfPO4umqbc.mft
rsync://rpki.ripe.net/repository/DEFAULT/Uz39bMFAxoo9O7qGulfPO4umqbc.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 13 Jun 2025 22:00:17 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:67:73:3f:a4:2a:9a:ba:bd:f2:13:68:a9:de:63:05:26
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=533dfd6cc140c68a3d3bba86ba57cf3b8ba6a9b7
Validity
Not Before: Jun 13 04:01:35 2025 GMT
Not After : Jun 14 04:01:35 2025 GMT
Subject: CN=a7a17db2d245b6ff82fa1123f848fb449be54ca9
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b5:83:c4:a2:00:7c:13:8a:90:8f:6a:b6:35:6e:
eb:47:19:34:0e:d6:09:75:25:57:52:64:44:72:b4:
75:2f:ab:78:4c:8a:aa:2a:15:94:e1:91:41:5f:db:
c5:bf:95:ab:2f:96:21:0d:fb:67:11:8c:f2:9e:25:
6b:39:9e:89:95:82:5c:2c:e3:05:48:3f:4e:f9:68:
33:d6:29:14:01:67:62:74:57:be:ce:6b:47:e2:d7:
ff:e7:8e:45:90:da:ef:2e:12:1d:1b:84:45:e3:c6:
ac:51:27:a8:ee:2c:99:7f:08:6f:09:87:9d:64:d4:
fe:7b:68:e5:4c:f6:59:81:e7:c3:24:3c:86:4f:29:
59:36:06:6f:20:54:56:40:7f:ca:59:91:ba:fd:bd:
af:a7:5d:40:27:ff:32:4f:eb:e6:4a:64:ef:97:7a:
0a:4b:db:f1:d7:10:bb:73:19:4f:f9:d9:fc:81:2d:
c3:03:fd:78:cc:df:c6:de:db:2c:33:4a:89:b6:61:
bd:da:d1:da:bb:5e:c4:5f:45:eb:9a:d8:f9:16:fa:
66:2e:0d:0d:19:d8:58:35:b5:9e:b9:5c:d4:e8:a0:
f6:ce:38:db:bb:3e:6c:5a:03:01:c9:2e:b5:50:81:
7a:85:0a:93:5d:e6:a5:63:72:35:76:dc:db:45:fd:
4a:7f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A7:A1:7D:B2:D2:45:B6:FF:82:FA:11:23:F8:48:FB:44:9B:E5:4C:A9
X509v3 Authority Key Identifier:
keyid:53:3D:FD:6C:C1:40:C6:8A:3D:3B:BA:86:BA:57:CF:3B:8B:A6:A9:B7
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Uz39bMFAxoo9O7qGulfPO4umqbc.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5b/42888b-aa3f-4611-803d-2db44c91ae60/1/Uz39bMFAxoo9O7qGulfPO4umqbc.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/5b/42888b-aa3f-4611-803d-2db44c91ae60/1/Uz39bMFAxoo9O7qGulfPO4umqbc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
9e:3f:d5:bf:d4:79:27:64:f1:05:e0:cb:12:97:df:3d:79:2a:
74:52:9d:d9:c6:54:b3:94:52:7b:7b:2c:ab:4f:57:fc:d2:75:
7e:a9:77:96:49:9e:dc:7b:73:56:ea:8c:13:88:46:e1:ba:f8:
a0:5a:9a:23:81:27:0f:2c:43:70:b3:6c:1b:a9:3d:43:7b:a2:
af:bd:cb:04:d4:5d:c8:ea:6b:57:6d:4d:c9:6d:e1:3b:37:c4:
69:39:c1:12:6e:74:3b:bd:38:4d:fe:97:31:00:02:ed:2b:9e:
da:1c:2c:6e:31:07:a8:6f:f1:32:ae:d6:67:82:71:20:2b:07:
22:b4:e7:df:f0:bb:53:fd:eb:d4:c3:88:e3:1b:81:1c:86:ef:
b0:b4:75:f9:0f:d5:e7:00:3a:48:9e:bc:bb:7a:b4:db:4e:29:
be:cd:1f:46:c9:77:63:ee:42:5d:69:49:a9:87:eb:c1:63:09:
99:ba:f8:ee:a9:fa:ff:e2:c1:b9:04:1b:19:d8:66:2f:80:23:
d1:03:30:3d:f7:32:28:cc:6d:6a:12:4c:20:72:06:0f:ac:35:
3c:a5:50:4c:9b:ca:f8:98:6d:46:59:38:63:fa:3e:ed:44:00:
9f:4f:82:d5:fb:f8:48:50:f4:b1:a5:fa:ea:91:39:75:ce:76:
6d:72:bb:0e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jun 13 09:08:27 2025 by rpki-client