Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/5e/732b26-3193-44a7-938e-af68467c3727/1/uGnMQkFerGXEuqGjkmMC6IteFik.mft
File: uGnMQkFerGXEuqGjkmMC6IteFik.mft (raw, json)
Hash identifier: GkJZOAVAVTRnhX6LilK5QU8MXYK/bRUNqGZppO1nYHw=
Subject key identifier: AA:B2:25:D9:17:37:EE:4D:33:CD:69:C5:1A:8B:7C:5B:1E:A2:4B:13
Authority key identifier: B8:69:CC:42:41:5E:AC:65:C4:BA:A1:A3:92:63:02:E8:8B:5E:16:29
Certificate issuer: /CN=b869cc42415eac65c4baa1a3926302e88b5e1629
Certificate serial: 0197500EBBA2C0FA567406E431BEB41CF0CE
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/uGnMQkFerGXEuqGjkmMC6IteFik.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/5e/732b26-3193-44a7-938e-af68467c3727/1/uGnMQkFerGXEuqGjkmMC6IteFik.mft
Manifest number: 1583
Signing time: Sun 08 Jun 2025 15:00:32 +0000
Manifest this update: Sun 08 Jun 2025 15:00:32 +0000
Manifest next update: Mon 09 Jun 2025 15:00:32 +0000
Files and hashes: 1: rfqIXym62rsTrwUCch6X7N-WIjc.roa (hash: UrLx/UfZM+i0RuGAlwwTlhRRu8d3hC661LamttgumqQ=)
2: uGnMQkFerGXEuqGjkmMC6IteFik.crl (hash: NukiXjKGVHMcUm331TujzTHRT2shWpO6OkYcXNgNAFM=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/5e/732b26-3193-44a7-938e-af68467c3727/1/uGnMQkFerGXEuqGjkmMC6IteFik.crl
rsync://rpki.ripe.net/repository/DEFAULT/5e/732b26-3193-44a7-938e-af68467c3727/1/uGnMQkFerGXEuqGjkmMC6IteFik.mft
rsync://rpki.ripe.net/repository/DEFAULT/uGnMQkFerGXEuqGjkmMC6IteFik.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 09 Jun 2025 12:00:17 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:50:0e:bb:a2:c0:fa:56:74:06:e4:31:be:b4:1c:f0:ce
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=b869cc42415eac65c4baa1a3926302e88b5e1629
Validity
Not Before: Jun 8 15:00:32 2025 GMT
Not After : Jun 9 15:00:32 2025 GMT
Subject: CN=aab225d91737ee4d33cd69c51a8b7c5b1ea24b13
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a6:b6:01:d1:f4:bf:b4:c6:2a:a5:30:98:af:33:
86:c3:9a:18:ba:74:78:20:57:97:98:95:ee:e0:59:
d3:ec:fd:f1:a7:7b:56:9b:65:c1:8c:9e:e6:21:07:
60:e7:eb:da:5b:2c:40:ea:62:cc:62:f8:95:96:a6:
49:33:e0:eb:67:11:b6:3a:24:81:a7:00:35:6b:82:
d7:92:49:d0:75:ce:27:f8:40:6c:84:6e:0d:70:f4:
21:35:b9:10:20:e3:fd:30:e6:ff:c8:74:04:ed:c2:
46:fd:33:af:c3:22:e2:ef:70:a3:c7:bd:1a:ae:68:
5a:f4:85:91:ab:5c:c3:24:9b:2d:48:9b:51:25:6d:
d0:f4:31:ab:90:57:8f:bc:15:77:35:fb:6f:d3:4b:
e5:46:0e:f6:4d:54:d9:c4:c3:c6:5e:c6:86:57:92:
80:a1:d3:4d:96:55:74:ef:62:61:fb:ed:08:d3:6a:
cf:27:f1:cc:c5:51:4c:12:c7:a7:c5:8f:67:37:0a:
73:41:98:4e:7f:05:2a:b1:8c:52:47:a2:25:7d:81:
0e:b9:98:10:b1:b4:51:9f:aa:4f:9a:5a:bb:e2:77:
22:aa:70:f7:5c:6d:39:79:43:4e:32:15:5e:09:c2:
c0:9b:9f:07:ce:86:9d:07:95:2f:7f:4d:00:ce:9d:
f6:b3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
AA:B2:25:D9:17:37:EE:4D:33:CD:69:C5:1A:8B:7C:5B:1E:A2:4B:13
X509v3 Authority Key Identifier:
keyid:B8:69:CC:42:41:5E:AC:65:C4:BA:A1:A3:92:63:02:E8:8B:5E:16:29
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/uGnMQkFerGXEuqGjkmMC6IteFik.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5e/732b26-3193-44a7-938e-af68467c3727/1/uGnMQkFerGXEuqGjkmMC6IteFik.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/5e/732b26-3193-44a7-938e-af68467c3727/1/uGnMQkFerGXEuqGjkmMC6IteFik.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
5b:6f:a6:e7:8e:f5:92:e5:84:d1:82:7a:21:3e:93:aa:0a:45:
28:10:41:6b:fd:b2:fa:75:fa:ad:82:53:0b:c6:e2:2a:d9:c6:
aa:84:26:06:cb:4b:bd:01:1d:8b:c5:03:6b:ec:59:0d:6d:18:
8b:20:2d:50:11:0f:d2:34:e1:cf:2b:65:b4:c2:6e:f9:c0:30:
c8:75:47:7b:33:27:20:3f:b9:3d:16:1a:72:24:04:0e:fa:b2:
3a:c7:ee:01:9b:f2:50:44:0e:59:55:c9:4d:64:71:32:b1:7f:
fa:dd:d8:50:63:03:9d:1a:2b:2f:6b:da:f7:f4:c7:f5:d9:8c:
3e:cf:62:28:85:fc:d9:38:18:1a:ec:73:c4:fe:39:0b:da:b6:
95:9e:ba:f4:4c:62:7d:a8:55:84:60:a7:9a:b3:f6:83:88:a6:
69:a3:18:dd:b0:76:22:a3:ed:77:7f:bb:51:da:b4:05:0a:5b:
63:bd:0c:ee:76:99:00:ca:0f:e5:40:f4:3c:84:c8:44:cd:66:
e3:5b:b5:9f:5e:fc:4d:cd:0f:e8:a2:f0:7c:2a:96:52:b0:e7:
8b:8d:6a:03:ec:cf:69:5b:4b:db:88:e6:bc:fa:b4:67:ab:82:
89:0c:d7:4f:25:a4:2c:c9:42:ce:4b:b4:6b:e3:0a:8f:08:4a:
dd:62:ff:47
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jun 8 21:35:32 2025 by rpki-client