Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/8a/9e2f8a-960d-4479-a058-4e3ce3301979/1/U5Nwh4FLQ1glRwBp255yPb5yjzs.mft
File: U5Nwh4FLQ1glRwBp255yPb5yjzs.mft (raw, json)
Hash identifier: Jrqq2cqudxBxeZKr4FqMIa0F0B/9e8Oa68SrJ3KRqyM=
Subject key identifier: AB:8B:E1:E6:BA:32:AA:88:F3:9B:4D:02:D9:2B:77:26:16:83:47:61
Authority key identifier: 53:93:70:87:81:4B:43:58:25:47:00:69:DB:9E:72:3D:BE:72:8F:3B
Certificate issuer: /CN=53937087814b435825470069db9e723dbe728f3b
Certificate serial: 0197474277FC2BB24D8F34214DF17AF06663
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/U5Nwh4FLQ1glRwBp255yPb5yjzs.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/8a/9e2f8a-960d-4479-a058-4e3ce3301979/1/U5Nwh4FLQ1glRwBp255yPb5yjzs.mft
Manifest number: 1579
Signing time: Fri 06 Jun 2025 22:00:27 +0000
Manifest this update: Fri 06 Jun 2025 22:00:27 +0000
Manifest next update: Sat 07 Jun 2025 22:00:27 +0000
Files and hashes: 1: U5Nwh4FLQ1glRwBp255yPb5yjzs.crl (hash: AOHRq9ZvYCMrOscFg/diwIbeaHvlexJQZgf+5yl+uBY=)
2: XysHQU0TQpQ18huR7cIIDrfZWfY.roa (hash: NtroWgAMFvSSwwYDxpo3NQGtG+bQQozP9je3mTfJHRc=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/8a/9e2f8a-960d-4479-a058-4e3ce3301979/1/U5Nwh4FLQ1glRwBp255yPb5yjzs.crl
rsync://rpki.ripe.net/repository/DEFAULT/8a/9e2f8a-960d-4479-a058-4e3ce3301979/1/U5Nwh4FLQ1glRwBp255yPb5yjzs.mft
rsync://rpki.ripe.net/repository/DEFAULT/U5Nwh4FLQ1glRwBp255yPb5yjzs.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 07 Jun 2025 15:00:17 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:47:42:77:fc:2b:b2:4d:8f:34:21:4d:f1:7a:f0:66:63
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=53937087814b435825470069db9e723dbe728f3b
Validity
Not Before: Jun 6 22:00:27 2025 GMT
Not After : Jun 7 22:00:27 2025 GMT
Subject: CN=ab8be1e6ba32aa88f39b4d02d92b772616834761
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c6:7d:ec:73:92:5b:69:d5:2a:85:d5:24:cd:76:
f9:92:c5:df:8e:17:d1:51:68:d6:43:dc:8e:7b:23:
93:f6:5c:e2:c3:63:04:2e:aa:b0:61:0f:43:e4:42:
bf:cf:2d:26:bb:b2:29:6b:a2:24:ad:50:69:1c:9d:
f2:4b:35:eb:ab:4d:a3:f6:55:d6:e6:d0:be:ed:74:
ac:85:8a:98:e5:24:c4:44:16:ce:60:b3:b2:04:d2:
20:c8:60:44:e0:6a:8e:fe:22:a0:ee:ef:87:97:38:
71:3a:c3:c7:75:50:a3:dd:da:b1:60:4f:cd:9d:dd:
08:c3:f2:23:ba:81:cd:36:2e:8f:3c:af:06:63:d8:
64:dc:05:07:c3:30:ba:35:21:cd:bd:27:fc:5e:f2:
84:a2:48:2e:e0:1f:99:fc:0e:b2:d7:f2:90:6b:0c:
60:82:d4:37:cd:5c:7b:9c:52:31:46:f4:6b:1b:60:
51:24:ed:84:d7:f7:4c:79:9e:7b:ea:4a:d8:0e:ac:
3c:7f:c1:ec:35:f1:7d:26:18:fb:fb:e6:9b:01:8c:
4f:bd:84:12:aa:03:d2:5c:d8:d4:64:2e:80:67:d1:
7c:89:8a:24:cb:01:68:b9:e7:63:a2:e8:63:d3:50:
57:a3:f6:b7:e1:bd:24:23:b4:a6:c8:0c:49:be:26:
48:31
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
AB:8B:E1:E6:BA:32:AA:88:F3:9B:4D:02:D9:2B:77:26:16:83:47:61
X509v3 Authority Key Identifier:
keyid:53:93:70:87:81:4B:43:58:25:47:00:69:DB:9E:72:3D:BE:72:8F:3B
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/U5Nwh4FLQ1glRwBp255yPb5yjzs.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/8a/9e2f8a-960d-4479-a058-4e3ce3301979/1/U5Nwh4FLQ1glRwBp255yPb5yjzs.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/8a/9e2f8a-960d-4479-a058-4e3ce3301979/1/U5Nwh4FLQ1glRwBp255yPb5yjzs.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
44:d9:60:fd:ef:3b:4e:99:e2:1b:d0:7e:d0:15:a6:59:6b:a7:
71:c5:a5:17:f7:69:74:cd:1a:2a:8c:66:57:04:3f:69:a7:32:
9b:0e:17:03:b2:2b:ff:71:99:58:b3:d7:db:ee:32:d3:bf:d1:
d2:4e:cf:40:04:b2:8b:d7:b6:ff:63:14:0f:8b:ba:cc:72:ae:
d6:ef:f5:dd:95:9b:e5:d8:e8:44:ee:a4:df:3c:83:5f:0e:d4:
7d:42:72:f9:0c:69:f0:b3:30:96:d3:69:c3:0a:50:5e:64:9a:
f3:3d:a3:70:2e:de:81:2e:f4:dd:ee:5d:0b:79:68:6d:8c:4f:
8d:cb:a9:17:22:28:f7:df:e1:05:3a:22:58:ac:08:85:68:33:
ca:f2:a6:9c:8a:23:8f:37:e3:c7:93:a5:d4:69:03:e6:af:f8:
6c:12:68:c8:44:8e:00:c3:c1:cd:5f:e3:0e:53:b4:96:77:5a:
4a:6b:b7:5b:3c:d3:6e:80:de:41:0b:b4:49:8c:7d:db:e6:52:
8c:b7:5c:cc:df:4a:7c:5c:5a:8b:8d:f4:bb:5a:5a:05:91:3f:
69:c5:28:c8:58:bb:dd:6f:15:26:ff:ba:b7:66:22:cc:25:ef:
1e:83:62:3f:d5:27:03:e7:70:2f:c9:df:4f:2d:53:34:41:16:
30:32:54:ef
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 7 01:25:28 2025 by rpki-client