Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/92/48f1c6-1134-4969-af60-d017c1759639/1/Uz7q1BOhcF-_yyrb6Qxp8FXiddo.mft
File: Uz7q1BOhcF-_yyrb6Qxp8FXiddo.mft (raw, json)
Hash identifier: N1W+JDrTqjH02KQSVEUkfq5wdXyTMN8P66Cn4GN0Xl4=
Subject key identifier: 9D:74:F1:21:8B:F6:0D:80:59:E7:2B:F5:36:8C:00:90:B7:9B:4F:07
Authority key identifier: 53:3E:EA:D4:13:A1:70:5F:BF:CB:2A:DB:E9:0C:69:F0:55:E2:75:DA
Certificate issuer: /CN=533eead413a1705fbfcb2adbe90c69f055e275da
Certificate serial: 01974B8DD02460FE029C5126B6EE3E0CB1D8
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Uz7q1BOhcF-_yyrb6Qxp8FXiddo.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/92/48f1c6-1134-4969-af60-d017c1759639/1/Uz7q1BOhcF-_yyrb6Qxp8FXiddo.mft
Manifest number: 157D
Signing time: Sat 07 Jun 2025 18:01:14 +0000
Manifest this update: Sat 07 Jun 2025 18:01:14 +0000
Manifest next update: Sun 08 Jun 2025 18:01:14 +0000
Files and hashes: 1: LhDegbR4xFlO6pz_ANDkPzTlFGk.roa (hash: xMGN0Z+cCcbH3arqVxwuW4j6b8JSM83DRHp4H/CfXzQ=)
2: Uz7q1BOhcF-_yyrb6Qxp8FXiddo.crl (hash: yqLK3ftgxBZKOX+v/Q2L04BZNH1q2V6Jv3is9Oh5jXw=)
3: gaUIc9nIeEp8xPqvEDvbc3kFaYc.roa (hash: I+Q74aVwTRhCOoIOc0mC1nzVIDH725yoh6FbQfy6th4=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/92/48f1c6-1134-4969-af60-d017c1759639/1/Uz7q1BOhcF-_yyrb6Qxp8FXiddo.crl
rsync://rpki.ripe.net/repository/DEFAULT/92/48f1c6-1134-4969-af60-d017c1759639/1/Uz7q1BOhcF-_yyrb6Qxp8FXiddo.mft
rsync://rpki.ripe.net/repository/DEFAULT/Uz7q1BOhcF-_yyrb6Qxp8FXiddo.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 08 Jun 2025 18:00:17 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:4b:8d:d0:24:60:fe:02:9c:51:26:b6:ee:3e:0c:b1:d8
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=533eead413a1705fbfcb2adbe90c69f055e275da
Validity
Not Before: Jun 7 18:01:14 2025 GMT
Not After : Jun 8 18:01:14 2025 GMT
Subject: CN=9d74f1218bf60d8059e72bf5368c0090b79b4f07
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b8:c1:15:af:74:b3:6a:bf:53:c4:17:d8:a4:81:
70:13:a8:6a:5f:87:d1:b2:9d:08:c1:66:94:66:1d:
f1:5f:55:cd:59:a7:90:10:16:83:05:46:d6:e7:7f:
a6:a2:37:3f:98:1e:98:66:13:e7:34:f8:86:af:50:
d0:25:68:c4:7a:54:97:df:4f:6d:e1:24:5c:46:27:
09:2e:5a:be:d1:ef:99:0a:81:26:b0:3a:44:88:a6:
30:ca:b1:44:c2:e0:77:e1:4b:f2:95:18:0b:8b:a0:
75:17:b9:f4:36:c4:43:1a:4c:44:0c:e8:21:9b:ac:
75:db:89:c0:79:10:61:57:6f:1a:c6:79:74:ee:30:
b8:c1:b3:bb:a3:aa:d4:3f:fe:44:07:91:7d:25:4b:
f6:f1:79:67:1e:e3:de:96:bf:37:a9:7d:e9:8b:0c:
27:33:89:41:09:1b:95:e6:d0:3f:61:dc:e0:1f:72:
0b:54:6f:cd:75:df:99:54:bc:b4:32:3a:ae:8d:ba:
ca:69:6f:7e:35:c4:50:2d:f8:da:51:77:e2:8b:d7:
e7:19:c2:b2:bf:ff:96:be:ae:1a:4b:a3:a0:5e:e4:
c7:3a:91:d8:40:04:26:14:65:ce:40:7d:27:a1:e1:
de:84:98:eb:43:b6:47:98:fb:b3:4c:e0:c1:a8:be:
be:07
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
9D:74:F1:21:8B:F6:0D:80:59:E7:2B:F5:36:8C:00:90:B7:9B:4F:07
X509v3 Authority Key Identifier:
keyid:53:3E:EA:D4:13:A1:70:5F:BF:CB:2A:DB:E9:0C:69:F0:55:E2:75:DA
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Uz7q1BOhcF-_yyrb6Qxp8FXiddo.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/92/48f1c6-1134-4969-af60-d017c1759639/1/Uz7q1BOhcF-_yyrb6Qxp8FXiddo.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/92/48f1c6-1134-4969-af60-d017c1759639/1/Uz7q1BOhcF-_yyrb6Qxp8FXiddo.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
99:4c:b7:5e:45:4b:43:9b:a4:65:d8:39:17:95:bf:03:d6:2a:
88:6d:1a:3a:32:06:e7:83:e6:40:63:d9:ed:02:b4:96:33:d9:
d6:a8:57:46:49:84:19:5e:3b:97:64:e7:c2:db:4e:9b:12:a6:
f3:4c:d5:f9:7f:12:3d:22:6a:cd:cf:a5:8e:88:8e:a9:27:03:
d3:97:0b:d5:bc:95:59:b2:9a:b5:80:5c:10:92:23:05:b9:4b:
ec:56:a4:71:1a:8f:e7:ff:5f:38:18:84:e0:86:0b:cc:d1:c1:
74:a1:28:34:ea:e5:a3:7d:8d:71:11:dd:76:40:00:7b:ef:87:
fd:24:2f:68:01:28:26:c2:c4:52:56:77:dd:4c:d3:3f:1d:3e:
ad:5d:90:dc:aa:d2:7d:59:e7:14:ec:f9:ed:b2:94:a8:74:e3:
dd:af:83:2f:59:fe:4b:24:bc:4e:90:8d:68:3a:c1:ad:6e:59:
56:5b:b1:21:af:f8:1f:d0:37:38:00:da:43:13:91:90:a2:b4:
73:31:8b:f9:a6:6e:7a:c5:b8:e6:7c:92:f4:86:cd:8f:ae:d4:
d6:b8:07:bc:7d:6e:1c:10:a9:86:bf:e7:b0:4d:d6:72:64:8d:
bd:bf:74:64:b7:cd:65:2a:28:f2:b5:40:2a:cc:48:24:fa:f4:
70:aa:88:31
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jun 8 01:25:28 2025 by rpki-client