Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/92/f9dd1c-317b-41c1-8fcb-7d9eabee15ac/1/UxZZCg6vSN8rGuI7nVWenKwlmX4.mft
File: UxZZCg6vSN8rGuI7nVWenKwlmX4.mft (raw, json)
Hash identifier: tyt21Xaxt1dlSMSR4YmSlPKu+yJtGKgYUhoNOllHoOA=
Subject key identifier: 95:C9:32:55:ED:18:EF:0B:52:A9:95:8B:7E:08:13:E7:C3:1E:1A:AF
Authority key identifier: 53:16:59:0A:0E:AF:48:DF:2B:1A:E2:3B:9D:55:9E:9C:AC:25:99:7E
Certificate issuer: /CN=5316590a0eaf48df2b1ae23b9d559e9cac25997e
Certificate serial: 019747B07A0FB2DA1E80D553EE1D14EEBC86
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/UxZZCg6vSN8rGuI7nVWenKwlmX4.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/92/f9dd1c-317b-41c1-8fcb-7d9eabee15ac/1/UxZZCg6vSN8rGuI7nVWenKwlmX4.mft
Manifest number: 157C
Signing time: Sat 07 Jun 2025 00:00:37 +0000
Manifest this update: Sat 07 Jun 2025 00:00:37 +0000
Manifest next update: Sun 08 Jun 2025 00:00:37 +0000
Files and hashes: 1: IwWglmhS5Zmc1TAwKCoGnND82Hg.roa (hash: yxdnz39K/r0yEcsRsb6jG3Fu9Th+zv6+zwScMkcw/2k=)
2: Slwbbwyy2R4DXhMszcmZSafHRLM.roa (hash: hGzmzAgGBljAorRZaTCZ/rFSgBsMkWs+ukGHvQ5mFco=)
3: UxZZCg6vSN8rGuI7nVWenKwlmX4.crl (hash: csyRI4F+RDcq4IofY14zxt4wcmll3j3/ruw0iR0F4qU=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/92/f9dd1c-317b-41c1-8fcb-7d9eabee15ac/1/UxZZCg6vSN8rGuI7nVWenKwlmX4.crl
rsync://rpki.ripe.net/repository/DEFAULT/92/f9dd1c-317b-41c1-8fcb-7d9eabee15ac/1/UxZZCg6vSN8rGuI7nVWenKwlmX4.mft
rsync://rpki.ripe.net/repository/DEFAULT/UxZZCg6vSN8rGuI7nVWenKwlmX4.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 07 Jun 2025 22:50:17 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:47:b0:7a:0f:b2:da:1e:80:d5:53:ee:1d:14:ee:bc:86
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=5316590a0eaf48df2b1ae23b9d559e9cac25997e
Validity
Not Before: Jun 7 00:00:37 2025 GMT
Not After : Jun 8 00:00:37 2025 GMT
Subject: CN=95c93255ed18ef0b52a9958b7e0813e7c31e1aaf
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e1:8b:aa:53:2b:48:dd:2f:27:70:8b:e7:1f:45:
65:db:23:86:6e:61:91:7e:c6:cc:39:c0:df:15:79:
18:10:86:25:15:65:1a:03:a4:46:00:7b:92:ee:0f:
3c:e9:bb:ef:83:57:0b:e1:75:72:4b:cb:ee:cd:fe:
2d:c2:7c:a6:d8:be:39:9d:5e:30:6d:7c:93:49:b8:
a8:2d:c8:46:f4:86:ce:70:9c:30:97:20:a5:73:77:
25:65:2a:db:ba:1b:c2:f9:96:da:4b:51:3b:6f:37:
4b:bf:0e:a0:87:b5:33:a1:a9:e3:1e:3d:ea:35:6a:
85:f9:a6:d2:b4:d0:d3:15:6c:16:58:49:84:b8:7e:
19:57:91:79:87:c9:fc:32:68:c6:74:9b:be:b3:ce:
56:be:17:e7:65:69:52:ab:bc:e4:87:23:a2:56:5e:
22:ad:b6:f1:e5:d3:1b:bf:1e:1e:aa:24:32:1b:54:
f9:73:05:b5:7d:80:e6:44:ac:82:50:74:31:0f:16:
49:6f:9f:d1:ee:da:bc:25:d1:58:6a:01:7f:b5:f2:
80:a6:5f:6f:f5:ac:79:86:92:fd:9f:03:e3:39:27:
23:95:dd:5a:2b:33:b1:55:16:42:ce:b6:74:0e:fc:
3a:33:64:b8:8c:0e:93:59:21:85:9f:c0:81:65:76:
a9:05
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
95:C9:32:55:ED:18:EF:0B:52:A9:95:8B:7E:08:13:E7:C3:1E:1A:AF
X509v3 Authority Key Identifier:
keyid:53:16:59:0A:0E:AF:48:DF:2B:1A:E2:3B:9D:55:9E:9C:AC:25:99:7E
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/UxZZCg6vSN8rGuI7nVWenKwlmX4.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/92/f9dd1c-317b-41c1-8fcb-7d9eabee15ac/1/UxZZCg6vSN8rGuI7nVWenKwlmX4.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/92/f9dd1c-317b-41c1-8fcb-7d9eabee15ac/1/UxZZCg6vSN8rGuI7nVWenKwlmX4.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
84:d2:df:be:c2:bd:5f:d6:d9:58:29:3e:9d:3f:a8:26:7e:6f:
f3:62:df:05:11:8b:48:ec:2c:2a:0d:da:48:6b:1f:4c:e7:ed:
82:3e:29:78:48:84:d7:68:9b:78:9d:fd:7a:df:7c:a1:80:61:
03:f4:3c:c8:bb:ba:f6:5a:51:fd:ff:d2:44:2f:18:a5:4a:c0:
4b:c3:22:6f:44:cb:ad:8a:41:53:f1:12:11:80:59:05:3a:88:
16:06:78:6b:4c:56:b7:bc:fe:de:84:66:69:63:e9:e2:71:7d:
08:e7:0d:6d:04:3a:76:37:3c:7a:70:d1:39:1c:48:fc:b1:9f:
90:df:92:33:a6:aa:31:0d:ff:c3:38:45:2a:e5:4d:5f:94:e9:
8a:ce:f7:c8:04:4b:38:4c:c5:c0:bc:16:17:ee:8c:bd:3d:f8:
65:7b:42:d2:42:19:7c:d0:e2:05:3b:32:1e:34:3f:64:a5:e5:
64:d5:03:e8:88:93:8a:d4:9d:be:e5:34:da:ef:7a:cf:67:4f:
5c:d5:fd:cc:86:bc:08:65:3f:3a:7f:d7:86:3a:a5:57:97:c8:
41:e2:ab:a7:c9:0c:54:64:60:2f:0d:c3:dc:3e:cb:aa:ca:b5:
90:8d:04:ae:b2:74:10:8d:e8:5e:2f:a5:79:b8:71:c6:99:e2:
5a:47:b5:0c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 7 06:07:49 2025 by rpki-client