
Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/9d/8b07cd-0ced-4afc-8d02-972a4c3dc3f3/1/U7YqzmFbkGtCqyf0-x0gPfNtVDY.mft
File: U7YqzmFbkGtCqyf0-x0gPfNtVDY.mft (raw, json)
Hash identifier: 6cm0XnreR1Ffa+zeNiRhPobNOvgJBaTJ3JWKGjFKIYQ=
Subject key identifier: 24:E1:57:CA:BD:E6:78:ED:CD:61:1C:6F:3B:B3:63:47:2F:3D:78:92
Authority key identifier: 53:B6:2A:CE:61:5B:90:6B:42:AB:27:F4:FB:1D:20:3D:F3:6D:54:36
Certificate issuer: /CN=53b62ace615b906b42ab27f4fb1d203df36d5436
Certificate serial: 019749D6158F7001A7AC82762C739F788762
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/U7YqzmFbkGtCqyf0-x0gPfNtVDY.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/9d/8b07cd-0ced-4afc-8d02-972a4c3dc3f3/1/U7YqzmFbkGtCqyf0-x0gPfNtVDY.mft
Manifest number: 158C
Signing time: Sat 07 Jun 2025 10:00:56 +0000
Manifest this update: Sat 07 Jun 2025 10:00:56 +0000
Manifest next update: Sun 08 Jun 2025 10:00:56 +0000
Files and hashes: 1: 1CCvzsEpR2HzWfAtCPfz-prL4Xw.roa (hash: xMXmg6U7dk2I47UFlru0YwTYb2PTB2hNFflS+Hs5NZA=)
2: 47T-_h4yrwTkNISxK8J3mV88Fh0.roa (hash: BQum24aWy9VPt+BVB7kWULFG+ntEIPlMGrK1sM76ojQ=)
3: U7YqzmFbkGtCqyf0-x0gPfNtVDY.crl (hash: BeE3Gl3FukrBMRfuP/AP0eGKzfUN59jJGomkYpbzYko=)
4: _Swn7rfHkqyddWiH6mJBPzEvtPw.roa (hash: DdKMWCZ6/KHD8pm9QRG9mImRVRpGoqtnHO9unsKXibs=)
5: tNvAcIt1AfnmrpYr9vYkkFneZ2Y.roa (hash: gVnI/4eE/aC58PSWg9zuIzqcxtqe9LJ1Nbo9TV7QxCQ=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/9d/8b07cd-0ced-4afc-8d02-972a4c3dc3f3/1/U7YqzmFbkGtCqyf0-x0gPfNtVDY.crl
rsync://rpki.ripe.net/repository/DEFAULT/9d/8b07cd-0ced-4afc-8d02-972a4c3dc3f3/1/U7YqzmFbkGtCqyf0-x0gPfNtVDY.mft
rsync://rpki.ripe.net/repository/DEFAULT/U7YqzmFbkGtCqyf0-x0gPfNtVDY.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 08 Jun 2025 09:00:17 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:49:d6:15:8f:70:01:a7:ac:82:76:2c:73:9f:78:87:62
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=53b62ace615b906b42ab27f4fb1d203df36d5436
Validity
Not Before: Jun 7 10:00:56 2025 GMT
Not After : Jun 8 10:00:56 2025 GMT
Subject: CN=24e157cabde678edcd611c6f3bb363472f3d7892
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bd:e2:07:1d:26:75:a5:3f:2a:ff:c1:4b:73:f9:
37:41:48:5b:80:a6:cc:a7:f9:4a:a3:55:63:9a:aa:
66:3d:2f:41:0f:6e:82:64:42:15:69:4e:ae:2d:75:
5a:98:8e:e1:91:3b:6d:81:dc:4c:11:6f:dc:1b:52:
68:f8:70:6c:36:7d:99:91:9b:67:89:c9:a3:48:41:
3e:eb:ca:67:48:bd:e6:04:d9:2f:46:87:e7:d5:49:
4f:09:36:c4:09:3b:f9:73:00:c7:48:85:c4:2a:c4:
45:38:d0:e7:6f:ff:38:c1:af:c5:8f:a7:27:96:ff:
f9:41:01:8b:b8:00:f2:52:34:38:30:53:36:7b:e7:
df:4f:90:f0:25:9f:a2:d8:11:6d:f9:0a:49:0f:27:
8e:c5:44:3a:e2:8d:27:18:79:77:c6:42:6d:35:06:
f9:5d:b6:e3:e2:72:f6:6d:2e:cd:f2:6a:0c:be:06:
57:fc:ca:fd:9e:e3:c7:0f:71:f8:fd:55:16:50:0e:
a0:f4:cd:6e:e9:17:c7:d9:01:02:21:b1:6f:2c:9e:
c6:7e:5f:28:5b:1c:ab:9a:48:d4:35:f7:ed:9b:48:
4e:cf:6d:54:76:e1:0f:8e:f6:1a:0e:96:0e:a8:d3:
c9:c9:18:1c:5a:29:42:32:0f:de:aa:2f:8d:95:16:
83:67
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
24:E1:57:CA:BD:E6:78:ED:CD:61:1C:6F:3B:B3:63:47:2F:3D:78:92
X509v3 Authority Key Identifier:
keyid:53:B6:2A:CE:61:5B:90:6B:42:AB:27:F4:FB:1D:20:3D:F3:6D:54:36
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/U7YqzmFbkGtCqyf0-x0gPfNtVDY.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/9d/8b07cd-0ced-4afc-8d02-972a4c3dc3f3/1/U7YqzmFbkGtCqyf0-x0gPfNtVDY.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/9d/8b07cd-0ced-4afc-8d02-972a4c3dc3f3/1/U7YqzmFbkGtCqyf0-x0gPfNtVDY.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
10:88:bc:50:ff:ff:44:ca:d4:ac:77:03:e2:90:ff:3a:f1:36:
67:50:3f:73:6d:f7:2f:e4:13:fe:b9:30:b8:35:5b:b4:44:ec:
06:93:9c:61:a3:4c:d6:55:33:5a:e3:b1:90:59:1e:81:c2:e1:
e5:ed:f8:9c:b1:08:24:1a:50:a7:f5:b4:45:2e:7a:28:1c:d5:
63:5b:f7:c5:86:16:4d:ac:a8:dc:56:a0:83:64:d4:67:36:b7:
a7:a0:1e:4a:d6:05:a5:0b:26:57:cd:22:cf:2c:d0:e5:21:20:
cd:5c:90:4f:7d:46:9e:d0:54:d6:f8:1a:1d:7f:dd:aa:0f:57:
00:82:7d:94:3d:c9:a0:3b:4f:42:95:17:1a:54:5d:1e:6d:ad:
33:d4:32:8c:0a:f0:9c:8e:79:16:f9:e8:a6:fd:ff:b1:2f:a4:
8b:3e:87:c2:43:c6:3c:59:9d:6e:15:5e:58:46:2f:c4:d3:c5:
43:65:38:ff:90:b9:c5:f5:23:a5:8f:78:ee:b1:5f:da:12:de:
1a:3b:b9:a8:b9:42:89:75:58:25:9b:c3:12:ba:3d:33:ee:02:
7b:78:70:03:2d:f0:8f:37:38:07:a6:c4:a2:ab:18:27:85:44:
25:df:b5:a6:1b:4c:67:50:2a:24:14:6b:48:1a:30:60:96:2c:
b0:df:89:84
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 7 19:25:29 2025 by rpki-client