Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/a9/8d58e4-88f6-4aed-ba43-7ae6359d3110/1/UxKdBI3rLgv2InE5mgkLkBAWCzk.mft
File: UxKdBI3rLgv2InE5mgkLkBAWCzk.mft (raw, json)
Hash identifier: zpth7DZRLXcU82Ga3V847dKsO9UUMJNoWAiu/VWgopM=
Subject key identifier: 40:99:3A:A8:87:AD:3E:A5:EB:1D:5F:83:05:27:8B:59:05:69:FB:B0
Authority key identifier: 53:12:9D:04:8D:EB:2E:0B:F6:22:71:39:9A:09:0B:90:10:16:0B:39
Certificate issuer: /CN=53129d048deb2e0bf62271399a090b9010160b39
Certificate serial: 01974C9FD59AE7150E85CFC59CD6924D8FE8
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/UxKdBI3rLgv2InE5mgkLkBAWCzk.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/a9/8d58e4-88f6-4aed-ba43-7ae6359d3110/1/UxKdBI3rLgv2InE5mgkLkBAWCzk.mft
Manifest number: 0550
Signing time: Sat 07 Jun 2025 23:00:32 +0000
Manifest this update: Sat 07 Jun 2025 23:00:32 +0000
Manifest next update: Sun 08 Jun 2025 23:00:32 +0000
Files and hashes: 1: UxKdBI3rLgv2InE5mgkLkBAWCzk.crl (hash: T53ugllmruBokz4TLq6Z48IQheowzp9mA74/MsbmYEo=)
2: iV0Wv5wAAAuwTZ0gWPXcPSbfCnc.roa (hash: LNWcJcYvVHSoTAScNXiZdlhb/qYL7H8xTSxcF3h+E20=)
3: vVml-l53US0HR41A4phaytdM2rk.roa (hash: +IKLjTldT5przVLfqGguidbYHxSzGtV1XnPlO6F1rvM=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/a9/8d58e4-88f6-4aed-ba43-7ae6359d3110/1/UxKdBI3rLgv2InE5mgkLkBAWCzk.crl
rsync://rpki.ripe.net/repository/DEFAULT/a9/8d58e4-88f6-4aed-ba43-7ae6359d3110/1/UxKdBI3rLgv2InE5mgkLkBAWCzk.mft
rsync://rpki.ripe.net/repository/DEFAULT/UxKdBI3rLgv2InE5mgkLkBAWCzk.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 08 Jun 2025 20:00:17 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:4c:9f:d5:9a:e7:15:0e:85:cf:c5:9c:d6:92:4d:8f:e8
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=53129d048deb2e0bf62271399a090b9010160b39
Validity
Not Before: Jun 7 23:00:32 2025 GMT
Not After : Jun 8 23:00:32 2025 GMT
Subject: CN=40993aa887ad3ea5eb1d5f8305278b590569fbb0
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:f2:8a:c8:b7:fb:4f:92:51:00:3e:59:39:6c:a6:
00:e7:2c:a8:78:70:31:b4:cb:41:55:ad:aa:45:1a:
63:a1:36:d3:e8:0b:6d:5c:2a:b7:2a:4e:d2:f2:09:
1e:d3:80:b3:1b:06:14:89:78:bd:92:dc:02:be:c4:
d8:bc:b2:f4:f4:12:52:bd:06:34:1a:cf:e9:2f:38:
05:4d:83:dd:42:7d:cb:9d:36:7b:f0:9b:41:e6:c0:
73:eb:87:29:df:47:92:12:66:f0:93:a8:db:de:e1:
98:1f:23:6b:76:f0:f1:8e:d9:1e:de:60:a7:55:19:
31:c1:3b:bb:79:67:eb:50:68:4e:c1:09:a8:bf:a0:
a6:30:21:c4:b5:6f:40:6b:17:13:49:9c:ff:0c:fc:
a2:55:65:2b:3a:d5:d2:68:19:1e:e8:88:34:d9:5c:
64:59:aa:65:b0:80:e1:f0:82:1a:b2:c6:5b:37:c5:
b4:05:64:93:30:53:c7:68:fb:38:c4:09:6a:06:23:
92:85:97:02:28:8a:02:3a:9a:10:cc:04:56:e6:ee:
1e:bc:0b:1f:bf:82:ee:3e:d2:ed:33:2f:3a:32:2c:
a1:6c:b5:7b:86:d9:8d:f6:7d:55:89:46:30:f7:cf:
31:14:a4:24:4d:7c:46:1e:e6:bb:22:d6:40:52:5b:
d1:2d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
40:99:3A:A8:87:AD:3E:A5:EB:1D:5F:83:05:27:8B:59:05:69:FB:B0
X509v3 Authority Key Identifier:
keyid:53:12:9D:04:8D:EB:2E:0B:F6:22:71:39:9A:09:0B:90:10:16:0B:39
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/UxKdBI3rLgv2InE5mgkLkBAWCzk.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a9/8d58e4-88f6-4aed-ba43-7ae6359d3110/1/UxKdBI3rLgv2InE5mgkLkBAWCzk.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/a9/8d58e4-88f6-4aed-ba43-7ae6359d3110/1/UxKdBI3rLgv2InE5mgkLkBAWCzk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
79:76:ea:bc:7d:e4:b7:5d:25:b1:c4:61:ce:30:25:85:89:13:
ef:ac:2c:e0:2a:49:cd:28:73:61:8d:9b:12:af:8e:ad:c9:f8:
6c:c8:e1:07:bc:41:09:51:1e:96:69:9c:44:10:f6:2f:f9:18:
3f:93:e7:3f:d7:47:77:31:33:d3:44:fe:49:5e:21:58:1d:43:
de:de:13:91:55:90:c0:53:d4:e8:2c:63:f2:fa:a3:9e:c5:d0:
3e:9f:cc:79:8c:45:c1:59:cd:5d:df:e2:13:a4:4f:f7:c4:59:
f0:11:38:6b:dd:0b:2e:01:8e:2a:f4:26:2e:fb:b5:c9:65:c7:
f8:af:28:2b:af:b8:42:34:37:8d:36:bb:91:c9:a2:b6:6e:1c:
46:54:0c:65:2a:6a:43:ea:fd:19:b0:5d:39:29:6a:df:d4:35:
a6:37:f1:b5:2d:35:dd:b2:8d:de:92:3e:68:3e:67:1a:b9:27:
12:6c:10:f2:a2:5f:d8:7c:97:e0:16:24:a1:de:d2:0c:8b:46:
ee:bb:bd:2b:d4:53:b0:09:88:c1:81:db:09:46:4e:5f:ed:c4:
8d:f0:0d:80:a3:3d:18:5c:ea:b3:7e:63:b8:7f:c1:12:d5:85:
61:b1:e4:f9:53:f3:18:b6:e6:6e:d9:a5:73:e9:df:71:6a:f4:
f0:1b:74:8f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jun 8 06:13:04 2025 by rpki-client