Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ad/04e64b-924c-48a0-89a4-a00944fd7d9d/1/U0Z21mkyx3oldhE2rJnrm3TYAaY.mft
File: U0Z21mkyx3oldhE2rJnrm3TYAaY.mft (raw, json)
Hash identifier: PMraQ7da6H7JsXNzYIzITBEigGXmftdRKWyzI9WigW4=
Subject key identifier: 50:30:28:46:8C:7A:CC:65:B0:E7:D2:AC:4A:3D:9D:F5:CA:62:92:1B
Authority key identifier: 53:46:76:D6:69:32:C7:7A:25:76:11:36:AC:99:EB:9B:74:D8:01:A6
Certificate issuer: /CN=534676d66932c77a25761136ac99eb9b74d801a6
Certificate serial: 01974C3259268A18EA6187C4340905116A3C
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/U0Z21mkyx3oldhE2rJnrm3TYAaY.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ad/04e64b-924c-48a0-89a4-a00944fd7d9d/1/U0Z21mkyx3oldhE2rJnrm3TYAaY.mft
Manifest number: 024F
Signing time: Sat 07 Jun 2025 21:00:57 +0000
Manifest this update: Sat 07 Jun 2025 21:00:57 +0000
Manifest next update: Sun 08 Jun 2025 21:00:57 +0000
Files and hashes: 1: 2dOfhpir5Q5tClQufxJ63VN9ATs.roa (hash: MXA0vJK0httbWsLOJ5Lc4f/NDFMY7G+nyTtUUbrssPM=)
2: U0Z21mkyx3oldhE2rJnrm3TYAaY.crl (hash: Uc0EWekQs6Z/YqFvDZDlt39vLRsZluF0+pAX63W6APw=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/ad/04e64b-924c-48a0-89a4-a00944fd7d9d/1/U0Z21mkyx3oldhE2rJnrm3TYAaY.crl
rsync://rpki.ripe.net/repository/DEFAULT/ad/04e64b-924c-48a0-89a4-a00944fd7d9d/1/U0Z21mkyx3oldhE2rJnrm3TYAaY.mft
rsync://rpki.ripe.net/repository/DEFAULT/U0Z21mkyx3oldhE2rJnrm3TYAaY.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 08 Jun 2025 18:00:17 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:4c:32:59:26:8a:18:ea:61:87:c4:34:09:05:11:6a:3c
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=534676d66932c77a25761136ac99eb9b74d801a6
Validity
Not Before: Jun 7 21:00:57 2025 GMT
Not After : Jun 8 21:00:57 2025 GMT
Subject: CN=503028468c7acc65b0e7d2ac4a3d9df5ca62921b
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ed:f6:03:49:c3:bd:8e:f2:ee:78:4c:31:9c:10:
34:65:02:9e:a8:e6:21:4b:5d:b9:14:ae:e2:df:52:
c9:2b:10:53:a5:e7:df:6c:18:49:4c:bb:68:3c:19:
0d:cf:5b:56:99:ae:0b:81:cd:23:dd:fa:76:91:1e:
d7:46:86:f5:12:9b:05:1d:fc:65:10:1a:d0:c9:9f:
7a:69:bd:81:70:a3:f8:c8:b7:47:30:52:b4:7d:b3:
52:5d:17:b8:26:fa:80:c5:a6:cb:0c:44:35:08:71:
b9:24:f9:ef:ef:d8:30:b0:13:e6:1b:32:a4:53:f8:
75:03:97:d7:13:3e:10:66:9e:61:99:bd:ac:3e:e1:
98:40:28:60:65:71:49:f5:0d:54:28:d8:15:05:14:
07:3f:3d:54:3c:57:30:eb:f3:1c:ff:01:c4:3b:3f:
5b:28:40:13:0c:52:e0:9c:da:3e:15:97:b2:9c:f2:
4a:f8:d4:58:e9:af:31:90:80:74:02:b5:69:84:e7:
9a:21:47:d0:55:f7:15:76:ee:83:3b:1c:66:c1:24:
75:86:7e:b3:45:67:2a:6a:d2:b2:00:e8:34:ad:f6:
fb:7b:21:ee:f0:5c:8d:ae:05:23:01:3d:2e:fe:ac:
a0:6b:91:bb:c4:d2:ad:f4:ab:3a:10:18:d4:68:c5:
6c:6d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
50:30:28:46:8C:7A:CC:65:B0:E7:D2:AC:4A:3D:9D:F5:CA:62:92:1B
X509v3 Authority Key Identifier:
keyid:53:46:76:D6:69:32:C7:7A:25:76:11:36:AC:99:EB:9B:74:D8:01:A6
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/U0Z21mkyx3oldhE2rJnrm3TYAaY.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ad/04e64b-924c-48a0-89a4-a00944fd7d9d/1/U0Z21mkyx3oldhE2rJnrm3TYAaY.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/ad/04e64b-924c-48a0-89a4-a00944fd7d9d/1/U0Z21mkyx3oldhE2rJnrm3TYAaY.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
a3:64:50:e2:b3:da:d5:7e:d9:f5:bb:25:52:bf:1a:e7:3d:2b:
df:1c:02:69:aa:0c:8c:97:77:14:05:5b:c1:0c:66:35:f6:cb:
d3:7c:78:1c:47:3e:11:56:31:95:ba:90:15:47:b4:a3:ca:b6:
ed:34:60:ef:ca:70:1d:8f:89:81:97:50:66:0a:f8:8f:bc:b1:
fa:6a:20:5b:c8:ce:2a:7a:b3:cd:7c:a2:4e:ac:f3:ec:62:8b:
08:61:8b:f3:26:21:29:c0:e1:77:19:6c:84:59:61:95:d8:f5:
d5:02:5d:e4:56:48:72:84:b8:4e:8c:ed:04:1e:98:5a:55:c5:
7d:79:2a:23:81:ef:a0:b4:fd:02:d7:50:30:1f:6b:fa:84:77:
da:58:1b:cc:e9:bd:cb:a1:54:cf:e0:63:11:ce:f2:52:eb:b2:
43:e8:d2:fc:71:7e:c8:0e:ff:e4:57:d6:c1:9a:3f:60:2b:53:
33:c2:2f:c3:2a:67:d9:ee:fd:60:d7:a3:39:38:57:00:84:bd:
d9:da:d6:b9:51:e1:98:c6:bc:1f:83:e7:b1:80:52:cc:28:77:
9f:41:35:19:44:9d:ef:60:65:45:b7:f6:8d:fd:bd:2a:a4:7e:
15:9d:fb:ce:23:69:22:85:a6:40:10:2b:92:83:74:d2:bc:b3:
d6:f6:8e:fb
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jun 8 04:17:03 2025 by rpki-client