Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b1/6e264e-d6ce-42d5-b05d-e15f4f8409e6/1/U70JkochUqhtYNljuH0BgXwA_FM.mft
File: U70JkochUqhtYNljuH0BgXwA_FM.mft (raw, json)
Hash identifier: OgHYbWaJQp60uxq6Yt4Adm9DWFL/qgZqFprc5F+4T0M=
Subject key identifier: AF:4B:92:80:CB:DD:B8:04:62:08:6E:7C:74:15:28:F1:1F:D7:FB:E8
Authority key identifier: 53:BD:09:92:87:21:52:A8:6D:60:D9:63:B8:7D:01:81:7C:00:FC:53
Certificate issuer: /CN=53bd0992872152a86d60d963b87d01817c00fc53
Certificate serial: 01974BFB7183EEB66618FAFCB211727C10FC
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/U70JkochUqhtYNljuH0BgXwA_FM.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/b1/6e264e-d6ce-42d5-b05d-e15f4f8409e6/1/U70JkochUqhtYNljuH0BgXwA_FM.mft
Manifest number: 157E
Signing time: Sat 07 Jun 2025 20:00:59 +0000
Manifest this update: Sat 07 Jun 2025 20:00:59 +0000
Manifest next update: Sun 08 Jun 2025 20:00:59 +0000
Files and hashes: 1: 8hWTGCLXxSwODB2tKv40DFwDRSA.roa (hash: LnqtzTwP6Z/uj/Pahytsa4k9TTsa7E1q6xNsCMwJ/r4=)
2: KdlAk3dh27bShWAn4-0kWb61hVQ.roa (hash: ATJYV8SWOcnAG9fqVBljwxaiv5XnfJ4U40CX0lPgLrE=)
3: U70JkochUqhtYNljuH0BgXwA_FM.crl (hash: v9kERklK4mgL2jzjShQpbzjAHENQeEryQxv+Z+xW648=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/b1/6e264e-d6ce-42d5-b05d-e15f4f8409e6/1/U70JkochUqhtYNljuH0BgXwA_FM.crl
rsync://rpki.ripe.net/repository/DEFAULT/b1/6e264e-d6ce-42d5-b05d-e15f4f8409e6/1/U70JkochUqhtYNljuH0BgXwA_FM.mft
rsync://rpki.ripe.net/repository/DEFAULT/U70JkochUqhtYNljuH0BgXwA_FM.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 08 Jun 2025 18:00:17 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:4b:fb:71:83:ee:b6:66:18:fa:fc:b2:11:72:7c:10:fc
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=53bd0992872152a86d60d963b87d01817c00fc53
Validity
Not Before: Jun 7 20:00:59 2025 GMT
Not After : Jun 8 20:00:59 2025 GMT
Subject: CN=af4b9280cbddb80462086e7c741528f11fd7fbe8
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:f5:80:25:15:fe:2b:3d:cd:52:44:5a:50:53:dd:
b5:51:75:a1:fd:6e:9a:16:91:1a:7d:fc:7a:ee:d1:
a4:de:5a:f9:20:69:a5:76:fa:97:a2:be:7d:fd:1d:
ab:69:39:83:4a:da:ac:e7:7c:12:0c:6d:e7:a3:eb:
39:cb:f4:16:90:09:c2:12:15:66:99:41:7c:1e:0f:
17:2e:29:c8:32:3a:a3:81:e6:47:73:14:72:98:01:
8e:c1:2a:62:b1:b1:00:bf:3b:b5:fc:9e:96:ae:d9:
aa:22:52:25:29:9b:56:a0:d1:74:34:95:6d:76:e0:
14:61:e7:f7:a9:fb:48:8a:82:fb:70:c6:97:08:31:
6a:80:eb:11:8a:2a:33:03:3c:a0:93:b6:04:54:90:
0d:07:33:91:d6:45:66:b4:17:9c:2c:15:0f:d3:ce:
19:36:59:03:ee:91:c6:51:69:86:a9:2f:ee:85:51:
ff:51:6a:c2:d2:14:94:70:0c:64:14:54:c8:03:fa:
39:f9:15:bf:9b:a1:8a:ad:32:1f:89:9f:55:8a:97:
7e:3a:49:26:30:17:bb:3f:79:f6:20:46:27:fd:9b:
2d:18:7c:6b:14:f2:5c:a1:32:eb:36:dd:10:e5:8e:
60:99:5b:97:64:97:73:cf:dc:c1:59:6b:0e:ef:39:
c0:0d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
AF:4B:92:80:CB:DD:B8:04:62:08:6E:7C:74:15:28:F1:1F:D7:FB:E8
X509v3 Authority Key Identifier:
keyid:53:BD:09:92:87:21:52:A8:6D:60:D9:63:B8:7D:01:81:7C:00:FC:53
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/U70JkochUqhtYNljuH0BgXwA_FM.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b1/6e264e-d6ce-42d5-b05d-e15f4f8409e6/1/U70JkochUqhtYNljuH0BgXwA_FM.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/b1/6e264e-d6ce-42d5-b05d-e15f4f8409e6/1/U70JkochUqhtYNljuH0BgXwA_FM.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
51:cf:b4:9e:6d:b0:78:24:ff:7a:35:ae:ec:79:d2:61:d6:b3:
24:15:e4:5d:b1:a5:f9:c6:43:85:ff:cb:1a:a9:4b:ec:5a:92:
50:8a:b9:28:e1:3c:32:59:67:d1:1b:31:b1:56:ee:4f:e0:1d:
f9:c3:07:46:4f:7a:16:31:39:35:45:23:e4:4b:67:ac:5a:51:
db:e3:05:57:ea:5d:04:fd:b6:1d:e0:21:40:14:77:cb:4e:62:
f3:c6:1d:e5:1b:fb:e7:e7:73:35:37:c1:d8:40:f8:45:27:00:
f3:2b:49:af:8a:79:11:a2:6f:fd:30:b4:a9:4f:30:4e:6f:bc:
23:3b:15:de:2c:96:4d:69:30:8c:a7:cc:ad:7d:5b:97:2a:cd:
91:64:b8:21:15:56:3f:fd:d8:35:3d:b8:2e:bc:2c:d9:ab:ed:
db:a0:68:3a:53:3b:52:45:c5:6d:7e:ac:0d:37:a6:d9:d2:10:
3c:a2:51:f0:5d:e0:4c:fc:45:65:75:2a:4e:66:61:68:c5:1b:
fa:92:88:ff:5b:2e:4e:b5:3d:b1:f6:10:d0:4f:80:a9:df:32:
4d:83:fc:f7:56:79:01:af:65:53:5a:ab:9b:10:01:e0:db:b9:
45:6e:67:2e:9f:d8:21:ed:23:3f:4b:18:bd:62:a9:ab:97:cb:
38:e1:23:59
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 7 22:58:32 2025 by rpki-client