Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b6/793283-e304-4270-b300-1b15b25879f2/1/U8jE-VEgbxq9hqc9HLuzmQfobh8.mft
File: U8jE-VEgbxq9hqc9HLuzmQfobh8.mft (raw, json)
Hash identifier: HmBk4IhFq5GO+huK3Zed5Vt2YuPnSid27iUkBOHmEdM=
Subject key identifier: 72:D8:77:45:78:FC:26:A9:55:2F:D2:88:5D:D3:7D:7F:81:5A:FE:DC
Authority key identifier: 53:C8:C4:F9:51:20:6F:1A:BD:86:A7:3D:1C:BB:B3:99:07:E8:6E:1F
Certificate issuer: /CN=53c8c4f951206f1abd86a73d1cbbb39907e86e1f
Certificate serial: 01975459B272CC4CC8FE079D6FBE6CE7B78D
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/U8jE-VEgbxq9hqc9HLuzmQfobh8.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/b6/793283-e304-4270-b300-1b15b25879f2/1/U8jE-VEgbxq9hqc9HLuzmQfobh8.mft
Manifest number: 1583
Signing time: Mon 09 Jun 2025 11:00:53 +0000
Manifest this update: Mon 09 Jun 2025 11:00:53 +0000
Manifest next update: Tue 10 Jun 2025 11:00:53 +0000
Files and hashes: 1: U8jE-VEgbxq9hqc9HLuzmQfobh8.crl (hash: q0hw4xd0kBR2YXOwiS3+A4QRRyDjZdlIEH7sido1Lkk=)
2: gj6Yi2KQAGes4eI6WnlmwiQ6kdA.roa (hash: U/KvyTRHoYm4+lr8DamrffptLgYZWzqgWZ1VwobHzuA=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/b6/793283-e304-4270-b300-1b15b25879f2/1/U8jE-VEgbxq9hqc9HLuzmQfobh8.crl
rsync://rpki.ripe.net/repository/DEFAULT/b6/793283-e304-4270-b300-1b15b25879f2/1/U8jE-VEgbxq9hqc9HLuzmQfobh8.mft
rsync://rpki.ripe.net/repository/DEFAULT/U8jE-VEgbxq9hqc9HLuzmQfobh8.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 10 Jun 2025 06:00:17 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:54:59:b2:72:cc:4c:c8:fe:07:9d:6f:be:6c:e7:b7:8d
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=53c8c4f951206f1abd86a73d1cbbb39907e86e1f
Validity
Not Before: Jun 9 11:00:53 2025 GMT
Not After : Jun 10 11:00:53 2025 GMT
Subject: CN=72d8774578fc26a9552fd2885dd37d7f815afedc
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ba:87:2c:4d:79:99:e9:12:25:62:bc:40:1b:b2:
9f:2e:48:11:e7:b4:27:fa:b5:70:7b:c2:e4:b7:20:
ec:c6:06:12:22:0b:5a:d3:2c:5a:7d:48:5c:33:93:
29:79:6c:a3:5a:98:dc:8c:53:a3:4a:5e:9e:36:1a:
f3:b9:3d:40:16:bb:6f:d4:80:f4:70:a7:e0:bc:66:
c3:17:64:dc:3f:78:c6:e1:be:a5:5a:9f:5f:db:cc:
3b:3a:df:3a:ae:c5:7b:1d:2c:fc:38:f8:d1:31:62:
b1:f7:af:67:65:6b:cd:63:df:fe:c2:59:30:e4:3d:
c5:31:37:48:cb:e7:43:b1:0f:fb:b3:e2:27:ad:84:
b9:28:f8:28:e1:2b:52:59:24:75:f4:a6:93:a3:1d:
66:3a:72:88:6b:a2:b7:8c:2b:c9:8f:c2:e6:03:5b:
90:93:4e:fb:1e:05:2f:e7:28:d7:4f:70:93:41:a6:
c6:3b:dc:67:ac:e3:69:2c:9c:09:75:c3:61:f6:de:
02:0c:4b:1c:58:78:9e:08:aa:03:5e:07:c2:23:5e:
39:6c:43:06:8d:19:19:07:39:2e:36:12:ff:14:7d:
68:54:a9:da:ed:01:2b:1c:2f:e8:b0:da:17:f6:28:
5a:01:2c:cd:7e:b9:9f:18:e6:5e:17:7d:5e:1b:62:
c7:1b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
72:D8:77:45:78:FC:26:A9:55:2F:D2:88:5D:D3:7D:7F:81:5A:FE:DC
X509v3 Authority Key Identifier:
keyid:53:C8:C4:F9:51:20:6F:1A:BD:86:A7:3D:1C:BB:B3:99:07:E8:6E:1F
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/U8jE-VEgbxq9hqc9HLuzmQfobh8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b6/793283-e304-4270-b300-1b15b25879f2/1/U8jE-VEgbxq9hqc9HLuzmQfobh8.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/b6/793283-e304-4270-b300-1b15b25879f2/1/U8jE-VEgbxq9hqc9HLuzmQfobh8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
10:59:8b:0a:d9:2d:1b:f7:29:e2:fd:cb:ee:90:9d:bc:35:1a:
96:18:20:0b:e8:6d:dd:e4:ee:53:12:eb:c4:84:f0:39:35:21:
02:43:21:26:db:0a:f8:30:1c:21:d7:7c:54:99:85:b1:41:46:
88:81:77:56:05:a8:31:bf:62:9d:d3:88:d9:1f:78:82:e1:9c:
14:9d:d1:2d:8f:ca:ba:09:5a:99:89:7d:07:d2:df:5a:e3:3f:
b4:c1:81:0b:61:62:09:0d:a0:71:23:9e:38:44:61:4d:97:93:
f8:19:c6:f6:fc:98:b0:09:69:ca:0c:c2:c4:28:78:b4:8a:66:
f7:6b:d2:ef:c7:75:37:44:5d:44:2a:9e:ed:74:9b:6c:2a:7b:
f6:e6:67:f4:05:70:73:34:ec:66:20:84:84:98:c3:36:4f:53:
e6:38:34:4e:da:0b:a4:ee:ba:ad:8f:ab:c5:9d:90:08:45:ac:
06:b2:01:d0:31:e9:f9:46:26:9c:5e:72:93:1e:ba:30:e2:28:
e7:f8:32:2e:01:09:4f:8a:07:6b:3b:2b:09:b6:8e:61:8c:b9:
5b:a5:4c:84:a7:3b:c7:7b:e7:9e:7f:89:79:71:be:de:4d:9a:
00:11:ce:14:df:94:fb:f3:57:aa:d6:c6:49:fa:69:a4:8f:4f:
10:4c:35:d5
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Jun 9 13:42:52 2025 by rpki-client