Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/be/553dc6-12d0-4d4a-a294-97c5d59b0bbf/1/pu1EK5HU6Dpt45-2eXGh55xrHtU.mft
File: pu1EK5HU6Dpt45-2eXGh55xrHtU.mft (raw, json)
Hash identifier: DcFealSG+E4a7je/PKz+sN7IIN64vFaiXAUF4y6EyT4=
Subject key identifier: 1E:FD:55:76:CE:3D:50:61:56:35:30:29:31:D6:6A:40:DF:85:63:6F
Authority key identifier: A6:ED:44:2B:91:D4:E8:3A:6D:E3:9F:B6:79:71:A1:E7:9C:6B:1E:D5
Certificate issuer: /CN=a6ed442b91d4e83a6de39fb67971a1e79c6b1ed5
Certificate serial: 01991EE6C31941DA7F2078D2920CDB7974D2
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/pu1EK5HU6Dpt45-2eXGh55xrHtU.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/be/553dc6-12d0-4d4a-a294-97c5d59b0bbf/1/pu1EK5HU6Dpt45-2eXGh55xrHtU.mft
Manifest number: 1673
Signing time: Sat 06 Sep 2025 12:01:03 +0000
Manifest this update: Sat 06 Sep 2025 12:01:03 +0000
Manifest next update: Sun 07 Sep 2025 12:01:03 +0000
Files and hashes: 1: afYIwWyHQiLcIQms6TYRdepOKaQ.roa (hash: lsNGKgQ/6XCDDm1UAjxRivXeZCbEHxdqSvl0LRt4pPk=)
2: lfrC4B88Afpo1TBPZMxOLIcU1Ck.roa (hash: t/3zF86JRbmij67yXF/+H8nTDumbM7s5DdE5qv8C5Js=)
3: pu1EK5HU6Dpt45-2eXGh55xrHtU.crl (hash: B3DKygKEFzPaujqUw2MgbP0GKxJHZKh87j8j/HSfM8I=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/be/553dc6-12d0-4d4a-a294-97c5d59b0bbf/1/pu1EK5HU6Dpt45-2eXGh55xrHtU.crl
rsync://rpki.ripe.net/repository/DEFAULT/be/553dc6-12d0-4d4a-a294-97c5d59b0bbf/1/pu1EK5HU6Dpt45-2eXGh55xrHtU.mft
rsync://rpki.ripe.net/repository/DEFAULT/pu1EK5HU6Dpt45-2eXGh55xrHtU.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 07 Sep 2025 11:14:23 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:99:1e:e6:c3:19:41:da:7f:20:78:d2:92:0c:db:79:74:d2
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=a6ed442b91d4e83a6de39fb67971a1e79c6b1ed5
Validity
Not Before: Sep 6 12:01:03 2025 GMT
Not After : Sep 7 12:01:03 2025 GMT
Subject: CN=1efd5576ce3d50615635302931d66a40df85636f
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ad:1c:09:b0:1a:48:ba:a7:98:b8:9f:52:3f:d4:
24:d8:27:0a:a3:47:4c:70:55:63:cb:35:13:0d:43:
78:be:b1:ae:80:51:65:f0:b6:ac:35:a4:03:e5:b5:
98:61:e2:e2:23:2b:2b:d6:7a:07:c0:90:c0:1f:a0:
5e:41:f5:29:c8:d1:84:4e:e1:3e:c7:f7:85:0c:8a:
ed:0f:81:ae:5f:47:22:af:22:09:a2:05:09:80:fe:
9a:2f:b0:17:85:2b:e5:84:8b:38:82:38:5f:ff:02:
b0:d7:da:88:8c:d4:23:a1:80:32:81:9d:c3:f8:8f:
15:f2:06:2f:21:1d:d9:cf:e8:1b:b2:d4:e5:47:72:
13:fe:8d:d4:bc:64:f4:6c:66:90:48:be:40:4a:67:
36:d9:27:28:73:47:dc:d3:7f:32:29:19:39:5d:52:
c0:71:d4:70:db:0c:5f:c6:7f:f3:86:b8:66:10:8c:
bc:8e:90:bd:9a:be:7d:f5:62:b4:34:44:ff:97:76:
04:6e:0a:f9:c2:aa:56:2b:62:8f:a6:32:b7:8c:20:
0e:c9:ea:95:1f:90:f5:c7:db:18:92:b8:37:7d:07:
e9:65:dd:b2:bb:53:64:72:73:49:39:c9:da:29:26:
95:88:a1:cf:6a:c7:7f:d5:09:18:76:39:de:72:75:
6b:97
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
1E:FD:55:76:CE:3D:50:61:56:35:30:29:31:D6:6A:40:DF:85:63:6F
X509v3 Authority Key Identifier:
keyid:A6:ED:44:2B:91:D4:E8:3A:6D:E3:9F:B6:79:71:A1:E7:9C:6B:1E:D5
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/pu1EK5HU6Dpt45-2eXGh55xrHtU.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/be/553dc6-12d0-4d4a-a294-97c5d59b0bbf/1/pu1EK5HU6Dpt45-2eXGh55xrHtU.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/be/553dc6-12d0-4d4a-a294-97c5d59b0bbf/1/pu1EK5HU6Dpt45-2eXGh55xrHtU.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
78:82:5f:eb:a2:b8:64:90:3a:d2:a0:f2:75:0a:ed:f5:14:7c:
40:35:8e:c1:83:bc:12:e2:18:8a:60:ac:48:d9:26:2a:98:61:
91:62:4c:30:6c:4f:a5:dc:f0:ad:5f:cd:4c:fb:cd:1e:d8:5c:
f1:bd:36:a8:42:a3:46:ab:9d:46:2d:39:f4:b5:0b:b3:97:68:
77:dd:93:d2:35:e3:8c:4d:74:96:8d:11:9e:21:09:09:5b:2c:
7d:63:6d:1f:13:0e:3f:8b:5b:c5:98:e9:cf:8b:75:ab:01:61:
c4:67:23:b6:4a:55:ba:aa:c1:ae:83:29:60:e1:24:ec:92:60:
37:b1:b4:ee:47:01:8d:c7:93:0f:ea:a9:c2:df:22:0a:13:e9:
17:fc:af:fc:52:45:32:94:b4:d7:d9:7d:5a:f0:70:c4:ea:39:
a5:ab:5d:79:b4:8a:d0:bd:33:3d:91:2b:2f:f3:28:6c:f8:da:
49:cd:ed:1c:24:b3:14:8b:0c:08:0f:f4:fb:d4:b8:05:0e:b2:
8b:2b:1d:fd:16:3b:39:f9:cc:88:63:f6:35:92:0d:67:ec:90:
e2:24:32:28:c4:5a:fa:0c:3b:ab:bb:6a:68:db:f9:32:0b:99:
32:33:eb:5e:ca:ab:da:b2:11:f0:9e:28:36:6c:4a:ec:06:c9:
e9:d9:90:80
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Sep 6 14:08:29 2025 by rpki-client