Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c2/070630-5234-49c4-84fe-15bda6b867cb/1/U7Go68Ps9_Xbf2ys0A6SCvha6LQ.mft
File: U7Go68Ps9_Xbf2ys0A6SCvha6LQ.mft (raw, json)
Hash identifier: aa1Gt2LwPgmtlFT7xArQFNKwJg5WxnPPXxzkF6yRBR8=
Subject key identifier: 48:3D:FB:88:85:94:30:0F:A9:91:E7:96:9C:18:77:58:56:5C:43:28
Authority key identifier: 53:B1:A8:EB:C3:EC:F7:F5:DB:7F:6C:AC:D0:0E:92:0A:F8:5A:E8:B4
Certificate issuer: /CN=53b1a8ebc3ecf7f5db7f6cacd00e920af85ae8b4
Certificate serial: 01974E202832D571FB1A39402258F61B01A9
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/U7Go68Ps9_Xbf2ys0A6SCvha6LQ.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c2/070630-5234-49c4-84fe-15bda6b867cb/1/U7Go68Ps9_Xbf2ys0A6SCvha6LQ.mft
Manifest number: 1581
Signing time: Sun 08 Jun 2025 06:00:19 +0000
Manifest this update: Sun 08 Jun 2025 06:00:19 +0000
Manifest next update: Mon 09 Jun 2025 06:00:19 +0000
Files and hashes: 1: 7FIS9JXLBhSn9Xd80njFKcjrU5c.roa (hash: YIkfZDnE728Jfdsal+Cj/SDX4JnmcF1VCDJGwCdL40A=)
2: U7Go68Ps9_Xbf2ys0A6SCvha6LQ.crl (hash: /JjrUUypfelxU0GWNPcItjPAr50fthwQnPEyK+rd6lU=)
3: znlbEhSL3OBIUicM0zTghSzFWq4.roa (hash: /UTNLfQ+6CNoZrCfqNv3q7AcPtlfut7ROp1orn1wCLA=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/c2/070630-5234-49c4-84fe-15bda6b867cb/1/U7Go68Ps9_Xbf2ys0A6SCvha6LQ.crl
rsync://rpki.ripe.net/repository/DEFAULT/c2/070630-5234-49c4-84fe-15bda6b867cb/1/U7Go68Ps9_Xbf2ys0A6SCvha6LQ.mft
rsync://rpki.ripe.net/repository/DEFAULT/U7Go68Ps9_Xbf2ys0A6SCvha6LQ.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 09 Jun 2025 06:00:19 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:4e:20:28:32:d5:71:fb:1a:39:40:22:58:f6:1b:01:a9
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=53b1a8ebc3ecf7f5db7f6cacd00e920af85ae8b4
Validity
Not Before: Jun 8 06:00:19 2025 GMT
Not After : Jun 9 06:00:19 2025 GMT
Subject: CN=483dfb888594300fa991e7969c187758565c4328
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:91:fb:b3:c5:15:03:d0:ef:05:f2:02:19:9e:68:
32:d7:c1:b3:89:45:85:db:89:b2:d3:c9:2a:42:95:
0a:a9:04:61:ff:3c:22:56:63:a9:6f:3e:84:f2:31:
ce:2b:7f:9b:02:dc:8c:76:62:5f:91:92:33:94:1c:
8d:e8:08:5c:41:c3:24:40:b5:34:ff:cd:30:a6:f7:
45:e7:da:96:6b:d7:41:0a:88:7d:81:1e:59:71:76:
f5:90:69:41:9b:73:b3:44:86:d9:26:58:5b:0f:1a:
d2:bc:39:7a:44:0a:89:7f:7e:ba:65:06:7a:e1:0f:
33:a6:68:55:59:ed:2c:0b:d5:d8:4c:42:d2:b2:00:
e2:54:d0:21:66:60:e2:5f:60:d7:db:ad:8c:90:e9:
7f:dd:72:b2:e9:27:11:b0:87:82:53:0f:f6:e1:77:
52:cd:33:1c:9f:a9:f6:9e:4e:1e:a7:cc:26:f7:ce:
de:13:27:9d:aa:fb:b0:08:42:db:fd:2c:7a:e7:1b:
a5:26:ec:85:56:2b:7c:38:57:fb:8a:8b:21:d6:82:
e6:66:1c:b7:e3:92:71:d3:ce:9d:20:79:db:b6:b1:
df:4f:fd:23:88:90:f1:5e:e1:71:cf:0b:fc:fb:2d:
0c:a4:38:43:75:28:62:bf:a4:fc:fc:d2:e1:55:a1:
a8:39
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
48:3D:FB:88:85:94:30:0F:A9:91:E7:96:9C:18:77:58:56:5C:43:28
X509v3 Authority Key Identifier:
keyid:53:B1:A8:EB:C3:EC:F7:F5:DB:7F:6C:AC:D0:0E:92:0A:F8:5A:E8:B4
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/U7Go68Ps9_Xbf2ys0A6SCvha6LQ.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c2/070630-5234-49c4-84fe-15bda6b867cb/1/U7Go68Ps9_Xbf2ys0A6SCvha6LQ.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/c2/070630-5234-49c4-84fe-15bda6b867cb/1/U7Go68Ps9_Xbf2ys0A6SCvha6LQ.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
41:86:b2:10:7d:1b:55:a2:65:9d:92:b6:49:78:2a:ca:31:64:
04:83:a3:b8:60:36:a3:81:53:5d:17:9a:f4:3c:cd:20:26:d9:
06:0f:d5:b1:ff:56:68:7b:56:c0:12:a5:ba:b5:f2:fd:b5:6b:
28:07:f1:2a:fe:c0:09:6e:a8:34:7b:5a:49:20:19:ec:bd:46:
c4:f6:27:d0:27:fc:cb:53:07:95:77:be:66:8c:a1:45:fc:26:
0f:b9:5f:93:14:13:01:60:54:68:c9:a5:f8:f1:63:ed:f3:d1:
d1:55:9d:17:d3:73:c6:de:aa:5c:f1:98:76:ad:b1:56:cc:d0:
e7:c2:95:8c:1a:51:10:f5:88:0e:91:05:5c:4d:08:17:31:cd:
55:0a:4d:e9:6f:f3:9e:f8:59:6f:52:d5:89:95:e4:a3:6c:63:
39:40:78:d2:39:cf:5e:4f:63:4d:a9:de:2a:35:cd:9a:c5:b3:
50:a4:47:11:64:18:4f:35:07:7b:bb:1a:36:94:09:34:2f:e1:
c9:88:95:39:d5:60:d9:92:48:c8:77:84:c3:09:37:13:08:18:
2d:a4:49:52:dc:7f:06:37:0a:51:f6:01:50:b6:a0:e1:f8:3d:
21:66:ab:d7:86:cd:22:5e:2e:d2:65:10:a6:2c:de:93:44:a5:
a0:85:46:60
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jun 8 15:58:30 2025 by rpki-client