Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c9/01f736-af83-456c-8b45-5146ab7ea015/1/U1glzov1RBcCgvcgokhBQVaLDn0.mft
File: U1glzov1RBcCgvcgokhBQVaLDn0.mft (raw, json)
Hash identifier: W/nJVubjk4nKct+3UlMigmZ5Rbf5vtKqQprrwZcPW2s=
Subject key identifier: A9:6E:77:44:34:3D:6A:C5:68:28:D3:DC:61:FD:80:51:E0:B4:55:18
Authority key identifier: 53:58:25:CE:8B:F5:44:17:02:82:F7:20:A2:48:41:41:56:8B:0E:7D
Certificate issuer: /CN=535825ce8bf544170282f720a2484141568b0e7d
Certificate serial: 01974742651695A8BB7E2C4C0CABA91A7B59
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/U1glzov1RBcCgvcgokhBQVaLDn0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c9/01f736-af83-456c-8b45-5146ab7ea015/1/U1glzov1RBcCgvcgokhBQVaLDn0.mft
Manifest number: 157E
Signing time: Fri 06 Jun 2025 22:00:22 +0000
Manifest this update: Fri 06 Jun 2025 22:00:22 +0000
Manifest next update: Sat 07 Jun 2025 22:00:22 +0000
Files and hashes: 1: U1glzov1RBcCgvcgokhBQVaLDn0.crl (hash: LTHm7Q/V8FNVnddd9hIwZgsnxjNzdCZsOK7YzHmX7ws=)
2: WX6sNrF92l686KdkTXPFkLfxe3U.roa (hash: Abr+DHAKxIPDGR7zdXI5jJnVVIXCf9i5JeUWk/vC2vA=)
3: WcSAU3UG3fbCDubUuAbDmN9BNXw.roa (hash: lUiGwZsu8aUjDmUrAqfxfzum4CcP/EsvidCuJT28td0=)
4: YsUzeXuKor8g8xJ2qQAIbZwuLdA.roa (hash: b8Dg+ptVU/0cD+fmDjz15R9Y3ThIrc8W4BKhqUm2GSI=)
5: tKMYskPULHrcExm9t_zqsBHITcI.roa (hash: R31NKmso4WbL0fd7lkKVeCkSUgER4Iw5rjhqu8nTNvA=)
6: vdc8LHeirosn85jHF2y6k4tZWpE.roa (hash: bWLLd9BGuNkbp8DQiZZnq80FzJLO4Q8aaegMFqU4oPI=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/c9/01f736-af83-456c-8b45-5146ab7ea015/1/U1glzov1RBcCgvcgokhBQVaLDn0.crl
rsync://rpki.ripe.net/repository/DEFAULT/c9/01f736-af83-456c-8b45-5146ab7ea015/1/U1glzov1RBcCgvcgokhBQVaLDn0.mft
rsync://rpki.ripe.net/repository/DEFAULT/U1glzov1RBcCgvcgokhBQVaLDn0.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 07 Jun 2025 22:00:22 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:47:42:65:16:95:a8:bb:7e:2c:4c:0c:ab:a9:1a:7b:59
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=535825ce8bf544170282f720a2484141568b0e7d
Validity
Not Before: Jun 6 22:00:22 2025 GMT
Not After : Jun 7 22:00:22 2025 GMT
Subject: CN=a96e7744343d6ac56828d3dc61fd8051e0b45518
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8a:ab:1a:66:7c:48:d1:f3:ad:0a:3f:30:9c:b1:
18:4a:bc:a9:01:65:e3:96:c4:6a:2e:91:e6:f0:ce:
a7:2f:cd:3a:10:b5:05:6f:1b:71:b0:0b:61:76:c7:
eb:0e:c9:b2:2d:8c:69:fb:30:2d:df:d7:34:2b:94:
e3:82:db:f4:88:ea:0f:6a:e1:91:3a:e1:88:82:5a:
1f:38:b7:56:cb:03:cd:72:56:7c:e0:ca:b6:21:29:
14:8d:62:1d:e6:38:62:93:bf:ee:9a:d9:81:63:71:
51:9e:72:2b:29:13:b8:9b:2b:58:cc:73:09:6a:07:
08:6f:d5:36:99:e2:bb:fe:43:c4:cb:b9:c0:48:84:
35:75:61:f0:06:c8:7f:f0:bc:0f:d3:7c:e0:5e:89:
2a:87:bb:31:b7:20:ac:c8:c9:35:89:0c:32:95:c3:
21:f9:c8:c0:83:50:21:54:93:df:45:c5:f8:22:1f:
20:64:4c:90:a6:8d:30:6d:37:34:66:42:e2:9a:c6:
9f:e7:76:33:38:4c:89:c6:a1:7a:b0:5d:e9:fb:ab:
eb:be:26:79:57:87:d1:2f:c2:1d:57:41:8c:cd:be:
23:17:3f:72:54:0d:62:f3:a7:b5:54:64:80:dd:d4:
7d:84:d8:28:c4:b3:61:e6:3f:67:6b:00:cd:f8:54:
56:0f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A9:6E:77:44:34:3D:6A:C5:68:28:D3:DC:61:FD:80:51:E0:B4:55:18
X509v3 Authority Key Identifier:
keyid:53:58:25:CE:8B:F5:44:17:02:82:F7:20:A2:48:41:41:56:8B:0E:7D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/U1glzov1RBcCgvcgokhBQVaLDn0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c9/01f736-af83-456c-8b45-5146ab7ea015/1/U1glzov1RBcCgvcgokhBQVaLDn0.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/c9/01f736-af83-456c-8b45-5146ab7ea015/1/U1glzov1RBcCgvcgokhBQVaLDn0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
b8:e4:58:72:04:ee:42:88:db:11:38:fb:38:ef:c9:2f:36:5c:
8b:a2:af:38:77:11:13:13:1f:00:67:ce:04:3f:32:3f:ae:43:
38:6e:da:5e:8c:31:d1:95:41:a2:63:1f:21:de:ca:4d:a8:2d:
c2:e4:7b:77:8b:31:b8:60:11:4f:39:10:1a:ca:07:4b:0d:07:
10:02:35:49:82:43:19:43:98:11:78:e2:07:43:c0:e2:f3:7a:
5d:05:62:16:1a:39:cf:83:83:ed:75:38:18:00:d3:c7:f1:28:
92:8a:d5:a7:a9:e6:16:50:36:d4:29:0d:fd:77:8e:54:fd:c2:
81:4c:17:e3:d3:a2:c0:b1:29:d5:30:c3:dd:96:c0:93:8e:7a:
65:18:65:d4:05:ed:2d:d5:43:53:bb:d4:37:43:d2:46:cf:45:
a9:12:87:bb:1b:cc:a7:37:a7:27:22:64:74:c2:6d:95:bb:5e:
45:0d:ca:2a:9f:33:7f:c2:7d:73:64:6f:e0:17:d6:70:cb:f1:
56:17:65:aa:0e:55:ca:a4:68:46:d5:eb:01:16:89:7e:5a:7a:
7a:54:c1:b7:d3:7e:5f:33:99:8e:cd:d9:aa:e4:77:ad:e0:fb:
b1:6b:5c:fc:7d:00:23:c5:02:85:32:e9:27:39:a0:a6:11:80:
78:a2:4b:f8
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 7 02:32:22 2025 by rpki-client