Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d4/10b28e-f928-4a30-94f3-69d406e18653/1/UsbdFxnihP9ccH-BIujtDYeVrz0.mft
File: UsbdFxnihP9ccH-BIujtDYeVrz0.mft (raw, json)
Hash identifier: raTW2V4hYmXtOXlRqYsJQPfu/TSXTdEboOmYG5Qf5Ug=
Subject key identifier: E8:A2:72:D9:90:F0:55:8E:DA:9F:D7:D1:77:7E:9A:18:15:4F:81:A7
Authority key identifier: 52:C6:DD:17:19:E2:84:FF:5C:70:7F:81:22:E8:ED:0D:87:95:AF:3D
Certificate issuer: /CN=52c6dd1719e284ff5c707f8122e8ed0d8795af3d
Certificate serial: 01974B8D8087425C021F205B6225DC6B6A2D
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/UsbdFxnihP9ccH-BIujtDYeVrz0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/d4/10b28e-f928-4a30-94f3-69d406e18653/1/UsbdFxnihP9ccH-BIujtDYeVrz0.mft
Manifest number: 0CE4
Signing time: Sat 07 Jun 2025 18:00:54 +0000
Manifest this update: Sat 07 Jun 2025 18:00:54 +0000
Manifest next update: Sun 08 Jun 2025 18:00:54 +0000
Files and hashes: 1: SumLRFjRvRGsHVms3q07VcTY_zw.roa (hash: BPeYsAog1nRhSt1D1QkdbQMs20o6awTKDrStYSXvjag=)
2: UsbdFxnihP9ccH-BIujtDYeVrz0.crl (hash: 6JCct6nV8Ik7iRfkumrT7/1FhIQNxnfdQ8YyBB0Twcc=)
3: xXmylsNIs75YVB4GEqmFrbYzlMQ.roa (hash: yK7A998kaxjXj5Rw2EsVAdh1pDJ8+Nt5YxCPheVH4gI=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/d4/10b28e-f928-4a30-94f3-69d406e18653/1/UsbdFxnihP9ccH-BIujtDYeVrz0.crl
rsync://rpki.ripe.net/repository/DEFAULT/d4/10b28e-f928-4a30-94f3-69d406e18653/1/UsbdFxnihP9ccH-BIujtDYeVrz0.mft
rsync://rpki.ripe.net/repository/DEFAULT/UsbdFxnihP9ccH-BIujtDYeVrz0.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 08 Jun 2025 18:00:17 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:4b:8d:80:87:42:5c:02:1f:20:5b:62:25:dc:6b:6a:2d
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=52c6dd1719e284ff5c707f8122e8ed0d8795af3d
Validity
Not Before: Jun 7 18:00:54 2025 GMT
Not After : Jun 8 18:00:54 2025 GMT
Subject: CN=e8a272d990f0558eda9fd7d1777e9a18154f81a7
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9c:bd:2e:e8:60:41:3c:34:58:e7:69:99:07:71:
c6:be:5e:3f:94:f2:80:b2:cd:90:1a:23:d9:d1:77:
be:a5:1c:47:9a:8e:bd:76:72:0d:8f:46:b8:1c:af:
fa:fb:b0:07:c2:df:61:21:bd:cc:3d:6d:2e:53:0c:
cb:3f:fb:cc:fa:f2:db:56:44:08:c6:d1:85:f1:a9:
ea:29:a6:a4:76:1e:44:43:c7:d3:a7:c2:66:5d:90:
e6:31:a0:c1:f3:de:af:e2:e5:c7:b3:4a:74:7d:57:
38:e4:ab:56:ac:d8:ed:6f:0a:20:76:5b:87:81:a1:
ca:0b:88:54:5f:ef:16:e5:e1:8d:e6:c3:49:e6:48:
00:f7:00:1d:b8:a9:95:d2:f5:43:e0:33:df:84:2c:
fd:c8:ec:75:7a:c9:ac:ab:2f:37:7b:62:ea:37:7b:
ca:fb:a6:d3:95:e4:b1:fa:83:ce:5f:15:ee:01:b7:
a1:f4:b1:b6:d9:54:1d:f0:b2:71:67:c3:7b:45:1a:
c1:32:e8:5b:0a:72:40:98:85:49:b8:79:d8:36:ba:
71:0e:b7:7e:68:91:b1:55:dd:15:b4:71:40:ae:9b:
31:68:1f:99:79:58:5f:3c:e7:6b:bf:9a:2b:6e:e2:
3d:36:af:20:b9:74:e2:7f:30:be:24:09:53:a0:2c:
9d:39
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E8:A2:72:D9:90:F0:55:8E:DA:9F:D7:D1:77:7E:9A:18:15:4F:81:A7
X509v3 Authority Key Identifier:
keyid:52:C6:DD:17:19:E2:84:FF:5C:70:7F:81:22:E8:ED:0D:87:95:AF:3D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/UsbdFxnihP9ccH-BIujtDYeVrz0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d4/10b28e-f928-4a30-94f3-69d406e18653/1/UsbdFxnihP9ccH-BIujtDYeVrz0.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/d4/10b28e-f928-4a30-94f3-69d406e18653/1/UsbdFxnihP9ccH-BIujtDYeVrz0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
28:68:4b:5e:73:62:f8:70:e2:b1:4f:fc:fe:ae:a3:c8:bb:68:
58:82:f4:4e:ec:ce:40:c6:68:d8:06:ab:f7:08:5c:0a:1f:42:
cd:57:c2:b6:a4:f8:1f:92:4c:b0:63:40:07:2c:9d:d6:07:fc:
b1:93:6a:9c:03:bf:d7:37:54:43:37:03:fb:26:9a:c4:6d:fc:
c6:18:e0:e3:df:0c:33:cb:89:76:39:36:73:de:d9:e9:b7:38:
83:f3:e6:ae:4f:8f:ef:e1:8e:26:75:02:2f:98:6f:d2:b0:73:
9e:f7:30:44:d9:da:77:5a:4b:58:de:33:79:33:be:57:8c:c4:
46:c1:09:24:20:63:28:13:4f:b9:e7:11:5f:ca:fa:bd:99:8f:
c3:85:bb:85:90:30:8b:de:97:50:6b:71:61:d7:7f:dd:ef:f3:
9a:ec:3f:41:d3:a1:7f:57:8f:c7:47:d4:71:71:cf:ba:06:78:
55:9a:26:ce:a9:81:3c:f7:36:7a:32:01:da:0b:ce:57:ba:c1:
58:b2:a1:cb:aa:90:bb:cb:90:fa:21:50:ad:4a:d6:04:ab:19:
97:9b:e2:32:07:82:aa:8e:0d:df:27:eb:e6:6a:53:86:a7:7d:
0f:f8:e8:ec:bd:51:35:73:73:a9:cf:22:6b:5a:78:cb:c5:96:
a3:e9:34:a5
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jun 8 04:19:17 2025 by rpki-client