Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/da/afae6c-2982-4119-906f-895f86287506/1/ud5wEi5JKF0FsF-bv0RJv8gIMOU.mft
File: ud5wEi5JKF0FsF-bv0RJv8gIMOU.mft (raw, json)
Hash identifier: dn2MDqB71vGUgzpOLa8zRTq7xSWBfg2oeDG9BTqd5ow=
Subject key identifier: 71:CD:5C:B5:54:1F:E8:5E:1C:F9:16:35:C4:27:50:23:8E:BA:66:44
Authority key identifier: B9:DE:70:12:2E:49:28:5D:05:B0:5F:9B:BF:44:49:BF:C8:08:30:E5
Certificate issuer: /CN=b9de70122e49285d05b05f9bbf4449bfc80830e5
Certificate serial: 01974C32129B8CE141344E60AF69965F6A2D
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/ud5wEi5JKF0FsF-bv0RJv8gIMOU.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/da/afae6c-2982-4119-906f-895f86287506/1/ud5wEi5JKF0FsF-bv0RJv8gIMOU.mft
Manifest number: 0E16
Signing time: Sat 07 Jun 2025 21:00:39 +0000
Manifest this update: Sat 07 Jun 2025 21:00:39 +0000
Manifest next update: Sun 08 Jun 2025 21:00:39 +0000
Files and hashes: 1: KzXb-GAIiluztxWbXEztv2KxINE.roa (hash: RfAT/ToLMD66v1yb0qJDxKlt/UFCsEuoJitem9+zGng=)
2: ud5wEi5JKF0FsF-bv0RJv8gIMOU.crl (hash: onM43G5EDAlN3pFO20c1hLwdeQaxBNi8mL26iQ2AjAg=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/da/afae6c-2982-4119-906f-895f86287506/1/ud5wEi5JKF0FsF-bv0RJv8gIMOU.crl
rsync://rpki.ripe.net/repository/DEFAULT/da/afae6c-2982-4119-906f-895f86287506/1/ud5wEi5JKF0FsF-bv0RJv8gIMOU.mft
rsync://rpki.ripe.net/repository/DEFAULT/ud5wEi5JKF0FsF-bv0RJv8gIMOU.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 08 Jun 2025 18:00:17 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:4c:32:12:9b:8c:e1:41:34:4e:60:af:69:96:5f:6a:2d
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=b9de70122e49285d05b05f9bbf4449bfc80830e5
Validity
Not Before: Jun 7 21:00:39 2025 GMT
Not After : Jun 8 21:00:39 2025 GMT
Subject: CN=71cd5cb5541fe85e1cf91635c42750238eba6644
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d7:b1:c3:6a:77:57:94:58:0b:09:4c:63:09:f1:
ed:88:fd:6a:7a:05:a8:eb:05:86:31:50:ae:89:9d:
f2:3c:f4:4f:7d:c5:69:32:7f:3d:cc:54:f1:a8:5d:
79:27:6e:58:db:4d:12:63:d7:ff:ff:98:e4:9c:2d:
08:30:d2:33:6c:aa:6b:2a:1a:47:fb:5a:5a:42:24:
49:78:71:42:ed:7e:f0:72:9e:91:b9:bd:7e:ea:85:
af:15:40:c7:e0:72:5f:4a:ba:69:e0:19:0a:f6:04:
f4:eb:42:a9:93:85:dd:f8:7d:99:31:d7:dc:fc:1b:
80:0a:da:a0:91:32:3e:ce:1c:2c:2e:39:c3:d3:0c:
46:e8:1e:d3:58:50:d4:f3:63:2a:05:e6:dc:97:c8:
29:9b:ad:da:eb:c0:c0:e8:80:dc:8d:c5:9d:c6:26:
70:e4:84:7d:7f:48:13:48:c1:12:91:be:1b:7e:d7:
f4:3e:6a:92:b9:5a:99:cf:be:d0:43:3a:22:67:e0:
22:18:94:8c:cb:48:d2:b9:ed:f4:df:dc:c9:72:3d:
f2:62:7c:66:c0:38:f6:ec:b3:4e:31:76:a1:65:65:
5c:a4:0f:ad:44:82:4e:c0:15:6b:e9:10:fa:90:dd:
db:d1:cb:21:68:3f:7f:d4:b8:c0:7a:5b:b1:d8:3c:
3f:d9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
71:CD:5C:B5:54:1F:E8:5E:1C:F9:16:35:C4:27:50:23:8E:BA:66:44
X509v3 Authority Key Identifier:
keyid:B9:DE:70:12:2E:49:28:5D:05:B0:5F:9B:BF:44:49:BF:C8:08:30:E5
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ud5wEi5JKF0FsF-bv0RJv8gIMOU.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/da/afae6c-2982-4119-906f-895f86287506/1/ud5wEi5JKF0FsF-bv0RJv8gIMOU.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/da/afae6c-2982-4119-906f-895f86287506/1/ud5wEi5JKF0FsF-bv0RJv8gIMOU.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
19:eb:6a:c7:25:a5:5f:30:c9:15:e8:d5:6b:9c:31:25:df:c4:
cf:62:22:86:d7:9a:75:0a:7c:69:72:b3:19:b2:3e:95:d8:92:
5f:ce:cb:03:9d:3f:83:05:06:c7:b6:23:a9:aa:e0:9f:92:4b:
b9:c8:b5:6b:16:e3:00:f6:3e:15:aa:0c:38:f7:8e:15:a6:f9:
91:e0:ce:7f:d5:ee:ec:79:09:53:6d:55:9a:ad:18:de:44:19:
e8:2f:e6:1a:e2:af:c4:7b:02:3a:b2:ff:d6:ff:4c:fc:31:2b:
48:ea:8d:e0:53:65:0c:06:92:9e:95:76:2b:7a:25:cc:1e:c3:
e5:b8:e3:16:96:de:de:d8:a6:ec:06:f8:f7:34:0c:28:dd:7d:
29:53:fb:ae:c5:60:25:b7:ad:bb:2b:19:cd:d8:f6:33:d5:83:
39:54:62:5f:7e:de:8f:2f:72:a8:7a:0d:15:f3:67:3e:52:35:
b0:fa:70:a0:a2:1b:ff:e3:6a:bb:97:6d:d1:06:98:9c:f3:46:
ed:ca:cd:ff:45:aa:54:6c:a4:f9:39:14:d4:34:21:4c:ba:5b:
9f:b1:91:f5:8b:71:ac:41:26:29:08:e0:b9:8b:4a:98:25:2b:
39:d1:ec:aa:ab:d2:a4:a2:39:80:54:99:a1:79:65:b0:c6:0b:
6f:bc:25:99
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 7 23:23:02 2025 by rpki-client