Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e7/c5bb6b-6425-453a-b942-89c53d630765/1/U1ULI4LgD6ffGU5khf4UJYNiE_8.mft
File: U1ULI4LgD6ffGU5khf4UJYNiE_8.mft (raw, json)
Hash identifier: UkLZIoAPbuVxnHshA1ZG/gWYWEAe6WH04zuSxr9x4ZY=
Subject key identifier: B0:B5:3A:D9:50:83:DA:82:E7:64:CB:5B:7F:5F:85:D6:3D:F5:17:6D
Authority key identifier: 53:55:0B:23:82:E0:0F:A7:DF:19:4E:64:85:FE:14:25:83:62:13:FF
Certificate issuer: /CN=53550b2382e00fa7df194e6485fe1425836213ff
Certificate serial: 0197470BC45DFE620D0FF718A7B2704AC246
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/U1ULI4LgD6ffGU5khf4UJYNiE_8.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/e7/c5bb6b-6425-453a-b942-89c53d630765/1/U1ULI4LgD6ffGU5khf4UJYNiE_8.mft
Manifest number: 0D17
Signing time: Fri 06 Jun 2025 21:00:42 +0000
Manifest this update: Fri 06 Jun 2025 21:00:42 +0000
Manifest next update: Sat 07 Jun 2025 21:00:42 +0000
Files and hashes: 1: U1ULI4LgD6ffGU5khf4UJYNiE_8.crl (hash: 8+FSv15F2dM8caFP8bn/Km9qcjaqV9h8X8nYSGCWrYs=)
2: tcKM3LiJKMuWLZy1f452bVGFzLo.roa (hash: Hc3Ss3dEDIlpXBd/8jjQQ9tabdB4wxFhy4soszLApwQ=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/e7/c5bb6b-6425-453a-b942-89c53d630765/1/U1ULI4LgD6ffGU5khf4UJYNiE_8.crl
rsync://rpki.ripe.net/repository/DEFAULT/e7/c5bb6b-6425-453a-b942-89c53d630765/1/U1ULI4LgD6ffGU5khf4UJYNiE_8.mft
rsync://rpki.ripe.net/repository/DEFAULT/U1ULI4LgD6ffGU5khf4UJYNiE_8.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 07 Jun 2025 21:00:42 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:47:0b:c4:5d:fe:62:0d:0f:f7:18:a7:b2:70:4a:c2:46
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=53550b2382e00fa7df194e6485fe1425836213ff
Validity
Not Before: Jun 6 21:00:42 2025 GMT
Not After : Jun 7 21:00:42 2025 GMT
Subject: CN=b0b53ad95083da82e764cb5b7f5f85d63df5176d
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:f4:f6:56:c8:97:13:27:40:5b:b5:33:a4:8c:0d:
f7:86:df:b9:50:b2:d7:72:b8:de:59:ec:fc:a4:02:
9f:64:4a:12:ac:03:c1:fc:e8:90:6c:b7:0b:26:41:
d5:92:a0:5f:a4:62:eb:7a:e4:4f:42:62:0e:68:09:
1f:fd:fe:6e:60:8a:04:ea:35:c8:83:5b:bd:cc:47:
26:92:e5:a5:72:48:6c:bb:1d:77:50:54:d8:51:e8:
4f:ed:63:2f:47:31:27:0c:e9:14:3c:4a:b1:85:72:
40:80:2a:10:c1:56:a0:de:a3:5d:e9:49:88:bb:0e:
ad:9e:30:29:1f:5c:f1:8e:cf:5f:63:f2:e9:31:ca:
43:fe:56:eb:d8:cc:65:dd:7f:cc:bd:e8:18:34:91:
ab:0b:f3:23:f0:67:45:27:c4:79:ba:17:fd:c4:1d:
0b:1b:a6:7f:99:29:c5:df:42:c8:2a:ab:e6:28:bd:
e6:b9:52:3c:fd:fc:ec:69:db:86:4b:e2:ec:bc:32:
9b:8a:a3:e5:3c:0d:13:bb:5d:a6:46:54:b4:44:5b:
de:95:02:54:0f:ff:ca:24:92:75:34:0f:54:b1:5b:
40:6f:31:81:b3:94:b9:3e:c0:5e:c4:ca:76:c0:c6:
b3:27:be:26:63:ca:9b:24:6e:f8:09:e2:ab:80:fd:
00:c5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B0:B5:3A:D9:50:83:DA:82:E7:64:CB:5B:7F:5F:85:D6:3D:F5:17:6D
X509v3 Authority Key Identifier:
keyid:53:55:0B:23:82:E0:0F:A7:DF:19:4E:64:85:FE:14:25:83:62:13:FF
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/U1ULI4LgD6ffGU5khf4UJYNiE_8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e7/c5bb6b-6425-453a-b942-89c53d630765/1/U1ULI4LgD6ffGU5khf4UJYNiE_8.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/e7/c5bb6b-6425-453a-b942-89c53d630765/1/U1ULI4LgD6ffGU5khf4UJYNiE_8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
b1:03:fd:8b:a8:4f:e4:61:f4:8f:dd:89:47:4f:5d:23:48:6f:
7d:42:94:cd:15:65:c5:43:0a:9b:25:2b:d9:09:f1:76:88:f4:
e4:a6:1b:b0:70:da:e5:3e:f3:63:b0:3a:15:82:24:54:26:19:
e3:45:71:26:ad:87:a6:5c:c3:30:68:cd:5a:95:42:94:95:a3:
76:ef:eb:16:dd:f0:bc:3c:28:e7:85:95:dd:c3:23:c2:83:5d:
43:fb:60:db:cf:ed:f1:3f:ac:37:91:35:09:37:8a:f5:66:64:
d7:c8:4c:f7:9f:67:d1:c5:5a:70:37:73:20:f6:80:b3:ba:32:
53:c2:5e:87:5f:cf:44:37:c6:4f:32:7f:f8:89:bf:61:3f:d1:
44:e7:21:b0:bd:74:7d:d0:94:b9:65:e6:5a:68:78:d8:8a:31:
eb:9c:e3:7e:77:b5:0a:14:49:77:ea:b7:b3:ed:35:14:bf:12:
81:7f:bc:7d:2d:cf:77:2e:7a:41:7f:22:2e:d0:fc:57:14:9e:
c2:60:72:8a:f3:14:33:41:ab:7f:7f:b2:07:25:06:ce:58:7d:
97:3d:99:26:92:3e:c8:b5:8f:ce:33:58:77:c2:ee:55:9f:69:
34:b3:f7:cf:fb:ef:7e:8f:83:b9:2a:ea:45:8a:d3:9e:aa:ec:
0e:0c:46:2a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 7 03:39:47 2025 by rpki-client