Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e8/af5657-c8b2-4855-82a7-1dd57e3f3d97/1/U1UECuknhr8XJ7a07MEJO4p0Aes.mft
File: U1UECuknhr8XJ7a07MEJO4p0Aes.mft (raw, json)
Hash identifier: q/HS+4YohyXwkxwORE7OcUCPHQxZbVbixGhD1ftEB8s=
Subject key identifier: 9C:95:55:35:FC:B9:6E:B5:FD:FB:46:54:AF:EA:48:19:82:6B:07:2C
Authority key identifier: 53:55:04:0A:E9:27:86:BF:17:27:B6:B4:EC:C1:09:3B:8A:74:01:EB
Certificate issuer: /CN=5355040ae92786bf1727b6b4ecc1093b8a7401eb
Certificate serial: 01974742E6F976C103070A829B0AF7B8F958
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/U1UECuknhr8XJ7a07MEJO4p0Aes.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/e8/af5657-c8b2-4855-82a7-1dd57e3f3d97/1/U1UECuknhr8XJ7a07MEJO4p0Aes.mft
Manifest number: 09DE
Signing time: Fri 06 Jun 2025 22:00:56 +0000
Manifest this update: Fri 06 Jun 2025 22:00:56 +0000
Manifest next update: Sat 07 Jun 2025 22:00:56 +0000
Files and hashes: 1: GBm75ZmZioJB2ocCMhAt7gwcAjo.roa (hash: gsh5fLNtNPH78sBeeVxRzXrv6jA9hVTz/xvnQZtNCkc=)
2: U1UECuknhr8XJ7a07MEJO4p0Aes.crl (hash: JhG+ICcQ6ClYALugqDbMU4+mT1raQjZ0GTSY1eGeGI0=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/e8/af5657-c8b2-4855-82a7-1dd57e3f3d97/1/U1UECuknhr8XJ7a07MEJO4p0Aes.crl
rsync://rpki.ripe.net/repository/DEFAULT/e8/af5657-c8b2-4855-82a7-1dd57e3f3d97/1/U1UECuknhr8XJ7a07MEJO4p0Aes.mft
rsync://rpki.ripe.net/repository/DEFAULT/U1UECuknhr8XJ7a07MEJO4p0Aes.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 07 Jun 2025 15:00:17 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:47:42:e6:f9:76:c1:03:07:0a:82:9b:0a:f7:b8:f9:58
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=5355040ae92786bf1727b6b4ecc1093b8a7401eb
Validity
Not Before: Jun 6 22:00:56 2025 GMT
Not After : Jun 7 22:00:56 2025 GMT
Subject: CN=9c955535fcb96eb5fdfb4654afea4819826b072c
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c5:a2:4f:d0:ef:c1:24:42:0f:fc:50:ab:71:8c:
04:2b:09:73:a4:a2:cc:58:94:f0:c2:8f:21:c4:ed:
14:81:ae:ee:26:e7:f2:58:e1:c2:39:f0:27:9a:16:
91:fa:89:6e:4d:46:9a:14:b1:c3:b7:10:20:46:93:
49:1f:91:94:ba:b4:74:9a:29:ba:de:d1:03:c5:16:
52:4d:68:51:f5:72:d1:6d:1e:11:bd:86:04:0e:1e:
e6:9d:b2:4e:7a:e4:d8:29:c4:3c:14:5b:02:42:e7:
78:13:d7:63:61:82:09:2d:13:b0:68:75:6c:c1:a7:
89:26:9f:c4:32:24:53:7b:5d:72:ba:e4:f9:0d:d0:
c4:a2:bd:22:fc:e5:89:58:22:db:b8:7c:fc:1d:b9:
fb:cf:1d:b2:4b:16:35:15:aa:9d:b8:3c:c0:31:aa:
49:fd:e9:87:d1:8c:40:93:b0:41:e2:fd:ae:13:b9:
00:ae:23:b8:36:54:b6:a5:0e:37:b8:f7:bc:82:95:
b6:be:8a:70:3a:68:f2:01:99:91:da:a1:f6:2e:53:
40:34:db:2e:3b:f4:6b:6b:a7:01:3d:f8:1e:19:c4:
28:82:e6:b8:41:18:df:cf:30:60:35:c2:75:0c:c5:
1a:3a:e9:8c:70:d3:cb:93:8b:8d:6e:6f:7d:b2:a8:
ec:43
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
9C:95:55:35:FC:B9:6E:B5:FD:FB:46:54:AF:EA:48:19:82:6B:07:2C
X509v3 Authority Key Identifier:
keyid:53:55:04:0A:E9:27:86:BF:17:27:B6:B4:EC:C1:09:3B:8A:74:01:EB
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/U1UECuknhr8XJ7a07MEJO4p0Aes.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e8/af5657-c8b2-4855-82a7-1dd57e3f3d97/1/U1UECuknhr8XJ7a07MEJO4p0Aes.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/e8/af5657-c8b2-4855-82a7-1dd57e3f3d97/1/U1UECuknhr8XJ7a07MEJO4p0Aes.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
7c:d6:db:ef:14:93:2d:76:11:70:15:c5:87:4d:5c:cf:eb:37:
95:05:72:c0:fd:f2:5c:06:78:85:c4:87:43:8b:e7:44:26:ec:
fd:83:b3:62:6a:07:d5:cf:4c:69:73:56:31:d7:80:d0:24:66:
f1:fd:bb:26:1e:2e:31:d0:b5:ae:43:6b:19:8e:95:38:cb:e7:
5e:99:b7:90:41:d0:e5:a0:ee:43:64:8e:37:b0:30:8d:75:56:
89:4d:af:3b:cb:b4:fe:ec:6a:1f:10:be:90:25:9a:04:d7:56:
71:d1:d4:b0:e7:3f:78:cf:5f:ef:59:5d:7e:2f:55:b5:81:1b:
2d:e9:e4:17:37:49:fa:a8:9d:46:d7:56:f7:8d:af:52:9e:71:
88:af:58:ff:24:50:09:ba:1f:81:17:46:a3:85:e2:4c:b1:e1:
26:91:70:5b:13:94:e3:33:d9:1c:1d:be:44:e4:6d:6e:74:e6:
42:17:d7:af:57:0d:f7:68:6b:4c:d0:3f:c2:cb:f3:68:c0:56:
b3:c1:20:05:ef:b8:90:52:5d:0f:37:1f:6d:95:b8:33:a5:f9:
00:80:0d:35:3a:fb:65:68:1d:43:64:d2:04:f7:83:7f:ab:19:
3f:35:71:ce:ad:88:06:20:1b:90:97:0d:42:9e:b1:c2:2a:81:
8d:28:15:78
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 7 01:16:28 2025 by rpki-client