Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e9/13a57c-cc4f-45bc-af9f-9367e42389d9/1/U-8ohOShM1XbZJo0k1J8RCKJc7g.mft
File: U-8ohOShM1XbZJo0k1J8RCKJc7g.mft (raw, json)
Hash identifier: O79GbIuriMGhDdqdaXwuz0475Aa7U5+pMIumL0t4oZM=
Subject key identifier: BC:1C:A1:B0:4F:F7:22:E9:F7:31:C0:88:3E:93:36:49:64:0E:FC:C4
Authority key identifier: 53:EF:28:84:E4:A1:33:55:DB:64:9A:34:93:52:7C:44:22:89:73:B8
Certificate issuer: /CN=53ef2884e4a13355db649a3493527c44228973b8
Certificate serial: 01974A43758ABE237C3C89BD320F1006001A
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/U-8ohOShM1XbZJo0k1J8RCKJc7g.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/e9/13a57c-cc4f-45bc-af9f-9367e42389d9/1/U-8ohOShM1XbZJo0k1J8RCKJc7g.mft
Manifest number: 107B
Signing time: Sat 07 Jun 2025 12:00:24 +0000
Manifest this update: Sat 07 Jun 2025 12:00:24 +0000
Manifest next update: Sun 08 Jun 2025 12:00:24 +0000
Files and hashes: 1: 7mSFLMU3pbLGF1eJYN7bCpXwo10.roa (hash: Gi9mXnC7oL2MgZs534EZSdtoL7fLCIIFaJEq+xFNvfg=)
2: U-8ohOShM1XbZJo0k1J8RCKJc7g.crl (hash: SLm+T2WVj4pBRXBKwNWs1UMxCbtHL0nUxOw3OHbe+6c=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/e9/13a57c-cc4f-45bc-af9f-9367e42389d9/1/U-8ohOShM1XbZJo0k1J8RCKJc7g.crl
rsync://rpki.ripe.net/repository/DEFAULT/e9/13a57c-cc4f-45bc-af9f-9367e42389d9/1/U-8ohOShM1XbZJo0k1J8RCKJc7g.mft
rsync://rpki.ripe.net/repository/DEFAULT/U-8ohOShM1XbZJo0k1J8RCKJc7g.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 08 Jun 2025 09:00:17 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:4a:43:75:8a:be:23:7c:3c:89:bd:32:0f:10:06:00:1a
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=53ef2884e4a13355db649a3493527c44228973b8
Validity
Not Before: Jun 7 12:00:24 2025 GMT
Not After : Jun 8 12:00:24 2025 GMT
Subject: CN=bc1ca1b04ff722e9f731c0883e933649640efcc4
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a8:7e:50:91:a0:49:39:4e:10:e0:c9:1c:eb:31:
97:11:95:4c:1d:c9:d1:0b:25:b4:34:9d:1c:a0:b3:
5a:47:fa:9b:ed:f8:36:a1:78:73:a1:02:f6:ea:e4:
78:e3:c8:bc:63:3e:60:41:cf:bd:62:68:ba:17:69:
61:1f:2a:37:da:7f:16:ad:02:fc:38:f2:f0:2e:50:
9f:54:6c:6c:1c:91:92:ea:d8:c0:f7:1c:ff:e6:91:
a3:b3:9b:ee:d6:3f:20:4e:5e:b9:7d:17:50:e3:34:
7a:72:8d:83:e9:4c:b5:e4:e5:b1:bc:49:97:47:8e:
2c:aa:40:7c:16:3f:7f:96:f1:8a:f2:aa:a2:11:a5:
c2:f6:cb:59:62:b1:3a:9f:f6:c5:5c:ec:51:4b:92:
dd:ea:65:89:b7:39:63:5c:1d:71:26:5a:d8:c6:d8:
50:7a:72:68:cb:01:e8:87:b5:ec:63:45:99:5b:0a:
35:2a:9d:bb:4e:c7:4e:a9:37:e1:22:45:1b:0a:85:
1f:1b:d9:41:4f:0d:a7:a0:54:12:2d:5e:42:a2:4f:
14:4b:13:76:b1:03:ce:ed:c0:f8:4e:32:80:a0:2c:
34:8b:fc:94:04:af:ae:26:16:25:1a:af:15:8b:8e:
12:a6:ea:0a:b1:d0:41:f2:3d:d2:91:f7:b8:b6:fc:
11:bd
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
BC:1C:A1:B0:4F:F7:22:E9:F7:31:C0:88:3E:93:36:49:64:0E:FC:C4
X509v3 Authority Key Identifier:
keyid:53:EF:28:84:E4:A1:33:55:DB:64:9A:34:93:52:7C:44:22:89:73:B8
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/U-8ohOShM1XbZJo0k1J8RCKJc7g.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e9/13a57c-cc4f-45bc-af9f-9367e42389d9/1/U-8ohOShM1XbZJo0k1J8RCKJc7g.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/e9/13a57c-cc4f-45bc-af9f-9367e42389d9/1/U-8ohOShM1XbZJo0k1J8RCKJc7g.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
1f:16:59:c7:5d:be:ed:58:f5:21:6a:ee:1a:f8:ba:6a:8a:1b:
16:78:01:0a:07:0e:39:5e:0e:50:fc:bb:28:e5:89:5a:c4:5a:
dd:d9:77:33:37:52:15:13:2d:a5:d4:a5:f8:a1:4d:f6:02:5c:
77:31:c9:4c:34:d1:1b:1e:bc:94:9c:de:75:50:9e:95:15:9b:
40:54:96:ba:4f:22:35:74:ae:7c:5f:64:52:d4:08:8d:71:e3:
0e:ad:3f:8e:58:a2:af:99:98:c0:4a:9e:26:c2:e7:e2:94:ea:
34:67:56:6b:68:b8:26:0f:61:03:8c:ec:e8:ad:c0:ce:2f:56:
6e:cf:16:19:8b:63:93:4c:b0:a2:9f:eb:2d:d0:71:cc:94:bf:
9a:a2:2e:c6:1b:f9:48:ec:eb:aa:c7:ef:42:1d:3a:f3:16:ad:
0f:01:f9:38:29:c2:8d:a7:34:33:79:47:56:0c:70:95:fc:50:
a2:59:2e:76:8b:43:20:b2:08:80:ec:50:c7:e5:a7:fe:2a:0d:
ad:b9:45:7f:79:91:f2:9c:65:e1:bb:cd:19:60:00:a4:b0:f6:
b3:f2:db:67:f0:f8:e6:37:9d:ef:20:e4:a9:95:57:24:33:c0:
45:d3:c7:20:f4:8e:a0:7a:ec:67:ef:20:1e:b3:1d:b6:c9:98:
a2:72:bb:32
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 7 13:52:13 2025 by rpki-client