Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f4/c9db0e-903e-485e-b67f-2c7a2a746279/1/U3ZGfvCSHFEZDi6mDyq7O9bpwZ8.mft
File: U3ZGfvCSHFEZDi6mDyq7O9bpwZ8.mft (raw, json)
Hash identifier: 1tjds0f4HoBoL9D1HzVduIyzhdiEQgvHcQLsDaahEac=
Subject key identifier: AF:10:66:B0:A9:4D:51:C3:8B:12:C9:8C:9B:B7:FC:0A:8C:12:A3:67
Authority key identifier: 53:76:46:7E:F0:92:1C:51:19:0E:2E:A6:0F:2A:BB:3B:D6:E9:C1:9F
Certificate issuer: /CN=5376467ef0921c51190e2ea60f2abb3bd6e9c19f
Certificate serial: 01983A28C942197150AAB36882335E84220B
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/U3ZGfvCSHFEZDi6mDyq7O9bpwZ8.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/f4/c9db0e-903e-485e-b67f-2c7a2a746279/1/U3ZGfvCSHFEZDi6mDyq7O9bpwZ8.mft
Manifest number: 15F9
Signing time: Thu 24 Jul 2025 02:00:08 +0000
Manifest this update: Thu 24 Jul 2025 02:00:08 +0000
Manifest next update: Fri 25 Jul 2025 02:00:08 +0000
Files and hashes: 1: U3ZGfvCSHFEZDi6mDyq7O9bpwZ8.crl (hash: VF+jgyjINtyH0K50B3Wyg8+63jP/9XsL8ks1/y+JHKA=)
2: XbLNbpcMzthn6l0veRfIZ9QxeEk.roa (hash: Zbud2lYm0I4TklwYM90yu2xM4m8NLbFwJE0Y7F2RnFY=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/f4/c9db0e-903e-485e-b67f-2c7a2a746279/1/U3ZGfvCSHFEZDi6mDyq7O9bpwZ8.crl
rsync://rpki.ripe.net/repository/DEFAULT/f4/c9db0e-903e-485e-b67f-2c7a2a746279/1/U3ZGfvCSHFEZDi6mDyq7O9bpwZ8.mft
rsync://rpki.ripe.net/repository/DEFAULT/U3ZGfvCSHFEZDi6mDyq7O9bpwZ8.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 24 Jul 2025 23:00:04 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:3a:28:c9:42:19:71:50:aa:b3:68:82:33:5e:84:22:0b
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=5376467ef0921c51190e2ea60f2abb3bd6e9c19f
Validity
Not Before: Jul 24 02:00:08 2025 GMT
Not After : Jul 25 02:00:08 2025 GMT
Subject: CN=af1066b0a94d51c38b12c98c9bb7fc0a8c12a367
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cc:53:17:90:24:ef:e7:85:1b:84:26:4e:92:6a:
b4:7a:fd:ba:40:85:92:97:53:47:8a:e8:78:b6:93:
27:a5:af:a2:4c:40:3d:62:a3:54:a9:76:66:ca:49:
32:fb:bf:b7:1c:61:b8:46:20:8c:51:e0:db:93:24:
96:f3:00:8d:f6:29:e4:40:a0:e7:05:e5:f9:56:1a:
29:2d:6a:25:f5:e8:a5:59:6f:7e:82:8e:b3:c3:5a:
aa:06:fc:40:99:f7:ad:bc:b7:94:23:63:2f:c0:bd:
98:70:ef:4a:d3:d5:ee:81:7a:63:99:76:2e:04:c4:
2a:21:7b:6e:7e:26:ca:af:d3:70:2d:f9:6d:36:e9:
29:cc:74:3b:fe:ff:0a:ad:d4:95:7d:b7:63:59:20:
fe:d9:16:2b:e9:f0:92:55:1e:86:0e:93:ba:3e:cf:
d9:64:16:50:b9:b7:df:57:bb:d4:92:9f:b2:0b:ae:
4d:64:e0:ea:a3:b2:25:f1:f2:e2:bb:d9:e2:fd:70:
7c:38:66:9d:4d:c8:9f:b3:91:27:f1:bb:45:ec:12:
b8:90:95:97:c0:af:6e:90:71:d5:3b:2d:28:b9:1a:
9d:f7:30:69:6d:8e:52:92:6f:e4:20:53:34:8f:6c:
0d:36:c0:55:d0:a1:ca:b7:5e:72:f0:29:71:40:94:
bb:85
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
AF:10:66:B0:A9:4D:51:C3:8B:12:C9:8C:9B:B7:FC:0A:8C:12:A3:67
X509v3 Authority Key Identifier:
keyid:53:76:46:7E:F0:92:1C:51:19:0E:2E:A6:0F:2A:BB:3B:D6:E9:C1:9F
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/U3ZGfvCSHFEZDi6mDyq7O9bpwZ8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f4/c9db0e-903e-485e-b67f-2c7a2a746279/1/U3ZGfvCSHFEZDi6mDyq7O9bpwZ8.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/f4/c9db0e-903e-485e-b67f-2c7a2a746279/1/U3ZGfvCSHFEZDi6mDyq7O9bpwZ8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
a5:d9:0a:5a:d6:f3:6e:a3:29:c6:49:d9:95:0a:5d:88:7e:00:
52:dd:8f:e8:33:70:06:f7:bd:f1:f7:ab:78:6d:fc:7e:3d:a1:
d8:a2:38:72:fc:32:f3:7d:4c:1a:5c:de:62:a2:3e:16:79:57:
5d:1a:49:8e:4a:cd:5d:1c:9f:45:5e:dd:2c:e1:d0:6f:b8:88:
94:f2:44:58:68:5b:87:69:45:46:f0:8d:e8:1a:5e:de:1c:ff:
de:db:63:ee:bf:62:d9:39:cf:7c:4d:eb:71:fd:7b:ed:ca:07:
3f:11:f0:47:c8:f5:86:05:6a:ea:4b:d6:3d:c7:11:9b:33:d6:
e5:de:d4:dd:3f:05:2c:53:3b:f7:2e:76:70:8f:7e:9b:c9:da:
70:63:e8:88:40:ef:3c:a0:32:ef:f3:97:18:92:49:73:59:86:
e1:43:3a:94:d2:2c:01:bd:49:67:fd:b4:b9:ca:db:e0:ca:f3:
e9:c5:07:7d:49:9a:96:c5:f3:54:8c:0f:77:e0:9b:3c:be:44:
a4:36:e1:f8:f3:9b:d7:7b:9c:39:b0:f4:63:1e:ae:33:b4:1b:
90:a4:a1:5b:67:15:bc:35:96:c0:00:3a:84:fa:f5:d6:fc:53:
b0:60:8f:b7:ce:6a:96:ed:aa:5d:07:53:a7:a4:84:b7:eb:67:
40:e9:f5:7b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jul 24 03:31:08 2025 by rpki-client