Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f5/dce44a-4a90-43ea-b1fb-a2d116560aca/1/U8vRR3BEoDQEx_xDlhwsg7unW7w.mft
File: U8vRR3BEoDQEx_xDlhwsg7unW7w.mft (raw, json)
Hash identifier: gYzHBN3HKdn2hFYC3Wyt6xgfbSetw7Fg4phEK32/Q3Q=
Subject key identifier: 60:CF:C4:97:87:66:B7:7E:A9:D6:A2:4E:F6:4C:A4:27:BA:1F:4A:F4
Authority key identifier: 53:CB:D1:47:70:44:A0:34:04:C7:FC:43:96:1C:2C:83:BB:A7:5B:BC
Certificate issuer: /CN=53cbd1477044a03404c7fc43961c2c83bba75bbc
Certificate serial: 01974BFB3F87576CF3D2C028E1296CAF4151
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/U8vRR3BEoDQEx_xDlhwsg7unW7w.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/f5/dce44a-4a90-43ea-b1fb-a2d116560aca/1/U8vRR3BEoDQEx_xDlhwsg7unW7w.mft
Manifest number: 0DAC
Signing time: Sat 07 Jun 2025 20:00:46 +0000
Manifest this update: Sat 07 Jun 2025 20:00:46 +0000
Manifest next update: Sun 08 Jun 2025 20:00:46 +0000
Files and hashes: 1: B2DVcbdBAKRHBDsOlZrrOVepTcQ.roa (hash: qvvp5nQI7KpPFAu+iSrl9WmgfsagnJRM0T+yv2PLO1U=)
2: MyfnN7_GeDEIFOv2Po3D--A0qr4.roa (hash: Q+ck4wNBk8gHUXF8i3xSK2P0e3p9/YGq6s+8125aWKo=)
3: U8vRR3BEoDQEx_xDlhwsg7unW7w.crl (hash: cnP7YNcId9BlTsV6TZQnAF4U5B2WsaL+Y0wbUNyqOjc=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/f5/dce44a-4a90-43ea-b1fb-a2d116560aca/1/U8vRR3BEoDQEx_xDlhwsg7unW7w.crl
rsync://rpki.ripe.net/repository/DEFAULT/f5/dce44a-4a90-43ea-b1fb-a2d116560aca/1/U8vRR3BEoDQEx_xDlhwsg7unW7w.mft
rsync://rpki.ripe.net/repository/DEFAULT/U8vRR3BEoDQEx_xDlhwsg7unW7w.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 08 Jun 2025 18:00:17 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:4b:fb:3f:87:57:6c:f3:d2:c0:28:e1:29:6c:af:41:51
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=53cbd1477044a03404c7fc43961c2c83bba75bbc
Validity
Not Before: Jun 7 20:00:46 2025 GMT
Not After : Jun 8 20:00:46 2025 GMT
Subject: CN=60cfc4978766b77ea9d6a24ef64ca427ba1f4af4
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b5:b8:c0:d7:d9:cb:b3:d9:9a:31:26:bf:e5:dc:
fe:a3:a1:b5:af:72:69:e1:70:f2:7e:4f:f9:c9:bb:
09:08:5b:c3:d6:3f:b5:c8:7b:13:25:7b:17:22:99:
e0:9e:55:a0:1b:b7:6b:2c:30:37:42:23:a6:83:18:
35:ee:95:c3:28:15:77:55:bf:9b:a6:2a:e9:b1:6c:
9f:94:64:bc:40:fe:71:ad:59:10:21:0c:0e:03:6a:
c6:37:f2:73:a3:6b:2e:fc:35:df:24:27:96:74:3b:
ca:b2:ac:36:a4:4e:66:1d:52:79:11:c1:22:4a:11:
6a:1b:84:fd:59:5f:2f:3d:e4:76:26:af:f3:2a:46:
3e:ec:84:c8:0e:7b:ca:3a:01:91:82:53:38:8c:e9:
df:20:53:05:6c:3b:0b:1f:98:8a:e2:1b:72:25:6c:
38:b4:d8:22:20:f6:68:c1:b6:e2:62:09:f0:bf:be:
3d:b2:d4:2e:f9:67:80:3a:c9:40:d9:91:8e:ad:aa:
70:b4:2f:45:59:08:8b:cb:a4:06:18:1f:58:0f:33:
1e:3d:fe:f2:17:0d:9d:b8:b1:27:69:e6:af:e5:01:
8c:0a:52:79:61:a6:b1:d9:cc:9f:f5:7d:8e:ab:f3:
13:ce:24:cf:ae:73:6b:16:96:9b:08:18:6f:23:8b:
c9:17
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
60:CF:C4:97:87:66:B7:7E:A9:D6:A2:4E:F6:4C:A4:27:BA:1F:4A:F4
X509v3 Authority Key Identifier:
keyid:53:CB:D1:47:70:44:A0:34:04:C7:FC:43:96:1C:2C:83:BB:A7:5B:BC
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/U8vRR3BEoDQEx_xDlhwsg7unW7w.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f5/dce44a-4a90-43ea-b1fb-a2d116560aca/1/U8vRR3BEoDQEx_xDlhwsg7unW7w.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/f5/dce44a-4a90-43ea-b1fb-a2d116560aca/1/U8vRR3BEoDQEx_xDlhwsg7unW7w.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
9b:92:2c:d1:e1:c5:3c:c9:b2:5e:e5:5d:eb:f0:32:2a:ba:09:
21:b5:90:fe:f1:4f:22:16:06:98:06:80:62:38:1f:9f:1b:7a:
c3:22:a8:47:48:db:f9:e0:ae:30:76:be:7b:6b:a9:a5:5b:bf:
b2:7b:77:dd:4f:7e:e1:2c:d6:78:ac:3e:15:7f:ff:81:d6:4e:
9e:5b:ba:da:44:ae:6d:ac:9d:f0:9d:1f:40:ef:26:c1:84:70:
4c:a9:76:20:5a:4f:51:45:b8:dd:81:ed:3a:80:c7:6e:c6:93:
61:c3:9d:d3:29:b5:2d:c7:71:ce:39:9a:2f:01:e3:5b:4e:9b:
99:4e:bc:06:83:74:a8:fd:fc:cd:4d:3b:f2:00:de:36:cb:6d:
92:b8:6e:49:20:b1:8a:f9:b8:aa:5e:ee:90:16:a4:d8:cd:97:
5e:f6:21:7d:44:a7:dc:46:06:82:34:cc:46:c8:a3:26:16:25:
28:d6:91:e2:25:10:b3:e3:a5:2e:66:44:a5:61:cb:f3:22:68:
fd:98:94:ff:ce:59:b2:30:a1:03:2b:3e:de:28:6d:0a:33:b4:
eb:53:a4:af:11:8c:c3:fa:41:d0:4c:0e:12:81:96:65:87:7b:
ac:e9:07:33:35:6a:1c:06:fa:1d:dc:40:86:17:b6:7c:2b:de:
8d:9a:b7:92
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 7 23:05:30 2025 by rpki-client