Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f8/99107a-3b1b-4b5e-ae15-f95c60b466a0/1/U9nJaWdaJ9UV2PqyxjzeDtBWSR4.mft
File: U9nJaWdaJ9UV2PqyxjzeDtBWSR4.mft (raw, json)
Hash identifier: mejJQBVXbUg5j4Uj6FLgq697mTN4nxr57qPB5Fn5180=
Subject key identifier: EE:9B:38:C1:0C:76:97:BA:3F:38:EF:CF:D7:2A:91:FF:B1:42:AA:15
Authority key identifier: 53:D9:C9:69:67:5A:27:D5:15:D8:FA:B2:C6:3C:DE:0E:D0:56:49:1E
Certificate issuer: /CN=53d9c969675a27d515d8fab2c63cde0ed056491e
Certificate serial: 01975DCB19737E224CE3A6769B965236864E
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/U9nJaWdaJ9UV2PqyxjzeDtBWSR4.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/f8/99107a-3b1b-4b5e-ae15-f95c60b466a0/1/U9nJaWdaJ9UV2PqyxjzeDtBWSR4.mft
Manifest number: 1588
Signing time: Wed 11 Jun 2025 07:01:20 +0000
Manifest this update: Wed 11 Jun 2025 07:01:20 +0000
Manifest next update: Thu 12 Jun 2025 07:01:20 +0000
Files and hashes: 1: TlmA7hYGvfoGdT0G5jb2lRunL7s.roa (hash: XLYRe5/a61MKEsm2bcNZNSNX48Bi8mjwB8E7RRvBOJU=)
2: U9nJaWdaJ9UV2PqyxjzeDtBWSR4.crl (hash: IgTa4RXfR0xkgo5KWAOQosR2Tu1WH/44Gk6roFx8snE=)
3: iQrb3YXVfkwgIw7qc7FBYjy4iEQ.roa (hash: Hy+nfoOHW02E0Q66TaW00MBASxuELeKPRYnWR4M6QU0=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/f8/99107a-3b1b-4b5e-ae15-f95c60b466a0/1/U9nJaWdaJ9UV2PqyxjzeDtBWSR4.crl
rsync://rpki.ripe.net/repository/DEFAULT/f8/99107a-3b1b-4b5e-ae15-f95c60b466a0/1/U9nJaWdaJ9UV2PqyxjzeDtBWSR4.mft
rsync://rpki.ripe.net/repository/DEFAULT/U9nJaWdaJ9UV2PqyxjzeDtBWSR4.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 12 Jun 2025 07:01:20 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:5d:cb:19:73:7e:22:4c:e3:a6:76:9b:96:52:36:86:4e
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=53d9c969675a27d515d8fab2c63cde0ed056491e
Validity
Not Before: Jun 11 07:01:20 2025 GMT
Not After : Jun 12 07:01:20 2025 GMT
Subject: CN=ee9b38c10c7697ba3f38efcfd72a91ffb142aa15
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d5:70:5f:0c:a3:71:fb:15:b7:e0:ce:fa:6a:3a:
3c:f6:9f:47:ce:28:ea:ff:fb:e5:21:9d:95:a2:e4:
0f:83:c0:e2:24:be:d2:7b:19:aa:ef:39:31:c4:a6:
f6:3e:75:bb:d1:1a:7d:4a:1d:02:74:f4:6c:90:fd:
55:41:8d:6c:17:d4:16:db:d8:f9:92:6d:80:ad:fa:
01:ec:c2:91:56:dd:87:bc:1d:98:c8:23:5d:a9:0f:
65:db:ee:1a:74:39:ec:25:61:fc:11:52:eb:b0:d8:
e7:dd:f9:4b:a3:42:3e:2d:ed:4d:93:f7:e5:b6:30:
a6:a7:a8:bc:4d:68:20:c3:56:56:6c:20:79:d4:d2:
7f:c8:d8:86:19:8f:2b:a2:b2:84:31:e6:d7:96:36:
76:98:72:f9:d9:cc:a1:ac:c4:65:7c:fa:5a:64:6b:
37:36:75:71:4e:d5:75:ab:8b:02:24:b1:ee:a9:91:
a6:48:35:a5:9a:35:77:87:6a:d4:bf:b9:9c:5c:d2:
e8:74:a4:0b:52:5b:20:8e:1f:5e:14:31:1e:cf:16:
69:22:1a:13:ec:aa:c3:b1:7a:9f:72:2b:26:ac:5e:
c6:14:f4:ff:c1:b4:a1:0c:55:fb:88:f3:f6:60:7e:
02:2f:22:c9:80:83:7d:c6:38:d0:d9:65:6d:e0:85:
5b:b1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
EE:9B:38:C1:0C:76:97:BA:3F:38:EF:CF:D7:2A:91:FF:B1:42:AA:15
X509v3 Authority Key Identifier:
keyid:53:D9:C9:69:67:5A:27:D5:15:D8:FA:B2:C6:3C:DE:0E:D0:56:49:1E
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/U9nJaWdaJ9UV2PqyxjzeDtBWSR4.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f8/99107a-3b1b-4b5e-ae15-f95c60b466a0/1/U9nJaWdaJ9UV2PqyxjzeDtBWSR4.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/f8/99107a-3b1b-4b5e-ae15-f95c60b466a0/1/U9nJaWdaJ9UV2PqyxjzeDtBWSR4.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
2a:2e:db:b3:03:73:bd:d3:c4:1c:c5:8c:43:06:4c:71:de:4e:
37:87:e9:e2:34:cc:30:9a:3a:da:c6:c6:ab:e4:52:87:73:d0:
db:2a:3d:cf:33:bc:4e:2c:e5:bc:32:ab:27:da:f3:2f:c3:4b:
0e:a4:44:dd:4a:3c:77:77:7b:0b:83:65:6b:46:29:02:cf:54:
e5:a6:0d:36:90:8f:ae:e6:3e:31:6f:8a:17:b7:32:e0:f3:47:
63:82:d3:45:f6:99:73:b8:ac:76:60:26:a7:96:af:f7:23:a4:
93:52:c8:16:cc:5d:8a:ce:1f:05:b5:3c:b3:e7:91:11:6f:66:
af:49:92:dc:d5:17:d4:cf:17:6b:25:2b:c6:e5:19:1c:db:69:
10:80:ed:ab:5a:a4:31:d5:1b:73:64:45:af:c7:63:76:33:d1:
20:77:3c:ef:be:a4:b3:e1:96:06:95:f0:a0:8f:fc:cd:19:b4:
45:8d:23:56:01:a7:65:13:95:79:9a:8d:8c:e1:11:f2:de:17:
fc:75:4b:10:93:75:b7:3d:62:a7:77:eb:af:b8:0c:e0:1a:26:
c4:98:62:cb:c0:bf:e4:0e:31:99:f7:70:ed:ec:7b:d8:71:fa:
7e:96:9d:ae:b1:99:3f:de:16:58:e5:a3:bf:65:0b:ac:af:d4:
d5:da:8c:ac
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jun 11 10:55:26 2025 by rpki-client