Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/fd/5a7731-ef54-4501-86f4-98e9e2510bb6/1/UF4vLV5wk_-NQAOgK30-ExznChI.mft
File: UF4vLV5wk_-NQAOgK30-ExznChI.mft (raw, json)
Hash identifier: eZTMql0IsMeG2FP2kXWP76m3Snsbc/GoXdA5Y5d7PLY=
Subject key identifier: FF:37:F5:F5:B7:60:68:18:58:59:D3:77:24:98:7A:6C:8E:06:7A:0E
Authority key identifier: 50:5E:2F:2D:5E:70:93:FF:8D:40:03:A0:2B:7D:3E:13:1C:E7:0A:12
Certificate issuer: /CN=505e2f2d5e7093ff8d4003a02b7d3e131ce70a12
Certificate serial: 019743D3AF1D45BCA8B768117816CB01FFD3
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/UF4vLV5wk_-NQAOgK30-ExznChI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/fd/5a7731-ef54-4501-86f4-98e9e2510bb6/1/UF4vLV5wk_-NQAOgK30-ExznChI.mft
Manifest number: 0C09
Signing time: Fri 06 Jun 2025 06:00:35 +0000
Manifest this update: Fri 06 Jun 2025 06:00:35 +0000
Manifest next update: Sat 07 Jun 2025 06:00:35 +0000
Files and hashes: 1: DAprp1jU9mjWeTMQ4zqYWAlF99E.roa (hash: 5UCreSEQ0cD98yP9A7sen4+ZVnf4RJinEuGBlveuw0g=)
2: UF4vLV5wk_-NQAOgK30-ExznChI.crl (hash: 5OTKM8cCz2ERM0MNZ/yHmd0ApF1jlsp7qL5Alrir22w=)
3: hXGA3CK9ZAwFYqBy6sH4BYfgPYI.roa (hash: Va1I6zrYlRY0/ml2dWrjPscW8W1PrtSAiqy07YNUOfk=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/fd/5a7731-ef54-4501-86f4-98e9e2510bb6/1/UF4vLV5wk_-NQAOgK30-ExznChI.crl
rsync://rpki.ripe.net/repository/DEFAULT/fd/5a7731-ef54-4501-86f4-98e9e2510bb6/1/UF4vLV5wk_-NQAOgK30-ExznChI.mft
rsync://rpki.ripe.net/repository/DEFAULT/UF4vLV5wk_-NQAOgK30-ExznChI.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 07 Jun 2025 06:00:17 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:43:d3:af:1d:45:bc:a8:b7:68:11:78:16:cb:01:ff:d3
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=505e2f2d5e7093ff8d4003a02b7d3e131ce70a12
Validity
Not Before: Jun 6 06:00:35 2025 GMT
Not After : Jun 7 06:00:35 2025 GMT
Subject: CN=ff37f5f5b76068185859d37724987a6c8e067a0e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ac:3c:04:94:db:ad:89:89:a3:85:8a:7f:d3:52:
fb:70:97:61:3d:5d:ea:38:14:26:11:0b:53:6a:c9:
5b:f9:51:0d:08:40:fb:11:15:c9:30:8b:df:62:f4:
08:a9:c9:92:95:a9:7f:54:ad:69:d1:c2:d1:ad:49:
72:86:e6:06:84:b7:03:7c:aa:62:ad:75:de:9e:8c:
a1:2f:11:d1:44:0a:78:1d:5e:12:0f:1a:cd:fe:f4:
9c:56:5e:38:c9:6c:66:db:df:27:d9:74:8a:8f:54:
ee:83:e0:cf:53:23:0d:b9:f2:8a:03:4e:9e:61:0f:
c5:a0:5b:9a:59:b8:d8:d9:12:23:54:2c:69:ac:a6:
8c:55:88:1e:ca:d9:a0:62:32:15:87:5f:8f:ff:e4:
28:8b:a2:05:c1:a2:2e:55:18:ae:ad:66:f5:cb:39:
51:02:12:53:b2:08:94:a1:0e:e5:86:1b:3c:92:50:
93:dd:cf:e8:eb:b7:c6:ef:5f:35:b9:5b:96:94:80:
5c:d0:eb:62:4b:56:0c:77:da:01:b0:86:c9:0b:05:
d4:db:ab:e2:6f:2f:6b:9e:23:f8:86:7d:93:aa:29:
1a:a5:d3:b4:30:37:56:e2:3c:0f:6e:68:aa:93:53:
71:11:f6:61:58:ab:cd:ff:13:79:64:2d:a2:71:fd:
9c:21
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
FF:37:F5:F5:B7:60:68:18:58:59:D3:77:24:98:7A:6C:8E:06:7A:0E
X509v3 Authority Key Identifier:
keyid:50:5E:2F:2D:5E:70:93:FF:8D:40:03:A0:2B:7D:3E:13:1C:E7:0A:12
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/UF4vLV5wk_-NQAOgK30-ExznChI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/fd/5a7731-ef54-4501-86f4-98e9e2510bb6/1/UF4vLV5wk_-NQAOgK30-ExznChI.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/fd/5a7731-ef54-4501-86f4-98e9e2510bb6/1/UF4vLV5wk_-NQAOgK30-ExznChI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
32:1d:bf:c0:2d:1e:11:60:a1:09:29:d8:00:ca:2a:e2:ea:48:
8c:99:84:db:34:e3:5a:fe:61:a1:67:81:25:9d:88:59:24:71:
ef:9f:57:e4:81:42:41:b7:85:d6:1f:48:5d:7d:e4:48:8b:96:
fb:bb:9d:42:37:8e:c3:fa:6a:9f:ef:ef:be:5a:57:0f:0d:51:
8f:27:ea:0d:ec:c4:23:99:c4:b3:28:5b:01:14:f2:81:96:30:
4f:16:2a:6c:2c:77:1d:0a:77:3d:04:ed:75:41:f1:ca:59:6e:
92:79:f5:7c:22:1a:7b:d9:05:f8:02:64:95:e6:a8:55:d1:84:
58:21:ee:44:74:1e:cf:4e:2e:ae:0f:c8:ab:79:f6:ab:2a:e6:
da:a2:dd:66:9a:13:17:66:e3:3a:6d:0e:97:8c:a7:a6:89:3e:
a1:ee:00:69:9b:4b:9e:e6:71:73:86:41:9d:01:1c:b8:00:ac:
41:35:7b:80:ea:b9:df:d1:d7:f8:29:0f:70:55:ca:7b:17:04:
51:45:df:5d:79:0c:7b:fb:85:03:94:82:d9:85:25:88:1c:b4:
89:bc:7c:80:3d:44:77:f8:97:41:9d:16:bf:f1:9d:78:7d:70:
97:0a:0b:d7:2c:df:da:05:56:89:cc:c7:60:dd:69:a0:17:e2:
a3:81:90:29
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jun 6 11:50:08 2025 by rpki-client