Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/fd/ad7662-73ff-4594-8e30-59a7efd384c0/1/U5Ork-hXAac-9NXgDtbrmJOTc5Q.mft
File: U5Ork-hXAac-9NXgDtbrmJOTc5Q.mft (raw, json)
Hash identifier: VF45Tg91L6hFWZXAWZCIdWXc+lKK28ed8qGi8SNSq2I=
Subject key identifier: 9F:71:E0:DE:BA:11:39:5B:D2:1A:9D:51:4A:3E:D2:4A:64:43:EA:B7
Authority key identifier: 53:93:AB:93:E8:57:01:A7:3E:F4:D5:E0:0E:D6:EB:98:93:93:73:94
Certificate issuer: /CN=5393ab93e85701a73ef4d5e00ed6eb9893937394
Certificate serial: 0197635F05FB79B840A1E4B0B1CCB06267F5
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/U5Ork-hXAac-9NXgDtbrmJOTc5Q.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/fd/ad7662-73ff-4594-8e30-59a7efd384c0/1/U5Ork-hXAac-9NXgDtbrmJOTc5Q.mft
Manifest number: 0C47
Signing time: Thu 12 Jun 2025 09:01:01 +0000
Manifest this update: Thu 12 Jun 2025 09:01:01 +0000
Manifest next update: Fri 13 Jun 2025 09:01:01 +0000
Files and hashes: 1: 4oSUfALBScT_4AFnv82zOuuKCBw.roa (hash: YBkdETXrElzFmrSv2N2iP4r9l5B9rfuknXPTKkXXos8=)
2: 76lm6SfviDaVdkh8SLpKd3TaoCs.roa (hash: 2KwRRovX8zll1PyC0vVyuM6kwgThHfOq4xzdXwkPgpw=)
3: U5Ork-hXAac-9NXgDtbrmJOTc5Q.crl (hash: imcHjwVh6GqtU1wbKOS96UfE5y0O26qQ5rxB3jwd/mI=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/fd/ad7662-73ff-4594-8e30-59a7efd384c0/1/U5Ork-hXAac-9NXgDtbrmJOTc5Q.crl
rsync://rpki.ripe.net/repository/DEFAULT/fd/ad7662-73ff-4594-8e30-59a7efd384c0/1/U5Ork-hXAac-9NXgDtbrmJOTc5Q.mft
rsync://rpki.ripe.net/repository/DEFAULT/U5Ork-hXAac-9NXgDtbrmJOTc5Q.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 13 Jun 2025 09:01:01 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:63:5f:05:fb:79:b8:40:a1:e4:b0:b1:cc:b0:62:67:f5
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=5393ab93e85701a73ef4d5e00ed6eb9893937394
Validity
Not Before: Jun 12 09:01:01 2025 GMT
Not After : Jun 13 09:01:01 2025 GMT
Subject: CN=9f71e0deba11395bd21a9d514a3ed24a6443eab7
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c2:bb:74:6c:4d:89:30:e9:f0:17:57:6f:bb:88:
93:12:2a:e8:08:7c:b6:3c:9c:d8:a0:b5:0c:29:d9:
57:76:fa:a3:7e:b0:56:a7:0d:58:37:7e:38:c7:4c:
ab:ed:66:c9:2d:9b:bc:82:4a:53:17:58:ae:fb:20:
7d:59:50:9c:ce:4b:c3:4f:1b:0e:1d:9d:c5:51:37:
ae:75:b4:56:ba:c5:18:87:39:59:8d:fb:0e:04:d4:
5c:10:7d:87:50:5e:d6:a6:81:bb:79:75:e4:a7:db:
12:56:2d:10:5c:9d:f5:35:99:80:91:59:67:23:0f:
11:6b:9d:24:c5:34:b7:2b:97:31:25:af:84:53:93:
79:d0:88:97:c6:3f:c7:f4:cd:8e:38:db:14:6c:df:
29:52:a2:b5:83:3f:22:93:b9:16:b9:e1:8d:5d:2c:
59:fb:25:49:6d:e2:3a:b0:71:84:cd:ab:09:53:69:
3a:73:54:3d:6f:1c:89:af:9a:13:0f:d3:8b:97:73:
de:8b:ca:8c:d3:46:e9:5e:2c:0c:34:ec:1e:4a:4b:
a9:4e:9c:92:ab:3f:b7:72:dc:77:e2:ee:5b:5b:e2:
49:aa:f3:31:d2:96:1a:88:7c:c0:71:5c:01:59:dc:
80:31:94:1f:0f:af:88:34:00:9f:7a:92:66:04:45:
b2:b7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
9F:71:E0:DE:BA:11:39:5B:D2:1A:9D:51:4A:3E:D2:4A:64:43:EA:B7
X509v3 Authority Key Identifier:
keyid:53:93:AB:93:E8:57:01:A7:3E:F4:D5:E0:0E:D6:EB:98:93:93:73:94
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/U5Ork-hXAac-9NXgDtbrmJOTc5Q.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/fd/ad7662-73ff-4594-8e30-59a7efd384c0/1/U5Ork-hXAac-9NXgDtbrmJOTc5Q.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/fd/ad7662-73ff-4594-8e30-59a7efd384c0/1/U5Ork-hXAac-9NXgDtbrmJOTc5Q.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
66:34:4f:3f:31:41:8b:49:55:23:8e:40:52:a8:14:1a:7c:0b:
34:ee:d8:1d:cc:24:6a:75:9c:77:0b:c6:95:89:4f:06:5f:86:
25:6b:a9:c8:ae:40:1b:c6:17:d7:bd:0f:9b:ff:a1:47:c3:41:
87:8d:40:b4:18:18:fe:ee:24:f7:c3:58:90:ac:f4:1b:9c:c3:
e4:64:ff:a6:a3:88:0a:32:75:ec:d7:c6:ad:dc:9c:a2:cf:12:
47:4b:a9:9b:cb:ef:6a:02:2c:51:f6:ea:46:8d:ad:80:22:10:
71:52:a8:23:d7:fa:67:7e:ab:bd:04:39:ba:24:4e:b3:2a:26:
91:1d:a5:d1:c5:11:4a:1d:e1:ad:9c:b9:50:a7:a5:96:01:e9:
ee:f8:b2:d1:f2:af:cf:bf:7a:a8:cf:03:3f:d2:fd:63:ed:0c:
32:b1:cf:cd:c2:4c:5f:b1:da:b8:86:9a:bf:a8:f7:01:1e:16:
8f:47:77:32:f5:63:3a:53:93:1b:0a:df:15:6c:fd:e3:7f:c5:
fd:d7:95:6a:e3:71:b5:f7:b2:27:3e:2f:f0:43:f4:37:02:62:
1e:b0:df:50:67:c9:0a:3d:42:98:aa:d1:ef:aa:4d:c1:91:42:
02:a5:f5:79:e5:2e:67:26:43:4b:a4:57:b2:dd:96:33:80:73:
32:bf:ab:a9
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 12 17:41:57 2025 by rpki-client