Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/fd/ad7662-73ff-4594-8e30-59a7efd384c0/1/U5Ork-hXAac-9NXgDtbrmJOTc5Q.mft
File: U5Ork-hXAac-9NXgDtbrmJOTc5Q.mft (raw, json)
Hash identifier: Bidms3UENHCG5JY9nh5Qq2/B3RjEO1yIvmSE0n3yWUw=
Subject key identifier: F1:5F:E1:04:8B:A1:59:52:60:3C:DC:D6:41:36:8A:A0:68:F4:2C:FF
Authority key identifier: 53:93:AB:93:E8:57:01:A7:3E:F4:D5:E0:0E:D6:EB:98:93:93:73:94
Certificate issuer: /CN=5393ab93e85701a73ef4d5e00ed6eb9893937394
Certificate serial: 019753EB82C50D67F1FFCE39A0028C633A06
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/U5Ork-hXAac-9NXgDtbrmJOTc5Q.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/fd/ad7662-73ff-4594-8e30-59a7efd384c0/1/U5Ork-hXAac-9NXgDtbrmJOTc5Q.mft
Manifest number: 0C3F
Signing time: Mon 09 Jun 2025 09:00:32 +0000
Manifest this update: Mon 09 Jun 2025 09:00:32 +0000
Manifest next update: Tue 10 Jun 2025 09:00:32 +0000
Files and hashes: 1: 4oSUfALBScT_4AFnv82zOuuKCBw.roa (hash: YBkdETXrElzFmrSv2N2iP4r9l5B9rfuknXPTKkXXos8=)
2: 76lm6SfviDaVdkh8SLpKd3TaoCs.roa (hash: 2KwRRovX8zll1PyC0vVyuM6kwgThHfOq4xzdXwkPgpw=)
3: U5Ork-hXAac-9NXgDtbrmJOTc5Q.crl (hash: ePeBd+cjLmDZp3hU0Cch3RenVVq7qVUKBr8QBWV5P1o=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/fd/ad7662-73ff-4594-8e30-59a7efd384c0/1/U5Ork-hXAac-9NXgDtbrmJOTc5Q.crl
rsync://rpki.ripe.net/repository/DEFAULT/fd/ad7662-73ff-4594-8e30-59a7efd384c0/1/U5Ork-hXAac-9NXgDtbrmJOTc5Q.mft
rsync://rpki.ripe.net/repository/DEFAULT/U5Ork-hXAac-9NXgDtbrmJOTc5Q.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 10 Jun 2025 02:00:17 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:53:eb:82:c5:0d:67:f1:ff:ce:39:a0:02:8c:63:3a:06
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=5393ab93e85701a73ef4d5e00ed6eb9893937394
Validity
Not Before: Jun 9 09:00:32 2025 GMT
Not After : Jun 10 09:00:32 2025 GMT
Subject: CN=f15fe1048ba15952603cdcd641368aa068f42cff
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a3:3a:73:58:1d:1a:81:84:22:10:01:97:30:52:
cd:8c:bc:f4:e3:d4:10:ed:94:7c:50:b7:7f:c5:7e:
73:d3:e5:4c:80:42:58:aa:2c:ca:99:a4:a8:b7:88:
fa:bc:b0:e1:f2:d8:97:ef:01:14:38:f7:25:47:a9:
29:e6:41:f6:fc:80:3b:f9:4d:9f:26:c5:25:a7:d3:
fe:77:ea:c0:15:23:8c:70:bd:47:14:5d:8d:7d:05:
3e:33:4c:44:f5:69:bf:a4:06:ce:b5:da:34:70:0d:
3c:2e:79:51:64:5e:13:e2:70:1f:bf:2d:cf:c5:6d:
12:70:05:1b:9c:6b:42:f5:a7:02:72:42:33:93:40:
5e:59:d2:3f:72:04:11:00:10:07:da:da:83:67:f0:
5b:b2:ad:0c:c5:3a:5c:50:a8:a5:36:42:27:50:05:
b2:0e:38:24:8e:0c:17:6b:52:6c:5f:4e:f4:7e:ec:
6b:f2:45:49:61:11:89:3c:25:49:1d:cc:a4:6a:f0:
75:d2:d1:29:28:58:61:d7:7b:4b:9c:dc:f6:62:8a:
9e:e4:c8:1f:99:ef:7a:7b:af:63:78:de:6a:ae:75:
40:29:6d:f7:45:ec:c5:30:25:1c:17:55:e2:96:12:
5b:75:e6:38:73:98:d6:05:e5:e9:35:0b:d0:26:f4:
cc:d9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F1:5F:E1:04:8B:A1:59:52:60:3C:DC:D6:41:36:8A:A0:68:F4:2C:FF
X509v3 Authority Key Identifier:
keyid:53:93:AB:93:E8:57:01:A7:3E:F4:D5:E0:0E:D6:EB:98:93:93:73:94
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/U5Ork-hXAac-9NXgDtbrmJOTc5Q.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/fd/ad7662-73ff-4594-8e30-59a7efd384c0/1/U5Ork-hXAac-9NXgDtbrmJOTc5Q.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/fd/ad7662-73ff-4594-8e30-59a7efd384c0/1/U5Ork-hXAac-9NXgDtbrmJOTc5Q.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
55:fa:1d:0e:0b:e7:ae:35:6e:50:de:4b:57:34:16:27:fd:d9:
b0:3c:d8:c3:98:86:c9:16:d0:3f:ad:9f:d2:12:91:ef:e3:a2:
bb:f7:b2:45:ed:08:fa:5e:77:f8:64:5f:9c:f8:ab:a0:ad:e8:
a3:da:07:e6:72:f9:58:2f:01:7f:31:95:ad:79:99:65:ad:73:
5d:c3:a6:72:33:ab:dc:f4:8b:63:dc:6e:f2:e3:95:7f:76:c1:
68:41:3f:f2:9c:55:16:10:f5:24:0e:9c:90:9e:88:c5:b2:66:
2f:50:80:f1:27:27:37:7a:a8:35:ef:15:ca:f5:95:9e:86:72:
13:c0:34:35:71:58:10:37:a9:3c:98:48:21:18:6c:09:4e:36:
02:87:b5:2b:47:6d:98:74:bb:58:b3:79:e2:01:9f:ed:2c:49:
5a:6f:01:84:a0:f7:61:98:28:14:46:84:ff:03:fc:53:1d:e8:
f5:95:f0:3f:1c:99:76:b0:ff:dd:0c:e9:f1:ac:f5:18:c2:ff:
8f:60:ec:47:79:3a:03:89:01:da:45:37:df:fe:e9:4e:23:b1:
ee:80:0d:93:c4:1c:28:63:8d:49:1c:51:11:aa:2e:75:e0:0a:
0e:66:7c:8b:d3:af:43:77:c3:08:8f:35:95:94:20:fa:58:76:
0d:d9:a8:e0
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Jun 9 12:46:35 2025 by rpki-client