Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/06/d77e60-8916-4f96-8ed0-e21c436b62ef/1/U8kSoEEbsBdFBwktDKNaka15kFw.mft
File: U8kSoEEbsBdFBwktDKNaka15kFw.mft (raw, json)
Hash identifier: Nrk685tPNxbmKKkAoECRXpHjMktwoUJcXKJ3DM+dnII=
Subject key identifier: 39:5B:C1:B9:AB:2E:71:70:A7:76:06:32:6A:87:2C:53:FA:7F:DE:4B
Authority key identifier: 53:C9:12:A0:41:1B:B0:17:45:07:09:2D:0C:A3:5A:91:AD:79:90:5C
Certificate issuer: /CN=53c912a0411bb0174507092d0ca35a91ad79905c
Certificate serial: 0197B7B2E0FB4E246177D24AEF1E1FA4ACCF
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/U8kSoEEbsBdFBwktDKNaka15kFw.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/06/d77e60-8916-4f96-8ed0-e21c436b62ef/1/U8kSoEEbsBdFBwktDKNaka15kFw.mft
Manifest number: 15BC
Signing time: Sat 28 Jun 2025 18:00:42 +0000
Manifest this update: Sat 28 Jun 2025 18:00:42 +0000
Manifest next update: Sun 29 Jun 2025 18:00:42 +0000
Files and hashes: 1: 4bEGcfHd_w1hv-Zgrf8mtzNQOF8.roa (hash: Yz5lhUK8jG4fxty/HMD7XY7daqUIEiCINpgWbEB+eSk=)
2: U8kSoEEbsBdFBwktDKNaka15kFw.crl (hash: 6uH7KRCuMpqVVxXDT52CQP58CqkIX03eP6cZI2e1v5U=)
3: V2UHD8Ezb4do1e1amF_9bhIjwm0.roa (hash: y2BL9g++y9jPkFQqtQIhZUhynDTSuho7DqIRo/6vN6o=)
4: Xx5AoKMFPro34EMu91UFlynTj2s.roa (hash: NlxbkxLq2MDyD2nlPITsFETHKzu5cELRgwcKIcBnH7U=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/06/d77e60-8916-4f96-8ed0-e21c436b62ef/1/U8kSoEEbsBdFBwktDKNaka15kFw.crl
rsync://rpki.ripe.net/repository/DEFAULT/06/d77e60-8916-4f96-8ed0-e21c436b62ef/1/U8kSoEEbsBdFBwktDKNaka15kFw.mft
rsync://rpki.ripe.net/repository/DEFAULT/U8kSoEEbsBdFBwktDKNaka15kFw.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 29 Jun 2025 15:00:42 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:b7:b2:e0:fb:4e:24:61:77:d2:4a:ef:1e:1f:a4:ac:cf
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=53c912a0411bb0174507092d0ca35a91ad79905c
Validity
Not Before: Jun 28 18:00:42 2025 GMT
Not After : Jun 29 18:00:42 2025 GMT
Subject: CN=395bc1b9ab2e7170a77606326a872c53fa7fde4b
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ac:4e:78:ab:c8:3a:99:eb:eb:d1:41:aa:20:63:
57:30:53:47:c6:65:22:27:39:0f:bb:0e:2b:96:ec:
ba:d0:c5:7e:9c:e1:b6:92:18:cd:32:ef:9a:13:0c:
83:dc:a6:db:21:96:bc:51:6b:06:39:56:e2:99:66:
05:c7:1b:dd:0a:c0:ea:e6:e3:e4:67:06:05:11:ac:
f8:b6:51:42:b6:2e:5e:c0:83:12:17:a1:09:a0:03:
ed:9e:5b:e2:38:64:e1:50:13:b4:b9:8c:b6:a0:3a:
91:29:54:bc:53:21:d4:2b:8e:b2:33:ad:7f:d6:3e:
42:ee:2d:22:7e:57:54:7e:5d:89:33:bf:5e:fb:a1:
fa:11:66:1f:73:60:29:04:1f:fc:f9:92:81:a2:fe:
22:f9:8a:3a:87:29:c6:55:63:71:c6:a7:19:3d:5f:
38:21:40:7e:e0:63:9e:77:83:8a:5e:7d:b2:05:70:
26:cb:18:a1:a3:e4:88:e6:71:38:b8:bb:10:6b:c4:
fd:19:4a:b7:5f:17:63:82:33:d4:a3:7e:62:50:aa:
ed:bc:e4:3d:54:b5:77:06:a3:10:26:3f:c6:75:b1:
96:34:56:93:45:6a:ac:29:78:86:ac:e2:61:35:d2:
50:fa:3a:4f:9e:0c:31:72:15:05:06:14:a2:74:10:
95:a3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
39:5B:C1:B9:AB:2E:71:70:A7:76:06:32:6A:87:2C:53:FA:7F:DE:4B
X509v3 Authority Key Identifier:
keyid:53:C9:12:A0:41:1B:B0:17:45:07:09:2D:0C:A3:5A:91:AD:79:90:5C
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/U8kSoEEbsBdFBwktDKNaka15kFw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/06/d77e60-8916-4f96-8ed0-e21c436b62ef/1/U8kSoEEbsBdFBwktDKNaka15kFw.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/06/d77e60-8916-4f96-8ed0-e21c436b62ef/1/U8kSoEEbsBdFBwktDKNaka15kFw.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
58:4a:b7:be:90:97:ab:01:5b:e1:fc:5b:bd:85:b5:f9:f3:6d:
74:be:af:2f:d5:7c:ee:c2:90:59:f4:03:e0:36:9a:01:82:e0:
c3:82:3a:08:13:e2:79:55:b4:cc:40:cc:81:3c:49:18:65:90:
61:77:81:06:b1:56:46:a1:a7:d2:83:6f:94:4a:e5:7a:0c:52:
88:74:d0:34:c9:c9:79:06:8e:4b:89:3d:af:10:34:05:e8:c4:
1d:40:16:15:1e:3a:7e:72:02:ad:cd:0a:be:60:b4:20:49:76:
2c:09:37:88:a9:c5:cb:ce:98:81:d5:72:ca:63:45:1d:ff:45:
b5:33:a0:bb:18:c4:8d:93:cf:6c:53:94:df:bc:64:46:45:cd:
75:9c:63:d5:57:f1:75:8d:b2:40:59:c2:37:ec:72:e9:e1:8d:
5b:ba:46:c2:6a:44:ac:83:4b:00:87:da:61:7f:3b:46:2f:1f:
d1:93:81:86:4f:a1:a5:9f:37:a1:a5:1b:2f:19:e8:cd:90:0b:
9b:b2:e2:68:0d:d1:f0:3c:95:1d:78:25:54:b3:06:4b:73:54:
9f:e8:a4:b4:38:d3:c1:bd:0f:00:77:a8:5f:9a:a5:01:48:7d:
d2:7c:3a:d8:36:00:e2:d9:aa:30:dd:05:84:a1:18:15:da:e7:
8e:b1:51:6f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 28 22:57:05 2025 by rpki-client