Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/0b/fd5f04-1d26-4451-a6ae-9867642c2f10/1/UeFASVvQbC6O-st-0KMVFtsfQF8.mft
File: UeFASVvQbC6O-st-0KMVFtsfQF8.mft (raw, json)
Hash identifier: 5eP8Fo2tRS4e0NhM/D4Kb4Hd3RBiWYM/gkjgfUxf/qI=
Subject key identifier: 0F:6C:E2:4F:97:BD:FC:19:0B:DC:36:64:12:E3:AB:BA:01:46:16:62
Authority key identifier: 51:E1:40:49:5B:D0:6C:2E:8E:FA:CB:7E:D0:A3:15:16:DB:1F:40:5F
Certificate issuer: /CN=51e140495bd06c2e8efacb7ed0a31516db1f405f
Certificate serial: 0197B7EA45FAB8B750B8CE2FDF984CE11F67
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/UeFASVvQbC6O-st-0KMVFtsfQF8.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/0b/fd5f04-1d26-4451-a6ae-9867642c2f10/1/UeFASVvQbC6O-st-0KMVFtsfQF8.mft
Manifest number: 0D10
Signing time: Sat 28 Jun 2025 19:01:12 +0000
Manifest this update: Sat 28 Jun 2025 19:01:12 +0000
Manifest next update: Sun 29 Jun 2025 19:01:12 +0000
Files and hashes: 1: It1W1nFMSnvON6n0WueAxjrC3W0.roa (hash: FlHwhHOBprRKHgvgu+zMZLXgeJSLpK6evOb32wMUYTo=)
2: UeFASVvQbC6O-st-0KMVFtsfQF8.crl (hash: ygrCP7HwmlQtUl7+8SWPQU8THo8hp24Xa9JjpBO2DkQ=)
3: aLexfPDGULdeLEaZK1qcN8F_0gk.roa (hash: mf1iYDEjsne4mRwDfdumJxwd7j7HuNwZ6q+crjDLiV4=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/0b/fd5f04-1d26-4451-a6ae-9867642c2f10/1/UeFASVvQbC6O-st-0KMVFtsfQF8.crl
rsync://rpki.ripe.net/repository/DEFAULT/0b/fd5f04-1d26-4451-a6ae-9867642c2f10/1/UeFASVvQbC6O-st-0KMVFtsfQF8.mft
rsync://rpki.ripe.net/repository/DEFAULT/UeFASVvQbC6O-st-0KMVFtsfQF8.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 29 Jun 2025 15:00:42 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:b7:ea:45:fa:b8:b7:50:b8:ce:2f:df:98:4c:e1:1f:67
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=51e140495bd06c2e8efacb7ed0a31516db1f405f
Validity
Not Before: Jun 28 19:01:12 2025 GMT
Not After : Jun 29 19:01:12 2025 GMT
Subject: CN=0f6ce24f97bdfc190bdc366412e3abba01461662
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ad:f4:d9:21:9b:2f:bc:5a:64:f5:44:90:9a:7f:
db:1a:bc:03:e3:0c:4c:fc:42:05:55:d3:b8:04:4e:
64:50:bf:1b:73:fb:55:98:bb:af:5a:21:92:7e:20:
7a:3f:d8:96:3b:e1:ea:8a:67:c4:b5:67:8e:91:35:
5b:f7:24:6e:07:63:b8:bf:f5:e5:a8:28:e1:f5:d0:
b7:ec:75:b3:f3:66:34:c2:66:f1:52:ee:76:5a:c4:
8f:54:9b:42:5d:35:70:fb:32:6d:38:e4:ee:f3:a9:
9d:56:14:a1:6e:1a:b6:af:6a:90:50:1f:92:d2:a5:
e7:41:17:fa:c5:c3:4f:d2:eb:e5:ec:71:81:3d:dc:
d3:33:30:50:65:f3:97:1f:20:11:0c:57:30:af:35:
ca:44:42:eb:65:6d:3b:97:58:6c:6c:d6:0f:2e:d0:
c1:7c:a0:13:8c:9a:c8:9d:c4:53:47:bd:b0:05:5e:
91:f5:21:d5:1a:24:d8:ab:f4:78:e2:60:10:0f:ae:
53:53:c7:24:32:54:85:2d:3d:3f:84:bf:26:d8:c8:
d1:e6:26:2d:2b:63:cd:81:88:03:2a:00:3d:e4:49:
34:f4:cc:b6:1b:6f:ba:46:a6:66:89:82:4f:8e:d2:
a2:a0:13:5e:df:18:42:1d:f3:fd:31:07:f5:8f:f2:
23:8d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
0F:6C:E2:4F:97:BD:FC:19:0B:DC:36:64:12:E3:AB:BA:01:46:16:62
X509v3 Authority Key Identifier:
keyid:51:E1:40:49:5B:D0:6C:2E:8E:FA:CB:7E:D0:A3:15:16:DB:1F:40:5F
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/UeFASVvQbC6O-st-0KMVFtsfQF8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/0b/fd5f04-1d26-4451-a6ae-9867642c2f10/1/UeFASVvQbC6O-st-0KMVFtsfQF8.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/0b/fd5f04-1d26-4451-a6ae-9867642c2f10/1/UeFASVvQbC6O-st-0KMVFtsfQF8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
11:b9:7b:e4:6d:72:02:88:45:88:9d:2d:ae:4c:2c:f8:5d:86:
bd:a8:23:0b:4b:3a:db:7d:04:11:c8:f1:1c:9a:fa:ce:78:0b:
1e:ed:97:61:8e:bd:3c:9b:bf:ce:d1:19:fd:c0:0b:ba:b8:89:
87:bb:63:69:81:35:bf:67:94:f7:c9:1d:49:2f:73:08:d3:78:
5f:8b:5d:bb:27:46:7e:e4:70:30:ab:23:6e:8b:b2:63:5d:3a:
6f:8c:3e:63:9a:fb:9d:53:a0:58:ea:10:05:85:fd:a1:5e:90:
b2:d8:4a:2d:44:a3:31:f1:f1:ac:29:51:c3:17:83:eb:a0:16:
85:7e:9f:51:b0:bf:56:af:52:91:21:fe:30:78:28:aa:42:72:
77:ef:33:d3:59:c1:5a:b1:b8:5c:45:84:cd:20:f7:b3:db:ce:
03:3b:d1:b7:8b:a6:bb:01:49:b4:39:ea:e2:f7:9a:98:fc:d7:
79:08:41:5f:e0:a9:49:c9:86:4c:73:f9:89:74:a7:6c:a5:25:
7a:75:61:ee:d0:df:d8:d1:a7:ef:ef:a8:f3:76:ac:b4:57:b6:
51:51:82:f0:25:37:3a:4b:8e:53:ed:a6:1e:ae:0e:e5:b6:f3:
ba:34:80:dc:21:da:65:42:82:97:78:6d:cb:ab:60:65:e0:a2:
61:e5:73:35
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 28 22:42:35 2025 by rpki-client