Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/0e/3f6178-5fd3-403f-8fec-1a89ff11965e/1/Ua1nkbjb6cNSvWSpMiFytBxLIXE.mft
File: Ua1nkbjb6cNSvWSpMiFytBxLIXE.mft (raw, json)
Hash identifier: fCKz8ZWUHOo40ImX5PuoSPF1noMnPJ9BQoPn4pioXR4=
Subject key identifier: 8C:D5:3E:7E:6F:7F:6D:85:20:58:8D:07:E1:E3:F8:51:E0:46:A4:88
Authority key identifier: 51:AD:67:91:B8:DB:E9:C3:52:BD:64:A9:32:21:72:B4:1C:4B:21:71
Certificate issuer: /CN=51ad6791b8dbe9c352bd64a9322172b41c4b2171
Certificate serial: 0197B70EA31CEB72806CED83C2AC1D845E56
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Ua1nkbjb6cNSvWSpMiFytBxLIXE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/0e/3f6178-5fd3-403f-8fec-1a89ff11965e/1/Ua1nkbjb6cNSvWSpMiFytBxLIXE.mft
Manifest number: 0586
Signing time: Sat 28 Jun 2025 15:01:19 +0000
Manifest this update: Sat 28 Jun 2025 15:01:19 +0000
Manifest next update: Sun 29 Jun 2025 15:01:19 +0000
Files and hashes: 1: Hi9hJLSsqdfwwjDafJDvlExJJoI.roa (hash: PID2YEd+ZOdlQLJzFIlElIOxp8cs3tI73VYlO3AzPb4=)
2: Ua1nkbjb6cNSvWSpMiFytBxLIXE.crl (hash: ZeOX82ypRnOIchVUpUjK6t5CM4yFu0y+4u9XyLCzO50=)
3: Yy7EyL4jOYhS2ny07A-uohis4hw.roa (hash: 939gAFuZ8T1J06oXgjy3uy3jHGyJvoFV29uIXoQOhss=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/0e/3f6178-5fd3-403f-8fec-1a89ff11965e/1/Ua1nkbjb6cNSvWSpMiFytBxLIXE.crl
rsync://rpki.ripe.net/repository/DEFAULT/0e/3f6178-5fd3-403f-8fec-1a89ff11965e/1/Ua1nkbjb6cNSvWSpMiFytBxLIXE.mft
rsync://rpki.ripe.net/repository/DEFAULT/Ua1nkbjb6cNSvWSpMiFytBxLIXE.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 29 Jun 2025 10:00:42 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:b7:0e:a3:1c:eb:72:80:6c:ed:83:c2:ac:1d:84:5e:56
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=51ad6791b8dbe9c352bd64a9322172b41c4b2171
Validity
Not Before: Jun 28 15:01:19 2025 GMT
Not After : Jun 29 15:01:19 2025 GMT
Subject: CN=8cd53e7e6f7f6d8520588d07e1e3f851e046a488
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c0:62:f2:f1:e6:98:ca:8e:a1:5d:85:af:6e:c5:
6f:2d:41:1a:d2:3d:d7:8f:30:67:51:43:d2:6e:8c:
ee:a4:ba:c7:85:96:5b:f3:5a:1e:df:2f:1c:01:35:
75:27:75:1f:80:af:57:d2:e4:81:b3:1b:2f:32:92:
7b:c3:21:ab:7f:d5:c9:58:33:f0:89:2c:ec:7d:3f:
a2:96:41:63:2a:8c:1b:67:c0:c8:c3:a4:5b:e8:23:
cd:bd:c2:88:02:15:6f:6f:61:7e:77:a8:19:5a:d2:
b2:86:a5:e8:21:71:1c:1d:f3:4f:61:ff:89:02:c6:
d9:34:e7:3b:d9:56:04:ad:82:e5:37:50:f3:7f:df:
b6:6d:0d:bb:9c:4a:83:a7:2f:a3:c4:fd:35:11:cb:
5e:ae:d8:6a:8e:b6:52:0b:48:84:a1:51:88:be:1a:
e0:13:34:c9:c6:29:ea:38:67:14:eb:2c:bb:d5:dc:
53:0d:31:a5:9b:a7:6d:2a:d5:26:b7:81:6f:1f:a8:
36:65:43:13:ff:e1:73:61:0a:46:2e:35:b8:2f:a1:
eb:43:25:0f:f7:16:07:0f:0c:7c:5a:78:fe:d8:df:
48:8f:6a:97:aa:19:26:4c:41:ff:fc:7a:40:dd:d9:
6f:7d:58:2c:3b:86:ca:ee:3a:26:c1:8b:95:26:bf:
66:ff
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
8C:D5:3E:7E:6F:7F:6D:85:20:58:8D:07:E1:E3:F8:51:E0:46:A4:88
X509v3 Authority Key Identifier:
keyid:51:AD:67:91:B8:DB:E9:C3:52:BD:64:A9:32:21:72:B4:1C:4B:21:71
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Ua1nkbjb6cNSvWSpMiFytBxLIXE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/0e/3f6178-5fd3-403f-8fec-1a89ff11965e/1/Ua1nkbjb6cNSvWSpMiFytBxLIXE.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/0e/3f6178-5fd3-403f-8fec-1a89ff11965e/1/Ua1nkbjb6cNSvWSpMiFytBxLIXE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
4c:90:85:16:2a:ed:bc:46:3d:38:ee:e9:5c:6b:ca:35:bd:b5:
61:bd:61:28:c7:56:34:de:b2:40:af:de:93:5d:58:67:b1:f0:
df:55:ee:50:0b:47:43:12:06:1d:e2:d7:f0:0a:9c:53:00:f2:
7b:59:50:f0:26:b2:1c:e0:b2:6c:f2:34:b2:99:8f:a2:c7:89:
44:e0:31:ae:a6:d5:a4:64:77:02:49:3e:b4:df:3a:01:0c:20:
01:48:eb:c6:17:02:94:ff:39:57:90:bd:47:f8:54:e6:47:71:
86:57:d0:1a:24:6b:94:c5:9d:7f:4d:c4:cf:da:d1:50:91:0d:
fa:42:0c:4b:9d:d9:df:6f:10:c4:75:b6:74:d8:28:e9:e2:7b:
1e:2e:6c:df:71:8e:40:b1:21:5a:5e:df:e4:d6:35:02:f8:53:
6c:bd:e6:d5:e2:f3:0f:67:a8:89:4d:89:e1:05:2a:b9:94:62:
2d:a5:41:9a:c3:1b:a8:d3:39:1b:67:84:2b:89:92:20:c4:cf:
76:58:be:2f:bc:b1:85:ac:68:bc:4f:07:07:fe:cd:65:a3:7e:
2d:ad:89:81:4e:46:27:11:b9:da:d0:fe:a8:5e:17:b0:bf:d1:
8a:48:b8:d4:1e:a5:14:b6:8a:f4:2b:8d:57:4b:8c:0c:a3:9f:
3a:a3:40:68
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 28 19:28:58 2025 by rpki-client