Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/10/9cb0e9-537d-4f6e-b98e-2eb70a3602e9/1/U43RixaS2KPncS0-a5KLCaoK5mw.mft
File: U43RixaS2KPncS0-a5KLCaoK5mw.mft (raw, json)
Hash identifier: tJ7mVai6iqdd8djIgmlX4CRycg6RwNtCjT+BvdvOnww=
Subject key identifier: 58:73:71:A1:81:B7:38:D5:82:38:48:47:43:D4:2C:F4:43:66:90:AE
Authority key identifier: 53:8D:D1:8B:16:92:D8:A3:E7:71:2D:3E:6B:92:8B:09:AA:0A:E6:6C
Certificate issuer: /CN=538dd18b1692d8a3e7712d3e6b928b09aa0ae66c
Certificate serial: 0197B632BD1DDD39096685F97BEE59A9A4B7
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/U43RixaS2KPncS0-a5KLCaoK5mw.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/10/9cb0e9-537d-4f6e-b98e-2eb70a3602e9/1/U43RixaS2KPncS0-a5KLCaoK5mw.mft
Manifest number: 92
Signing time: Sat 28 Jun 2025 11:01:07 +0000
Manifest this update: Sat 28 Jun 2025 11:01:07 +0000
Manifest next update: Sun 29 Jun 2025 11:01:07 +0000
Files and hashes: 1: U43RixaS2KPncS0-a5KLCaoK5mw.crl (hash: bbqKABBgDUQm9vLP2fnKjRUz6Qts7yOh18Xr8f0DvuQ=)
2: fQOUDNIsfNHvQv_fBBxnEbJ5_KI.roa (hash: PT7DjWZ6C/5tRwxY9s1iog9t2/S8Z0W6+V/eiqJ9PmE=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/10/9cb0e9-537d-4f6e-b98e-2eb70a3602e9/1/U43RixaS2KPncS0-a5KLCaoK5mw.crl
rsync://rpki.ripe.net/repository/DEFAULT/10/9cb0e9-537d-4f6e-b98e-2eb70a3602e9/1/U43RixaS2KPncS0-a5KLCaoK5mw.mft
rsync://rpki.ripe.net/repository/DEFAULT/U43RixaS2KPncS0-a5KLCaoK5mw.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 29 Jun 2025 10:00:42 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:b6:32:bd:1d:dd:39:09:66:85:f9:7b:ee:59:a9:a4:b7
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=538dd18b1692d8a3e7712d3e6b928b09aa0ae66c
Validity
Not Before: Jun 28 11:01:07 2025 GMT
Not After : Jun 29 11:01:07 2025 GMT
Subject: CN=587371a181b738d58238484743d42cf4436690ae
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a7:63:86:0a:d3:5d:b7:46:54:64:43:71:8f:b4:
67:35:5b:40:85:12:55:76:8b:31:72:d0:7f:73:d2:
1b:af:86:be:6a:96:66:f8:d4:95:25:29:55:d8:0e:
10:f2:4d:fe:45:36:9d:84:41:b5:71:37:a6:54:43:
14:7d:7e:b5:38:55:e7:28:bf:f4:a6:b1:54:d7:39:
3e:ad:40:23:15:1f:44:63:f3:92:92:6b:a9:02:e6:
a9:ca:39:bf:14:dc:1d:f2:69:8f:09:0c:bc:88:c6:
96:6d:69:fe:22:20:02:e2:ac:1e:ae:9d:5c:12:bc:
9c:87:b5:3c:8c:69:12:9f:cb:1e:ec:7e:e1:27:77:
11:23:ec:dc:ba:b9:1e:62:68:35:8b:a1:bf:7a:fb:
06:8f:30:24:4f:cb:4f:f0:f4:92:2b:1e:ea:e0:e4:
87:06:d6:58:90:c4:45:dd:dc:35:ce:03:00:3e:40:
65:dc:ad:36:89:0b:9a:84:53:66:4f:69:0f:42:10:
de:4a:42:23:28:bc:d1:af:d2:bf:15:ee:6b:f3:fa:
59:44:5e:5e:92:6b:0a:4b:f4:c7:bc:f4:44:7d:88:
6c:69:4d:ad:2f:c9:d9:e8:54:c6:aa:34:3b:50:f4:
90:39:0c:a2:21:62:4b:1f:34:f9:a2:51:bd:2b:3f:
bb:cb
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
58:73:71:A1:81:B7:38:D5:82:38:48:47:43:D4:2C:F4:43:66:90:AE
X509v3 Authority Key Identifier:
keyid:53:8D:D1:8B:16:92:D8:A3:E7:71:2D:3E:6B:92:8B:09:AA:0A:E6:6C
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/U43RixaS2KPncS0-a5KLCaoK5mw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/10/9cb0e9-537d-4f6e-b98e-2eb70a3602e9/1/U43RixaS2KPncS0-a5KLCaoK5mw.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/10/9cb0e9-537d-4f6e-b98e-2eb70a3602e9/1/U43RixaS2KPncS0-a5KLCaoK5mw.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
b2:5d:02:17:c7:62:73:40:0f:46:c9:43:a8:ca:06:30:d6:78:
8b:bf:b6:13:78:a2:d7:d3:70:65:7e:50:59:dd:e9:48:a9:33:
a3:20:9a:ca:ef:54:e3:03:7b:8a:6a:79:ef:fb:3b:c3:92:c6:
28:13:fb:23:9a:aa:cd:08:36:e4:90:4a:4d:3b:ae:20:de:c9:
fb:a9:61:ff:de:39:f0:fd:53:4e:ae:d7:ab:08:33:b9:7e:a0:
a9:c9:ed:1d:81:4b:c9:bd:15:9f:94:c5:bf:6e:ed:38:f2:da:
aa:1f:1e:30:c7:d9:71:08:37:0f:ee:2c:a2:a5:72:9e:f8:7c:
55:fd:e8:40:19:07:42:18:f4:3f:a6:ed:c2:38:80:44:d3:d3:
3e:cc:2d:a0:c8:a7:c9:a5:f0:c6:a5:d3:6a:49:47:67:ff:1e:
d9:1f:bb:34:28:86:f3:4d:8e:ca:c4:90:d3:c8:8f:a3:1e:3d:
4a:c8:c8:27:bf:3f:00:2f:41:ea:83:80:2f:cb:f3:51:e0:ac:
ec:99:18:39:8e:fd:2b:dc:0d:bc:a2:a2:ab:4a:6a:7d:7e:d0:
25:cf:d1:0a:c8:88:59:75:0f:5f:8d:ac:7c:6b:0d:df:56:be:
0c:c7:73:f6:14:b9:a5:ae:b6:fb:c3:35:98:19:40:a1:78:e2:
d6:d5:e4:38
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 28 19:14:38 2025 by rpki-client