Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/2e/b5d3b8-bdbf-46fb-aa94-b14e599c0cc2/1/Ua7cV2vfVgC_5MR5A4X6ztxG8DQ.mft
File: Ua7cV2vfVgC_5MR5A4X6ztxG8DQ.mft (raw, json)
Hash identifier: meEwaz/KQbwBwRJuKYBSyo3G+ozcNblgWuXYkJtN9rs=
Subject key identifier: D4:33:16:60:8F:8B:C6:B4:60:8B:EB:AE:89:A2:48:F9:95:5F:68:51
Authority key identifier: 51:AE:DC:57:6B:DF:56:00:BF:E4:C4:79:03:85:FA:CE:DC:46:F0:34
Certificate issuer: /CN=51aedc576bdf5600bfe4c4790385facedc46f034
Certificate serial: 0197B745461802A8C270507FC847EDA401C4
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Ua7cV2vfVgC_5MR5A4X6ztxG8DQ.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/2e/b5d3b8-bdbf-46fb-aa94-b14e599c0cc2/1/Ua7cV2vfVgC_5MR5A4X6ztxG8DQ.mft
Manifest number: 14D7
Signing time: Sat 28 Jun 2025 16:00:59 +0000
Manifest this update: Sat 28 Jun 2025 16:00:59 +0000
Manifest next update: Sun 29 Jun 2025 16:00:59 +0000
Files and hashes: 1: CNVq6hwjcvgKEJLlVTlQtSTBrJw.roa (hash: XXymanpZ2oFTMQyHo/xvD9pTSAOM/yLCZqhwlA0NOiw=)
2: Ua7cV2vfVgC_5MR5A4X6ztxG8DQ.crl (hash: w/HEdfgqetQYYCpsx3ohImZ/SfSBCvh4a0FkIQyZ6sY=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/2e/b5d3b8-bdbf-46fb-aa94-b14e599c0cc2/1/Ua7cV2vfVgC_5MR5A4X6ztxG8DQ.crl
rsync://rpki.ripe.net/repository/DEFAULT/2e/b5d3b8-bdbf-46fb-aa94-b14e599c0cc2/1/Ua7cV2vfVgC_5MR5A4X6ztxG8DQ.mft
rsync://rpki.ripe.net/repository/DEFAULT/Ua7cV2vfVgC_5MR5A4X6ztxG8DQ.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 29 Jun 2025 15:00:42 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:b7:45:46:18:02:a8:c2:70:50:7f:c8:47:ed:a4:01:c4
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=51aedc576bdf5600bfe4c4790385facedc46f034
Validity
Not Before: Jun 28 16:00:59 2025 GMT
Not After : Jun 29 16:00:59 2025 GMT
Subject: CN=d43316608f8bc6b4608bebae89a248f9955f6851
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:f3:6e:af:ab:cb:ae:fc:90:5f:99:fb:1e:ce:af:
67:17:ca:d0:8c:1f:ee:7e:bb:a4:40:1a:8a:94:58:
25:2e:71:c9:81:ff:5f:30:17:70:a3:f8:84:a2:cf:
a7:44:8f:ca:b1:2f:00:8c:4a:8b:3e:40:75:18:8b:
1e:c8:ab:26:53:ea:d8:d2:a1:f0:35:fa:01:72:07:
90:4a:21:df:2a:b4:d6:ef:b8:42:de:c5:ba:1c:89:
ea:db:80:b2:ae:43:db:b8:63:32:52:3d:b1:72:a1:
d0:b1:76:25:19:5e:00:8b:04:fa:27:19:8d:9f:f1:
e9:b5:c9:28:03:be:1f:39:6c:ea:3b:6a:b6:a1:5c:
1a:2f:84:4e:68:b0:69:20:30:89:75:73:27:c5:a5:
20:10:34:5b:8b:ca:dc:3a:90:d2:6d:61:94:d9:b7:
15:d8:7e:54:55:99:8a:5a:be:76:de:c1:96:27:f5:
bd:a8:9d:3f:3a:8a:6a:88:0d:a5:5a:0b:24:77:08:
88:50:90:77:a5:31:a9:b5:94:06:1d:0e:55:ed:d0:
47:15:e9:6f:57:89:4d:13:d1:63:fd:89:1a:54:d9:
a3:ed:e9:7c:e1:a1:47:10:8f:f2:cb:14:a0:d9:11:
d7:00:23:b0:5a:7f:a0:5b:d2:e7:d8:e8:1a:f4:c2:
2f:3f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D4:33:16:60:8F:8B:C6:B4:60:8B:EB:AE:89:A2:48:F9:95:5F:68:51
X509v3 Authority Key Identifier:
keyid:51:AE:DC:57:6B:DF:56:00:BF:E4:C4:79:03:85:FA:CE:DC:46:F0:34
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Ua7cV2vfVgC_5MR5A4X6ztxG8DQ.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/2e/b5d3b8-bdbf-46fb-aa94-b14e599c0cc2/1/Ua7cV2vfVgC_5MR5A4X6ztxG8DQ.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/2e/b5d3b8-bdbf-46fb-aa94-b14e599c0cc2/1/Ua7cV2vfVgC_5MR5A4X6ztxG8DQ.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
38:57:ff:88:66:a9:c9:f2:ca:66:23:a1:09:87:20:60:ad:ed:
e7:9d:fe:c8:0a:50:3e:eb:a6:5c:55:25:e9:f3:80:07:1f:6b:
f5:d1:bf:a2:f9:c2:b7:c3:3b:6e:e7:5a:86:fb:ad:e2:8b:e9:
16:c7:7a:98:9e:3e:91:06:43:4e:6e:23:12:3d:6f:d4:1e:40:
58:35:fc:a9:00:e4:8a:65:32:8f:57:97:9c:05:7f:ad:13:94:
f2:c6:37:9c:89:84:c1:56:88:c0:2b:59:89:05:fc:d6:66:9c:
0e:27:4a:f4:72:c6:2e:0b:37:2e:df:d2:7f:17:95:8e:1c:23:
1b:71:e9:72:27:fb:60:b8:b1:67:f9:39:91:11:19:6f:22:25:
28:76:93:02:bb:e4:4d:6f:0b:71:86:de:ef:f2:c2:ff:75:be:
d7:0e:f7:3f:2b:e5:e6:db:80:51:16:b0:16:7b:35:4a:03:18:
8f:10:5b:6b:89:84:71:fa:da:f2:ad:4a:cd:5f:c4:11:dc:01:
e4:38:36:1f:e7:83:08:40:68:25:9a:0c:b7:8a:a4:2a:d9:29:
6e:63:10:d9:51:be:b2:ec:80:46:49:1a:af:97:92:7a:20:e4:
47:51:f4:81:c0:e1:1a:4b:39:67:4b:3c:7a:48:31:a1:3e:d4:
24:e0:f6:00
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 28 22:43:23 2025 by rpki-client