Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/3a/9f00a9-b60f-4e32-9037-04dfc3663e35/1/U1dhkT9XXEEcmSMi67Bs0vN_AqI.mft
File: U1dhkT9XXEEcmSMi67Bs0vN_AqI.mft (raw, json)
Hash identifier: xzS66CXCBBwlCW8yTLYdamBzeA4pHJCoTM36hwCpVh8=
Subject key identifier: 18:8E:99:27:86:38:DC:0D:8A:90:40:E8:DB:B8:9C:A6:D2:CC:D9:3D
Authority key identifier: 53:57:61:91:3F:57:5C:41:1C:99:23:22:EB:B0:6C:D2:F3:7F:02:A2
Certificate issuer: /CN=535761913f575c411c992322ebb06cd2f37f02a2
Certificate serial: 0197B77CA946D43505C0B7E0D4A7A1B3F26E
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/U1dhkT9XXEEcmSMi67Bs0vN_AqI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/3a/9f00a9-b60f-4e32-9037-04dfc3663e35/1/U1dhkT9XXEEcmSMi67Bs0vN_AqI.mft
Manifest number: 15B7
Signing time: Sat 28 Jun 2025 17:01:29 +0000
Manifest this update: Sat 28 Jun 2025 17:01:29 +0000
Manifest next update: Sun 29 Jun 2025 17:01:29 +0000
Files and hashes: 1: 9jLVpGilYmQEGxg1WpK2yNt9KVk.roa (hash: z5eyd/uvSVUU4CsN83uQVJdluniXFQjAaunOHdc2Khs=)
2: U1dhkT9XXEEcmSMi67Bs0vN_AqI.crl (hash: m8ZfVU+GpZ0woh7r21Yn9uQuMW4o1YLyEldz9idMXGk=)
3: bjlUEqaZF5EwCSDk_Sxf_mEHztc.roa (hash: RU5KJnOEEBCQibHDxtY5+aLGfLDV7MxXDGkjvgxmqg8=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/3a/9f00a9-b60f-4e32-9037-04dfc3663e35/1/U1dhkT9XXEEcmSMi67Bs0vN_AqI.crl
rsync://rpki.ripe.net/repository/DEFAULT/3a/9f00a9-b60f-4e32-9037-04dfc3663e35/1/U1dhkT9XXEEcmSMi67Bs0vN_AqI.mft
rsync://rpki.ripe.net/repository/DEFAULT/U1dhkT9XXEEcmSMi67Bs0vN_AqI.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 29 Jun 2025 15:00:42 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:b7:7c:a9:46:d4:35:05:c0:b7:e0:d4:a7:a1:b3:f2:6e
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=535761913f575c411c992322ebb06cd2f37f02a2
Validity
Not Before: Jun 28 17:01:29 2025 GMT
Not After : Jun 29 17:01:29 2025 GMT
Subject: CN=188e99278638dc0d8a9040e8dbb89ca6d2ccd93d
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8f:3e:76:fb:c7:99:e1:44:5b:92:e5:cc:1f:f4:
3c:08:3d:a7:13:b1:34:68:cf:d0:e7:11:8f:e5:93:
b7:97:c9:df:d1:bc:e4:48:40:92:62:4c:1a:18:6f:
42:25:30:20:98:2c:fa:79:b4:ef:1f:2a:87:a6:af:
36:d5:ef:a8:ba:17:0d:11:87:1c:49:8a:ad:9e:e9:
09:a1:5e:c5:aa:78:c8:38:43:bb:2a:65:a1:b6:87:
34:aa:55:25:c4:9b:15:97:5a:67:a4:ec:20:69:a6:
be:29:d0:2e:84:d4:13:6c:02:1d:54:c6:1a:da:87:
76:9e:34:20:b0:86:aa:b0:45:52:83:f2:d5:ec:dc:
e1:46:8e:88:bc:f7:30:34:94:d9:56:82:67:98:a8:
89:74:3c:97:17:bd:b6:95:3e:1c:9e:5c:6b:47:36:
14:f7:23:c5:6c:b8:9e:7d:bf:68:5e:22:27:0f:75:
87:35:4d:53:36:ce:65:5d:0d:90:76:6c:5c:ba:a1:
37:02:0a:62:1f:43:ba:df:89:a2:1a:5c:1e:d3:9d:
60:26:a2:c0:5c:55:fe:79:fa:d8:d1:2a:6b:b9:1c:
59:e1:90:a7:e8:2b:02:1b:aa:dd:63:0e:ab:45:38:
82:59:cf:8b:d8:fa:4d:d6:7d:b4:d6:e4:cc:95:c9:
4e:87
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
18:8E:99:27:86:38:DC:0D:8A:90:40:E8:DB:B8:9C:A6:D2:CC:D9:3D
X509v3 Authority Key Identifier:
keyid:53:57:61:91:3F:57:5C:41:1C:99:23:22:EB:B0:6C:D2:F3:7F:02:A2
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/U1dhkT9XXEEcmSMi67Bs0vN_AqI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/3a/9f00a9-b60f-4e32-9037-04dfc3663e35/1/U1dhkT9XXEEcmSMi67Bs0vN_AqI.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/3a/9f00a9-b60f-4e32-9037-04dfc3663e35/1/U1dhkT9XXEEcmSMi67Bs0vN_AqI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
20:ba:f5:06:ec:8f:6f:fe:18:34:14:35:d5:fc:01:db:26:36:
bd:d6:ec:81:a1:7a:a2:20:ec:c3:fd:cf:93:fe:76:9c:b4:ef:
6b:0a:35:ef:82:57:f2:db:c7:12:e5:90:3d:86:41:30:54:e2:
6a:0d:86:ef:9f:15:39:c2:3f:0e:91:11:58:21:73:a5:7f:93:
d7:62:15:c9:26:54:9b:97:92:3b:d0:75:8f:86:90:cf:4f:cb:
79:93:a9:05:b1:90:b4:7d:86:03:07:64:87:95:3d:e5:ff:6e:
8f:9c:69:34:35:d2:86:8d:1b:de:57:3d:32:70:10:bd:0b:fc:
14:37:21:bb:9f:1c:bd:14:0b:a0:14:ee:b7:2e:75:a1:a6:6b:
dc:aa:5f:54:d8:1c:f8:9a:ae:06:c0:ee:b1:40:64:0c:15:29:
e4:da:53:e9:92:87:06:c9:41:40:b1:1b:49:da:78:c5:15:6f:
53:24:31:8e:52:8e:3f:22:1e:7e:b0:0e:a8:bb:6e:77:72:5b:
6d:77:84:59:81:ef:50:e0:9e:6a:a3:3a:49:5f:3c:99:b0:c6:
6b:21:d2:d0:35:69:46:a8:8c:a4:98:85:ac:23:3a:f8:85:20:
6d:f3:34:09:aa:44:f6:7d:1c:bc:3f:88:6d:0f:b4:ee:9c:f6:
04:4b:80:39
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 28 23:11:07 2025 by rpki-client