Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/49/c6d092-cc60-4a51-b010-0a6e6dfbd2e3/1/RUv1gRnP6Z8XSbzZvRJHArqctxM.mft
File: RUv1gRnP6Z8XSbzZvRJHArqctxM.mft (raw, json)
Hash identifier: tgeiM1O+wBeGRTpEiaIy71K8ocW0XYwpGKWvznHA0oc=
Subject key identifier: 53:C1:91:AB:09:A0:64:BE:2C:17:BB:91:DF:16:B4:09:90:D3:5D:03
Authority key identifier: 45:4B:F5:81:19:CF:E9:9F:17:49:BC:D9:BD:12:47:02:BA:9C:B7:13
Certificate issuer: /CN=454bf58119cfe99f1749bcd9bd124702ba9cb713
Certificate serial: 0197B7B3233F971D0124095E8F85C6CF355B
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/RUv1gRnP6Z8XSbzZvRJHArqctxM.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/49/c6d092-cc60-4a51-b010-0a6e6dfbd2e3/1/RUv1gRnP6Z8XSbzZvRJHArqctxM.mft
Manifest number: 103D
Signing time: Sat 28 Jun 2025 18:00:59 +0000
Manifest this update: Sat 28 Jun 2025 18:00:59 +0000
Manifest next update: Sun 29 Jun 2025 18:00:59 +0000
Files and hashes: 1: 0MiQGDuP-2KHqgPkUVqX2ggP6Xw.roa (hash: NonlM+H8k9TxA6ceFqWkm9nyMbEovf9PE4ZCtGqStgk=)
2: L11MObU2nfX5tH-1x602KEbM5GM.roa (hash: HEVauMqoyVrcLnG8IoffxDGm/vSrfN8OpGRNiQEHWho=)
3: RUv1gRnP6Z8XSbzZvRJHArqctxM.crl (hash: PwvGKvJ+gUdhJqN8Gua7OUtmCWiHa7pqnK1n2L3rCEc=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/49/c6d092-cc60-4a51-b010-0a6e6dfbd2e3/1/RUv1gRnP6Z8XSbzZvRJHArqctxM.crl
rsync://rpki.ripe.net/repository/DEFAULT/49/c6d092-cc60-4a51-b010-0a6e6dfbd2e3/1/RUv1gRnP6Z8XSbzZvRJHArqctxM.mft
rsync://rpki.ripe.net/repository/DEFAULT/RUv1gRnP6Z8XSbzZvRJHArqctxM.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 29 Jun 2025 15:00:42 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:b7:b3:23:3f:97:1d:01:24:09:5e:8f:85:c6:cf:35:5b
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=454bf58119cfe99f1749bcd9bd124702ba9cb713
Validity
Not Before: Jun 28 18:00:59 2025 GMT
Not After : Jun 29 18:00:59 2025 GMT
Subject: CN=53c191ab09a064be2c17bb91df16b40990d35d03
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ac:03:68:e0:2c:a7:c7:ec:e6:d7:55:2b:bc:9e:
dc:09:76:75:77:b9:5f:94:80:4d:02:21:10:8d:5e:
bd:91:dc:ad:20:35:df:3a:47:a7:c2:48:ea:51:f1:
e0:5d:b8:a5:5e:66:3e:4c:b7:a9:2e:d9:70:a5:2b:
03:f8:e5:3d:4d:b2:12:1e:ad:2b:cb:ef:55:54:e2:
09:ad:32:0e:d9:04:5d:09:e1:c9:48:df:80:17:ff:
f2:a3:5e:7d:18:ad:d3:b7:83:65:74:ca:a1:a1:30:
bd:df:a2:13:a1:d4:d3:7e:6e:5f:47:3c:fe:a4:56:
85:81:ff:7f:b6:d3:fd:c3:34:63:18:d0:15:5f:7a:
67:b9:9a:65:d8:be:e6:16:a1:16:ec:eb:3c:92:3c:
c6:63:cb:e0:12:b1:23:c1:68:1b:56:52:85:14:a5:
ed:08:cc:f0:db:5c:86:c4:a4:f9:98:90:c4:ad:9c:
56:43:6e:00:98:67:75:5d:c6:97:81:cd:f1:62:80:
27:9f:d8:7a:7e:fd:e8:a9:4d:69:7d:4f:5d:b9:42:
1a:58:aa:3f:cb:84:68:96:b5:89:fb:2b:36:3a:b8:
9d:a6:2b:5d:28:71:4a:08:52:42:22:cc:0e:a8:99:
f0:aa:6f:8d:8f:e5:5b:d1:61:33:63:fb:01:3e:2b:
82:cb
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
53:C1:91:AB:09:A0:64:BE:2C:17:BB:91:DF:16:B4:09:90:D3:5D:03
X509v3 Authority Key Identifier:
keyid:45:4B:F5:81:19:CF:E9:9F:17:49:BC:D9:BD:12:47:02:BA:9C:B7:13
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/RUv1gRnP6Z8XSbzZvRJHArqctxM.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/49/c6d092-cc60-4a51-b010-0a6e6dfbd2e3/1/RUv1gRnP6Z8XSbzZvRJHArqctxM.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/49/c6d092-cc60-4a51-b010-0a6e6dfbd2e3/1/RUv1gRnP6Z8XSbzZvRJHArqctxM.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
2c:d8:cf:d5:18:19:fd:20:d3:89:85:05:ed:ea:dd:fd:50:d2:
f0:23:95:8b:6e:b2:be:e2:b0:b1:00:e4:d6:49:4b:2e:05:7f:
2d:22:e1:27:11:0f:a7:4e:9d:c5:f4:35:8f:7a:3a:90:c2:77:
ee:c0:95:e5:96:33:60:98:a9:8c:d5:8a:26:e0:90:27:01:13:
3d:91:43:3b:db:55:4f:4a:13:31:f4:cb:d4:28:91:91:e7:0d:
d6:53:6b:20:dd:da:ca:67:92:d0:87:8d:4c:07:12:95:c6:80:
6d:fe:b4:cc:0d:14:f9:de:73:1c:15:b6:bc:d3:ba:2a:cd:97:
2a:54:b3:7d:e3:bb:be:2e:66:6a:45:4e:ad:fe:47:29:91:7a:
6e:f1:2e:d9:cc:55:c8:82:f4:09:45:03:71:d5:55:82:b5:76:
ed:5c:18:16:93:a2:d3:7c:b3:15:f9:23:8b:e2:6e:de:00:68:
c0:a7:27:01:b3:69:27:c5:17:0c:b5:68:b1:97:d5:c9:db:f2:
a9:da:ff:1a:dc:cb:97:75:5b:34:8c:09:6c:31:d1:ea:87:d3:
a2:1c:d5:c4:be:9f:05:c4:74:1c:48:94:17:cf:67:10:4f:38:
85:1d:25:ad:69:6c:ce:25:61:21:02:bd:a5:69:0f:4a:93:0c:
0c:99:10:07
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 28 23:11:06 2025 by rpki-client