Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/50/6558ec-d568-4cb9-a03a-8366b164dd66/1/Ul7JPXynN0Sywfu23aZEk8KklcE.mft
File: Ul7JPXynN0Sywfu23aZEk8KklcE.mft (raw, json)
Hash identifier: ZpAPu8ITT5vlLi4f+STV2Q2CfyB9Ku/P6ssClLpjW10=
Subject key identifier: C0:05:C5:33:CA:7A:D2:31:D5:FB:22:85:2A:D0:A3:21:0F:D9:E6:5D
Authority key identifier: 52:5E:C9:3D:7C:A7:37:44:B2:C1:FB:B6:DD:A6:44:93:C2:A4:95:C1
Certificate issuer: /CN=525ec93d7ca73744b2c1fbb6dda64493c2a495c1
Certificate serial: 0197B77C964FC689D73C70F5A41D0672BF32
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Ul7JPXynN0Sywfu23aZEk8KklcE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/50/6558ec-d568-4cb9-a03a-8366b164dd66/1/Ul7JPXynN0Sywfu23aZEk8KklcE.mft
Manifest number: 0414
Signing time: Sat 28 Jun 2025 17:01:24 +0000
Manifest this update: Sat 28 Jun 2025 17:01:24 +0000
Manifest next update: Sun 29 Jun 2025 17:01:24 +0000
Files and hashes: 1: 22DCbI9HvmzBDVGkxBm2WtXk528.roa (hash: 9ILpOZ8JHc5ka7qIZ58Ggk4y/F3lo6ZaZYJCwIqc3NU=)
2: Ul7JPXynN0Sywfu23aZEk8KklcE.crl (hash: bYVMY1Mj4UyVRAArS34f2Vz7m87Zc+bUdLL8NpTWhTE=)
3: jeCifaYzZ5yF8G9Sciofq7w0n90.roa (hash: HV83fet9uguwCmg88F5Wp34425cNOk2TAaGpYDTRo7Q=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/50/6558ec-d568-4cb9-a03a-8366b164dd66/1/Ul7JPXynN0Sywfu23aZEk8KklcE.crl
rsync://rpki.ripe.net/repository/DEFAULT/50/6558ec-d568-4cb9-a03a-8366b164dd66/1/Ul7JPXynN0Sywfu23aZEk8KklcE.mft
rsync://rpki.ripe.net/repository/DEFAULT/Ul7JPXynN0Sywfu23aZEk8KklcE.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 29 Jun 2025 15:00:42 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:b7:7c:96:4f:c6:89:d7:3c:70:f5:a4:1d:06:72:bf:32
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=525ec93d7ca73744b2c1fbb6dda64493c2a495c1
Validity
Not Before: Jun 28 17:01:24 2025 GMT
Not After : Jun 29 17:01:24 2025 GMT
Subject: CN=c005c533ca7ad231d5fb22852ad0a3210fd9e65d
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9a:5f:01:f4:a7:e1:c8:56:75:f4:6f:e4:bd:50:
58:25:fa:12:f9:f1:46:e4:15:43:0d:c8:ad:18:98:
17:23:01:63:a8:aa:e8:f8:bd:27:9d:04:f8:6d:9c:
87:ea:8d:95:60:6f:f5:bc:6c:fe:c6:4c:c6:db:9f:
5d:ce:cf:7a:fc:27:de:6b:12:66:8d:73:fb:de:f7:
ee:8e:21:ee:d8:24:81:92:b8:ce:9c:3c:e3:fe:29:
f0:e9:b7:f1:a9:0d:8c:9e:8e:7b:7b:f5:d8:a4:b0:
53:28:d5:c3:6c:bf:b7:a5:72:7a:f5:f6:b8:44:f8:
57:cf:24:00:9c:b8:87:e9:dd:e3:de:67:0c:8c:7d:
96:03:1a:f5:1e:39:1a:ee:47:0f:45:b2:44:ee:24:
a0:13:b6:df:0c:ca:2e:fe:13:65:2a:4a:de:88:c4:
82:83:e5:2e:d1:d4:ad:c5:04:0d:45:81:7c:bb:0b:
7f:2d:bc:ec:7c:16:c8:dd:e8:e6:5e:98:37:97:b1:
32:69:88:e9:09:67:57:07:ee:4b:6b:0b:75:45:8e:
7c:6c:40:84:0d:a2:1f:37:61:64:8b:ea:eb:8c:82:
7e:5a:0a:7e:a4:5d:04:68:2a:d3:d5:01:81:c5:dc:
0d:0f:76:c8:dc:00:f4:01:58:f4:fa:7b:eb:b3:e9:
b0:31
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C0:05:C5:33:CA:7A:D2:31:D5:FB:22:85:2A:D0:A3:21:0F:D9:E6:5D
X509v3 Authority Key Identifier:
keyid:52:5E:C9:3D:7C:A7:37:44:B2:C1:FB:B6:DD:A6:44:93:C2:A4:95:C1
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Ul7JPXynN0Sywfu23aZEk8KklcE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/50/6558ec-d568-4cb9-a03a-8366b164dd66/1/Ul7JPXynN0Sywfu23aZEk8KklcE.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/50/6558ec-d568-4cb9-a03a-8366b164dd66/1/Ul7JPXynN0Sywfu23aZEk8KklcE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
37:9f:56:2f:06:9d:06:d1:ea:76:a3:60:91:e4:74:3f:d0:f5:
ce:4c:0a:9b:7c:67:09:d7:3f:ee:2f:1a:ae:89:82:8c:0f:27:
b2:cf:82:4a:ff:5b:c6:89:10:9e:02:65:ce:96:8a:d7:9b:6a:
97:dd:80:0c:8c:3a:fa:fe:ae:e3:5d:3e:a2:84:6b:bd:33:dd:
9c:f6:11:5f:72:2d:c0:f2:42:e8:29:4b:01:e4:69:b2:e1:87:
9b:24:ee:72:04:1c:79:af:81:35:ea:03:80:8f:23:b1:c1:62:
65:af:fa:9a:2c:e3:bd:93:b2:97:7b:8c:2a:55:65:c4:88:5d:
53:8e:56:52:99:b9:a2:31:8d:37:96:e8:78:76:41:d3:bd:94:
cc:db:2a:d1:98:8f:be:36:69:c0:98:79:6b:35:8a:f9:37:ee:
54:6b:79:71:38:d3:2d:6e:d9:57:ea:d2:be:02:58:c3:e8:66:
6b:62:68:4c:36:46:34:71:0b:19:32:96:54:ea:75:d7:ce:5b:
eb:fe:65:cc:e6:6f:67:a7:e2:14:73:22:ca:3b:6f:3d:5d:19:
e7:b6:f2:fa:dc:db:ca:fd:ff:06:42:80:0b:fa:86:77:d8:6d:
4d:3d:09:75:0a:13:30:d6:eb:f2:45:d2:a3:6c:1f:af:a9:ae:
d0:10:c7:77
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 28 23:33:54 2025 by rpki-client