Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/54/acfcb6-d78a-448a-a761-dd3b4f8381c4/1/UJ33KNG0ZjQFSXLSlF_aWAc7V2I.mft
File: UJ33KNG0ZjQFSXLSlF_aWAc7V2I.mft (raw, json)
Hash identifier: CPmAXZrs2xKOcgbriEN3cNpkKBoUfTpgeUvCLCzJqj8=
Subject key identifier: C2:3E:71:1D:2C:AB:62:46:57:29:69:C0:36:41:B0:7E:91:1A:E9:49
Authority key identifier: 50:9D:F7:28:D1:B4:66:34:05:49:72:D2:94:5F:DA:58:07:3B:57:62
Certificate issuer: /CN=509df728d1b46634054972d2945fda58073b5762
Certificate serial: 0197B8C5D426D01E1F5578C14C09BDB48ACA
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/UJ33KNG0ZjQFSXLSlF_aWAc7V2I.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/54/acfcb6-d78a-448a-a761-dd3b4f8381c4/1/UJ33KNG0ZjQFSXLSlF_aWAc7V2I.mft
Manifest number: 15BA
Signing time: Sat 28 Jun 2025 23:01:01 +0000
Manifest this update: Sat 28 Jun 2025 23:01:01 +0000
Manifest next update: Sun 29 Jun 2025 23:01:01 +0000
Files and hashes: 1: ESRRBuPxkFpgbvZAxR8IDZJapd4.roa (hash: fCF3gX9WpLCGv/7JJRZ5dUsdJiPQCU2D4419eMUm0Lw=)
2: PbHlg7ScZeHhyNVnOAfVfDkj0UQ.roa (hash: cTb4Y7y4+1yzCxetjTY01rGPBaGcJj2ddHFrkZyJApU=)
3: UJ33KNG0ZjQFSXLSlF_aWAc7V2I.crl (hash: K68ZLNwEmjHNSv8GF016RCJfy4tlkoBHwVemE+fYylg=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/54/acfcb6-d78a-448a-a761-dd3b4f8381c4/1/UJ33KNG0ZjQFSXLSlF_aWAc7V2I.crl
rsync://rpki.ripe.net/repository/DEFAULT/54/acfcb6-d78a-448a-a761-dd3b4f8381c4/1/UJ33KNG0ZjQFSXLSlF_aWAc7V2I.mft
rsync://rpki.ripe.net/repository/DEFAULT/UJ33KNG0ZjQFSXLSlF_aWAc7V2I.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 29 Jun 2025 19:00:42 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:b8:c5:d4:26:d0:1e:1f:55:78:c1:4c:09:bd:b4:8a:ca
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=509df728d1b46634054972d2945fda58073b5762
Validity
Not Before: Jun 28 23:01:01 2025 GMT
Not After : Jun 29 23:01:01 2025 GMT
Subject: CN=c23e711d2cab6246572969c03641b07e911ae949
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ed:a2:0a:76:77:3c:3d:2e:29:4f:a5:fd:e5:40:
2b:a0:6a:6b:df:e8:77:ea:46:2b:3d:5a:ca:f1:c2:
8a:40:78:80:32:6d:5d:ee:f6:be:6c:3d:ef:3e:81:
d2:04:7b:6f:ff:b7:ca:b3:a1:8c:70:d7:38:f8:59:
f3:9c:c8:a9:e6:d3:5e:05:88:8a:aa:ad:2e:7e:af:
73:35:b2:39:a4:ac:38:64:3e:79:6c:ef:fc:c8:fe:
d7:1c:64:3c:51:78:a2:e8:de:34:2d:73:8b:da:99:
87:78:3c:67:56:61:d2:9b:88:06:b9:ae:0a:25:97:
17:a0:29:af:cc:a7:86:7e:ab:91:86:1d:85:4a:c2:
72:54:c0:55:58:e8:60:e7:8a:33:2c:89:61:d0:81:
44:bd:06:06:53:99:0d:12:f1:4d:32:65:b7:65:a9:
3a:8f:ec:32:1e:4a:b8:a7:f0:92:66:6d:a5:9f:81:
69:4a:76:fd:5e:f9:cc:c4:e3:34:d3:86:d1:dc:6a:
e0:8a:65:ee:58:6e:f8:f8:40:40:85:4d:f2:8b:b4:
a5:5c:2a:34:a5:97:a1:39:29:2f:13:6d:61:f8:82:
ec:86:0a:f9:7a:fd:f6:be:e5:1a:ef:ac:eb:e9:d3:
df:65:d4:aa:3c:ae:06:d1:bb:d2:72:af:81:6f:71:
6a:cf
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C2:3E:71:1D:2C:AB:62:46:57:29:69:C0:36:41:B0:7E:91:1A:E9:49
X509v3 Authority Key Identifier:
keyid:50:9D:F7:28:D1:B4:66:34:05:49:72:D2:94:5F:DA:58:07:3B:57:62
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/UJ33KNG0ZjQFSXLSlF_aWAc7V2I.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/54/acfcb6-d78a-448a-a761-dd3b4f8381c4/1/UJ33KNG0ZjQFSXLSlF_aWAc7V2I.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/54/acfcb6-d78a-448a-a761-dd3b4f8381c4/1/UJ33KNG0ZjQFSXLSlF_aWAc7V2I.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
61:f6:2d:ef:f9:f9:bb:07:2c:a2:86:3a:73:8b:56:c4:1e:e8:
11:74:1d:f6:0a:09:68:33:49:f4:20:05:a5:d1:23:95:0a:14:
79:50:bd:68:7c:ce:f1:1e:81:cf:5b:33:62:ac:77:6d:f8:15:
30:82:19:89:4d:61:97:8f:a6:80:58:b5:cc:fd:bc:52:a8:36:
e1:d3:8f:36:9e:e9:bb:70:da:d2:8a:55:ad:1b:5b:72:58:bb:
a4:6c:f8:88:5f:e1:0a:d4:16:35:f9:77:f5:d2:1a:fe:c6:f6:
98:96:66:ed:fb:bd:dc:8e:52:45:c0:41:fc:68:c9:78:fb:19:
35:3a:71:13:5e:6d:af:ff:80:2d:e7:b5:11:b7:f5:ce:0e:2d:
3f:98:2e:c1:05:f9:74:0e:85:18:2f:ab:4e:c3:3f:98:8d:67:
fe:8e:9c:b2:c7:aa:e1:ca:99:63:4f:ce:42:a1:79:ce:0e:d3:
ee:a8:b6:fe:97:99:0c:51:56:11:16:29:cc:dc:e2:09:16:b8:
35:9c:6e:85:b4:45:24:ac:78:ca:26:7c:c8:a5:d3:f0:06:68:
8b:56:dc:26:8d:a4:e0:6a:60:67:c8:0c:06:b1:2d:c6:90:c6:
44:85:e0:72:04:dd:a5:fb:dd:bc:5d:d0:f9:43:6a:b3:66:bd:
1c:b5:0c:95
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jun 29 01:22:07 2025 by rpki-client