Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/54/b5f6af-3c83-4cb5-b5eb-ba14843c549c/1/UCw35-y1m2Z_qC7PCT5e2HZhqOI.mft
File: UCw35-y1m2Z_qC7PCT5e2HZhqOI.mft (raw, json)
Hash identifier: R/uFoIH9ERTmf3MG9q1I/mscY7fP1YPDsuqUOeD61tg=
Subject key identifier: 67:05:3E:D5:24:1B:FB:35:37:59:B5:12:6B:69:D1:91:7A:81:82:E2
Authority key identifier: 50:2C:37:E7:EC:B5:9B:66:7F:A8:2E:CF:09:3E:5E:D8:76:61:A8:E2
Certificate issuer: /CN=502c37e7ecb59b667fa82ecf093e5ed87661a8e2
Certificate serial: 0197B6D79ED8B78F07B4B24DAA69D61CA750
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/UCw35-y1m2Z_qC7PCT5e2HZhqOI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/54/b5f6af-3c83-4cb5-b5eb-ba14843c549c/1/UCw35-y1m2Z_qC7PCT5e2HZhqOI.mft
Manifest number: 04EB
Signing time: Sat 28 Jun 2025 14:01:13 +0000
Manifest this update: Sat 28 Jun 2025 14:01:13 +0000
Manifest next update: Sun 29 Jun 2025 14:01:13 +0000
Files and hashes: 1: 0siOn8oVbOzVCasVDaPzmYX1tbc.roa (hash: SBMJ/e1Sts5wpcL+aFgVksq/m8nr6hq1VOYBzLKdoWI=)
2: UCw35-y1m2Z_qC7PCT5e2HZhqOI.crl (hash: WV3eT9LhUfUmTOJSgaSZsdJ6uy9HYybt6z01Sxy2xLY=)
3: jgvyflC9cxUvuv1ddomja9gsSes.roa (hash: 5URFyBRZ0uEAXpl92dbXCwRyKauPGInl6RJ5C4/n3ps=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/54/b5f6af-3c83-4cb5-b5eb-ba14843c549c/1/UCw35-y1m2Z_qC7PCT5e2HZhqOI.crl
rsync://rpki.ripe.net/repository/DEFAULT/54/b5f6af-3c83-4cb5-b5eb-ba14843c549c/1/UCw35-y1m2Z_qC7PCT5e2HZhqOI.mft
rsync://rpki.ripe.net/repository/DEFAULT/UCw35-y1m2Z_qC7PCT5e2HZhqOI.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 29 Jun 2025 10:00:42 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:b6:d7:9e:d8:b7:8f:07:b4:b2:4d:aa:69:d6:1c:a7:50
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=502c37e7ecb59b667fa82ecf093e5ed87661a8e2
Validity
Not Before: Jun 28 14:01:13 2025 GMT
Not After : Jun 29 14:01:13 2025 GMT
Subject: CN=67053ed5241bfb353759b5126b69d1917a8182e2
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ca:01:9b:78:d0:a7:b9:3b:b1:ca:c5:78:2d:26:
33:f2:f4:8b:9c:77:0e:da:1c:7b:e2:33:d5:7e:29:
57:25:06:22:17:95:48:4e:be:46:d4:a1:bb:9e:2d:
7a:ed:72:9f:da:ca:88:28:09:c9:a1:f8:3b:7b:2e:
b5:21:a4:be:03:8d:1d:d3:b6:0c:8b:8a:03:e4:97:
1f:1b:9e:d7:83:48:b0:cb:a1:11:81:c5:e0:14:b2:
9e:9c:a6:91:3a:f9:eb:59:c6:6b:71:34:42:37:8b:
5a:0d:e4:62:66:04:72:a0:53:1f:5e:3f:f2:53:f1:
11:07:c1:03:1b:e2:4f:d8:cb:21:46:0f:6a:2b:d6:
28:04:f5:6e:58:66:c2:b0:e3:5e:6e:85:c9:86:d4:
52:ce:f2:53:92:de:f0:8c:d3:4b:74:6e:45:ca:42:
06:39:80:48:f1:23:1b:27:51:5f:a4:2d:49:48:7f:
0a:d7:f0:3e:51:7f:27:18:96:22:02:65:32:6b:9f:
8d:50:c6:c5:da:65:f3:c6:da:fd:24:53:3b:99:d3:
37:b4:1e:0f:13:df:8f:b1:7a:25:2c:05:98:56:67:
fc:f6:29:97:69:4f:85:88:96:bb:15:6e:1d:a2:63:
b7:b5:bb:be:65:67:96:aa:5f:33:af:b5:5f:73:0b:
af:1f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
67:05:3E:D5:24:1B:FB:35:37:59:B5:12:6B:69:D1:91:7A:81:82:E2
X509v3 Authority Key Identifier:
keyid:50:2C:37:E7:EC:B5:9B:66:7F:A8:2E:CF:09:3E:5E:D8:76:61:A8:E2
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/UCw35-y1m2Z_qC7PCT5e2HZhqOI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/54/b5f6af-3c83-4cb5-b5eb-ba14843c549c/1/UCw35-y1m2Z_qC7PCT5e2HZhqOI.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/54/b5f6af-3c83-4cb5-b5eb-ba14843c549c/1/UCw35-y1m2Z_qC7PCT5e2HZhqOI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
97:23:48:d4:64:26:9f:e6:2b:7f:2a:a7:ee:9b:07:46:fd:f7:
56:f5:c6:df:0e:dd:30:49:97:64:be:54:45:d8:6c:95:bd:48:
73:fa:db:32:f7:5c:bb:af:9e:8c:24:4a:2d:e7:35:ae:ad:a2:
45:64:a8:c1:dd:82:3c:96:b5:72:3d:52:81:50:9c:8b:b7:84:
91:60:8c:28:55:bd:0b:cf:cd:af:c7:99:8e:8d:b5:92:d2:21:
4f:0a:e8:fc:e1:6e:3a:c2:7b:6a:08:36:48:e5:22:04:16:04:
0d:26:35:48:3d:66:4d:f4:b7:90:68:ce:fe:f4:cd:b8:cc:5b:
44:ab:b8:78:5d:88:31:1b:54:ad:09:12:1a:ee:33:ed:00:38:
fd:5f:8b:db:5a:65:00:54:b2:22:02:48:9f:65:31:37:6c:88:
50:09:b0:6c:d3:78:cc:04:15:73:20:05:f5:2b:f1:8c:50:ae:
77:f5:55:ac:c4:a7:86:97:85:5f:7e:cc:8d:0d:03:d6:2b:1e:
4f:02:0e:3a:b6:00:cd:e2:2b:78:cb:48:b0:e7:25:2c:7e:7a:
90:7a:7f:50:3a:1d:3e:53:91:9e:e2:0e:2d:5f:3d:d2:be:28:
70:a0:a9:d5:f6:a5:60:28:63:26:c4:fc:3d:dd:47:8c:0f:a0:
66:63:d4:d3
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 28 19:29:00 2025 by rpki-client