Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/55/f8ae47-0ed4-4681-9c12-fa1260850709/1/U0nC0Auka-kkS3YZS6oQ8zzjRiw.mft
File: U0nC0Auka-kkS3YZS6oQ8zzjRiw.mft (raw, json)
Hash identifier: p6DRenIod3j7+QPliIw8y7X0k1aUkOqwY0qQVQpLFl8=
Subject key identifier: 67:0C:A4:2E:F8:44:F5:C2:43:05:99:B9:E0:E3:27:A6:22:19:DB:FF
Authority key identifier: 53:49:C2:D0:0B:A4:6B:E9:24:4B:76:19:4B:AA:10:F3:3C:E3:46:2C
Certificate issuer: /CN=5349c2d00ba46be9244b76194baa10f33ce3462c
Certificate serial: 0197CC4CB217F215F329F210C3F9AA04EEAC
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/U0nC0Auka-kkS3YZS6oQ8zzjRiw.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/55/f8ae47-0ed4-4681-9c12-fa1260850709/1/U0nC0Auka-kkS3YZS6oQ8zzjRiw.mft
Manifest number: 064D
Signing time: Wed 02 Jul 2025 18:01:07 +0000
Manifest this update: Wed 02 Jul 2025 18:01:07 +0000
Manifest next update: Thu 03 Jul 2025 18:01:07 +0000
Files and hashes: 1: U0nC0Auka-kkS3YZS6oQ8zzjRiw.crl (hash: ZpQ+6gBm98I5RriRJ3BAsZtql9rzp7n1YGWIcw8LR8s=)
2: kDLhfcy8YHG9d7r3ZyKyTCN67dU.roa (hash: FHssmQ805uZ/Wtb94rUn/bLQZUQ10hPffXrOYDXFnpE=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/55/f8ae47-0ed4-4681-9c12-fa1260850709/1/U0nC0Auka-kkS3YZS6oQ8zzjRiw.crl
rsync://rpki.ripe.net/repository/DEFAULT/55/f8ae47-0ed4-4681-9c12-fa1260850709/1/U0nC0Auka-kkS3YZS6oQ8zzjRiw.mft
rsync://rpki.ripe.net/repository/DEFAULT/U0nC0Auka-kkS3YZS6oQ8zzjRiw.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 03 Jul 2025 18:01:07 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:cc:4c:b2:17:f2:15:f3:29:f2:10:c3:f9:aa:04:ee:ac
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=5349c2d00ba46be9244b76194baa10f33ce3462c
Validity
Not Before: Jul 2 18:01:07 2025 GMT
Not After : Jul 3 18:01:07 2025 GMT
Subject: CN=670ca42ef844f5c2430599b9e0e327a62219dbff
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bf:e7:7b:35:3e:58:c8:82:ab:b0:86:24:59:3e:
8f:7d:41:35:a4:0f:a4:cb:79:37:ad:ad:13:49:37:
cb:6f:b0:2a:26:ae:81:ab:d4:bb:b3:07:5a:a1:04:
10:69:a7:02:b3:ad:0d:f7:d1:f1:0c:13:94:80:2f:
6d:b7:71:f4:ca:9f:9b:fd:c0:bb:2e:5b:b7:35:ea:
5b:24:a7:a6:90:4a:5f:19:df:a1:01:a9:1b:84:dd:
da:e3:34:39:32:b7:91:17:e7:1b:37:b2:a3:3a:15:
c8:7d:be:b3:2a:a5:20:17:03:32:5d:81:fa:92:cd:
6c:e8:e9:f8:97:88:43:8c:cc:74:43:d2:64:20:17:
dc:d2:f0:f5:5e:67:b6:77:2a:1c:f6:b1:c4:55:39:
d6:11:b8:8b:57:67:b2:6f:be:83:35:13:6c:ea:2d:
4b:2e:cd:13:87:bc:36:98:f5:04:ba:a7:11:99:4d:
c5:c7:56:b9:af:80:27:b9:5c:1f:d1:b1:54:97:fc:
a4:c1:77:b0:3a:76:65:c8:85:e7:8a:40:b8:e1:3a:
d6:94:25:6b:31:1d:ef:63:e9:31:a7:e9:a3:77:25:
a4:85:e6:73:d4:a9:e1:ea:c0:53:8a:b4:0c:87:b8:
1c:ee:9b:f5:90:8c:57:51:da:30:d6:8b:c3:d1:2d:
cf:13
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
67:0C:A4:2E:F8:44:F5:C2:43:05:99:B9:E0:E3:27:A6:22:19:DB:FF
X509v3 Authority Key Identifier:
keyid:53:49:C2:D0:0B:A4:6B:E9:24:4B:76:19:4B:AA:10:F3:3C:E3:46:2C
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/U0nC0Auka-kkS3YZS6oQ8zzjRiw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/55/f8ae47-0ed4-4681-9c12-fa1260850709/1/U0nC0Auka-kkS3YZS6oQ8zzjRiw.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/55/f8ae47-0ed4-4681-9c12-fa1260850709/1/U0nC0Auka-kkS3YZS6oQ8zzjRiw.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
18:fa:79:9f:e5:29:5e:b1:ab:94:d7:89:d3:98:ed:0a:a1:6a:
5c:3b:2f:fe:0f:04:ff:7a:c5:4c:8a:3e:c7:70:56:ff:03:d2:
4f:d9:dc:03:ee:bc:6d:cb:3c:e9:c5:9a:5d:bd:a7:d0:8e:c9:
73:ba:b1:26:a5:ec:a0:35:45:ab:c4:5a:66:6d:48:66:4b:41:
60:7a:30:05:2c:43:ae:2c:00:26:fd:2d:7c:02:02:a8:8f:34:
0d:f0:72:90:29:a3:76:48:9a:b2:d3:58:06:50:22:5b:fe:07:
4c:0f:25:d2:2b:6b:ca:ce:2f:50:9d:8b:07:9f:fb:21:e1:7e:
4b:12:ae:e5:8b:cf:cb:71:82:48:be:e6:5d:1c:a9:a6:7d:88:
c0:5f:0d:a2:a2:f2:51:80:f6:5b:ed:29:63:87:6d:55:4c:6c:
b8:2c:a7:8a:1a:ec:ef:7d:b3:11:0a:cb:a0:be:f9:3c:a2:36:
2c:ff:d1:46:d4:c2:58:36:87:20:a9:e4:9a:6e:9a:7b:2d:9d:
cc:88:0b:1b:30:4b:7c:d8:52:34:8f:ef:1e:6c:45:e0:a7:c7:
5a:d8:0b:96:ab:a5:19:39:6e:22:03:3f:0d:e3:a7:19:4d:b0:
ea:b6:f8:3a:27:d0:93:be:a5:d5:25:6e:a5:f3:ad:86:47:33:
d0:07:f8:91
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jul 3 02:45:58 2025 by rpki-client