Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/5e/dd981d-e1f5-4837-9027-c9bf55d9d1ba/1/U8dzEuDSzshFoEYThF-KG-Jjw5k.mft
File: U8dzEuDSzshFoEYThF-KG-Jjw5k.mft (raw, json)
Hash identifier: edDg9uYJzaXho8F8UaIfR88FnfmrsEyCqVjxMHddksc=
Subject key identifier: 80:11:38:5D:39:A2:8B:EE:DD:25:04:DC:21:7F:F8:63:6D:D1:18:F9
Authority key identifier: 53:C7:73:12:E0:D2:CE:C8:45:A0:46:13:84:5F:8A:1B:E2:63:C3:99
Certificate issuer: /CN=53c77312e0d2cec845a04613845f8a1be263c399
Certificate serial: 0197B70E633FC3C0367E180146CEA364CCEC
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/U8dzEuDSzshFoEYThF-KG-Jjw5k.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/5e/dd981d-e1f5-4837-9027-c9bf55d9d1ba/1/U8dzEuDSzshFoEYThF-KG-Jjw5k.mft
Manifest number: 15B5
Signing time: Sat 28 Jun 2025 15:01:02 +0000
Manifest this update: Sat 28 Jun 2025 15:01:02 +0000
Manifest next update: Sun 29 Jun 2025 15:01:02 +0000
Files and hashes: 1: RJUXqZbym2ishJcHOLCYIF0YjN0.roa (hash: mDH4mu8jxseWgzZZaCZaysAEEMBUpOt419o1jwjwG7Q=)
2: U8dzEuDSzshFoEYThF-KG-Jjw5k.crl (hash: +V2zLcR60/BScB+4ybBK3npoBLyMsjGhLhyUUDVQu5k=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/5e/dd981d-e1f5-4837-9027-c9bf55d9d1ba/1/U8dzEuDSzshFoEYThF-KG-Jjw5k.crl
rsync://rpki.ripe.net/repository/DEFAULT/5e/dd981d-e1f5-4837-9027-c9bf55d9d1ba/1/U8dzEuDSzshFoEYThF-KG-Jjw5k.mft
rsync://rpki.ripe.net/repository/DEFAULT/U8dzEuDSzshFoEYThF-KG-Jjw5k.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 29 Jun 2025 15:00:42 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:b7:0e:63:3f:c3:c0:36:7e:18:01:46:ce:a3:64:cc:ec
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=53c77312e0d2cec845a04613845f8a1be263c399
Validity
Not Before: Jun 28 15:01:02 2025 GMT
Not After : Jun 29 15:01:02 2025 GMT
Subject: CN=8011385d39a28beedd2504dc217ff8636dd118f9
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cd:21:45:c0:8a:4f:a3:d1:62:58:46:79:da:cf:
32:e5:55:28:15:3a:11:f6:b4:18:2e:fb:b1:31:52:
5e:28:d3:6b:49:cf:0f:73:f7:3f:52:19:4b:63:de:
39:eb:34:b5:8e:30:de:2f:2c:e8:29:f1:d4:03:96:
23:32:1b:13:da:03:45:fd:bd:0b:4b:c8:66:e1:3d:
07:15:be:cf:99:6e:6b:1f:88:fc:75:11:6d:38:fa:
09:80:e5:a3:6d:96:e7:28:fa:0b:90:88:2f:22:b5:
4a:e0:94:57:f4:36:c1:24:6a:91:ae:10:ad:64:3d:
17:fa:21:fb:35:10:99:61:47:f6:f7:59:8c:f8:19:
7c:e3:e1:f1:01:4e:17:a5:42:85:c9:07:83:11:17:
85:13:81:de:ef:f8:17:41:07:12:62:75:13:77:7c:
6f:36:46:c5:db:11:3e:37:5e:77:62:90:d1:21:fb:
6e:7d:e5:ad:e2:2d:29:34:05:71:9f:1c:76:8d:c3:
ac:60:31:18:b0:12:e4:35:59:b3:06:cf:a0:30:80:
e6:6a:23:fc:68:d5:2e:72:d1:4f:71:67:d2:0e:d3:
cb:b1:73:94:e8:0a:51:c9:79:e0:13:c8:30:3e:17:
12:b0:6b:4e:2a:2c:84:f9:8f:e8:63:2f:4b:2d:58:
62:cb
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
80:11:38:5D:39:A2:8B:EE:DD:25:04:DC:21:7F:F8:63:6D:D1:18:F9
X509v3 Authority Key Identifier:
keyid:53:C7:73:12:E0:D2:CE:C8:45:A0:46:13:84:5F:8A:1B:E2:63:C3:99
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/U8dzEuDSzshFoEYThF-KG-Jjw5k.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5e/dd981d-e1f5-4837-9027-c9bf55d9d1ba/1/U8dzEuDSzshFoEYThF-KG-Jjw5k.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/5e/dd981d-e1f5-4837-9027-c9bf55d9d1ba/1/U8dzEuDSzshFoEYThF-KG-Jjw5k.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
9c:f7:88:b4:10:93:12:c9:65:14:cf:c1:16:a8:ca:3b:0b:34:
a9:ed:25:6f:08:26:b7:32:68:57:37:fe:73:31:d2:24:f6:a8:
06:b9:70:5c:17:a1:4e:d2:21:ac:11:94:02:50:27:e7:5f:f0:
9d:b9:8a:a9:55:dd:c1:e8:03:7d:44:c3:ce:30:39:08:d8:44:
35:d6:06:9b:30:be:1e:c7:0d:bf:49:d4:2d:73:8c:c0:ed:0a:
65:3e:6e:2f:66:f4:7a:d7:da:34:1e:bd:75:a2:5c:32:fe:a2:
34:f4:c1:42:aa:dd:f2:58:9e:36:aa:c3:e3:f8:f8:97:16:1e:
ad:67:da:32:6b:7f:9f:bd:27:ce:f8:dc:ca:7c:e6:61:4c:c0:
91:23:ee:62:16:ce:42:2d:29:ea:d7:7e:96:44:f2:82:ff:ad:
af:6f:75:74:dd:06:cd:00:42:c8:cb:f0:5f:aa:48:a5:cb:d6:
c9:eb:7e:9b:be:dc:b1:26:dc:c1:47:d3:fc:25:29:db:9a:08:
94:33:0f:e6:34:42:5e:fc:6e:5d:bf:d0:36:19:66:fe:fa:02:
71:10:2e:f1:db:39:07:98:4e:23:c7:9a:66:7b:0f:40:46:d2:
3b:50:47:93:b9:ed:7d:f5:9c:d7:6a:c7:aa:5b:80:37:81:53:
2f:fc:6a:6a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 28 20:06:38 2025 by rpki-client