Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/5f/31fd16-6d00-4d09-a8d4-c1d6c8f319c1/1/UQzngdsNx-T59JQUWileTMsSHK4.mft
File: UQzngdsNx-T59JQUWileTMsSHK4.mft (raw, json)
Hash identifier: ksRDwZmZOOeCSYAmKVYQ8w9WOZobnUR8Wjc7dobAA7c=
Subject key identifier: 98:AB:70:DD:48:34:BD:7A:E8:24:1C:A9:84:01:C4:43:3E:25:8F:65
Authority key identifier: 51:0C:E7:81:DB:0D:C7:E4:F9:F4:94:14:5A:29:5E:4C:CB:12:1C:AE
Certificate issuer: /CN=510ce781db0dc7e4f9f494145a295e4ccb121cae
Certificate serial: 0197B5FBF753385B33ABEAA1BEF5D6F6886D
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/UQzngdsNx-T59JQUWileTMsSHK4.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/5f/31fd16-6d00-4d09-a8d4-c1d6c8f319c1/1/UQzngdsNx-T59JQUWileTMsSHK4.mft
Manifest number: 03D3
Signing time: Sat 28 Jun 2025 10:01:18 +0000
Manifest this update: Sat 28 Jun 2025 10:01:18 +0000
Manifest next update: Sun 29 Jun 2025 10:01:18 +0000
Files and hashes: 1: 7spEQVqcL4vrSpVaVj2ZHbdCXAk.roa (hash: fpYq7eNAV/2Q3SZsPHHqVIOf+rVV6huCrpQyiQCeASw=)
2: UQzngdsNx-T59JQUWileTMsSHK4.crl (hash: 78MoKCgqv1vAwRtRTGW/ZslKlqL13ywKiOohebhSK/8=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/5f/31fd16-6d00-4d09-a8d4-c1d6c8f319c1/1/UQzngdsNx-T59JQUWileTMsSHK4.crl
rsync://rpki.ripe.net/repository/DEFAULT/5f/31fd16-6d00-4d09-a8d4-c1d6c8f319c1/1/UQzngdsNx-T59JQUWileTMsSHK4.mft
rsync://rpki.ripe.net/repository/DEFAULT/UQzngdsNx-T59JQUWileTMsSHK4.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 29 Jun 2025 10:00:42 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:b5:fb:f7:53:38:5b:33:ab:ea:a1:be:f5:d6:f6:88:6d
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=510ce781db0dc7e4f9f494145a295e4ccb121cae
Validity
Not Before: Jun 28 10:01:18 2025 GMT
Not After : Jun 29 10:01:18 2025 GMT
Subject: CN=98ab70dd4834bd7ae8241ca98401c4433e258f65
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:dd:9c:f5:7b:38:ee:e1:24:19:f5:15:92:79:13:
a7:9e:da:28:ba:9b:d9:78:a8:ba:2e:be:ff:f5:91:
13:fe:7d:32:a6:84:08:e4:6b:05:1a:ac:c2:35:4e:
c3:b0:0d:84:78:ab:ce:0e:d6:e5:62:8d:41:f2:93:
b8:32:f4:8c:65:a0:c1:39:03:f5:68:f1:a5:6f:2b:
eb:dd:1f:eb:14:49:05:56:b1:96:2d:20:c9:85:c0:
72:96:b7:4a:c7:d9:57:2c:04:ef:b1:50:f5:53:76:
bb:d4:8f:16:3f:a6:52:2d:79:29:f3:cc:60:39:b2:
e6:11:d5:38:13:cd:cd:23:8c:98:94:91:f0:05:ee:
53:0e:67:fd:98:94:34:ea:32:9c:b7:83:b7:d4:ba:
be:e2:07:2f:b1:79:56:df:0f:26:c1:52:c4:0d:09:
73:d4:bf:63:1c:05:f6:76:98:ce:b7:85:58:d7:f7:
24:1e:20:b1:a6:9e:7f:63:6a:e9:83:79:b0:0e:da:
d7:87:b3:06:21:36:f8:14:91:93:20:6a:f0:8b:10:
17:3b:cd:b8:24:4b:fd:fe:43:ec:ab:af:f6:75:d5:
37:02:ef:54:80:5c:17:8e:a3:4d:61:8e:e2:e7:b2:
49:d4:b6:04:df:8d:78:cf:25:cb:af:cf:46:2a:46:
5f:7b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
98:AB:70:DD:48:34:BD:7A:E8:24:1C:A9:84:01:C4:43:3E:25:8F:65
X509v3 Authority Key Identifier:
keyid:51:0C:E7:81:DB:0D:C7:E4:F9:F4:94:14:5A:29:5E:4C:CB:12:1C:AE
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/UQzngdsNx-T59JQUWileTMsSHK4.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5f/31fd16-6d00-4d09-a8d4-c1d6c8f319c1/1/UQzngdsNx-T59JQUWileTMsSHK4.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/5f/31fd16-6d00-4d09-a8d4-c1d6c8f319c1/1/UQzngdsNx-T59JQUWileTMsSHK4.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
55:04:8b:ee:8c:b4:60:02:4a:13:71:57:d2:91:fe:bd:6d:bf:
82:6d:e2:e6:fa:1d:bb:52:0e:ac:0b:94:7d:75:bf:12:e2:2d:
be:4e:4e:90:c0:e6:cc:65:5b:be:69:ec:b1:6f:9c:bf:e7:38:
e0:ee:9a:7a:de:fb:52:a9:9d:cf:65:b9:2a:28:4b:1c:db:91:
6c:a4:f0:e3:a4:fc:62:f9:85:35:b1:c1:18:b3:9c:80:f1:0e:
6b:dd:34:55:35:51:f2:93:e0:6a:28:46:af:f0:8a:09:b3:8e:
77:f2:dc:c3:c4:81:b2:3e:a4:dc:62:87:c1:32:8f:9a:a4:e2:
96:da:03:cb:8b:c3:6a:ed:7e:3a:5f:16:c9:93:03:74:06:a9:
85:0a:3d:8e:a5:d4:2c:d5:45:d2:b2:4d:2b:39:8e:91:af:ed:
31:52:cc:3f:4c:00:35:b2:63:9d:b2:55:6e:74:a8:86:cd:8f:
fa:df:d3:65:ca:72:3d:09:e1:d3:9b:ef:86:17:82:11:4a:a1:
91:c7:91:3c:3b:6a:73:5b:9c:f6:48:46:02:ac:7f:e2:87:1e:
53:99:1b:fb:08:5c:8a:bd:ad:67:53:c7:83:87:ff:ca:d7:e7:
19:9c:dd:3a:14:4c:50:20:6b:5a:7c:4f:ef:37:fa:19:28:a8:
2b:10:83:40
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 28 19:27:51 2025 by rpki-client