Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/65/9fce78-4f9d-4847-b759-b451e477b9c2/1/UJSiarpxAHYh_VmdU3u3rqreizM.mft
File: UJSiarpxAHYh_VmdU3u3rqreizM.mft (raw, json)
Hash identifier: EG0asOw6OlT4VGJ6DzxJjwK+X1I3XE3HuHrgowGp+Ms=
Subject key identifier: 1E:EA:C0:3E:F8:47:B6:FA:7C:AE:89:F4:EB:7B:03:55:C0:A8:6E:B7
Authority key identifier: 50:94:A2:6A:BA:71:00:76:21:FD:59:9D:53:7B:B7:AE:AA:DE:8B:33
Certificate issuer: /CN=5094a26aba71007621fd599d537bb7aeaade8b33
Certificate serial: 0197B77CB3430847AAA3F5C1FF9579F1E949
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/UJSiarpxAHYh_VmdU3u3rqreizM.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/65/9fce78-4f9d-4847-b759-b451e477b9c2/1/UJSiarpxAHYh_VmdU3u3rqreizM.mft
Manifest number: 15B9
Signing time: Sat 28 Jun 2025 17:01:32 +0000
Manifest this update: Sat 28 Jun 2025 17:01:32 +0000
Manifest next update: Sun 29 Jun 2025 17:01:32 +0000
Files and hashes: 1: PYLR3kfr_0El_Ga2E9JeZcCyCVc.roa (hash: A0449RCi6B29H8zKA0rMM/NDvKNi2c+elOaTXG6BpHk=)
2: UJSiarpxAHYh_VmdU3u3rqreizM.crl (hash: 7IrCjxZRwpkvB+Yk/8983IGAp8qju/bdwGgzu1Hmpuk=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/65/9fce78-4f9d-4847-b759-b451e477b9c2/1/UJSiarpxAHYh_VmdU3u3rqreizM.crl
rsync://rpki.ripe.net/repository/DEFAULT/65/9fce78-4f9d-4847-b759-b451e477b9c2/1/UJSiarpxAHYh_VmdU3u3rqreizM.mft
rsync://rpki.ripe.net/repository/DEFAULT/UJSiarpxAHYh_VmdU3u3rqreizM.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 29 Jun 2025 15:00:42 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:b7:7c:b3:43:08:47:aa:a3:f5:c1:ff:95:79:f1:e9:49
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=5094a26aba71007621fd599d537bb7aeaade8b33
Validity
Not Before: Jun 28 17:01:32 2025 GMT
Not After : Jun 29 17:01:32 2025 GMT
Subject: CN=1eeac03ef847b6fa7cae89f4eb7b0355c0a86eb7
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a2:b8:fe:e5:52:e4:ea:b2:cd:0d:e6:a8:a6:13:
74:24:e8:a2:9e:f6:01:5d:4a:9a:e3:32:ec:fc:e0:
e4:fe:b5:63:a3:47:74:6c:81:58:b1:37:1c:e1:b9:
1b:0c:5c:2a:69:19:2f:89:be:34:c1:ce:3c:5f:dd:
12:24:32:ff:2f:27:53:ed:ad:d7:28:b3:71:51:48:
fe:75:4f:ec:5e:06:07:a1:a5:e6:70:cd:58:82:87:
eb:90:43:e1:f8:5e:57:af:69:d2:d2:10:29:b0:2e:
b5:7b:04:3a:67:16:a5:a1:71:e0:cd:02:34:9e:07:
96:40:88:65:d3:35:aa:92:66:26:33:0b:2f:31:c3:
1d:ee:c5:8a:05:97:72:99:f2:93:c4:bb:1f:c3:24:
53:33:9d:4c:69:b6:c7:a1:ff:f2:bc:81:5a:bf:f3:
a2:d9:5f:bd:52:ad:a1:4f:03:f3:eb:89:b6:93:16:
c5:ee:4c:4a:f4:15:07:ba:28:9e:46:d9:62:0b:f3:
52:7d:db:12:04:49:23:1c:f7:43:de:f9:ce:98:bc:
7f:98:4b:ec:2f:90:e2:35:27:a0:e7:4a:f7:3c:8a:
8c:97:14:87:f5:bf:e7:cb:2f:35:9e:c8:ee:65:db:
ce:68:ee:b5:0d:09:78:c2:22:91:46:ce:52:c4:26:
5e:11
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
1E:EA:C0:3E:F8:47:B6:FA:7C:AE:89:F4:EB:7B:03:55:C0:A8:6E:B7
X509v3 Authority Key Identifier:
keyid:50:94:A2:6A:BA:71:00:76:21:FD:59:9D:53:7B:B7:AE:AA:DE:8B:33
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/UJSiarpxAHYh_VmdU3u3rqreizM.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/65/9fce78-4f9d-4847-b759-b451e477b9c2/1/UJSiarpxAHYh_VmdU3u3rqreizM.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/65/9fce78-4f9d-4847-b759-b451e477b9c2/1/UJSiarpxAHYh_VmdU3u3rqreizM.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
48:1f:9b:e8:41:2d:05:53:b2:bc:46:8d:8b:2c:27:d2:27:c2:
3f:b0:d0:c6:fe:5a:82:86:e9:29:3f:a4:9b:63:f3:e8:b4:1c:
f6:93:ba:28:11:28:0d:81:73:9e:f8:a6:0d:b0:82:e8:33:13:
79:3a:c5:4a:35:57:6e:8b:1f:12:48:e0:5c:6c:39:cf:0f:21:
10:5a:4e:f0:3f:23:ae:34:1e:35:5c:3c:f5:97:77:31:6a:d2:
5e:4f:55:3c:e4:f4:d2:a2:a3:60:28:7b:e4:b6:7a:0b:a4:00:
83:1b:bd:63:78:55:88:85:24:4e:78:00:64:67:e9:cb:73:3a:
75:2c:f5:c2:d1:4c:aa:9e:c6:30:35:90:e3:42:0f:62:aa:9c:
86:f2:ef:28:d5:80:d1:ae:05:59:cf:1a:f1:57:20:86:86:96:
b3:38:0a:1f:37:90:3c:28:db:49:98:99:42:8c:5c:27:33:1b:
d8:ef:07:96:0e:ad:e0:99:12:ab:e8:19:49:43:2a:78:60:ec:
b3:8d:b7:6b:b7:f6:7e:8d:df:91:a2:eb:74:09:04:18:62:42:
a1:d0:6a:4d:95:f5:e2:c7:c7:3b:88:aa:22:cf:07:07:b5:19:
4e:da:7a:92:a7:e8:ef:97:20:69:d9:0e:a3:1b:1e:f9:9c:c5:
10:5c:f6:2b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 28 20:31:41 2025 by rpki-client