Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/67/583543-e331-4592-8d89-9f302c20ae70/1/U9qZ-TUY4pqUWwf2ChjvhumznmU.mft
File: U9qZ-TUY4pqUWwf2ChjvhumznmU.mft (raw, json)
Hash identifier: qT8dUv1sHEbfwVCGMaqC7Ko2j1f9chj5ysocrSgMoW8=
Subject key identifier: 5F:DA:9C:B9:C2:FD:2F:F0:B1:1D:DA:21:D5:2A:6E:78:79:6D:D3:34
Authority key identifier: 53:DA:99:F9:35:18:E2:9A:94:5B:07:F6:0A:18:EF:86:E9:B3:9E:65
Certificate issuer: /CN=53da99f93518e29a945b07f60a18ef86e9b39e65
Certificate serial: 0197B74544AB6D337A758016B3F86B95673A
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/U9qZ-TUY4pqUWwf2ChjvhumznmU.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/67/583543-e331-4592-8d89-9f302c20ae70/1/U9qZ-TUY4pqUWwf2ChjvhumznmU.mft
Manifest number: 12F9
Signing time: Sat 28 Jun 2025 16:00:59 +0000
Manifest this update: Sat 28 Jun 2025 16:00:59 +0000
Manifest next update: Sun 29 Jun 2025 16:00:59 +0000
Files and hashes: 1: U9qZ-TUY4pqUWwf2ChjvhumznmU.crl (hash: aovVf0Xo7vosNQjpf46az38LpoA9TF0HiTvRwZH/QvQ=)
2: p1W2xtpypFZeS4V60u-1DjDqTds.roa (hash: 34oWoq20u1/mqtBm1kWh1Zu5DKZerBQ57c/ZC8RMnIo=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/67/583543-e331-4592-8d89-9f302c20ae70/1/U9qZ-TUY4pqUWwf2ChjvhumznmU.crl
rsync://rpki.ripe.net/repository/DEFAULT/67/583543-e331-4592-8d89-9f302c20ae70/1/U9qZ-TUY4pqUWwf2ChjvhumznmU.mft
rsync://rpki.ripe.net/repository/DEFAULT/U9qZ-TUY4pqUWwf2ChjvhumznmU.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 29 Jun 2025 15:00:42 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:b7:45:44:ab:6d:33:7a:75:80:16:b3:f8:6b:95:67:3a
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=53da99f93518e29a945b07f60a18ef86e9b39e65
Validity
Not Before: Jun 28 16:00:59 2025 GMT
Not After : Jun 29 16:00:59 2025 GMT
Subject: CN=5fda9cb9c2fd2ff0b11dda21d52a6e78796dd334
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:f0:74:b1:79:94:de:34:98:77:53:a9:6f:68:d9:
81:b3:7a:ba:99:1b:11:3f:54:0e:36:4b:e1:4c:fd:
3b:c5:19:d6:c3:43:1c:68:70:6d:d7:ce:8b:f4:3f:
fa:67:84:02:49:90:10:34:58:c5:37:38:d2:60:12:
8d:65:bb:74:8c:4a:0c:9e:b9:85:9f:fd:4e:43:12:
3e:54:b1:65:85:5b:66:49:87:a3:f3:c2:63:8a:b0:
8c:4f:a6:b0:0c:99:a9:db:3a:c7:83:15:f4:29:12:
36:6c:c4:08:74:46:07:2b:1c:fb:ea:b4:6a:51:3d:
30:c4:dd:2f:b0:c9:fb:34:c4:11:c7:19:5e:11:2d:
cb:f8:14:df:de:53:b8:8e:66:ff:4f:c1:1d:91:59:
ca:a2:0b:46:ad:9d:06:2a:6e:d1:97:a5:69:62:15:
b3:89:29:4f:5a:a6:97:b6:2c:03:c9:28:30:c6:68:
68:08:56:8d:a9:34:0c:8c:34:6a:b1:09:0f:76:32:
9e:66:c8:d1:0c:69:f5:0c:c3:c0:63:27:5f:cb:88:
8d:30:f8:f5:66:f4:fe:9a:59:1c:64:cb:b3:e5:f8:
b2:84:71:af:57:87:fa:79:df:7e:7d:ec:a6:a9:08:
96:92:8d:1d:c1:1c:7c:4f:1e:40:65:92:5f:aa:2a:
17:0d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
5F:DA:9C:B9:C2:FD:2F:F0:B1:1D:DA:21:D5:2A:6E:78:79:6D:D3:34
X509v3 Authority Key Identifier:
keyid:53:DA:99:F9:35:18:E2:9A:94:5B:07:F6:0A:18:EF:86:E9:B3:9E:65
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/U9qZ-TUY4pqUWwf2ChjvhumznmU.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/67/583543-e331-4592-8d89-9f302c20ae70/1/U9qZ-TUY4pqUWwf2ChjvhumznmU.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/67/583543-e331-4592-8d89-9f302c20ae70/1/U9qZ-TUY4pqUWwf2ChjvhumznmU.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
62:a0:b3:3e:5b:f9:d2:eb:0b:55:fc:6a:a7:65:b1:0f:2a:0d:
80:35:8e:bc:fb:09:dd:1b:09:3c:27:c6:37:03:b5:b4:d9:66:
fd:40:1e:31:f5:cd:37:6f:0c:bc:65:21:56:03:e4:ab:a5:35:
87:03:bf:ea:be:d7:bb:7f:5c:d3:aa:b1:21:98:7d:46:68:01:
37:63:fb:ce:f2:15:31:d9:6c:70:ee:a2:fb:ad:ab:99:9d:c2:
fa:22:73:b3:70:2e:52:ee:0a:73:e5:35:8c:0e:8f:94:f9:dc:
6f:8c:e1:0f:43:b6:25:35:a2:9a:e2:3f:6a:56:4a:f9:9f:9e:
2f:3d:75:3c:8d:ba:d1:07:35:aa:ea:fa:f0:f0:0d:4d:5d:04:
a7:20:71:a3:ba:bd:c2:c4:8a:2a:4a:e3:0f:75:cf:ca:1e:ba:
f5:29:0a:1d:a9:0e:0a:63:d0:d2:35:9d:9e:5c:32:22:91:51:
46:6d:89:69:0d:be:47:46:87:55:8c:2e:13:b6:47:b8:1d:1a:
a8:9a:5b:67:81:c5:85:7a:b3:87:1e:ca:03:c6:7e:7b:bd:5e:
c0:1c:be:9d:7b:4e:43:d6:6f:e0:29:81:f4:3a:d8:02:1b:e2:
16:4f:79:9f:49:3e:49:90:d8:ee:42:7d:e7:a8:21:dd:cd:5c:
b9:6a:d1:09
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 28 23:35:08 2025 by rpki-client