Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/71/81df33-7538-40d8-b81e-d18610075efc/1/UzYQcXlxVgncpCK8B6CYRoxSlFI.mft
File: UzYQcXlxVgncpCK8B6CYRoxSlFI.mft (raw, json)
Hash identifier: G7l18br8LcDsKhYpTIt7g82f3EkqOvwBMYfRer59Nb4=
Subject key identifier: EA:60:0C:29:4E:27:21:97:CB:7C:3F:0E:D5:78:1C:D1:49:10:60:87
Authority key identifier: 53:36:10:71:79:71:56:09:DC:A4:22:BC:07:A0:98:46:8C:52:94:52
Certificate issuer: /CN=5336107179715609dca422bc07a098468c529452
Certificate serial: 0197B88F7BB40114130B5AC14893527DED44
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/UzYQcXlxVgncpCK8B6CYRoxSlFI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/71/81df33-7538-40d8-b81e-d18610075efc/1/UzYQcXlxVgncpCK8B6CYRoxSlFI.mft
Manifest number: 15C4
Signing time: Sat 28 Jun 2025 22:01:40 +0000
Manifest this update: Sat 28 Jun 2025 22:01:40 +0000
Manifest next update: Sun 29 Jun 2025 22:01:40 +0000
Files and hashes: 1: UzYQcXlxVgncpCK8B6CYRoxSlFI.crl (hash: BBysHrb3aKAWFjMmJenLKNnZ4K+lzPAHQ4VaVDwpWbc=)
2: y90pAfzLQMR55Sa5PvGbioONASA.roa (hash: n9aRyUE5bDJ/tLya1U0ZStHeIcqZXIPWtBR2+GDXo8s=)
3: zFplkI-jekZ1WexKJkNCvR3gKDE.roa (hash: 1q8DoRCpAh+3qke5582Epuo/79FVU0mcOLaI7R/pGvc=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/71/81df33-7538-40d8-b81e-d18610075efc/1/UzYQcXlxVgncpCK8B6CYRoxSlFI.crl
rsync://rpki.ripe.net/repository/DEFAULT/71/81df33-7538-40d8-b81e-d18610075efc/1/UzYQcXlxVgncpCK8B6CYRoxSlFI.mft
rsync://rpki.ripe.net/repository/DEFAULT/UzYQcXlxVgncpCK8B6CYRoxSlFI.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 29 Jun 2025 15:00:42 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:b8:8f:7b:b4:01:14:13:0b:5a:c1:48:93:52:7d:ed:44
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=5336107179715609dca422bc07a098468c529452
Validity
Not Before: Jun 28 22:01:40 2025 GMT
Not After : Jun 29 22:01:40 2025 GMT
Subject: CN=ea600c294e272197cb7c3f0ed5781cd149106087
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a6:8c:7a:cc:de:c0:41:b5:2c:14:07:7e:2a:3a:
96:82:05:ae:d3:25:59:55:ed:76:3d:8d:9d:1a:07:
45:ab:dd:94:e5:91:31:f2:f1:a5:a4:e5:fe:50:ce:
f6:80:4d:43:d1:7f:bc:29:fc:80:6b:87:5d:b7:b4:
3b:72:6b:9d:ae:93:ff:90:b7:19:97:ca:96:c6:5c:
ad:79:53:44:7e:dd:ee:56:ba:c8:ae:13:ca:67:94:
96:76:92:28:23:ab:0d:1c:89:b1:ae:49:04:54:ce:
fe:14:41:57:e7:c4:f9:c5:5b:03:9b:7f:d9:aa:bc:
49:08:bc:21:0e:6c:da:05:93:8e:7c:a7:12:4f:b4:
3f:00:ac:6b:de:ba:25:cb:ea:f1:5f:13:7b:de:58:
36:64:3b:95:75:0e:bf:27:96:96:de:23:ea:a0:f1:
e6:d4:47:d9:00:54:e9:2d:a0:76:fb:1e:f2:99:1c:
94:53:ec:c2:35:d7:47:8a:1f:db:d8:38:0b:02:49:
d4:89:9b:9c:f4:e6:c0:2a:e4:d3:3a:68:7a:8f:ce:
38:cf:90:d2:d9:d3:00:2a:7a:24:c9:7a:c7:3e:76:
2e:fc:6b:73:c5:76:b1:89:0a:7a:a0:74:cf:43:b6:
11:c6:cb:e6:ba:3f:27:30:bd:a3:81:9f:81:98:f3:
8f:e5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
EA:60:0C:29:4E:27:21:97:CB:7C:3F:0E:D5:78:1C:D1:49:10:60:87
X509v3 Authority Key Identifier:
keyid:53:36:10:71:79:71:56:09:DC:A4:22:BC:07:A0:98:46:8C:52:94:52
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/UzYQcXlxVgncpCK8B6CYRoxSlFI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/71/81df33-7538-40d8-b81e-d18610075efc/1/UzYQcXlxVgncpCK8B6CYRoxSlFI.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/71/81df33-7538-40d8-b81e-d18610075efc/1/UzYQcXlxVgncpCK8B6CYRoxSlFI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
c1:47:f1:17:09:be:48:f7:73:b6:03:d3:02:7c:d0:26:cb:1a:
28:b4:1c:8c:9b:b5:69:9e:60:62:47:f4:1b:47:fc:29:bb:cc:
f5:12:a2:36:4e:ab:b1:9f:e5:ba:06:b5:72:3b:da:50:dd:59:
5c:af:54:15:8b:01:e8:23:73:ea:48:a0:f0:58:fa:5c:e6:20:
de:f3:15:44:1b:1b:cf:cf:0a:e4:34:8b:76:46:aa:58:19:63:
c6:74:65:e7:e3:a6:25:28:a3:f5:2f:62:bf:d1:3e:be:5f:c3:
eb:f5:5b:21:7b:d9:bd:12:5d:43:5c:df:02:59:81:4f:c2:2e:
40:88:07:2c:96:9e:ad:16:50:b9:55:3a:56:9c:67:87:85:fd:
92:b4:95:b1:f0:53:a0:ee:13:da:5c:b6:ba:02:79:5f:6e:2b:
c5:42:80:e4:c5:b1:8f:74:91:1d:10:d1:ea:7f:87:9b:a9:58:
54:05:ef:7f:cd:bf:bd:bd:82:0c:be:21:da:d6:a8:4a:59:ec:
13:82:fc:3f:6c:13:2c:f5:92:85:c8:3c:d5:dc:44:54:63:5c:
28:76:ec:a5:e1:6f:dc:4e:f2:f7:a4:a7:38:97:3e:82:5a:15:
bf:49:c8:2d:fd:87:52:a6:ba:8e:9d:2c:cf:9b:72:ae:48:9d:
f5:0c:5a:b5
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 28 23:33:01 2025 by rpki-client