Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/71/b60fb5-2fda-4def-96f9-e2b9f6dbe000/1/U1sc1e5esD379tQl1peejVNQFbw.mft
File: U1sc1e5esD379tQl1peejVNQFbw.mft (raw, json)
Hash identifier: 9rl2tTfFCKgrTjYVXknWpwQYs7Wn1hkMEH5gEw49Cuc=
Subject key identifier: 45:18:7E:E4:FD:FB:A8:01:1E:1F:89:CD:FD:5B:D2:D4:1C:2D:C4:45
Authority key identifier: 53:5B:1C:D5:EE:5E:B0:3D:FB:F6:D4:25:D6:97:9E:8D:53:50:15:BC
Certificate issuer: /CN=535b1cd5ee5eb03dfbf6d425d6979e8d535015bc
Certificate serial: 0197B70EAF8F56676EFF8A13A1306E85BF64
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/U1sc1e5esD379tQl1peejVNQFbw.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/71/b60fb5-2fda-4def-96f9-e2b9f6dbe000/1/U1sc1e5esD379tQl1peejVNQFbw.mft
Manifest number: 029B
Signing time: Sat 28 Jun 2025 15:01:22 +0000
Manifest this update: Sat 28 Jun 2025 15:01:22 +0000
Manifest next update: Sun 29 Jun 2025 15:01:22 +0000
Files and hashes: 1: U1sc1e5esD379tQl1peejVNQFbw.crl (hash: ZHBBxPG99AzxnzyEMdJy8VmYSaUVoLwG8F80zfjerSs=)
2: Uug84sytKC8kkK1Rr2IkRJKpHOE.roa (hash: AF85GnR/Tasw2A05JHhZPxVHlXBJOl2ToM5QI44AuPM=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/71/b60fb5-2fda-4def-96f9-e2b9f6dbe000/1/U1sc1e5esD379tQl1peejVNQFbw.crl
rsync://rpki.ripe.net/repository/DEFAULT/71/b60fb5-2fda-4def-96f9-e2b9f6dbe000/1/U1sc1e5esD379tQl1peejVNQFbw.mft
rsync://rpki.ripe.net/repository/DEFAULT/U1sc1e5esD379tQl1peejVNQFbw.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 29 Jun 2025 10:00:42 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:b7:0e:af:8f:56:67:6e:ff:8a:13:a1:30:6e:85:bf:64
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=535b1cd5ee5eb03dfbf6d425d6979e8d535015bc
Validity
Not Before: Jun 28 15:01:22 2025 GMT
Not After : Jun 29 15:01:22 2025 GMT
Subject: CN=45187ee4fdfba8011e1f89cdfd5bd2d41c2dc445
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9f:a8:4d:e1:15:75:f8:94:c3:7c:35:7e:0d:31:
5a:3a:69:82:71:25:36:dc:19:02:8f:8e:bd:8e:6a:
ce:2d:f1:59:58:ed:dc:29:96:e0:b0:84:15:8c:ef:
bc:33:9f:83:6a:b3:ef:e6:37:87:4c:59:e6:7f:93:
9c:c1:99:b6:d7:b3:7f:81:7c:50:36:bc:73:dc:a8:
89:45:83:66:27:ea:21:58:e2:c4:47:1f:2b:79:81:
eb:84:3c:77:12:56:a8:cf:6d:2a:18:66:89:23:89:
31:ac:0f:2a:38:de:6e:79:19:d1:7d:26:47:ce:cc:
e8:16:9e:09:72:77:98:5a:bd:38:06:3b:09:8c:e6:
96:1e:f3:53:d2:21:be:31:f2:1a:e8:fa:64:c4:57:
08:a8:cb:a9:46:89:77:98:79:d8:dd:21:39:57:93:
2d:d7:15:3e:c3:8f:d1:db:56:ce:d5:5c:42:85:26:
ef:47:3b:bf:01:a3:a1:9d:7c:b5:b8:98:6a:bf:ae:
d9:30:07:a6:c1:ec:68:32:76:c9:bf:9b:6f:e7:cb:
04:9d:1c:38:3b:31:e1:fc:30:73:53:4e:b1:06:9d:
53:7d:e9:30:2a:46:19:b3:43:40:3f:9c:c8:49:99:
0e:6b:3e:3c:94:15:59:7c:db:f2:e4:8d:bd:56:8f:
da:8b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
45:18:7E:E4:FD:FB:A8:01:1E:1F:89:CD:FD:5B:D2:D4:1C:2D:C4:45
X509v3 Authority Key Identifier:
keyid:53:5B:1C:D5:EE:5E:B0:3D:FB:F6:D4:25:D6:97:9E:8D:53:50:15:BC
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/U1sc1e5esD379tQl1peejVNQFbw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/71/b60fb5-2fda-4def-96f9-e2b9f6dbe000/1/U1sc1e5esD379tQl1peejVNQFbw.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/71/b60fb5-2fda-4def-96f9-e2b9f6dbe000/1/U1sc1e5esD379tQl1peejVNQFbw.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
00:94:de:9c:b5:37:69:ef:73:94:23:3e:19:a5:17:c5:42:17:
c9:e4:9f:ee:4e:51:9c:bb:42:f2:c5:e5:83:07:9a:98:92:1a:
84:e5:7c:c1:0e:3c:77:ad:82:13:22:ef:0e:5f:65:64:59:43:
96:a4:63:15:2f:6c:30:5a:20:e9:ab:79:60:6a:a3:2e:40:cb:
07:40:34:82:10:16:40:25:bc:2b:ab:9a:34:b3:ee:dd:91:e1:
a0:0e:c2:1a:6b:1a:fa:f6:6c:da:16:b4:46:fc:cb:b1:e6:ff:
40:e1:09:ed:c4:ee:39:22:d2:38:4c:92:f4:5f:8d:85:cb:d5:
35:33:f5:fb:eb:56:40:ae:fc:a9:eb:40:5a:36:18:df:1d:c8:
8d:95:09:a0:5a:70:26:d1:18:f1:4a:a4:d2:65:5a:c1:4b:16:
52:c0:a8:14:fe:1d:e7:40:f9:d5:68:f5:23:82:e6:31:c7:88:
c4:53:76:5a:aa:45:2d:02:d9:22:f8:09:1b:c9:41:c5:3d:a4:
ce:e1:8b:e9:67:7b:e3:b8:51:32:3d:e4:71:3a:fb:6b:52:be:
21:31:16:a4:9e:62:cf:28:96:c2:15:f1:c1:87:1c:71:9c:a5:
a2:8b:fa:9e:86:2e:55:2d:50:8e:19:42:13:22:f3:b1:70:28:
ba:89:0c:07
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 28 19:57:52 2025 by rpki-client