Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/75/6ed434-cd51-4152-aa43-056bae27288e/1/UH5YKtyTadqK6F3ZNXQBIwgcfu0.mft
File: UH5YKtyTadqK6F3ZNXQBIwgcfu0.mft (raw, json)
Hash identifier: u9uVkugkik2LeSHeI2QMyNuM68WtmHBsuN/7H7VzLJI=
Subject key identifier: 3D:F5:49:A4:CC:3D:2C:C1:B8:57:19:8B:37:5E:93:93:68:CB:AE:10
Authority key identifier: 50:7E:58:2A:DC:93:69:DA:8A:E8:5D:D9:35:74:01:23:08:1C:7E:ED
Certificate issuer: /CN=507e582adc9369da8ae85dd935740123081c7eed
Certificate serial: 0197B6A078DD6A2408723ED0712B4D70333A
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/UH5YKtyTadqK6F3ZNXQBIwgcfu0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/75/6ed434-cd51-4152-aa43-056bae27288e/1/UH5YKtyTadqK6F3ZNXQBIwgcfu0.mft
Manifest number: 086F
Signing time: Sat 28 Jun 2025 13:00:59 +0000
Manifest this update: Sat 28 Jun 2025 13:00:59 +0000
Manifest next update: Sun 29 Jun 2025 13:00:59 +0000
Files and hashes: 1: 44dYsozRYENf4ubTHCTQ7hNPzoo.roa (hash: 9g/dOiyadhvu9EEQPUkgGuJzL/QnwS0iPrR2k3LdJdM=)
2: Akrk9AV522kb6SaYDeM3WfYPO7o.roa (hash: ZHsHEgFgctqjdlPRyjI2Dyt+c3//fPJCvQgY9mUz8Ck=)
3: UH5YKtyTadqK6F3ZNXQBIwgcfu0.crl (hash: xLfkldnqtAQcYlg48vfnM/wIvMPEikvMneeHO3l0lic=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/75/6ed434-cd51-4152-aa43-056bae27288e/1/UH5YKtyTadqK6F3ZNXQBIwgcfu0.crl
rsync://rpki.ripe.net/repository/DEFAULT/75/6ed434-cd51-4152-aa43-056bae27288e/1/UH5YKtyTadqK6F3ZNXQBIwgcfu0.mft
rsync://rpki.ripe.net/repository/DEFAULT/UH5YKtyTadqK6F3ZNXQBIwgcfu0.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 29 Jun 2025 13:00:59 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:b6:a0:78:dd:6a:24:08:72:3e:d0:71:2b:4d:70:33:3a
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=507e582adc9369da8ae85dd935740123081c7eed
Validity
Not Before: Jun 28 13:00:59 2025 GMT
Not After : Jun 29 13:00:59 2025 GMT
Subject: CN=3df549a4cc3d2cc1b857198b375e939368cbae10
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d0:ae:d0:7a:5c:97:ce:d4:00:2b:a7:2d:d3:05:
07:e4:34:ca:8d:67:b9:0a:a6:b9:f3:a6:74:34:6c:
81:8d:6e:57:56:da:c6:05:32:48:cc:20:1e:da:37:
c5:0b:ff:a7:3f:1f:89:80:47:e3:50:c0:5e:32:87:
d3:16:60:3f:a0:4e:9e:dd:e1:5a:82:09:78:ce:4b:
74:ae:7d:82:04:33:ca:41:ee:a7:2f:25:ce:b8:4f:
fb:a1:a8:f4:cf:32:1b:01:18:92:c8:70:c9:bc:37:
07:77:22:30:a5:58:8a:3e:e5:4a:0a:b1:0e:90:21:
4d:12:30:5f:29:fe:46:9e:83:aa:5f:8d:1a:89:61:
1d:6d:da:d1:44:6f:f7:95:ca:3f:78:64:ee:68:05:
f1:d0:27:7d:26:e7:b9:1c:1b:41:84:66:d7:43:d7:
c2:5a:eb:a5:a4:e9:09:25:34:e6:02:a5:97:3c:3b:
fa:a0:fa:c8:46:05:6b:2c:78:be:f4:91:d6:da:68:
42:59:be:6a:b7:0f:79:fb:65:76:bf:ec:ba:fc:96:
1f:48:38:8c:12:65:5c:c3:37:ca:c2:ce:b0:07:bb:
be:a2:ca:8f:9d:7c:b1:26:75:4d:60:83:0c:00:75:
d3:f0:84:d0:5b:46:73:b2:b4:46:2f:88:03:f8:27:
e3:dd
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
3D:F5:49:A4:CC:3D:2C:C1:B8:57:19:8B:37:5E:93:93:68:CB:AE:10
X509v3 Authority Key Identifier:
keyid:50:7E:58:2A:DC:93:69:DA:8A:E8:5D:D9:35:74:01:23:08:1C:7E:ED
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/UH5YKtyTadqK6F3ZNXQBIwgcfu0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/75/6ed434-cd51-4152-aa43-056bae27288e/1/UH5YKtyTadqK6F3ZNXQBIwgcfu0.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/75/6ed434-cd51-4152-aa43-056bae27288e/1/UH5YKtyTadqK6F3ZNXQBIwgcfu0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
49:a7:c2:fb:88:f6:23:08:6c:c3:e5:3e:c9:68:d1:64:37:91:
06:34:9d:6c:4b:d3:93:1a:21:12:af:8a:5f:8f:fd:14:fb:a7:
e1:44:13:cd:71:fe:27:57:82:71:c8:2c:eb:b2:52:fc:52:05:
8d:d1:1a:42:e2:04:ba:6d:0f:f5:3c:20:80:4b:0f:23:76:ee:
28:be:fd:cd:0d:97:a8:89:f4:d2:f2:df:af:72:d5:8f:44:71:
0c:ad:d2:ae:c6:39:94:77:5b:7f:b6:cb:e7:d2:56:ee:ee:23:
99:cb:7a:99:e5:9e:48:29:12:56:83:94:4b:45:24:77:28:b2:
46:fa:df:ea:a4:de:d2:9b:4c:ac:57:38:ff:0e:46:f0:04:29:
2d:0a:7e:f6:ce:78:f0:92:74:5d:f4:30:83:a1:3c:6b:c6:e0:
8e:b7:72:b7:ec:b3:ac:5d:22:9d:03:ad:d1:fa:01:cb:30:92:
62:c2:76:c4:29:6f:57:c1:d2:77:29:62:1e:ae:b0:cb:c9:36:
74:a1:b7:b9:53:12:f3:38:58:be:82:28:9e:6b:b8:bf:32:46:
36:68:b2:fb:ef:83:6e:df:41:b9:e0:b1:09:a6:da:d8:48:19:
a4:ae:2e:f2:44:53:8e:3c:48:40:dc:8f:99:a1:51:77:b9:a1:
0f:c0:d2:72
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 28 21:03:16 2025 by rpki-client