
Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/90/81c091-0a4e-4005-be22-a7e86453abcd/1/U7EFBlwNkTm1_-3DLJAM9ktDEus.mft
File: U7EFBlwNkTm1_-3DLJAM9ktDEus.mft (raw, json)
Hash identifier: QpYaFu3hmvN7+YNYyUvD/laGJQoHQChQBZTlIL2HoZU=
Subject key identifier: 54:21:8B:3B:36:F4:99:71:83:53:83:15:1D:C6:B4:45:F5:BC:B3:11
Authority key identifier: 53:B1:05:06:5C:0D:91:39:B5:FF:ED:C3:2C:90:0C:F6:4B:43:12:EB
Certificate issuer: /CN=53b105065c0d9139b5ffedc32c900cf64b4312eb
Certificate serial: 0197B88EBBE1ABA1622D09E6515D4CA478C4
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/U7EFBlwNkTm1_-3DLJAM9ktDEus.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/90/81c091-0a4e-4005-be22-a7e86453abcd/1/U7EFBlwNkTm1_-3DLJAM9ktDEus.mft
Manifest number: 15B5
Signing time: Sat 28 Jun 2025 22:00:51 +0000
Manifest this update: Sat 28 Jun 2025 22:00:51 +0000
Manifest next update: Sun 29 Jun 2025 22:00:51 +0000
Files and hashes: 1: U7EFBlwNkTm1_-3DLJAM9ktDEus.crl (hash: Uy6/V1dmrBGWOOA0CZyUmKtECwPYx7KmeQvUfeKbbls=)
2: dXA2sXCeF-zEI-_J4kU7kczSGDo.roa (hash: yLUH5uzp/Ib7vlJR5HEnjKQN0s3hZM+CwSBPhsePj6Y=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/90/81c091-0a4e-4005-be22-a7e86453abcd/1/U7EFBlwNkTm1_-3DLJAM9ktDEus.crl
rsync://rpki.ripe.net/repository/DEFAULT/90/81c091-0a4e-4005-be22-a7e86453abcd/1/U7EFBlwNkTm1_-3DLJAM9ktDEus.mft
rsync://rpki.ripe.net/repository/DEFAULT/U7EFBlwNkTm1_-3DLJAM9ktDEus.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 29 Jun 2025 15:00:42 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:b8:8e:bb:e1:ab:a1:62:2d:09:e6:51:5d:4c:a4:78:c4
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=53b105065c0d9139b5ffedc32c900cf64b4312eb
Validity
Not Before: Jun 28 22:00:51 2025 GMT
Not After : Jun 29 22:00:51 2025 GMT
Subject: CN=54218b3b36f49971835383151dc6b445f5bcb311
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c5:ee:e0:16:a4:c7:6e:8e:2c:e6:af:5f:57:82:
a2:90:ca:a4:b3:ce:93:43:45:22:0f:12:01:c0:ea:
a8:53:d2:a4:e2:a9:b0:96:6e:fd:a5:49:e4:7b:05:
b6:68:21:fa:fa:e9:2c:a5:9b:8d:f3:81:0b:e6:50:
95:c1:ba:a9:a4:76:b6:c1:40:f5:69:08:7c:40:cf:
e7:0d:28:8b:63:d9:99:90:96:98:4d:47:88:4e:45:
ce:dc:fb:42:de:d2:9f:b4:27:80:fb:8e:b1:1a:f6:
1c:e1:96:c2:20:8c:84:bf:3f:3c:68:95:2d:3d:04:
74:75:bf:b6:a0:7f:74:0b:93:54:3d:38:ea:6a:a3:
71:d9:88:e7:08:d4:4a:0c:35:8a:1f:b7:7f:5d:5f:
5a:a9:0b:9a:e5:a0:10:b5:a8:80:d4:c5:96:cf:d5:
17:1a:0a:15:68:1d:db:c3:30:4e:ba:36:78:c9:4a:
94:f4:0e:3e:d6:77:a8:62:dd:e4:f6:35:db:f3:12:
e5:06:59:1d:9f:c6:d9:e7:28:87:b0:de:59:09:fe:
32:8a:60:8c:22:77:bc:0b:8f:c3:5e:60:20:22:09:
17:40:85:bd:78:5b:0e:31:dd:de:10:d7:7f:41:a6:
90:a9:8e:08:8b:d3:02:6e:d6:b5:5f:61:f9:95:68:
5f:a1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
54:21:8B:3B:36:F4:99:71:83:53:83:15:1D:C6:B4:45:F5:BC:B3:11
X509v3 Authority Key Identifier:
keyid:53:B1:05:06:5C:0D:91:39:B5:FF:ED:C3:2C:90:0C:F6:4B:43:12:EB
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/U7EFBlwNkTm1_-3DLJAM9ktDEus.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/90/81c091-0a4e-4005-be22-a7e86453abcd/1/U7EFBlwNkTm1_-3DLJAM9ktDEus.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/90/81c091-0a4e-4005-be22-a7e86453abcd/1/U7EFBlwNkTm1_-3DLJAM9ktDEus.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
15:8d:d8:5a:a8:b6:e9:db:c2:1d:e2:1a:b5:86:61:7c:3c:af:
10:44:0e:08:ab:02:b4:15:ca:c5:02:bd:bf:7c:ba:8e:04:53:
00:75:3b:46:16:5b:e3:2e:35:aa:38:8a:ff:b8:5e:05:9c:a7:
00:d5:c3:48:c9:ac:7d:b8:c3:fb:d5:81:46:d6:ee:99:4c:e0:
55:ba:f6:f6:ed:d1:b9:00:1d:61:06:b3:19:f7:4b:39:c7:f5:
e4:92:ea:cf:b8:bc:9e:ad:61:de:11:bd:97:52:30:cd:4e:15:
0e:48:d3:d5:ca:d2:ad:9b:5b:47:ba:6d:73:11:4f:39:cf:0d:
e5:f3:ac:f5:e1:ca:87:40:e9:9b:19:47:c3:dd:a0:5e:07:7a:
c4:39:98:04:f6:31:6f:de:dd:7c:d4:ff:7b:ed:7d:d0:83:eb:
ff:40:62:2a:9a:83:03:72:9c:9d:33:6d:24:a8:96:87:eb:b9:
a6:7e:2a:07:d5:30:4d:53:6c:5d:55:0f:7b:78:b8:29:ba:71:
0a:e7:ed:b1:f2:e6:b8:49:bf:2f:4e:b8:f7:ed:83:64:40:4a:
28:f5:94:eb:79:5b:b8:2b:a7:a3:a2:35:15:bf:ba:9e:2e:a7:
5c:7e:a3:44:ee:6b:8b:03:37:da:fb:c3:2d:3b:c6:7c:3f:15:
70:fb:01:6c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 28 23:17:33 2025 by rpki-client