Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/90/c52293-0678-4b42-8ae0-4891653eeb67/1/54ul2Y1Izr1a0EwIvwkIKxKn46s.mft
File: 54ul2Y1Izr1a0EwIvwkIKxKn46s.mft (raw, json)
Hash identifier: df9+9sfdqeyLUFELlaATy7dJ1MTcHquIjHoS9efVwc0=
Subject key identifier: E9:98:AD:09:CB:F3:AF:58:46:F7:81:8F:7B:C3:2D:49:82:A0:55:4A
Authority key identifier: E7:8B:A5:D9:8D:48:CE:BD:5A:D0:4C:08:BF:09:08:2B:12:A7:E3:AB
Certificate issuer: /CN=e78ba5d98d48cebd5ad04c08bf09082b12a7e3ab
Certificate serial: 0197B7451C71990360C130DE95B1916DC1DD
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/54ul2Y1Izr1a0EwIvwkIKxKn46s.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/90/c52293-0678-4b42-8ae0-4891653eeb67/1/54ul2Y1Izr1a0EwIvwkIKxKn46s.mft
Manifest number: 0912
Signing time: Sat 28 Jun 2025 16:00:49 +0000
Manifest this update: Sat 28 Jun 2025 16:00:49 +0000
Manifest next update: Sun 29 Jun 2025 16:00:49 +0000
Files and hashes: 1: 54ul2Y1Izr1a0EwIvwkIKxKn46s.crl (hash: IaZ9RoWwPeRGC9EznytrcyLmc4X9ixN3Kh5aNd/PebY=)
2: EZYeVV1sSE-2JpbNlwV7wPbYnOo.roa (hash: ikr2sxni9DwwzkUepDYlmJ4xAXRqZ6YMknDRjY0uwRw=)
3: zFb9es3uXkPMd-ugsb3acKq2kWs.roa (hash: CpgoliFvyxru2zXx6gfrBhmQolzdlTSAa5FPVi8Uo/4=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/90/c52293-0678-4b42-8ae0-4891653eeb67/1/54ul2Y1Izr1a0EwIvwkIKxKn46s.crl
rsync://rpki.ripe.net/repository/DEFAULT/90/c52293-0678-4b42-8ae0-4891653eeb67/1/54ul2Y1Izr1a0EwIvwkIKxKn46s.mft
rsync://rpki.ripe.net/repository/DEFAULT/54ul2Y1Izr1a0EwIvwkIKxKn46s.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 29 Jun 2025 15:00:42 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:b7:45:1c:71:99:03:60:c1:30:de:95:b1:91:6d:c1:dd
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=e78ba5d98d48cebd5ad04c08bf09082b12a7e3ab
Validity
Not Before: Jun 28 16:00:49 2025 GMT
Not After : Jun 29 16:00:49 2025 GMT
Subject: CN=e998ad09cbf3af5846f7818f7bc32d4982a0554a
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c4:df:f1:7e:3a:94:e0:bb:9c:4d:c8:d5:bd:93:
5f:07:87:59:bd:0b:c5:60:1e:ef:2e:95:c5:37:6c:
02:4b:36:ab:16:d3:87:a7:ff:78:32:9e:1e:aa:07:
21:fe:b2:f5:59:a6:5e:a3:85:31:08:60:75:32:c1:
7c:bb:a4:ce:a0:d0:dc:1f:ae:ad:4d:d1:95:d2:b9:
08:d7:bb:9c:5d:bf:53:06:87:2d:2a:88:36:04:24:
ab:17:4a:83:f5:39:e9:bd:a5:fa:e5:21:28:9e:e7:
2d:b0:46:42:90:76:e5:1b:a4:da:c8:c3:77:84:30:
6b:5a:76:87:fd:3a:de:bf:55:b8:15:bb:92:d2:65:
e7:d2:77:db:15:58:85:ef:4d:22:2f:79:23:0a:d1:
c0:b5:25:ca:98:af:fd:05:a1:4e:74:2c:2c:3a:2e:
5d:69:89:ba:4c:1f:bb:50:8d:73:de:c5:cc:3b:dc:
be:06:5a:2a:ae:8f:ba:b6:b4:b1:42:ee:c8:f9:02:
11:44:c5:35:9f:c6:fe:ca:70:29:5c:41:bc:4b:a6:
43:45:9d:f8:28:67:74:8f:ff:8d:5a:25:7b:6a:79:
55:18:2b:e4:11:0a:30:89:a4:63:67:c9:76:d7:af:
f5:90:a0:db:4a:3e:fa:24:3f:33:8b:e1:d8:3f:22:
4b:71
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E9:98:AD:09:CB:F3:AF:58:46:F7:81:8F:7B:C3:2D:49:82:A0:55:4A
X509v3 Authority Key Identifier:
keyid:E7:8B:A5:D9:8D:48:CE:BD:5A:D0:4C:08:BF:09:08:2B:12:A7:E3:AB
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/54ul2Y1Izr1a0EwIvwkIKxKn46s.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/90/c52293-0678-4b42-8ae0-4891653eeb67/1/54ul2Y1Izr1a0EwIvwkIKxKn46s.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/90/c52293-0678-4b42-8ae0-4891653eeb67/1/54ul2Y1Izr1a0EwIvwkIKxKn46s.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
06:de:90:53:6c:d5:69:ed:4e:51:1b:15:d3:3d:f7:e9:0e:36:
c9:0c:9e:b0:8e:f3:e5:d2:68:f9:cb:69:43:b2:65:3d:50:00:
b5:40:5c:f9:ef:b6:f2:39:ba:ba:25:7d:d0:4d:3c:90:b4:65:
43:e1:80:fc:3c:0b:a1:ba:6d:73:77:f2:ea:57:0b:99:01:a8:
11:2d:76:4f:36:79:ff:db:bd:32:9d:b0:14:60:d1:1e:10:bf:
de:87:fd:8c:58:35:39:1b:ef:69:23:e6:b5:3c:2c:b5:9d:e6:
79:37:a1:80:5d:7c:80:9b:41:bc:a9:3b:86:70:b3:bd:6b:75:
16:5c:b8:f7:ed:55:28:ff:27:09:98:6e:21:ba:bf:28:20:5b:
4a:2e:73:af:34:70:07:bd:75:28:a9:67:09:d7:f3:af:d7:82:
91:e4:fb:2c:26:ef:7b:8a:96:ea:7e:8a:55:57:d0:dc:64:6b:
fe:70:5f:ea:00:63:a1:ba:1b:92:f9:b2:ed:24:9b:3e:e2:5e:
5e:7b:a8:86:09:71:c5:a4:79:62:ef:19:d4:89:5a:15:23:bd:
2f:f2:48:77:6a:1b:b8:07:e8:84:f0:30:c4:db:02:6c:86:ea:
c6:59:5a:97:5c:ab:4d:81:5a:59:22:ec:c1:c2:c8:18:16:95:
73:64:59:76
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 28 21:02:15 2025 by rpki-client