Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/92/48f1c6-1134-4969-af60-d017c1759639/1/Uz7q1BOhcF-_yyrb6Qxp8FXiddo.mft
File: Uz7q1BOhcF-_yyrb6Qxp8FXiddo.mft (raw, json)
Hash identifier: E8bGcua60xtqiblXkPikWjgJAjU/U8/14TjhdexMwx4=
Subject key identifier: 18:52:7C:DB:B5:C7:EE:A5:BF:04:74:D5:16:EA:D8:E4:64:3D:2F:54
Authority key identifier: 53:3E:EA:D4:13:A1:70:5F:BF:CB:2A:DB:E9:0C:69:F0:55:E2:75:DA
Certificate issuer: /CN=533eead413a1705fbfcb2adbe90c69f055e275da
Certificate serial: 0197B7B32BE8B8D3E07D27220DCE7F4C9F7E
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Uz7q1BOhcF-_yyrb6Qxp8FXiddo.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/92/48f1c6-1134-4969-af60-d017c1759639/1/Uz7q1BOhcF-_yyrb6Qxp8FXiddo.mft
Manifest number: 15B5
Signing time: Sat 28 Jun 2025 18:01:02 +0000
Manifest this update: Sat 28 Jun 2025 18:01:02 +0000
Manifest next update: Sun 29 Jun 2025 18:01:02 +0000
Files and hashes: 1: LhDegbR4xFlO6pz_ANDkPzTlFGk.roa (hash: xMGN0Z+cCcbH3arqVxwuW4j6b8JSM83DRHp4H/CfXzQ=)
2: Uz7q1BOhcF-_yyrb6Qxp8FXiddo.crl (hash: y6cJa0qE7F/SlMOknQuLa2GQAYOXatcMZPbujbE//J0=)
3: gaUIc9nIeEp8xPqvEDvbc3kFaYc.roa (hash: I+Q74aVwTRhCOoIOc0mC1nzVIDH725yoh6FbQfy6th4=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/92/48f1c6-1134-4969-af60-d017c1759639/1/Uz7q1BOhcF-_yyrb6Qxp8FXiddo.crl
rsync://rpki.ripe.net/repository/DEFAULT/92/48f1c6-1134-4969-af60-d017c1759639/1/Uz7q1BOhcF-_yyrb6Qxp8FXiddo.mft
rsync://rpki.ripe.net/repository/DEFAULT/Uz7q1BOhcF-_yyrb6Qxp8FXiddo.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 29 Jun 2025 15:00:42 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:b7:b3:2b:e8:b8:d3:e0:7d:27:22:0d:ce:7f:4c:9f:7e
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=533eead413a1705fbfcb2adbe90c69f055e275da
Validity
Not Before: Jun 28 18:01:02 2025 GMT
Not After : Jun 29 18:01:02 2025 GMT
Subject: CN=18527cdbb5c7eea5bf0474d516ead8e4643d2f54
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b2:ab:8c:dd:51:91:08:9a:33:c7:62:f6:53:bc:
49:9c:da:a1:a3:a0:f9:b7:5d:44:6b:f2:9d:2f:91:
fa:8d:23:68:8c:57:7e:d9:39:2d:62:e2:56:f3:5b:
af:3e:05:e8:45:2f:bf:d1:40:ed:b9:2c:c8:30:c2:
d7:1c:27:69:9f:72:f2:30:1e:7e:04:97:e6:3e:ac:
36:b9:5a:e3:e4:92:6b:08:90:7d:3b:ad:45:80:13:
17:d6:35:b2:4a:23:23:20:fd:62:23:03:56:2e:26:
cd:b9:ce:ea:98:34:02:d3:28:47:16:8d:d8:8d:44:
91:f1:d0:2f:94:57:1d:da:8e:c4:b1:37:ff:ea:03:
e5:1a:0d:a3:f2:91:74:70:26:8c:e0:0e:20:95:b2:
3a:48:7e:3b:fc:a5:67:9f:58:42:52:41:12:62:f3:
d8:33:48:43:d5:ef:10:5c:b6:dd:41:e9:6b:52:01:
27:76:cc:a2:cf:d7:ed:e0:6b:fd:bb:04:44:06:78:
ee:a8:b1:44:65:84:a4:23:b3:8c:ac:03:0c:27:54:
5c:8f:d5:90:19:75:c5:6e:65:0f:26:75:12:8d:6c:
ad:86:0d:22:5b:43:89:88:34:10:a9:da:7a:d8:7f:
40:23:a8:7f:b7:40:40:1f:2b:b4:0d:3d:d2:88:2c:
5f:89
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
18:52:7C:DB:B5:C7:EE:A5:BF:04:74:D5:16:EA:D8:E4:64:3D:2F:54
X509v3 Authority Key Identifier:
keyid:53:3E:EA:D4:13:A1:70:5F:BF:CB:2A:DB:E9:0C:69:F0:55:E2:75:DA
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Uz7q1BOhcF-_yyrb6Qxp8FXiddo.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/92/48f1c6-1134-4969-af60-d017c1759639/1/Uz7q1BOhcF-_yyrb6Qxp8FXiddo.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/92/48f1c6-1134-4969-af60-d017c1759639/1/Uz7q1BOhcF-_yyrb6Qxp8FXiddo.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
37:58:1f:25:b0:82:76:26:39:2a:85:93:22:15:1f:da:a3:96:
9a:9d:cb:6e:82:d9:1f:bd:15:f9:99:f9:ee:c7:2e:94:d9:a4:
06:49:83:ff:f5:49:42:ce:f7:84:59:49:ec:f6:94:bb:ae:0e:
b6:cc:f3:5c:b7:2e:93:15:7c:0b:c8:64:f3:6f:9b:7c:96:2b:
f1:c5:06:5c:58:25:41:21:de:ad:6c:2c:65:6f:d5:a6:71:c7:
cb:77:b0:49:f0:eb:50:2d:29:5c:63:a2:6f:a4:db:23:b6:41:
a0:fd:79:09:0b:86:c7:72:b7:68:af:bb:2e:05:e1:0e:89:29:
5a:83:ba:02:da:53:b8:a3:a8:3d:e5:71:f9:b5:52:ea:3d:11:
82:07:ae:7b:20:71:98:3f:17:23:8a:89:e9:5c:b8:d0:9d:ca:
08:b9:7a:95:97:9a:99:fd:ed:d7:c0:65:8e:59:7a:92:ad:5d:
08:7b:26:56:15:27:61:a9:88:98:20:c9:81:b1:8a:f5:42:d0:
69:47:5a:ba:10:89:41:42:94:41:2a:6b:a7:d2:4d:d6:4c:40:
fc:5b:a6:ae:8e:a2:93:34:d7:9f:3a:79:a3:0b:52:49:26:1b:
bc:41:e3:65:82:71:0f:ce:07:83:dd:f1:f4:30:ae:d5:e0:94:
a9:d8:04:25
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 28 20:27:41 2025 by rpki-client