Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/a7/94ecc4-f4fd-4fce-8054-ed1774adbf2f/1/U0eCGSFVj2agN_6coNzBBGz0hOA.mft
File: U0eCGSFVj2agN_6coNzBBGz0hOA.mft (raw, json)
Hash identifier: Psq2joQyqhl3ki3nvIHHQRYBINsWmNTSJ3VrpvftKZc=
Subject key identifier: 19:61:7A:3F:DA:B6:E1:86:4B:90:2C:AE:2D:78:66:C2:6E:59:84:1C
Authority key identifier: 53:47:82:19:21:55:8F:66:A0:37:FE:9C:A0:DC:C1:04:6C:F4:84:E0
Certificate issuer: /CN=5347821921558f66a037fe9ca0dcc1046cf484e0
Certificate serial: 0197B6A085145284B0BFC956BEBD3147FE44
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/U0eCGSFVj2agN_6coNzBBGz0hOA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/a7/94ecc4-f4fd-4fce-8054-ed1774adbf2f/1/U0eCGSFVj2agN_6coNzBBGz0hOA.mft
Manifest number: 15B1
Signing time: Sat 28 Jun 2025 13:01:02 +0000
Manifest this update: Sat 28 Jun 2025 13:01:02 +0000
Manifest next update: Sun 29 Jun 2025 13:01:02 +0000
Files and hashes: 1: B4WLDJveFZVT_m8u5hStR6xu-pU.roa (hash: Nm6S6CMIoGZCCHyW+OnF60p//0+/EWirysqpstDuGNc=)
2: U0eCGSFVj2agN_6coNzBBGz0hOA.crl (hash: cDpf+VRIx254aE2IenPQv+daiYj39C/zCvataS0KnOw=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/a7/94ecc4-f4fd-4fce-8054-ed1774adbf2f/1/U0eCGSFVj2agN_6coNzBBGz0hOA.crl
rsync://rpki.ripe.net/repository/DEFAULT/a7/94ecc4-f4fd-4fce-8054-ed1774adbf2f/1/U0eCGSFVj2agN_6coNzBBGz0hOA.mft
rsync://rpki.ripe.net/repository/DEFAULT/U0eCGSFVj2agN_6coNzBBGz0hOA.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 29 Jun 2025 13:01:02 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:b6:a0:85:14:52:84:b0:bf:c9:56:be:bd:31:47:fe:44
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=5347821921558f66a037fe9ca0dcc1046cf484e0
Validity
Not Before: Jun 28 13:01:02 2025 GMT
Not After : Jun 29 13:01:02 2025 GMT
Subject: CN=19617a3fdab6e1864b902cae2d7866c26e59841c
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a9:75:84:51:0b:38:e0:d9:db:cd:b8:2b:6c:2a:
75:97:8a:86:fa:1e:b1:78:0a:17:b9:29:65:cf:8c:
7c:83:06:22:67:58:cf:fa:82:62:23:1d:5a:4b:b4:
37:76:e4:00:6c:37:06:a2:81:af:51:99:16:49:bd:
65:cd:63:d0:25:2f:9c:cf:08:87:99:04:19:66:1d:
4e:6d:64:0f:7b:20:6f:d4:41:36:c3:98:25:13:17:
23:a6:0c:ec:f1:1c:5f:94:a3:32:d7:1d:e5:35:43:
82:7a:d9:7a:ec:ce:6f:74:52:2f:ca:93:96:1f:c0:
67:fc:35:1d:c4:7b:bf:a0:68:d5:84:c8:67:d1:35:
6a:50:1a:a1:29:b1:34:01:5e:9f:26:69:5f:33:4e:
14:b7:69:75:05:d8:85:4f:d5:30:85:ff:62:b6:4d:
5e:55:95:3d:27:ef:d1:e4:3c:22:15:d2:52:4c:57:
f1:50:98:7e:5e:4e:ab:ff:70:51:03:05:11:ef:00:
74:e1:1d:21:2b:f4:38:48:ff:cf:47:39:f6:55:14:
ab:74:1a:fe:cb:f3:f0:43:89:7e:b8:f4:51:bb:3f:
e7:bb:03:36:ed:c3:06:23:41:36:5f:f1:16:4a:31:
98:bd:26:48:10:7b:1e:3a:e8:ac:d8:05:dd:e9:96:
5e:47
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
19:61:7A:3F:DA:B6:E1:86:4B:90:2C:AE:2D:78:66:C2:6E:59:84:1C
X509v3 Authority Key Identifier:
keyid:53:47:82:19:21:55:8F:66:A0:37:FE:9C:A0:DC:C1:04:6C:F4:84:E0
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/U0eCGSFVj2agN_6coNzBBGz0hOA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a7/94ecc4-f4fd-4fce-8054-ed1774adbf2f/1/U0eCGSFVj2agN_6coNzBBGz0hOA.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/a7/94ecc4-f4fd-4fce-8054-ed1774adbf2f/1/U0eCGSFVj2agN_6coNzBBGz0hOA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
56:b9:a7:4e:f0:55:91:3e:6e:1d:95:f4:34:99:2a:1c:68:c9:
67:1d:c1:fc:63:5a:88:9f:21:3f:7a:2b:62:58:69:46:0b:46:
ec:34:b5:a1:58:81:28:a9:29:ad:af:13:3f:f6:ac:01:82:a8:
19:23:3e:91:58:ce:88:60:94:fe:a6:3e:07:7e:7f:74:e8:7d:
52:61:81:de:15:47:f4:a5:51:f2:a8:05:ef:61:3c:58:e0:a6:
5c:c5:13:51:50:83:d1:78:77:e3:08:2d:1a:5b:04:16:6e:99:
c2:a8:48:7b:52:9e:95:28:db:76:ac:65:b7:39:1c:f6:38:ad:
a7:2b:12:ba:dc:24:a8:83:83:ac:6f:60:51:9a:01:70:4b:af:
19:a0:57:c1:11:f4:09:62:c2:e9:f5:54:4d:0a:38:54:94:57:
f7:bb:6a:42:31:e3:c5:33:a8:96:cb:79:f7:96:fb:d4:7e:ff:
d8:fe:21:81:52:95:6a:d8:af:f5:05:e6:5f:f8:72:7f:fc:8f:
59:17:e5:81:2e:1c:8c:e6:4d:64:5c:a5:d0:5b:6c:9b:12:1e:
6d:e6:34:b2:51:da:cc:4f:68:8d:5c:00:57:3a:f6:b2:3c:ba:
71:f3:7a:ee:de:53:48:43:94:44:d8:22:ab:59:f1:86:d9:5f:
93:c5:a0:9c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 28 22:43:36 2025 by rpki-client